last executing test programs: 3.046261411s ago: executing program 1 (id=4119): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, 0x0, 0x40004) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000d1083347c08495ff80b0b387fb929237c97a3033d42f054c1f574dd3136ce59b554ad3408e6c76b8f0117d575d0527a6d6c94427e60627ebe2305f2c", @ANYRES16=r3, @ANYBLOB="8fbf2bbd7000fcdbdf2516000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r5 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r5, 0x3}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x7c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r10 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r10, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3a, r11}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0xb0, 0x2c, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x7, 0xfff3}, {0xffff, 0xe}, {0xfff3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x72, 0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9665}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x10}, @TCA_FLOW_KEYS={0x8, 0x1, 0xe585}, @TCA_FLOW_XOR={0x8, 0x7, 0x8001}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x200}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfffe, 0x6}}, @TCA_FW_MASK={0x8, 0x5, 0x1800000}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="258c", 0x2}], 0x1}, 0x8811) 2.114081638s ago: executing program 1 (id=4135): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) close(0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x8, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x2, 0x4, 0xf, 0x80000000, [0x4006, 0x6]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xf2812000) r2 = socket(0x8, 0x800, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) recvfrom$x25(r2, 0x0, 0x0, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x3}, 0xff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000005000000040000000180000000000000ba8d703d543fbc3c0c04761658cd974a336f18311c1c234d4670dc31720a968343e1e588271726d5e6259fc3a584a48e0695efaf450810ea5dbd05efef09a8deb00e9a97e1abf5f0dba537c9c035b4c80252519781fdf7a42972166785add67585", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0400000000000000050000000f00000000000000", @ANYRES32, @ANYRESDEC=r3], 0x50) 1.746830039s ago: executing program 2 (id=4140): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fc02000000000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.568208819s ago: executing program 2 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x99, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="2c09000000f8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x2e, 0x8b, 0x67, 0x0, 0x8, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}, "91bdc7037058610a8d7628226582ce7d84af37c62a941f2195cae997cda1a39d3b2402cd423a88b64749573dc82a465b809f336d1a6fd0b857bfafe9981f4d1f9ac197023670beda1a41d87418d523a5555a43e8fbf29bb73b3b50cd2dc0a4921b9e294d27498860e0026c3e14f1e00b80f0132d5fbb94"}}}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r8}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x28, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) 1.422515822s ago: executing program 0 (id=4144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001040)={0x8, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x81, [0x0, 0x0, 0x80000000]}}, @pad1]}, 0x30) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000040)=""/125, &(0x7f00000000c0)=0x7d) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x2, 0x3, 0x4, 0x3}}, 0x26) 1.353732289s ago: executing program 0 (id=4146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket(0xa, 0x3, 0xff) (rerun: 64) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0x3b, 0x14}}], 0x18}, 0x922bac8556bda5ce) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) (async) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) (async) getpeername(r2, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "3405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8407903fffd6fcf3878", "8267cf0eeb682163f65134d25ad24d9c54ab5ab42dc4df652cb3d693b857bc01", [{}, {0x0, 0x0, {0x3}}, {}, {}, {}, {0x0, 0x0, {0x2}}, {}, {}, {0x0, 0x0, {0x0, 0x4}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7fff}, {}, {0x0, 0x0, {0x0, 0xffffffff}}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x2}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x2}}]}}}]}, 0x268}}, 0x0) 1.271015355s ago: executing program 4 (id=4148): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r1, 0x1, 0x31, 0x0, &(0x7f00000008c0)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) (async, rerun: 64) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420, 0x3f3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x420}}, 0x40000) (rerun: 64) 1.167879889s ago: executing program 3 (id=4149): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe}}], 0x18}}], 0x1, 0x40000000) 1.047020614s ago: executing program 1 (id=4150): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bind$phonet(r5, &(0x7f0000000000)={0x23, 0xe, 0xd, 0x6e}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000180)) 1.046243824s ago: executing program 4 (id=4151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd28, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000010400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8a45020000000000000100707070000cff7f8008000100000000000c", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4000040) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) 973.506774ms ago: executing program 0 (id=4152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010100}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000100)=""/137, &(0x7f00000000c0)=0x89) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000100)=""/137, &(0x7f00000000c0)=0x89) 943.965738ms ago: executing program 3 (id=4153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0) 741.260354ms ago: executing program 4 (id=4154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000f1e853f2dba620df8977c3aea4eeb79e", @ANYRES32, @ANYBLOB="00000000000000003cc00000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32], 0x3c}}, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYRESDEC=r0], 0x38}}, 0x810) 740.809112ms ago: executing program 2 (id=4155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x6, 0x7fe2, 0x1}, 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010101010000000000000000140a00030600124000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) (async) openat$cgroup_int(r2, &(0x7f0000000000)='memory.swap.high\x00', 0x2, 0x0) 735.294024ms ago: executing program 0 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40c5) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f00000006c0)=""/190, 0xbe}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000800)=""/191, 0xbf}], 0x7, &(0x7f0000002180)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000940)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000a40)=""/137, 0x89}, {&(0x7f0000000b00)=""/114, 0x72}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/194, 0xc2}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/103, 0x67}, {&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/174, 0xae}, {&(0x7f0000006000)=""/4096, 0x1000}], 0xa, &(0x7f0000000f00)=""/83, 0x53}}], 0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 733.754314ms ago: executing program 1 (id=4157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000faffffff00000000000000000033000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000890001006d6435000000000000000000000000000000000000000000000000000000000000a8ca950000000000000000000000000000000000000000000000000000000000000008"], 0x17c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x4, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40c4, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/87, 0x57}], 0x6}, 0x12062) 733.422856ms ago: executing program 3 (id=4158): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) 574.919612ms ago: executing program 3 (id=4159): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140000003600ff07000000000000ffff03"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x84) (async) r2 = accept(r1, &(0x7f0000000140)=@sco, &(0x7f0000000200)=0x80) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002c40)={{r0, &(0x7f00000003c0)='\x00', 0x2002, &(0x7f0000000400)={@_ha_fsid={[0x5, 0xd375]}, {0xafac, 0x6, 0x9, 0xfffffffffffffffe}}, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x2}, 0x9, &(0x7f0000002b00)=[{0x1, 0x8000, &(0x7f00000004c0)='veth1\x00', &(0x7f0000000500)="f22eeb18421d4a60984bf094a94e37bb21056102ace4df69dc591c524e33f1d9138bda1a852ef2872c36540ed62d865a912886c7949d3d7cda5fb14d0b8489b0d5", 0x41, 0xa}, {0x1, 0x10, &(0x7f0000000580)='+!^@\x00', &(0x7f00000005c0)="95a454e4faa82d19aa73c5a7ae1b2149e64274f9dba4daf9194af46dbd73da346068f6f57611767415371130ca36b41cf509499ed0170f85826837e669216d538017410599f3b830dba85e556b8402a49fce63f7722966e3521f33b3649efeb21871c21d6bef1a1a2f33575dada2267a3e30085f41525a946b3e97f51391aece309fb8d8f9ab563d384ea86f81df32fa87d13a8cc9753c", 0x97, 0x12}, {0x3, 0x2, &(0x7f0000000680)='veth1\x00', &(0x7f00000006c0)="40a20885458b8f1391eb20d9889721a86831d32ebb6df996dd3aec744d833c99e6f12067982ee7b724df1478e37b928ae0c21949538397a3181052e70da7a7744626691a6f8f68bafac538db66adddaf18360d7711b963e10688c8657c8c8a70e55aa0555a5c2dcb8303dd974d27cfb87ec8b884a18d910536", 0x79, 0x18}, {0x3, 0x101, &(0x7f0000000740)='\x00', &(0x7f00000007c0)="c8977f01b717becad268611fae644f8da5de6405d94d709b897ce99739d5d09639195c166d5276397408f479c1a1781aa37ab133ab1b8932f6a4993277d58afb865081834934da4799a9dbea37d9818fc2fed22c1235c57b2dd864160022fabb376a96e4f9544ac21d2c085d04f041cfb7a2590b31a6e77cb2ba078744a2729248d7d8ec9642551349b9f5885b27c622d747eda2b069f9ab5e756c8c80089534fc4eba6559cbacce0397568b45b183bb5b2e9d48a5f39709ef74a0d59095c9bda7aa17454207fa01676aff5125443dfc8cb7baeca9c3de7ebb8727b0ec85b49217a11a13278680058a4d4235776a65ae65bb65d8e44a91e82e9af700cd2976ca03e89690e2fc5ff6aad4bab3565b1dc14ef189d7564531555f77bd451a5692693719a40bb4f56eba81cbf0e373ddafc9af840dcad4e12cab9addffe9efd217ec2fdb8be2fee2cfa62800ed38028fe5107def8867ed6ba12dc8b1ebe1832b92b16b6b5d28989638691bfc3c5b892a89dd0d579d49489853fcda8fef26c8f30b5cffebf9b6b8d4cd61bbe3c366c897fc07fd876eceff28f12443e972ce81067e035a26f05c248f9cf33330b0f955f54492787fef643003078783c94f80e475fa0561b7c6e2341f343a1174ba2c65a427b4de8033af66eb6f2cd596256d4abc2178e901043e2942a9cf9f231f5597a4aa94a7908495a5b166421fd4a0c5cd1b8375014cc80d7f5890b751480a876888233b03de4f446e9215960322e673173861a689b46d1661c72a8bf6b5d11a73e5d99646ce66cbdb6d743773066d7d7478145dc8bdfe46b0b68e4a36252c4e9ebaed8d839eb6ca89d58b7934aae7cba1cf8daea8fdf03f7fab3574962ad19946d3b8378fcf7036750831c1e6049376315ac0c3f66a6d0b9bbfd2c805cf08b0c7400daed6b11fa4d14206c30555153b3c539383577e0bb802d9708acd1fd4aaa8039640022d520392e90bc9cc9747b11c50b17bfd0f63e9b87bc625b48c2653712645b2a7bac2f7881b9be7f519fcfeced8366f8bb76dc9f1bbfeb9e6ca1e809511def8c0d6a4b4a823ee08450bafa05e2dd8a6e261f6de6151806ada755fe67750d7dea49e946e0016627f2bf11e9a1c3245cae61b23924b68947d0002730cb75434ee5d44a017d93f45e6131d65be9f2778f13761e28d525c73fe84b53ce5e8d92779192e96e291419ebde52e26fa771585f0761a2f99c7e9cb354dee5e3e26bf90dc9f31d44785b10194eb5370ebf0d83cf05034db252be4c3b38dd6e80753e1246f47043542ecc86a6ca505b8f783df2c3c8a62931d87a1e82fc3f38d18ca22641172dfe5f823a406383cb90157d53bb401ab5f55eb99ca5326c508f3d0dba62dbfd39a58ac810c78a0b4a3b2ee477d82449da0717bcc557d57cab87fc496cbdf34f6fa856cf2e3df42a25899a0871315381fb032c84444162138f5050596a2bf5126d1c626e268d903332af5445c715638966a80c88d355174f4e61d843f43e6234b19cb8a7dbb9569132670bec8d9cd1def6283ca59830ee4093372fd6249bc1f81bcf7873eb99f92d3257b09006b4f28c5e13b153b21f9ef06efb58f829b5088cfc65e9d2bdd80cf583461757688651a900d48360eaf3df74abd6de3d1c96e83bfb600b692a01c36b9fb545c7f673fed2d454be6f87b13a192d25457b1706db0db402c1df2121a1cdaabbe2ee758d00c0f621f65a459189c630d52472b8d7244d11c96cbf4cb8b392a597e242b9c69232941a6f46b54d47d6fbc54792f552c58f5bd4543bdd21983ace0f3bc18294f37b202b38746626ead62770242a31d54176672b3c4b24f0ee3b97fa72155471ebd6089ba7fa1a88e8e8f5a7e676ba124fdf2586209e4291c468df0e4ec5c76b372dbb8e2bd467c747b3432a605cfa7d28df393172bed478b53f0b8d3d02b3bef9e81789b58d9bf237a07330bf25ad84af3c65a503c2c9da025e1248ad2c1c76536a4f258a906c05a80d2cc4019caaa77c35e3124217553965014af7b0d0b49bba6e4a1435213059ea0ebf6e03c36a7e0581bc327dc289638f8cfb8cccc6c3761e3ca0bdaf407be48680b38eae5ee78356f3ee4a9a516a5ee04f0d3f8421f687ec378ac41c2b0b77e190f1360d2054f0cb0285e8392bcd6c0798328b4d7595c92b6ba89dacde4a502dd7639f8bedf7c3bc11698fad72b4d9baa6663cfd77d581eff77bb5d4d8f0675d4ecac5082c78206f158b9353c8b194942314249c6e4ede6c29e64d32e5f6180e7fe0db57bb83caaaa6d6025d5a026bf17d4cdd32d18e4e0f13d265c5b700468c449f5bd6a73ea8c1570479e7dc1b3c257a4fd786764b110e05e4723de717d11950bffa9c915a8ebb04f6f7dd6659b296ea7428a09f397c76626e1fc7da583389f8487adde56c7693d63db29820cb29772c566ffe1a886cfa63a56d963fd21853ee885474e67bdbf30aa28a805d1878da19d6dad606e5493c67c861ab854539d38c25eb7c90c8eeb3d7a7863d362cced3814646fe03a443c39f674457b0ecf77524cd7806647c60c6ef7e7a7cddfffc2dd883568e016af884a2436fd9e3044eafeb7b9aafa65f09cef1c0e8751181a3fa02e6ad07b1f30a63032feada0906097b9ff85bb781b1046db7fe4a7910178e42cc7f1c9cda507735cac20e86b370ed4218ed610774b6cfc4663f1eb0fab7fe72143f01612b292a8ed9f2ac740264f4152b22365e30888ae0339c05007078ec39e85f0ec063fc91bc769322cc352d9175da14e475ab0c524bbfa3d0de9c431d728585858d8194666eab5fe340342302c9fa5d0595ab9f27996018a9306009e46676372570916ccf4642303d2aec52c085f6dde86780ae518f2f8a0a88f0beba4b1e83e6bc213c735cfdfbecb76d9016cd92ef5a0a6871b9d57fd1e506d1147c8470b18a4ed9da9aad779d1dcae8c2867ce15721a56594c1ec62ecedb14441e49dad1b0fbca62e4b4159c5dd0370896344fb48e3dd6cb2be1ce8fb6916a7751da1be2b35d15d5adc701655ab18c3703555a65c0b0a949e0c98af5a6f714b8d2b83b845dae8dcf696c7401c03e7a152153d3ce9473de95b98300a7d567525a70927394fbe949d0ee4a4d670deeaf698876c2ab3a6ba442e97388278e07cde911f1eb2b747c603e91b762e157997eee2df5201d16c2ccc3a65cd632537cf5b60587d19d1e38bd0bcad3d7dd24680584113351660d3c6db1027d44d4a0d9374aef9bafa1f8e77a0fd24c3ed3f41e4d13438a2839951cc28a7c0498ab0841d729707332402ed6492c56c1d7aed7814e8e9786b0cd52670bab5cd9540021d7ae351ac9043bc3d389aaec129a4d48863067e1570b38887908584d212e8dff313303f6ce48b4246f771a0864d843d4319f39efa326f36219a5dbe11bbee90c27908bf9e1de8fcea0c658d22aedc1f3452859a2d070f42f58147e6c5988828912579555c2823e9e10920f3be9b6fe5476f7b3f12992f95074055a17cac9310f9ef0284db53eb3750710acb6461fa910f93fdbbd337fc23bebc7cc3ad71b54cc6644fdd54f39113428745e6b93fc01f993a345f8573af402014145bacd0c982e2c709448b0b94153137b36cdc9e67600642c11614c3cfde952983f348d477be1dde27fea6ce280926d3508f167b997df0c8307551019039988903ca6edc36241dd81edd4fee923245c7dd89fc1fc57d3d09dda3e7937e2c23bde6fc2de0a3bf5d7911b0b933f49a44b8dd08e1d01ed58760a3470cffc3d54caf692b76062f6934142e60137af3f9750b74e85b99590c5bab4b9f2c8f651aa24f912769959bb9d078947a27da220f0f9baf83281f5e653c01bedc9a576117b74dbbdf10a796c8fbeed488d0d0c45566549b222183023e29bd5f47ea81bfe631e51f175403bc6a024b21194f8b7dd70c9bb3038aed9db93477b6651a91ecd8512be2de26b3ad1684ced13d76bec36de4cd1308f07351987de95f90a0a5bf4adf75565a955f1747ecd4d3e034c78b179499029f7976f9f155fcc10740b89f8425e31db65c7990d14d5c3888f27ad373b56945a0f7ecbe7cb476293212665f65f920d8056e3959d310b1a8c76ed1b2fca3c4bb1bc01b2fe5943ebd5a634cdd56566d609d427c90a2e30a07ba8a2102a139ef74d548f0f3978e2d0da6cb10401a6a3fb1327dab9b66773f0ce82f703ba2434cfe62511e6a141cd6f6b9eadb62b9af852081a610ef51886c411bc11599a80f38fe422c94d4e9e2ff8dcecb4006f5ffb412bcee0013c4b7326cfd55d38e99f2a76231b63012f0bc87e55e204ede7358548278ac13162eeeadcd128d3e8bcde1822f91799698f475fffdf3d69643dabe3a7e8fa583844b87706e3ae49bed1fbbda40bacc9fe016ebda90b71820eb49d4016cb0012eb3c05595da160ae1dbe21b7bc9c6f61c993a1b71abbe0c91cb0397c9c4e271b16f9143bdbaa43da67b809dbc8da4a3d5a96015d1c7cd9b3eb0582627c803e047c93dc3cc2d54289b45f439b6fc7708ebfa916b138f68cc2a6a9b3a3da9d3b17f15117facfa4d956d4295d247b9bd524318d87044e2e47bad9c5f603a392c42f4ddc79d3e97bfedef65a7627c8e0261b4e676c23bb34e1b94fae647786474485c0e190e116f9139bf398bf1649c7e56471c7f7ff2c1897ccaee30d993dedbc751f9f36951020d28524dde0ef7d7ba880a8842209d8a6769ee46331b9d613039006f94e34a88dec49afbaa3f596c9012b7c1bdf8d6b858bc94722ef4dae194ce88f9f2620cf3d0429607f7e59714f7adaee7e8381c0ae4b7e7ca2d1dfe49f07aa3231df8fcbf127cd00fafc0aad2b565c359ed7a935e5b49fce14b05f4171303bb1d9644f9b20c85164654e138c7317aea392f3a84d37e1cc82f7bd7477d48f0a9cd37ed93ac71d39fae20048feea1b06ffbc98798df1ca3f4d34bb6ba4d27f6ac16398a291c41c63e9a40142b46093772ea62064a98fafcbb35cc14d319d07ef267c980c9f64d7f1e4634c5cc5dad753be38c460bb83ab189d993bbb2a70a19f1bd93ae8cdaf0f9a86d317dd7f63ffa216606ca600aecd88b0bfd633f898dcb776c00ae71b95b7cf386557c19ef8dc50dea42946119441edb80fb6e42165aa0267c78e055c41e2c4b2e74c6670ca7d4e179b68a475b242f1109504c680fc10ab3cdc695f52e881343b5abaf3d9fb3871397991df6f085b8c0aabdda3f3a8848fa0ed15de8ce32e7270cad2546bed3b2f3d20970d5a0da2d70502a564de8d8502eaa8eb504aade6fe8aa4ae7a10e635599d3d8b98951a9139ea335f9c96250632ff13f87323d1cb32f7570f8346ee0fda01c2c0b51e6a7708686b077dc2f364100b0be2e23aeb19632af6f73014a22cc6983c2ed0022b277d9b980727f900f2c8a4d632940595d98041fbbdb7570094d32ca2de88161569e9607cd6bb7044924c7f90345621ff8cc4e326e69f131eb42b1fe2e3c61bfc4e077d9ddcdd08e27d9c326f853f3f253034857826ffac06c91bc95fc7bb1df40d91a7c0808a542c409ced4e3178c5483767cef1858241297cb8305fe64105c88666986d149006dc8c3e6b87ad396c5c520a47ada0746df4d301aa807b816418ac76946017816eb7d5cbcf6441664b5e360356845b17b3596773816d2aabfe962c62a05b8392191890688a7dcd578abde79133e63e0cc8ed823bd0d7bd2d59d8709a47a8b751f5772ac1b365115cd5e6bbdc6db77e93f0d9a107a2feb3301a1bb79b5ae86a6f04a4acc89a171668972065215f9be005111506f185", 0x1000}, {0x2, 0xfff, &(0x7f00000017c0)='nat\x00', &(0x7f0000001800)="4d3379538d61bf8b1b03bbc1f29ff5dee6d0ca4020a473183c1b0ddaa8b7ef822af3ed336ac9f9a1b7df363cd5f6cf41c2ea3dcdcec03351704da5e4f40447956a2d8f9364be9d00ed53cf56fd5af4312792d0e726a5247d1a1ee1f2793a4601d6bd98bfcbef2eb289e22d6be295cd", 0x6f, 0x8}, {0x3, 0x0, &(0x7f0000001880)='\x00', &(0x7f00000018c0)="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", 0x1000, 0x20}, {0x1, 0xff, &(0x7f00000028c0)='\x00', &(0x7f0000002900)="4f063299abeb1312ad3b8e3bd7cbc6db7cf306fa6ca585ef5de876f4a0d208153f5e28672ecdf14a999516955712887bd065b131c9bc5f2663d92c0422090454e47443073ad92ca2affff55cd5d9b51481b804c1332f4679a73eaa24b4536ffed41eb5fd573b7a1b1fe735af7e059232a98b8005d214b3934e5312239d028d1b13f6f81f17113282664f7faf2b346caeb95489983b2f899dcaafdc3b24ba63d86bfadc057f8ec20f3e77163db3d832d1179c345fd8fefb510115bc39fa6845694534110aae66ce154108afcb437c4e28be56e7409abc9cf0428e8915dfdc1ee943", 0xe1}, {0x3, 0x0, &(0x7f0000002a00)='\x1f,k\\\x00', &(0x7f0000002a40)="6493b222301d0274a9310c978a1b823ef04db751b791b848", 0x18, 0x28}, {0x1, 0x0, &(0x7f0000002a80)='nat\x00', &(0x7f0000002ac0)="b65696c08dcc81dd8a8aa73560f216b1093bdae05a2d32f16f598e9c3e990cc18d5685a8dbc9719bcee08418ad2b3106520f1a06ab6ff2989aeb", 0x3a, 0x2}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@can_delroute={0x64, 0x19, 0x20, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x0, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "6f7649a82cbc1645"}, 0x1}}, @CGW_MOD_XOR={0x4, 0x3, {{{0x2}, 0x0, 0x2, 0x0, 0x0, "3c9dbb8d1a3c6103"}}}, @CGW_MOD_SET={0x0, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "5aa32c750c71f570"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r5, 0x400454cd, 0x337) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x3, 0xc, 0x3, 0x1, 0x401]}, &(0x7f0000000100)=0x78) 529.351646ms ago: executing program 2 (id=4160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000000180)={&(0x7f00000000c0)=0x400, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x3f, &(0x7f0000000080), 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 527.197792ms ago: executing program 0 (id=4161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x7, 0xfffd, 0x4, 0xa}, 0xc) listen(r4, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x28, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xaf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3ce3ffff02000000000023eb00004a000800a91a279d5b2b28de372571937577bb46acb117723acef870072bf401d6710a4230df78f2d205bafe6de384", @ANYRESOCT=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000000006f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000001) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x7, 0xfffd, 0x4, 0xa}, 0xc) (async) listen(r4, 0x7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x28, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xaf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3ce3ffff02000000000023eb00004a000800a91a279d5b2b28de372571937577bb46acb117723acef870072bf401d6710a4230df78f2d205bafe6de384", @ANYRESOCT=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000000006f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4000001) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) 435.682124ms ago: executing program 3 (id=4162): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x277963f4935cfbf9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0xc8ed, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x2, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 361.189736ms ago: executing program 1 (id=4163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000280)=""/157, &(0x7f0000000140)=0x9d) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r6) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r3, 0x25, 0x2, @val=@netkit={@void, @value=r7}}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480284001800b00010064796e7365740000180002800900010073797a300000000008000340000000000900010073797a81000000000900020073797a32000000001400c14c2a91010000000000000000000000000a"], 0x80}}, 0x0) 310.861566ms ago: executing program 4 (id=4164): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8005) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_getnexthop={0x2c, 0x6a, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x2c}}, 0x54) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 240.284593ms ago: executing program 0 (id=4165): syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip_vti0\x00', 0x10}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa", 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x5c5040, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/242, 0xfffffffffffffd64}, {&(0x7f00000001c0)=""/43, 0xfffffffffffffec3}, {&(0x7f0000000440)=""/90, 0x58}], 0x3) close(r1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400e68079730000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000000008500000000000000b70000000000000095000000000000000000000000000000000000000000eb1efae1adcebad464d14acb6d6ae2279bd913"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdc0, &(0x7f0000000580)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x9}, {0xb, 0x10}, {0x10, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x10, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="3b0948ef6b16"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@isdn={0x22, 0x3, 0x1, 0x90}, 0xfffffffffffffffb, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) socket$kcm(0x11, 0x200000000000002, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r10, &(0x7f0000000840)={&(0x7f0000000900)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}, 0x812) ioctl(r0, 0x8b22, &(0x7f0000000040)) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140)={0x1d, r8}, 0x10) 228.67252ms ago: executing program 2 (id=4166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r3, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000480)={{r4, &(0x7f0000000080)=':\x00', 0x80040, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x2]}, {0x1, 0x6, 0x7ff, 0x67}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x100}, 0x1, &(0x7f0000000280)=[{0x1, 0xf9, &(0x7f0000000240)='GPL\x00', &(0x7f00000022c0)="a294d66653b1f172112f66007f030ce4a8accd2aee82486fa9302f9407445fdf0e7c7c0f77ad2826d0b056f25f6356e2935ba2aa77c1ea2616c5c64fa5c8cc69f53164016acd122736b35496d1aae7ac482d22789e617e83bb879da0c4a7138e863d54c67fd3e26b7cbbdc2b1dde6cdc18e3a6c36bf160d54e5bd8dc7c9116c022922dc9d56f068b27caa71a4f827d5dbc7308214c46ebe9d1e5795b8e7324955d739922e3f8dc41e44a249bd4cc77eb171f821398ceca395504398ab9bb3d2348a1b5a1870e722cea7ecacdd58a7433da42365efe709ff8cb88824c331a12edb617c70eef0fd40a8e8ccecb82d75369d414ac3b7e3bb6ae8983aedfbfd4bad877e04de71c06c1189fc4dcf4aa2a60a83d4e4a2b8b497929010aaa59226189be6424f79b96f12a1e670a63e876f70edef66d27314c0ba05fa771d64773cd7f00453f154fa2fe1913cb602e6287657999774812baea39a5ac3e7f55d7deaf28429d10ec29c5b1d3281cd3319cf10ed02e87d609d941f1e501cc3367bed6b3ff968863df0412bfdf108a5201c0822c8991ccf1f8a526dad97e232d41ce445d0de6b4059e94cea8f4d5a10f1b89d095d392521ae6643907daef42604f68e18197f6f34eaae8f9a5bb19a1027327a4d5e407f1532e8b71610b9a7f380a6858fdaa62ca9a7a11029aa27a7829fab9de657a209e2d154d1ac2a6a9932427823d13d1c0fd86870f675b2fccefa0c11a02b1cc254d6de0aedcd14e9a02afd0f143bd11d610678b43b6613cb84d4dfa51fef30634cb807f16610ed6b38726c9bc58c0255b3d845eae0adcfcce71b3a30889d47a7946f48f97b63ca521b3eb3ba0ee89101c2d4eaf666cdcabb6dca480d4daeb93d1ef6a3bdbac0d217d584b6839e151eddeab03e681876a18b6b12225c6212c9593f22b0d56c5fde6f5d550a1a6884e967fc231f262723902103278c313782b0a5514d77d3cf64d2bb05d3eafe030e3245ad0a7e065371c7356aa1e8c6c464e5eb0da991116da597a0a747adfefb8bb9606991e1d04fb78ec336527535aead55a66d5d3bcc757ed84735ff284892c03fbd894384ff846f6038af4b7bffc4eb4ffe9df809a1fdd319484d0282a7ad53fd515c7020f67bd4efe3918cc7ca57cb8f0eb1946c58ab3565a0741cf9a2e6b10e1bd4b928e6e263618654056f14b93ac2afa70eabfdde9c08b85521f9363dd44acf15994dcac9d775445e58fe0e6ca4e314e6b787a3aafe606adc186fea23664a9f8f5e706d1cdd62c8887bc34df30ef30e34cd235338d28cabf27886a9993a12ddbd3077bb055df11b15603b2280c02e80ec8d4ebdd9c17e640908850a2c2a16ea766010043eec97548848edba1ee0012ab31da8022561d1d3f8912dd622046e5e713ba9d24d5b969045c753a611b424c63f891c443ded5f71060a6f597b7f8bc0e6c74688a6f4cc325827b7b551e00964ef27a9c890021e645eb431fa17de6abf2388a6893c4994b3687444fcf50ba46c669f58e81c9c8e97d712334d4a2261abb859358c82556d0d2303c887893e6317feb60e0a931ccdfac8968d82e5f656c2881f7f92738198c7a2613399514aa69f95f3a42b87eec1257f4b58023a3dc2442b5f7bb319ceb9f53fabbd8fd963d98747874fd67dfa38ab4ae50788ca0564a6d68ab80400f89f63b73cb90f46d0e1b74cf629f31ecfb00c49d91a3a0b21c1e165c773a58b948cec2e4105c2b8d56725d12a1dcac500f46ce94ecc7bcf2dbdfbeaf175b088c6fd3cf62aed8ff8fb5dad71321106322bbaf3f55fe1cc3b0b1c20e94eaf4367ce0e52a8924b96ec2c24ed1e5eab15ed89afc2064325bac39425a66f5d3e0d4a57377916477b066efdc97858b49a042ed3fa3bfb06633088ae6c1e0e586f989f9b6fc4ea5c57d1faafc8df08e425bb0b6aac930c4b5c5b57c8fbec5b83a5927a03457d364496427e35e4f4ba81b16d759cc9e5da3518d0fd4e9bf30fc6ea2ff077c262b23715bfddb94c83e897a816f87f7f2e12394ea430d77fbe40707e3249df809ca0aa09c0c39ca50ba5728896a009a0e485b062e6e381aff7508ab0f3da94141e6537d776eeee46a898fd7b2e93fc0f58f49e3b2938f364e67441872a9837d98ce8bc8cbf7ab22bf2c91e54ae930562efb58cd486ca0bc90addf8ed16643336d0542082729c698bf8ae380c7914e622075b2d9c77b0f306ab4d2e62d9f284de380af3fd44aad4cee8b4076f537f1c3b201a341dad0add5c3ab40286e76fc5644ff35ebc74f4bd64ab972a9c9d85ff0c75df49a5c3518670bf964f6cccafc79cf4cab400ae4b513ddb14054c45948877a431784ebe10e8e5087d511aedb70a40225a1f220deca1bb029268aef6bc8f0fa974e5846fd23f54f4ed2e143a7c557c9231dab0d7d2a3ff7e645e7b014f17da49332e2cffb71a5f2d1b2504fc1848d15355c949b4318a2135eaf4b648d29bb98359cd4a01b4b132720804a084ed5de14f04b21e049d028abc6dc427f524d0d31461f03546b4ef69028d812255a722792a1c6e9c1b57abc3160107ebfbe6143f70a97e6a8d946e4ae1c011dd981da1d2505850e0454d2818e7c55af937eaf6f1c776d77fbc6268d0a9ea39c7f82a6c49215b07c40698688acd7cc508c9031ac959afe52af78000de4dea467e046b9441a5081ae081ff86638f1e31555a465f89a347e07ec44261079d385202969ccc018debac8ebdabea514dbd176539b1b1363b38bd5fbaac58bfc95af2014e922c53e9f5ccc78f1fab1e6de902d92f9518f888ed8e2618a0de804b0219e0e5049485109dc9609b25ac1f19becc828a88e22ebb886e9a4702dd8d310cd514b6c0a4fe6bca7f7d27baf1352b09b02ba8f45c7c037843565eec1cc0cb2cebf671d4b57d83be7bb108e369eb1e750617d26f58170eda8f557fad07a31390c1fbb68ffa32a4b870f5497beb16e3df3b3071842cfac6fe938a2948b20e9d394c85817fb483da83f396ea7e9e5b99b83ee86afd9d5c0eae2f8e9e12617358c659eb7d0c39fb2d8a2257b7511c097c75f6bf82ea9dabacc2a482a1750621a0ad811b57df24879497352519a90159bba4a7a571a2c7fc1bc20959999af825054043fec50f26013999e532447800f456f3e79f974dae922333ab901905806ab4ad55df88e7321db33cee3c7169deb994504e5f757d7c38b688dc8781741aa49c7ac9aa4984c91478daba6c86e8bdd01f99bbdbd135d05e73515edf5f571fe612492deaa80e70febdde392b38f2eb9b2519a7ed4589befea0a1eb6b78233296f64389f2201b40ab6cc8243386f9ce3d9e18470ade52398d8c620282aa0abe5d1ef88fb02ddf756c0f890ca8273bc36e7c515141aa6242d8f5dab94a5bd9e7a0d91aea949f8d66b7687d3a4ae639d5777460a245c1913bba949be4affc259c0dd99e538edd24ccee040db2f9dfc99dede70b96b8f65ed0fbfe6c06e1977279ab33f57c9fdfddfbf94713961fe1f215c591da591d01efc88fa11eb4dcc255464eee9d61ec0b2b8f43aa4e143d8f9f790f78f602a015e870d555a3bbb27ed2717bf1f652e4fc317f0a2463078a236bd56851a3d0036bfacaf44d362a6508dfa8772b11ab0a6dfd99ba444018edef0a657dcf15224d7fb106f9ec3c0441cc0783369d3f0a9cf1da1ecf9c7a12869114325c45c2c6047b0239fc23cb626b365476ff4a632d0ddb7350a557fbef2a3dab3fd966cf2438b48a5b78d452df6b9433fc9e9b5857d3265fefd697619bb22db5b50615ef32bd03e7946591e7c2a9e7eddcf918365c68d5cbc3e07305913e2bd73c8fdd14ded512fa2f93dc9797ec3281d83b1733812838bad2bb7fe202f16035de136372edd79d6d29fa9776a2242253757e8bebc5d6194bdae609c3767c3dde6ec2c4d55cf4d698c73c164ed0b5a295c129bd0a016a8f4a60157c8ad8d55b703c3d20999bc487b43d9adc3dcca1152b80eab8a592a50281fbf49e32686edd09d3ff6b12a132480c8fccfdffd031e36f652a2b14e4ab34b1ceba36da6875abaac12786eb9e700a7e12d55868f1940aabc8ced71f6d0f994426a2c6de27e953f4348698f64f0e43abc1c406a6db3e815d81421284b9cc47258909570d7e186e7fcf21b833459d5ce55e808872cd03d5505cbb49afd152c84483013dc62b5993b62b6b016f413abb1f59504285884b38ea344b886cd50ca488562f1ce94fbf1805f0449c78853b9a7b83c886393c5ecb47d6b73e4e177d64f4249267c1b1885e07daf9df3e21876755066f81fe736291d9dc385128643a29a376cb39d948b07f4073b82553b2f7b950466e81737c7057c51b70229d397ba273ad74ae624daea33af112c511b2a484cb119d13431f3ac42358b29cdd0eac6dd7503a0b022d6fd16c7eee103dc50a83b587146de28cd7582d16b31dd9c08ab1897847485ff3250fd0141a62a712d90a544863d8e14330b8fc7b6f9843f0bd0bdd6616042f84ba38f6db506734d2397d4e2f65355b4f4a2fe1a66c60b2c037677ba4fb0a9af95e2817bca27e0fb45c650240b6dc903161be1ab565de3e6d1cae0bb4a14c21bfc5e678b39b1aaca58986f0013a71fc54d3f314a49bace44bbb9b7a521b2a11fb5a14804dfc96610b1b550969c68a3a7ba9763b00e3203b9707532b357975233caf49ce59b94d2ffd772459375362d1c58b42477b9aebb67beba29c1bc6508474dcb635d88ee30074c6d8dc7e44eb5096700218a97cfe8ae7cbe05fb11b6089bf4d0922e62d97f9d1e54525037678ebc7dff592862be811984454f3caf3af36c7e847845a374cb9ae484eef1454750501185090baccb0055c256af658d6a64150203a8cfbd672497638b98b9a5405e4517829ae1106755be016eb4c08563f9dd0fae4e1092d47ff32dab58a40fd540c3ef409e0d683b1eb1f4d908bb5178504798565e2914e5c2d3ca0b87fdfbb481760412377bad62fc468fcbf1ff95847f004b343c2365ccee271a890fa0ada9df725c0ba613b879c77b3d36fd80aa78cb5941f5f91a6025271664216ac7b780f0d6e65898e19d226122ca20f8a88444ca280dd81329c080370f21667365491ff8cd340249ced16dd0a7de9cb0d7ee616acd8e487dd0288ab20124f10e6cf4319d3fc4116d55b4745fc23fb88cbf04d5fc19c4710694aab8fab0951a49b624c771bb71fad63047cd4862550cbfc53c2b6c2b3a44341a38fde72a9d0f07c936c19b57c1453934f98b380f5e40019c5a566234432d4988c21344a5673cc62606648cc7539180b9416f70889e4542dc1995d57313ed41e0b493ad4b419a1d8ff9df8d8353281d15239924cda388e1e85d3dadcd1a9380ed8221b01fde64ade753eb3874a2494ea2e971f9f29e92435e5156587554dd86703a99750c428d5b08ee737ce27422a14f78440bf9e145dcb4dc7a9bed354de3d19347ecbabb39200b50a40917683e235de38fc5f2c9d90c9418eb3eae6e7c072898377d815c2e334c4091082565f2f88c032b44237657a466044664673361f708ea86743634844b01f531f154cde9e9c0436620b96bbedc051c2c0fbf86d4585e1e78d594d0e3d4a314f134d42b5bceccea20ac63e8a30a197f3e5d8f2853739b0d78285763b1913903e812df339d55ac47432dc9eab6787660fad00a4cccd6232e0c0a540c8c36882469e5e6f81cf9edacb5e86fa2f1ffaaf95ef59086fcf7db7d483188593c418729bc83c54fb4759055d7dfb18e9224334b4cc94823f15ae1766964269df7375334911a48b5f3ebefac584b", 0x1000, 0x2a}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 32) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000600)=0x8, 0x4) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r11], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r17, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r16, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40000000) (async) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 171.145633ms ago: executing program 4 (id=4167): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000002bc0)}, 0x40}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}, 0x2}], 0x4, 0x162, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x81c, 0x2d1b, {r2, r3/1000+60000}, {0x0, 0x2710}, {0x0, 0x1, 0x0, 0x1}, 0x1, @can={{0x3}, 0x5, 0x2, 0x0, 0x0, "13fad5ade7f6c3fc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 100.191736ms ago: executing program 1 (id=4168): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x0, 0x3, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) 77.210145ms ago: executing program 4 (id=4169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000801) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="0500747eb0e57a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000c80)=0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010) (async) r12 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r12}, {0x1, 0x80, 0x0, 0x0, 0x142, 0xfffffffffffffffc, 0x9, 0x3}, {0x6, 0x0, 0x4}, 0x1, 0x6e6bb6, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x0, 0x3, 0x5, 0x4}}, 0xe8) sendmsg$netlink(r9, &(0x7f0000001a40)={&(0x7f00000007c0), 0xc, &(0x7f00000019c0)=[{&(0x7f0000000800)={0x260, 0x3b, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@generic="777ee396c97a364b67512971f8e432c9c0ad4e18a205755f67f31c38d3cc265cf139986b31883e2b1dd2b8ed083d755626808cba92bf2bef52c4cd5aaa13a9337e06d6bdc67bdc35ef66a4fef45ed16e5f1048d213d73b8561a0221834eecc834c96e20eb5c3087f646a60f8a3795d84e1dc2b9af909ccb8887218e85c54d42d93f498e69c0d02f4b5671c633888595f45679bc5084a4fd77f156c255aba1c471173d8cd8285e9487267ef540c5ff5cbd4704e95dbbfe61bcebf0916645c2055b4b3d43cec7fbc4a5378a787e2", @generic="16541960755748b9365ba740ca9eea56ae7600e0433465c7174dd5c18f76c5f3159be9ad40469c770ca3af993a163216aaab78e5fda273e9a4d52f5cbfd0bd5fe34cf6a8912741ae8142ccc5052ab3387a8506a2a503456e869b98e6b82e1a61c33d7d678e8055eb89cb6dbd54f593e681635f0c60d01e293abba29badb6dc7caa4258002c0362e21e664bd1ee741def8919911c15ab3a472b4256bf4af8c59839ad4ca25c97", @generic="70088b2ccfaa9a5caeea53da44004ba9dfcdd42a1679d98c9ab293741ed435b4d87b277e583ab1aa1484ff5bbbb82a2c1958899de5f25d1d611d35c828450c03e56dcdc667cbd99b78eecff6d96c7374a08f040d11e0404c4146e24d23011ec8e79e88a0af23e9e9d8f2584cfae632c9f11b5a0c6cb14bb7ebf6b181e4b4235980646ac5f597ffb33b13d3fa457d4e57e890bb6b44dc715ed387b6b7eb434431bd0a66bdc2da8b216b8aa84b0906ff28c3994ca6ff1898600dbcee745795bfab89b1159f23e512633f77e069664a6fb27df79995b9372ff86262"]}, 0x260}, {&(0x7f0000000a80)=ANY=[@ANYBLOB="24000000110000022cbd7000fedbdf250a00b8002a541b9dfe05869e1100b2000d000000"], 0x24}, {&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1a4}, {&(0x7f0000000cc0)={0x11c, 0x17, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x132, 0x0, 0x0, @pid=r10}, @generic="0b9643a794bddb8482dcd3c5d1b1194c82135adde7cc3c66bb032be0e62381dd28e68733874eb419b3d84b9bedd9f3d57505bfce672c80d7157992baac07c2d731c41c2ef3622b1eb10f2a49884cc99b2d666087ed5688212567719119f7e76dac636d5c90f776904db12c381ec4447ad293afbf524926ef95eb0a5dbec5434a", @typed={0x7a, 0x3f, 0x0, 0x0, @binary="89bdee456c00cbfa4f05adaeee17e2c83272deaa5be7d866cc36b3cc4b0dc144ec3e3a845e9c9d6b7e49da12fd89c201e3b6cdf68fd3cd05b1b4c95ff062963e98360e111e5f61c6d65d72824627c01876b9d9b9bcdba69f2b9b16368c160a980a3645334e101ab321b5c84e793527673074336e3767"}, @nested={0x8, 0x8a, 0x0, 0x1, [@nested={0x4, 0x121}]}]}, 0x11c}, {&(0x7f0000000e00)={0x3b0, 0x1b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x43, 0x0, 0x0, @u32=0x9}, @generic="f651278d696023d139d0c3f6590ed94003d390eaddf91fc8b2094f2c563458479bc1bd5fb06e6f63d3b15c2fb175216731bb755f196e3ccb417085f6eb4f7b0e9fea3de473819997c8ecc52b8b8eaa107ae8439751c9337b7e18ee9261bf8963d8bc5d60839279cacbad81f84844c156837863ed20c552430a83d89dbb4d625273319ecd7ab41d36ddfffb4b9f2edbf7f1cb76246d940380c58221fe12ac6e0c85ad39b72682dcc2b98c34a9dbd22241", @typed={0xab, 0x93, 0x0, 0x0, @binary="1378669897386d29a42c21fbfe20e0a6b9633d31e86ad5c81952435f3631a6e4f220b9913185ece6da3bf1f3553231efb27cbe204bf9a1051291ed8bc327fce1d4af62e1fcf548535553bb083f2642b1254b98d8a2b5bb8d95ce21263ba75415a488c80b2826c2162d6ed2a9358683b53430137ab5366f8148f0e6fe228816abfcf81c8b69f7dc367a44c646ee13e0bb023fa2f312534064066cd7d5adb748d8170fb3d757453e"}, @nested={0xe6, 0x82, 0x0, 0x1, [@nested={0x4, 0x5c}, @generic="b9160c893c281627233f69ec42d8f58d365b8191ad756a774757d6a8579a5389b839e49bdcc3ec1a7bd21c831b628eb494ddbc0756e5eb79706af2ceea83fd7872e36031bede6d9576fc198a4f89a78aca455d276b0673db59f581eb61b61e3fef724f4f48cb9b9e76c4c5a65df1be5aabf9734e0d2c8b117551277f6b3ccafae8c1f16f5b145526c85a3c05f84f631149e3d01964788d77acfda7a842c12278cafad4f708a60e84449a6bf996b0477f6abee424e2657b93d108ca467eec4c96ce7954569ab61240078c68df1575f8b7a03bdc7c511c8ce43993", @nested={0x4, 0x143}]}, @nested={0xa1, 0x82, 0x0, 0x1, [@generic="18cfcb26c3a470045ef012e0b404a041b8cd9bdb2860ddddbb74ac8c2f3873baf79e7641917c342eb25eeb7986d7903098b34eebc9f06d71435f7e1447e4f516c406836b4505970133502016536720e013424cfc03e4bc999704f6", @nested={0x4, 0xc2}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="4d47401341bf0b0bc8456bdf13bc6d576880d3ba664238f72de939f87173", @typed={0x8, 0x53, 0x0, 0x0, @u32=0xca0e}, @nested={0x4, 0x83}]}, @generic="c01ac5ae97c8b7ad2c4523b01620912b2879ce2d40fd9fc777e1", @generic="56a8945adbdf775891bdbd76ed49cb464740ec51c7edf16f380a6f99a5f4c4645a5d57b047d272dd6c894161048ed676564d4a20f9ee0a1ffe18bd39f26f87487261b48c15877491ed4c607e2776a66841fa320446b8a2296e8cfa79c22c324e710920cdea51b1ecc7fce2b8ab99f3f778d4cae519f55f7a5d0fa548a7e77fbc7521313affdbdecb6b39b9d4dc1c55d8ffa38938"]}, 0x3b0}, {&(0x7f0000001400)={0x1a8, 0x38, 0x800, 0x70bd26, 0x25dfdbfe, "", [@nested={0xef, 0xb9, 0x0, 0x1, [@generic="d38c3d734d04b7348f0d732d118baf9a5b3939c68efb96146f3c557feb021c94dcbbd05938901b2982a3f17c9a9ba2422af36f6dd1a98dee440a63dd427c4dcc0c13372370a0d24d3b93ecb07f2bf66a4dc49b35e259d25f3c1f44767bc2aaaedb9bbed75f68697d7577a533ef24dd53894018359217a6d7f4ab2ce8fb8a3272a288c91b05edb6a7afe49baaf3fc4202210723acd0e535b3ba5c32a972c06ec3f7d76f6d007bc3124c2669575b7262f49be69b2b8a63118ad5ac8ced4cf4ef8a3076642e35ad2172724eb5283176791427cae6fcd1280438201f7f40d6b749acd9b0ea2f749a6d757ca8af"]}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r11}, @generic="38d3672c040429ea553580111acc79c565ed0be5d5f4b334f24b163536b01a7f4053430bc35e144ff4616185ed4daae84ac2d7212bd8288f54e90ed0ee4a93e0083a18f34fede9f2e2587ab26c9123945b5c9768e29c88026e48e245d82230ce7ed1a3f267aa4266542ccd7d6de42e72d91282b1705847c300b96619d76be3f2eddccc9c26eab19108b9e6007926cdebc89efa527b873d21", @typed={0x8, 0x53, 0x0, 0x0, @u32=0x1}]}, 0x1a8}, {&(0x7f00000015c0)={0x3e0, 0x41, 0x20, 0x70bd26, 0x25dfdbfb, "", [@generic="8d980020682433cd8a27ad5122949d5316d655d334f997ba992134788545922d5bea264f6339e4ef4ea6072bc04075bf327944ce550b8a2789d20217ad8ac7c2d7b1fb2fb05fa4e74808113b9825b96e3dc9a2773b999b1d05e749466ec3021b4f752e3e883f687086d91e0004319d254cd7e21a33805e2ee3e7e79eb4ba30677d2cff3fbaa6154a3679d7ab886c24382ef62b71afcbc8431d7c20ecc5d0b07ac7cf7aaea23c6c6e", @generic="ebecc616a7d3dbe14eea07fb02f26f06ef0c798a656158470f5ffbabbd2930a92bc50aad9fc15ef3c12115f6d7266dcf461f015b19594cee8cf65d9101761bedac0c016cb3eef21c6d28ad6a4dde508d690c69fa44703e1228bd5c3c04843fe6b74deb2be3ae7d6fae7fdba55cd57a7dac22d3bebb579cd4d8", @nested={0x1c3, 0x11a, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x102, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x3a}, @nested={0x4, 0x11d}, @nested={0x4, 0x10b}, @generic="febefb0f5552dd101b632d60ca3fffb0cf52f652dc241733bbef50234ebe4f61d015254291bb00730f9c6319c39666029acc3c66f13faf68db42f95a9cf07dc4c04314bf7822fbc61246b70b25007ffd44057e4235acef79865cffcbb127ca8568556634e1bf35f361ab84950e91982522b7a1e171d486eaee43809bc2ba6870edbe69dc46d439bab493d39b8f0e56c6f76ca1f32bb7bae4f15194978e531805c3b74c77eab443d810d1466a6382f99c31c757d3e45a73b891929eddb6c4367b9272397a6ced7c221d811c5cf38f9db122c6d98904a58bee0d549ed878aa2b4849ad88a5291754e32bd7028ab31e681f74", @generic="93430031457629292d881180e68cc5f3a6e221b8eb339c2bf281b22b42fbe451429519e3cfb5dc8f39c3751afb12c506358afc3642342c585ad44ea122600a9ad52ebab31fc139f474955336c1c4fa2a49f7cbf2a380366db01842ff6e675dfe2a4ee21d24c343e0080dbbd86c2f14936362c3297567675564f4c7ed7c8e4b59c6ca93730251e90f0ee173877de9f44e6e523bda373fbaf7315c541f121daad5612bf6de7630"]}, @nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0xf7}]}, @generic="be012d9839d661be20a8161a53db7664b0c6b4d6ebbf8d425a326f6052646e29d8771e42ad3475cef75de453a464885119aedd7e1a5b01b6e7cdaf86c61983f4b06e8180a0494cc7536946e1542310261a8e676cebe0a4ffb8eefe6140c4da82455a853659dd252920bb2be9dde316e08bcadac009793e1f58d6fd36053105645aa22a38762e0345be0a4365645b375bbe804bcab7c36f11d1bad7a79f583d1d8dd343568bc7110a41bd6a76b351075efe8051240d2007bd8b2b6382f0b87b957f18c58bb614b3559702a1d1dd14c63ea210656bad", @typed={0xc, 0xc0, 0x0, 0x0, @str='nl80211\x00'}]}, 0x3e0}], 0x7, 0x0, 0x0, 0x80000}, 0x4000) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000022400000008000000020000000000000700000000000000000000000203000000060000000000000c0000000000a035a974f83fd5eff85d7fcb4d00610000006100c0706f480d7a3d4c3ca2bbb8486aea2eb3"], 0x0, 0x44}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)='nbd\x00', 0x80080, &(0x7f0000000300)={@align=0x7, {0x6b15, 0x101, 0x7, 0x7f}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x5}) (async) socketpair(0x10, 0x5, 0x8, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="040526bd7000fedbdf25020000000c00080002000000000000000c000500000040000000000008000a0001626400400007800c0001800800010044bdb83574e7fb425863dfaa3a1b2a3ebc32cd1f9a22e575d595cfa09c885394d2883ff505cacc9866de623c99927b9f0eae3d80f5fa47", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="0c00018008000100", @ANYBLOB="99b8bc5486961d17501c5d321aeec145e064900f3514f53c13488e6b831704b0f27153018b7bdd3d561874be0a25169fb77134303a381a76d487b4ca5e840e3a698b54188c25bce311365711b344fd385bea8d000abe0e09ce76f708a194549d3f8edef6bfc08f2803bf518ef6c94c6e369af878257f9ecf29f6b50874675b9cf1eef8b6d3f59abde00f5402ecbb4ce9d02060bc5d7297df668dfaa92e001d4f55ca667d7a", @ANYRES32=r11, @ANYRES32=r17, @ANYRESOCT=r13, @ANYRES32=r18, @ANYRESHEX=r7, @ANYRES32=r19, @ANYBLOB="0c00018408000100", @ANYRES32, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20004060}, 0x0) 27.089435ms ago: executing program 3 (id=4170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}]}, 0x24}}, 0x2400c090) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0xe25) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="12ffbb10a186c0797711dce8df25b4ae71e9f0b68f7d44817616ad715749bcbc4f54fa79dc8180486e5d7e3489180178caaa6a0e45e089366eb2054b95293e4811b9ce1c3b785e859bd44371f577ceeb426b760e7f50e68d0a095f888bae6c06d728669d30442943d9d855967e13f83918cbaad343e9905f28d7e86a9bc427eb61038731154eae855d63bdc9fd96a7e62b22a726a5bf564cf8fdde70170dd2060798fe4142a408be5f240dde8b08e116738faa04b1f7f061ac4114acdf57531b62498b8f3a1eb5c121fa2d3b8633c0a46c", @ANYRES16=r8, @ANYRES32=r9], 0x110}, 0x1, 0x0, 0x0, 0x8040050}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) recvmmsg(r10, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r11, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRES32=r11, @ANYBLOB="0500"/12, @ANYRESDEC=r9, @ANYBLOB="e8e2058ead8d579ef5ca8e3cf67427c5d76828606ee23106686686ceda119a7ac988740e3c08961ca53048abed3086bd5092f6d51e5a9a0ccd200acda19300267ee906149e8aa56ec4aeb41cc216a5936ecc07d7095bfc61f257cf63adc68f8c2b4c622f5ab6d4beb9ca70c7875d1d73c97cebf83fe1852e92df20cc6ea95b18c029fdb98093168c69cef15ca66a4cbd91082233b876779f1db2df96e464ff74890011f79a4a96bc7ba6dbdb0909bf74", @ANYRES64=r8], 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 2 (id=4171): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) (async) kernel console output (not intermixed with test programs): th. [ 371.001152][T15341] netlink: 'syz.2.2734': attribute type 27 has an invalid length. [ 371.044448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.052538][ C1] lec:lec_tx_timeout: lec0 [ 371.057700][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.137820][T15351] netlink: 'syz.4.2738': attribute type 3 has an invalid length. [ 371.389231][T15360] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.658185][T15371] __nla_validate_parse: 5 callbacks suppressed [ 371.658222][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 371.769198][T15375] syzkaller0: entered promiscuous mode [ 371.776349][T15375] syzkaller0: entered allmulticast mode [ 371.923619][T15384] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2748'. [ 373.700499][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2757'. [ 373.751525][T15426] syzkaller1: entered promiscuous mode [ 373.761181][T15426] syzkaller1: entered allmulticast mode [ 374.034244][T15445] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 374.141860][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'. [ 374.203621][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 374.219808][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'. [ 374.220462][T15455] IPVS: ip_vs_edit_dest(): server weight less than zero [ 374.430649][T15470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2772'. [ 374.563711][ T33] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.579225][ T33] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.615178][ T33] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.038768][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.050110][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.050934][T15494] xt_hashlimit: size too large, truncated to 1048576 [ 375.071652][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.085761][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.093639][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.139915][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.154037][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.166806][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.179740][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.189129][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.781456][T15526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2788'. [ 376.010071][T15521] : left allmulticast mode [ 376.015029][T15521] hsr_slave_0: left allmulticast mode [ 376.020461][T15521] hsr_slave_1: left allmulticast mode [ 376.064494][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.072636][ C1] lec:lec_tx_timeout: lec0 [ 376.077798][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.167479][T15535] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2790'. [ 376.311849][T15537] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 376.319041][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 376.343786][T15537] bond1: (slave lo): Enslaving as an active interface with an up link [ 376.357124][T15537] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 376.651018][T15559] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 376.678102][T15559] __nla_validate_parse: 3 callbacks suppressed [ 376.678122][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 376.703541][T15495] chnl_net:caif_netlink_parms(): no params data found [ 376.879130][T15570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.936866][T15495] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.945382][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.952716][T15495] bridge_slave_0: entered allmulticast mode [ 376.962129][T15495] bridge_slave_0: entered promiscuous mode [ 376.971582][T15495] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.981324][T15495] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.990862][T15495] bridge_slave_1: entered allmulticast mode [ 376.999168][T15495] bridge_slave_1: entered promiscuous mode [ 377.091214][T15576] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2804'. [ 377.120259][T15576] netlink: Conntrack attr has 3 unknown bytes [ 377.159254][T15495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.176637][T15495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.189625][T15582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.225006][ T5145] Bluetooth: hci5: command tx timeout [ 377.306366][T15495] team0: Port device team_slave_0 added [ 377.337076][T15495] team0: Port device team_slave_1 added [ 377.383033][T15495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.403444][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.431611][T15495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.450326][T15495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.457870][T15495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.485849][T15495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.518109][T15586] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 377.623848][T15495] hsr_slave_0: entered promiscuous mode [ 377.636079][T15495] hsr_slave_1: entered promiscuous mode [ 377.656009][T15495] debugfs: 'hsr0' already exists in 'hsr' [ 377.661814][T15495] Cannot create hsr debugfs directory [ 377.810969][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2813'. [ 377.826132][T15605] netlink: 'syz.1.2813': attribute type 1 has an invalid length. [ 377.834144][T15605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2813'. [ 377.911853][T15495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.006392][T15495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.206338][T15495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.344332][T15495] bond0: (slave netdevsim0): Releasing backup interface [ 378.429485][T15629] netlink: 'syz.1.2821': attribute type 6 has an invalid length. [ 378.676744][T15495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.710661][T15495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.753013][T15639] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2824'. [ 378.768638][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.776540][T15495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.801680][T15495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.920543][T15653] syzkaller1: entered allmulticast mode [ 379.052057][T15495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.170210][T15495] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.267735][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 379.304854][ T5145] Bluetooth: hci5: command tx timeout [ 379.355420][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2828'. [ 379.367210][T15664] 8021q: adding VLAN 0 to HW filter on device bond11 [ 379.376761][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.383889][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.530974][T15673] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 379.539455][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2828'. [ 380.752848][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.760123][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.068257][T15685] netlink: 'syz.2.2832': attribute type 9 has an invalid length. [ 381.084879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.092979][ C1] lec:lec_tx_timeout: lec0 [ 381.098656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.342930][T15495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.397070][ T5145] Bluetooth: hci5: command tx timeout [ 381.801965][T15712] netlink: 'syz.2.2839': attribute type 4 has an invalid length. [ 381.829017][T15713] netlink: 'syz.2.2839': attribute type 4 has an invalid length. [ 381.853373][T15712] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2839'. [ 381.880333][T15713] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2839'. [ 381.972935][T15495] veth0_vlan: entered promiscuous mode [ 382.033318][T15495] veth1_vlan: entered promiscuous mode [ 382.079202][T15717] netlink: 'syz.2.2840': attribute type 13 has an invalid length. [ 382.096462][T15717] netlink: 'syz.2.2840': attribute type 58 has an invalid length. [ 382.116060][T15717] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2840'. [ 382.191015][T15495] veth0_macvtap: entered promiscuous mode [ 382.250226][T15723] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 382.327868][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2845'. [ 382.339909][T15495] veth1_macvtap: entered promiscuous mode [ 382.360073][T15721] syzkaller0: entered promiscuous mode [ 382.365666][T15721] syzkaller0: entered allmulticast mode [ 382.478893][T15495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.522296][T15495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.558345][T15739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2848'. [ 382.604961][ T1322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.613897][ T1322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.655374][ T1322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.676589][ T1322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.735605][T15747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2849'. [ 382.925897][ T7920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.951032][ T7920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.024988][T15756] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2855'. [ 383.040954][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.060689][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.070847][T15759] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 383.107773][T15763] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2855'. [ 383.478124][ T5145] Bluetooth: hci5: command tx timeout [ 383.619798][T15787] syzkaller0: entered promiscuous mode [ 383.627160][T15789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.630279][T15787] syzkaller0: entered allmulticast mode [ 384.470750][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.576122][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.641810][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.672124][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.683974][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.038187][T15812] netlink: 'syz.1.2868': attribute type 83 has an invalid length. [ 386.095537][T15819] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'. [ 386.114480][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.122606][ C1] lec:lec_tx_timeout: lec0 [ 386.127739][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.140400][T15822] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2870'. [ 386.575659][T15829] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 386.621791][T15829] bond1: (slave lo): Enslaving as an active interface with an up link [ 386.652681][T15829] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 386.745410][ T5145] Bluetooth: hci4: command tx timeout [ 386.861457][T15803] chnl_net:caif_netlink_parms(): no params data found [ 386.917929][T15815] lec:lec_atm_close: lec0: Shut down! [ 386.955842][T15855] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 387.104302][T15855] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.198378][T15860] bond12: (slave veth7): Enslaving as an active interface with a down link [ 387.223936][T15852] netlink: 'syz.4.2875': attribute type 5 has an invalid length. [ 387.425650][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.435452][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.443524][T15803] bridge_slave_0: entered allmulticast mode [ 387.452092][T15803] bridge_slave_0: entered promiscuous mode [ 387.476506][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.493944][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.507850][T15803] bridge_slave_1: entered allmulticast mode [ 387.518374][T15803] bridge_slave_1: entered promiscuous mode [ 387.567895][T15879] bond4: option mode: unable to set because the bond device has slaves [ 387.597019][T15879] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 387.637781][T15888] __nla_validate_parse: 3 callbacks suppressed [ 387.637803][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2879'. [ 387.655732][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2879'. [ 387.721215][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.753261][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.773161][T15890] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 387.887031][T15888] netlink: 199264 bytes leftover after parsing attributes in process `syz.3.2879'. [ 387.988523][T15803] team0: Port device team_slave_0 added [ 388.037029][T15803] team0: Port device team_slave_1 added [ 388.108079][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.116250][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.150772][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.177202][T15909] bond0: (slave gre0): Error: Device type is different from other slaves [ 388.219273][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.234941][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.277345][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.289853][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 388.351401][T15918] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 388.433601][T15803] hsr_slave_0: entered promiscuous mode [ 388.464006][T15803] hsr_slave_1: entered promiscuous mode [ 388.496587][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 388.505779][T15803] debugfs: 'hsr0' already exists in 'hsr' [ 388.505805][T15803] Cannot create hsr debugfs directory [ 388.828131][ T5145] Bluetooth: hci4: command tx timeout [ 389.080234][T15959] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 389.089119][T15959] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 389.190741][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 389.234805][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 389.471777][T15977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2897'. [ 389.528182][T15803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.557215][T15803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.586074][T15981] netlink: 'syz.0.2898': attribute type 2 has an invalid length. [ 389.613466][T15803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.648097][T15803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.674206][T15984] netlink: 'syz.4.2899': attribute type 1 has an invalid length. [ 389.679276][T15987] netlink: 'syz.3.2901': attribute type 21 has an invalid length. [ 389.988560][T15803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.042449][T15803] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.076303][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.083521][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.149232][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.156455][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.325976][T16024] netlink: 'syz.3.2911': attribute type 10 has an invalid length. [ 390.358180][T16024] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 390.372595][T16019] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 390.483704][T16034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2912'. [ 390.873657][T15803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.913557][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 390.919703][ T5145] Bluetooth: hci4: command tx timeout [ 391.147633][T15803] veth0_vlan: entered promiscuous mode [ 391.180999][T15803] veth1_vlan: entered promiscuous mode [ 391.299799][T15803] veth0_macvtap: entered promiscuous mode [ 391.359578][T16070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.414349][T15803] veth1_macvtap: entered promiscuous mode [ 391.533776][T16070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.580573][T15803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.682427][T16087] bond13: Setting coupled_control to off (0) [ 391.693832][T15803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.747199][T16070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.858713][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.870164][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.929504][T16070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.950974][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.967608][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.020514][T16091] validate_nla: 8 callbacks suppressed [ 392.020540][T16091] netlink: 'syz.3.2929': attribute type 61 has an invalid length. [ 392.034534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 392.034609][ C1] lec:lec_tx_timeout: lec0 [ 392.034905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.051507][T16108] netlink: 'syz.0.2930': attribute type 11 has an invalid length. [ 392.101367][T16108] netlink: 'syz.0.2930': attribute type 11 has an invalid length. [ 392.261710][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.278023][ T7924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.293952][ T7924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.331979][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.399990][T16120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.412428][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.452359][ T7924] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.463322][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.476319][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.586289][T16124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.593605][T16124] IPv6: NLM_F_CREATE should be set when creating new route [ 392.732223][T16130] netlink: 'syz.3.2937': attribute type 1 has an invalid length. [ 392.889700][T16142] __nla_validate_parse: 8 callbacks suppressed [ 392.889720][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 392.918622][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'. [ 392.929312][T16130] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.940467][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2939'. [ 392.952403][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 392.965284][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'. [ 392.985748][ T5145] Bluetooth: hci4: command tx timeout [ 392.995225][T16133] bond10: (slave gretap3): making interface the new active one [ 393.005196][T16133] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 393.016774][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 393.056086][T16137] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.244168][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 393.376659][T16161] netlink: 'syz.0.2945': attribute type 13 has an invalid length. [ 393.409472][T16163] openvswitch: netlink: IP tunnel TTL not specified. [ 393.434623][T16157] netlink: 'syz.1.2947': attribute type 5 has an invalid length. [ 393.672011][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'. [ 393.825379][T16174] vlan2: entered promiscuous mode [ 393.830603][T16174] bridge0: entered promiscuous mode [ 393.869443][T16179] dvmrp6: entered allmulticast mode [ 394.056798][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2956'. [ 394.093560][T16186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2956'. [ 394.783986][T16231] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 395.300049][T16255] netlink: 'syz.4.2977': attribute type 4 has an invalid length. [ 395.393040][T16262] netlink: 'syz.1.2978': attribute type 8 has an invalid length. [ 396.413964][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.428075][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.441850][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.451125][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.459451][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.780422][T16334] netlink: 'syz.0.2996': attribute type 21 has an invalid length. [ 396.832943][T16335] netlink: 'syz.0.2996': attribute type 21 has an invalid length. [ 396.920767][T16334] netlink: 'syz.0.2996': attribute type 4 has an invalid length. [ 396.932732][T16334] netlink: 'syz.0.2996': attribute type 5 has an invalid length. [ 396.950687][T16330] syzkaller0: entered promiscuous mode [ 396.960191][T16330] syzkaller0: entered allmulticast mode [ 397.044460][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 397.052657][ C1] lec:lec_tx_timeout: lec0 [ 397.058451][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.077319][T16342] validate_nla: 2 callbacks suppressed [ 397.077338][T16342] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 397.598042][T16369] netlink: 'syz.2.3006': attribute type 7 has an invalid length. [ 397.661944][ T7920] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.671121][T16369] netlink: 'syz.2.3006': attribute type 7 has an invalid length. [ 397.682961][ T7920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.710264][ T7920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.742043][ T7920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.819112][T16321] chnl_net:caif_netlink_parms(): no params data found [ 397.829025][T16378] SET target dimension over the limit! [ 397.892661][T16383] x_tables: duplicate underflow at hook 2 [ 398.365785][ T7924] bond3 (unregistering): (slave gretap1): Releasing active interface [ 398.386541][ T7924] bond8 (unregistering): (slave gretap2): Releasing active interface [ 398.407876][ T7924] bond10 (unregistering): (slave gretap3): Releasing active interface [ 398.438176][ T7924] dvmrp6 (unregistering): left allmulticast mode [ 398.514838][ T5145] Bluetooth: hci3: command tx timeout [ 398.579370][ T7924] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 398.813949][ T7924] bond0 (unregistering): Released all slaves [ 398.834266][ T7924] bond1 (unregistering): (slave lo): Releasing backup interface [ 398.848024][ T7924] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 398.860530][ T7924] bond1 (unregistering): Released all slaves [ 398.884954][ T7924] bond2 (unregistering): Released all slaves [ 398.905761][ T7924] bond3 (unregistering): Released all slaves [ 398.928376][ T7924] bond4 (unregistering): Released all slaves [ 398.945984][ T7924] bond5 (unregistering): Released all slaves [ 398.963188][ T7924] bond6 (unregistering): Released all slaves [ 398.987805][ T7924] bond7 (unregistering): Released all slaves [ 399.006687][ T7924] bond8 (unregistering): Released all slaves [ 399.021446][ T7924] bond9 (unregistering): Released all slaves [ 399.041409][ T7924] bond10 (unregistering): Released all slaves [ 399.118991][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.144790][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.188146][T16321] bridge_slave_0: entered allmulticast mode [ 399.197350][T16321] bridge_slave_0: entered promiscuous mode [ 399.228618][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.254803][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.262246][T16321] bridge_slave_1: entered allmulticast mode [ 399.271251][T16321] bridge_slave_1: entered promiscuous mode [ 399.293286][T16400] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 399.309729][ T7924] tipc: Disabling bearer [ 399.324715][ T7924] tipc: Left network mode [ 399.411385][T16321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.461872][ T7924] IPVS: stopping master sync thread 6893 ... [ 399.536045][T16402] syzkaller0: entered promiscuous mode [ 399.551952][T16321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.202376][T16353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.225101][T16412] netlink: 'syz.2.3015': attribute type 23 has an invalid length. [ 400.586845][ T5145] Bluetooth: hci3: command tx timeout [ 401.418980][T16434] kthread_run failed with err -4 [ 401.445203][T16321] team0: Port device team_slave_0 added [ 401.467060][T16321] team0: Port device team_slave_1 added [ 401.583250][T16443] __nla_validate_parse: 17 callbacks suppressed [ 401.583270][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3023'. [ 401.633040][T16445] lo speed is unknown, defaulting to 1000 [ 401.640336][T16321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.655602][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3022'. [ 401.681922][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.715771][T16450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3022'. [ 401.720793][T16321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.769300][T16321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.769340][T16445] lo speed is unknown, defaulting to 1000 [ 401.787357][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.868007][T16321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.897651][T16445] lo speed is unknown, defaulting to 1000 [ 401.942455][T16445] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 402.074452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 402.082573][ C1] lec:lec_tx_timeout: lec0 [ 402.087425][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 402.108741][T16465] netlink: 'syz.2.3026': attribute type 2 has an invalid length. [ 402.179178][T16445] lo speed is unknown, defaulting to 1000 [ 402.221547][T16321] hsr_slave_0: entered promiscuous mode [ 402.232191][T16474] raw_sendmsg: syz.4.3028 forgot to set AF_INET. Fix it! [ 402.240898][T16321] hsr_slave_1: entered promiscuous mode [ 402.277168][T16321] debugfs: 'hsr0' already exists in 'hsr' [ 402.282984][T16321] Cannot create hsr debugfs directory [ 402.318955][T16445] lo speed is unknown, defaulting to 1000 [ 402.376706][T16445] lo speed is unknown, defaulting to 1000 [ 402.389832][T16445] lo speed is unknown, defaulting to 1000 [ 402.477885][T16445] lo speed is unknown, defaulting to 1000 [ 402.485197][T16485] IPv6: addrconf: prefix option has invalid lifetime [ 402.491977][T16485] IPv6: addrconf: prefix option has invalid lifetime [ 402.536350][T16445] lo speed is unknown, defaulting to 1000 [ 402.566076][T16483] tipc: Started in network mode [ 402.571071][T16483] tipc: Node identity 326c768e0733, cluster identity 4711 [ 402.579140][T16483] tipc: Enabled bearer , priority 0 [ 402.664837][ T5145] Bluetooth: hci3: command tx timeout [ 402.738693][T16483] syzkaller0: entered promiscuous mode [ 402.768575][T16483] syzkaller0: entered allmulticast mode [ 402.791850][T16483] tipc: Resetting bearer [ 402.849017][T16445] lo speed is unknown, defaulting to 1000 [ 402.886531][T16498] veth0_to_bridge: entered promiscuous mode [ 402.896367][T16482] tipc: Resetting bearer [ 404.333491][T16482] tipc: Disabling bearer [ 404.342638][T16445] lo speed is unknown, defaulting to 1000 [ 404.371107][T16488] veth0_to_bridge: left promiscuous mode [ 404.445698][ T24] tipc: Node number set to 895448718 [ 404.483138][ T7924] hsr_slave_0: left promiscuous mode [ 404.522475][ T7924] 0: left promiscuous mode [ 404.535786][T16520] netlink: 'syz.1.3034': attribute type 9 has an invalid length. [ 404.758472][ T5145] Bluetooth: hci3: command tx timeout [ 404.903339][ T7924] veth0_to_team (unregistering): left allmulticast mode [ 405.023350][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 405.071347][ T7924] team0 (unregistering): Port device vxcan1 removed [ 405.921133][ T7924] IPVS: stop unused estimator thread 0... [ 406.625789][T16604] gre4: entered promiscuous mode [ 406.641585][T16604] gre4: entered allmulticast mode [ 406.782871][T16321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.858422][T16321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.926505][T16321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.975330][T16321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.073678][T16622] xt_hashlimit: invalid interval [ 407.094882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 407.103020][ C1] lec:lec_tx_timeout: lec0 [ 407.108070][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 407.280995][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3061'. [ 407.320658][T16622] syzkaller0: entered promiscuous mode [ 407.327587][T16622] syzkaller0: entered allmulticast mode [ 408.827208][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3066'. [ 408.853832][T16655] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 408.929492][T16321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.018446][T16321] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.062058][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.069323][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.181226][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.188543][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.241970][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3071'. [ 409.252477][T16676] syzkaller0: entered promiscuous mode [ 409.259649][T16676] syzkaller0: entered allmulticast mode [ 409.286734][T16678] ipip0: entered promiscuous mode [ 409.307310][T16678] ipip0: entered allmulticast mode [ 409.643293][T16694] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 409.750626][T16702] macvlan2: entered promiscuous mode [ 409.757097][T16703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3077'. [ 409.795755][T16702] macvlan2: entered allmulticast mode [ 409.802760][T16702] bond2: entered promiscuous mode [ 409.808718][T16702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.828052][T16702] bond2: left promiscuous mode [ 409.977612][T16712] vcan0: entered promiscuous mode [ 409.982874][T16712] vcan0: entered allmulticast mode [ 410.245355][T16321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.296376][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 410.410054][T16321] veth0_vlan: entered promiscuous mode [ 410.444211][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 410.447029][T16321] veth1_vlan: entered promiscuous mode [ 410.615134][T16321] veth0_macvtap: entered promiscuous mode [ 410.647027][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 410.666948][T16321] veth1_macvtap: entered promiscuous mode [ 410.759382][T16321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.800672][T16321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.895147][ T7923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.903985][ T7923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.916282][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 410.971421][ T7923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.001864][ T7923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.239477][T16772] netlink: zone id is out of range [ 411.257259][T16772] netlink: zone id is out of range [ 411.304711][T16772] netlink: zone id is out of range [ 411.325439][T16772] netlink: zone id is out of range [ 411.336415][T16772] netlink: zone id is out of range [ 411.376300][T16772] netlink: zone id is out of range [ 411.381575][T16772] netlink: zone id is out of range [ 411.402431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.417200][T16776] lo speed is unknown, defaulting to 1000 [ 411.417568][T16772] netlink: zone id is out of range [ 411.440339][T16772] netlink: zone id is out of range [ 411.446457][T16772] netlink: zone id is out of range [ 411.447998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.631909][ T7926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.632475][T16789] syzkaller1: entered promiscuous mode [ 411.646276][T16789] syzkaller1: entered allmulticast mode [ 411.683406][ T7926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.778627][T16793] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3099'. [ 411.869761][T16793] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3099'. [ 411.898209][T16798] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 412.114453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 412.122522][ C1] lec:lec_tx_timeout: lec0 [ 412.127464][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.239466][T16813] ip6gre1: entered allmulticast mode [ 412.318382][T16813] __nla_validate_parse: 4 callbacks suppressed [ 412.318403][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3103'. [ 412.523939][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.538220][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.548483][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.564095][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.572958][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.626902][T16828] lo speed is unknown, defaulting to 1000 [ 412.728085][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'. [ 412.765100][ T24] IPVS: starting estimator thread 0... [ 412.858741][T16840] IPVS: using max 29 ests per chain, 69600 per kthread [ 412.938445][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 412.963330][T16844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3109'. [ 413.094034][T16844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'. [ 413.201429][T16850] tipc: Enabled bearer , priority 0 [ 413.328011][T16850] syzkaller0: entered promiscuous mode [ 413.333780][T16850] syzkaller0: entered allmulticast mode [ 413.336063][T16863] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3113'. [ 413.344153][T16850] tipc: Resetting bearer [ 413.452224][T16849] tipc: Resetting bearer [ 413.611320][T16877] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 414.666495][ T5145] Bluetooth: hci1: command tx timeout [ 414.892600][T16849] tipc: Disabling bearer [ 414.971243][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 415.088430][T16890] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3117'. [ 415.124051][T16828] chnl_net:caif_netlink_parms(): no params data found [ 415.237041][T16894] syzkaller1: entered promiscuous mode [ 415.242904][T16894] syzkaller1: entered allmulticast mode [ 415.310709][T16903] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 415.330370][T16828] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.337879][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.346168][T16828] bridge_slave_0: entered allmulticast mode [ 415.355859][T16828] bridge_slave_0: entered promiscuous mode [ 415.366369][T16828] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.373723][T16828] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.383968][T16828] bridge_slave_1: entered allmulticast mode [ 415.397498][T16828] bridge_slave_1: entered promiscuous mode [ 415.500075][T16828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.528890][T16828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.595813][T16828] team0: Port device team_slave_0 added [ 415.611707][T16828] team0: Port device team_slave_1 added [ 415.686203][T16828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.703529][T16828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.745702][T16828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.760079][T16828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.767546][T16828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.816749][T16828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.925400][T16828] hsr_slave_0: entered promiscuous mode [ 415.932589][T16828] hsr_slave_1: entered promiscuous mode [ 416.160353][T16828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.174285][T16828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.257690][T16828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.268600][T16828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.372184][T16828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.385045][T16828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.473143][T16828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.485536][T16828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.497489][T16873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.672504][T16934] netlink: 'syz.0.3126': attribute type 3 has an invalid length. [ 416.755632][ T5145] Bluetooth: hci1: command tx timeout [ 416.807252][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3127'. [ 416.851110][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 416.900400][T16828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.931748][T16828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.967004][T16828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.993813][T16828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.134479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 417.142590][ C1] lec:lec_tx_timeout: lec0 [ 417.147244][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.382203][T16828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.442552][T16828] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.480842][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.488213][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.545897][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.553085][ T7924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.641114][T16981] __nla_validate_parse: 4 callbacks suppressed [ 417.641135][T16981] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3137'. [ 417.989850][T16828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.122056][T16828] veth0_vlan: entered promiscuous mode [ 418.142506][T16828] veth1_vlan: entered promiscuous mode [ 418.168268][T17002] tipc: Trying to set illegal importance in message [ 418.242939][T17002] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 418.271431][T17009] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3142'. [ 418.281539][T17009] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3142'. [ 418.315517][T16828] veth0_macvtap: entered promiscuous mode [ 418.323527][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3143'. [ 418.358582][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3143'. [ 418.389057][T16828] veth1_macvtap: entered promiscuous mode [ 418.420517][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 418.463104][T16828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.520282][T16828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.559888][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.592271][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.609912][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.641442][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.835166][ T5145] Bluetooth: hci1: command tx timeout [ 418.919092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.965064][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.088326][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3150'. [ 419.186271][T17030] tipc: Invalid UDP bearer configuration [ 419.186326][T17030] tipc: Enabling of bearer rejected, failed to enable media [ 419.218585][T17036] bond9: (slave veth0_to_bond): Releasing active interface [ 419.230484][T17036] veth0_to_bond: left promiscuous mode [ 419.236920][T17036] veth0_to_bond: left allmulticast mode [ 419.245279][T17036] bridge12: port 1(veth0_to_bond) entered blocking state [ 419.252724][T17036] bridge12: port 1(veth0_to_bond) entered disabled state [ 419.260528][T17036] veth0_to_bond: entered allmulticast mode [ 419.269235][T17036] veth0_to_bond: entered promiscuous mode [ 419.317835][ T7926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.344177][ T7926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.414884][T17048] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 419.424016][T17048] netlink: 'syz.0.3153': attribute type 3 has an invalid length. [ 419.439824][T17048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3153'. [ 419.959199][T17073] netlink: 'syz.2.3159': attribute type 25 has an invalid length. [ 419.991495][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 420.059780][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.071281][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.079770][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.110988][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.121108][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.215599][T17073] netlink: 'syz.2.3159': attribute type 25 has an invalid length. [ 420.233894][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 420.333156][T17087] netlink: 'syz.4.3163': attribute type 15 has an invalid length. [ 420.362341][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 420.370797][T17079] lo speed is unknown, defaulting to 1000 [ 420.376872][T17087] netlink: 'syz.4.3163': attribute type 15 has an invalid length. [ 420.385004][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 420.504231][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 420.538858][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 420.638337][T17099] netlink: 'syz.4.3168': attribute type 1 has an invalid length. [ 420.757589][T17106] netlink: 'syz.1.3170': attribute type 12 has an invalid length. [ 420.910698][ T5145] Bluetooth: hci1: command tx timeout [ 421.146640][T17079] chnl_net:caif_netlink_parms(): no params data found [ 421.351376][T17079] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.358946][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.368596][T17079] bridge_slave_0: entered allmulticast mode [ 421.377144][T17079] bridge_slave_0: entered promiscuous mode [ 421.387697][T17079] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.395256][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.402564][T17079] bridge_slave_1: entered allmulticast mode [ 421.411024][T17079] bridge_slave_1: entered promiscuous mode [ 421.490313][T17079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.518856][T17079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.576713][T17079] team0: Port device team_slave_0 added [ 421.586490][T17079] team0: Port device team_slave_1 added [ 421.657148][T17079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.664317][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.700165][T17079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.729871][T17079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.741704][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.769252][T17079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.852742][T17079] hsr_slave_0: entered promiscuous mode [ 421.860396][T17079] hsr_slave_1: entered promiscuous mode [ 421.867844][T17079] debugfs: 'hsr0' already exists in 'hsr' [ 421.873762][T17079] Cannot create hsr debugfs directory [ 422.164452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 422.172529][ C1] lec:lec_tx_timeout: lec0 [ 422.177312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.193634][ T5145] Bluetooth: hci2: command tx timeout [ 422.794138][T17172] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 422.830269][T17172] netlink: 'syz.4.3186': attribute type 39 has an invalid length. [ 422.906224][T17176] __nla_validate_parse: 12 callbacks suppressed [ 422.906248][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 422.930263][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.962683][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.008821][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 423.080243][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 423.133221][T17185] team0: Port device team_slave_0 removed [ 423.186799][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.199969][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.211302][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 423.360854][T17197] x_tables: duplicate underflow at hook 2 [ 423.393780][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.405837][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.418110][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 423.480352][T17193] tipc: Enabling of bearer rejected, failed to enable media [ 423.626338][T17079] bond0: (slave netdevsim0): Releasing backup interface [ 423.666138][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.694488][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.723489][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 423.754669][T17215] syzkaller0: entered promiscuous mode [ 423.760208][T17215] syzkaller0: entered allmulticast mode [ 423.773179][T17223] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 423.783054][T17207] tipc: Enabled bearer , priority 0 [ 423.824313][T17195] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 424.056313][T17232] syzkaller0: entered promiscuous mode [ 424.061957][T17232] syzkaller0: entered allmulticast mode [ 424.099443][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 424.108506][T17237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3203'. [ 424.117679][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 424.136187][T17194] tipc: Resetting bearer [ 424.198625][T17194] tipc: Disabling bearer [ 424.265413][ T5145] Bluetooth: hci2: command tx timeout [ 424.378115][T17244] net_ratelimit: 45 callbacks suppressed [ 424.378257][T17244] openvswitch: netlink: Invalid VLAN frame [ 424.392067][T17079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.412833][T17079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.453858][T17079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.497061][T17079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.511585][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 424.545261][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 424.613187][T17255] syzkaller0: entered promiscuous mode [ 424.620138][T17255] syzkaller0: entered allmulticast mode [ 424.700296][T17255] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.733623][T17255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.740979][T17255] IPv6: NLM_F_CREATE should be set when creating new route [ 424.875508][ T7926] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.999735][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.063756][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.116708][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.123932][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.187226][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.194534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.289779][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 425.533671][T17305] bond2: entered promiscuous mode [ 425.541380][T17305] bond2: entered allmulticast mode [ 425.548766][T17305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.729516][T13680] IPVS: starting estimator thread 0... [ 425.827180][T17322] IPVS: using max 29 ests per chain, 69600 per kthread [ 425.836743][T17320] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 425.864347][T17326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3229'. [ 426.081641][T17335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3231'. [ 426.136632][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.290171][T17079] veth0_vlan: entered promiscuous mode [ 426.341995][T17079] veth1_vlan: entered promiscuous mode [ 426.355397][ T5145] Bluetooth: hci2: command tx timeout [ 426.394223][T17079] veth0_macvtap: entered promiscuous mode [ 426.405035][T17079] veth1_macvtap: entered promiscuous mode [ 426.466081][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.499222][T17079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.559824][T17355] Cannot find add_set index 0 as target [ 426.577873][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.608433][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.639422][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.649631][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.802177][T17367] bridge_slave_0: left allmulticast mode [ 426.808791][T17367] bridge_slave_0: left promiscuous mode [ 426.817789][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.835612][T17367] bridge_slave_1: left allmulticast mode [ 426.841334][T17367] bridge_slave_1: left promiscuous mode [ 426.852719][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.868084][T17367] bond0: (slave bond_slave_0): Releasing backup interface [ 426.881954][T17367] bond0: (slave bond_slave_1): Releasing backup interface [ 426.900647][T17367] team0: Port device team_slave_0 removed [ 426.917699][T17375] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 426.937398][T17367] team0: Port device team_slave_1 removed [ 426.947655][T17367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.956442][T17367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.967890][T17367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.977403][T17367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.991871][T17367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.041656][T17370] team0: Mode changed to "loadbalance" [ 427.058580][ T7923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.089861][ T7923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.184512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.192571][ C1] lec:lec_tx_timeout: lec0 [ 427.199103][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.221195][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.247914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.450011][T17393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 427.526820][T17401] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 427.593961][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.601737][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.797612][T17390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.822665][T17390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.896526][T17390] vlan2: left promiscuous mode [ 427.901397][T17390] bridge0: left promiscuous mode [ 427.982369][ T7923] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 428.005654][ T7923] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.031673][ T7923] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 428.051286][ T7923] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.111468][T17419] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 428.116190][T17412] bridge1: entered promiscuous mode [ 428.128408][T17412] bridge1: entered allmulticast mode [ 428.139338][T17412] team0: Port device bridge1 added [ 428.147790][ T7923] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 428.160210][ T7923] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.173709][ T7923] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 428.183540][ T7923] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.256419][T17430] __nla_validate_parse: 10 callbacks suppressed [ 428.256442][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 428.278326][T17419] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 428.373825][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 428.413643][T17431] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3259'. [ 428.425693][ T5145] Bluetooth: hci2: command tx timeout [ 428.507609][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3262'. [ 428.530035][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 428.547313][T17426] syzkaller0: entered promiscuous mode [ 428.552954][T17426] syzkaller0: entered allmulticast mode [ 430.411635][T17448] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 430.420125][T17448] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 430.468382][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3262'. [ 430.499500][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 431.364035][T17436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.570775][T17511] syzkaller1: entered promiscuous mode [ 431.586716][T17511] syzkaller1: entered allmulticast mode [ 431.677928][T17514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.699663][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 431.849995][T17531] netlink: zone id is out of range [ 431.856760][T17531] netlink: zone id is out of range [ 431.863886][T17531] netlink: zone id is out of range [ 431.874367][T17531] netlink: zone id is out of range [ 431.881211][T17531] netlink: zone id is out of range [ 431.887163][T17531] netlink: zone id is out of range [ 431.892323][T17531] netlink: zone id is out of range [ 431.898810][T17531] netlink: zone id is out of range [ 431.904135][T17531] netlink: zone id is out of range [ 431.918483][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'. [ 431.930048][T17531] netlink: zone id is out of range [ 431.936684][T17535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3285'. [ 432.025864][T17540] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 432.199621][T17554] macsec1: entered promiscuous mode [ 432.343689][T17562] nftables ruleset with unbound set [ 432.984459][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 432.992559][ C1] lec:lec_tx_timeout: lec0 [ 432.998898][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.462744][T17651] netlink: 'syz.4.3317': attribute type 11 has an invalid length. [ 433.478894][T17651] __nla_validate_parse: 3 callbacks suppressed [ 433.478914][T17651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3317'. [ 433.537055][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3317'. [ 433.619968][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 433.938838][T17678] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 434.153782][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 434.316398][T17695] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 434.366281][T17700] netdevsim netdevsim2 : renamed from netdevsim0 [ 434.426392][T17703] ip6gre1: entered allmulticast mode [ 434.670576][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.684178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.847670][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 434.970347][T17742] syz.3.3341: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 435.023507][T17742] CPU: 0 UID: 0 PID: 17742 Comm: syz.3.3341 Not tainted syzkaller #0 PREEMPT(full) [ 435.023544][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.023567][T17742] Call Trace: [ 435.023599][T17742] [ 435.023617][T17742] dump_stack_lvl+0xe8/0x150 [ 435.023799][T17742] warn_alloc+0x249/0x340 [ 435.023861][T17742] ? stack_trace_save+0xa9/0x100 [ 435.023948][T17742] ? __pfx_warn_alloc+0x10/0x10 [ 435.023984][T17742] ? kasan_save_track+0x4f/0x80 [ 435.024019][T17742] ? kasan_save_track+0x3e/0x80 [ 435.024040][T17742] ? __kasan_kmalloc+0x93/0xb0 [ 435.024064][T17742] ? __kmalloc_cache_noprof+0x31c/0x660 [ 435.024087][T17742] ? xskq_create+0x56/0x170 [ 435.024196][T17742] ? xsk_setsockopt+0x54c/0x990 [ 435.024232][T17742] ? do_sock_setsockopt+0x17c/0x1b0 [ 435.024324][T17742] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 435.024357][T17742] ? do_syscall_64+0x14d/0xf80 [ 435.024418][T17742] __vmalloc_node_range_noprof+0x132/0x1730 [ 435.024475][T17742] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.024509][T17742] ? __kasan_kmalloc+0x93/0xb0 [ 435.024543][T17742] vmalloc_user_noprof+0xad/0xe0 [ 435.024566][T17742] ? xskq_create+0xbf/0x170 [ 435.024620][T17742] xskq_create+0xbf/0x170 [ 435.024656][T17742] xsk_init_queue+0x8a/0xe0 [ 435.024689][T17742] xsk_setsockopt+0x54c/0x990 [ 435.024721][T17742] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.024748][T17742] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.024860][T17742] ? aa_sock_opt_perm+0xff/0x1a0 [ 435.024917][T17742] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 435.024960][T17742] ? __pfx_xsk_setsockopt+0x10/0x10 [ 435.024993][T17742] do_sock_setsockopt+0x17c/0x1b0 [ 435.025034][T17742] __x64_sys_setsockopt+0x13d/0x1b0 [ 435.025076][T17742] do_syscall_64+0x14d/0xf80 [ 435.025097][T17742] ? trace_irq_disable+0x3b/0x150 [ 435.025145][T17742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.025184][T17742] ? clear_bhb_loop+0x40/0x90 [ 435.025220][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.025249][T17742] RIP: 0033:0x7fabf5f9c799 [ 435.025302][T17742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.025324][T17742] RSP: 002b:00007fabf6dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.025379][T17742] RAX: ffffffffffffffda RBX: 00007fabf6216090 RCX: 00007fabf5f9c799 [ 435.025397][T17742] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 435.025410][T17742] RBP: 00007fabf6032c99 R08: 0000000000000004 R09: 0000000000000000 [ 435.025426][T17742] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.025440][T17742] R13: 00007fabf6216128 R14: 00007fabf6216090 R15: 00007ffd72141af8 [ 435.025477][T17742] [ 435.303259][T17742] Mem-Info: [ 435.411896][T17742] active_anon:7699 inactive_anon:0 isolated_anon:0 [ 435.411896][T17742] active_file:3078 inactive_file:40071 isolated_file:0 [ 435.411896][T17742] unevictable:768 dirty:109 writeback:0 [ 435.411896][T17742] slab_reclaimable:12411 slab_unreclaimable:116937 [ 435.411896][T17742] mapped:30963 shmem:2933 pagetables:1415 [ 435.411896][T17742] sec_pagetables:0 bounce:0 [ 435.411896][T17742] kernel_misc_reclaimable:0 [ 435.411896][T17742] free:1303062 free_pcp:9236 free_cma:0 [ 435.580301][T17742] Node 0 active_anon:39896kB inactive_anon:0kB active_file:12312kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132752kB dirty:432kB writeback:0kB shmem:19096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15836kB pagetables:5560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.619118][T17742] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.653745][T17742] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.695323][T17742] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 435.701455][T17742] Node 0 DMA32 free:1265160kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42296kB inactive_anon:0kB active_file:12312kB inactive_file:160084kB unevictable:1536kB writepending:432kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:30472kB local_pcp:19212kB free_cma:0kB [ 435.737717][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 435.760639][T17742] lowmem_reserve[]: 0 0 0 0 0 [ 435.765632][T17742] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.798974][T17742] lowmem_reserve[]: 0 0 0 0 0 [ 435.803816][T17742] Node 1 Normal free:3925228kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:0kB free_cma:0kB [ 435.858208][T17742] lowmem_reserve[]: 0 0 0 0 0 [ 435.914186][T17742] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.927539][T17742] Node 0 DMA32: 6463*4kB (UE) 4037*8kB (U) 1349*16kB (UME) 2*32kB (UE) 14*64kB (UM) 241*128kB (UM) 261*256kB (UM) 189*512kB (UM) 126*1024kB (UM) 83*2048kB (UME) 168*4096kB (M) = 1262260kB [ 435.949746][T17742] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.035141][T17742] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 957*4096kB (M) = 3925228kB [ 436.104963][T17742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.148732][T17742] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.171327][T17742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.189341][T17742] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.219312][T17742] 49526 total pagecache pages [ 436.224079][T17742] 0 pages in swap cache [ 436.254741][T17742] Free swap = 124996kB [ 436.264901][T17742] Total swap = 124996kB [ 436.279435][T17742] 2097051 pages RAM [ 436.283310][T17742] 0 pages HighMem/MovableOnly [ 436.304289][T17742] 427026 pages reserved [ 436.316310][T17742] 0 pages cma reserved [ 436.342011][T17772] ipvlan2: entered allmulticast mode [ 436.373761][T17772] batadv_slave_1: entered allmulticast mode [ 436.405811][T17772] batman_adv: batadv0: Adding interface: ipvlan2 [ 436.436870][T17772] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.473100][T17772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.485487][T17772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.497423][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 436.516439][T17772] batman_adv: batadv0: Interface activated: ipvlan2 [ 436.563494][T17783] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3355'. [ 436.906513][ T7924] net_ratelimit: 134 callbacks suppressed [ 436.906537][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.921810][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.932311][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.987211][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.062448][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3361'. [ 437.087536][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3361'. [ 437.136587][T17819] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 437.529907][T17843] syzkaller0: entered promiscuous mode [ 437.540657][T17843] syzkaller0: entered allmulticast mode [ 437.552284][T17843] tc action pedit offset must be on 32 bit boundaries [ 437.570766][T17845] netlink: 'syz.3.3372': attribute type 11 has an invalid length. [ 437.772820][T17860] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 437.863774][T17862] netlink: 'syz.1.3377': attribute type 2 has an invalid length. [ 437.945009][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.024633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 438.032747][ C1] lec:lec_tx_timeout: lec0 [ 438.037970][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.162857][T17881] netlink: 'syz.0.3384': attribute type 4 has an invalid length. [ 438.267945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.413929][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.435300][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.443848][T17895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.455380][T17892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.830839][T17909] __nla_validate_parse: 3 callbacks suppressed [ 438.830865][T17909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3394'. [ 439.189876][T17924] x_tables: unsorted underflow at hook 4 [ 439.207434][T17922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3397'. [ 439.216997][T17922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3397'. [ 439.312536][T17921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3400'. [ 439.353519][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 439.406216][T17935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3405'. [ 439.432445][T17936] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3400'. [ 439.659510][T17947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3407'. [ 439.827333][T17958] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3411'. [ 440.188934][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.221559][T17988] sctp: [Deprecated]: syz.0.3422 (pid 17988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.221559][T17988] Use struct sctp_sack_info instead [ 440.302661][T17990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3421'. [ 440.334196][T17982] erspan0: entered allmulticast mode [ 440.712096][T18009] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 440.770505][T18014] tipc: Failed to remove unknown binding: 66,1,1/0:3904864815/3904864817 [ 440.913063][T18022] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 440.972801][T18022] bond3: entered promiscuous mode [ 441.003174][T18022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.098088][T18036] netlink: 'syz.0.3436': attribute type 4 has an invalid length. [ 441.111394][T18022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.146635][T18022] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 441.158412][T18022] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 441.175394][T18022] bond3: (slave vti0): making interface the new active one [ 441.182943][T18022] vti0: entered promiscuous mode [ 441.190864][T18022] bond3: (slave vti0): Enslaving as an active interface with an up link [ 441.310060][T18044] bond3: option xmit_hash_policy: invalid value (64) [ 441.326769][T18044] bond3 (unregistering): Released all slaves [ 441.669210][T18069] IPv6: sit1: Disabled Multicast RS [ 441.676884][T18069] sit1: entered allmulticast mode [ 441.781177][T18070] batman_adv: batadv0: Adding interface: dummy0 [ 441.803899][T18070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.848638][T18070] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 442.042687][T18087] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 442.076964][T18091] Bluetooth: MGMT ver 1.23 [ 442.105235][ T7924] net_ratelimit: 59 callbacks suppressed [ 442.105275][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.120389][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.128582][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.138217][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.152677][T18095] netlink: 'syz.0.3456': attribute type 1 has an invalid length. [ 442.224729][T18099] openvswitch: netlink: Missing valid actions attribute. [ 442.240688][T18099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.303669][T18094] bond0: entered promiscuous mode [ 442.749732][T18135] syzkaller1: entered promiscuous mode [ 442.763189][T18135] syzkaller1: entered allmulticast mode [ 443.044451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.052706][ C1] lec:lec_tx_timeout: lec0 [ 443.057482][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.104767][T18147] bond3: entered allmulticast mode [ 443.126699][T18151] bridge3: entered promiscuous mode [ 443.132194][T18151] bridge3: entered allmulticast mode [ 443.144324][T18151] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 443.229814][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.355325][T18162] netlink: 'syz.1.3476': attribute type 2 has an invalid length. [ 443.379699][T18162] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 443.439209][T18162] syz_tun: entered allmulticast mode [ 443.491711][T18160] syz_tun: left allmulticast mode [ 443.667012][T18174] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 443.759438][T18176] bridge4: entered promiscuous mode [ 443.832788][T18176] bridge4: entered allmulticast mode [ 443.950344][T18186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.959508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.104899][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 444.104899][ T5145] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 444.120020][T18198] __nla_validate_parse: 11 callbacks suppressed [ 444.120044][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 444.159617][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 444.177032][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 444.206099][T18198] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 444.268185][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.288301][T18197] lo speed is unknown, defaulting to 1000 [ 444.398972][T18206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3490'. [ 444.417721][T18206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3490'. [ 444.499308][T18212] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3491'. [ 444.518391][T18212] netlink: 'syz.1.3491': attribute type 4 has an invalid length. [ 444.885204][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 444.901511][T18227] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 444.935576][T18227] bond5: entered promiscuous mode [ 444.941357][T18227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.966644][T18227] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.981565][T18227] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 444.996408][T18227] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 445.036373][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3496'. [ 445.876653][T18261] delete_channel: no stack [ 446.040678][T18267] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3508'. [ 446.066852][T13345] IPVS: starting estimator thread 0... [ 446.178125][T18272] IPVS: using max 33 ests per chain, 79200 per kthread [ 446.329037][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 446.383017][T18283] netlink: 'syz.0.3512': attribute type 16 has an invalid length. [ 446.421305][T18283] netlink: 'syz.0.3512': attribute type 17 has an invalid length. [ 446.748801][T18300] netlink: 'syz.1.3519': attribute type 17 has an invalid length. [ 446.956996][T18309] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 446.971759][T18313] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 446.984622][T18309] netlink: 'syz.4.3522': attribute type 2 has an invalid length. [ 447.045642][T18315] x_tables: duplicate entry at hook 3 [ 447.233966][ T12] net_ratelimit: 9 callbacks suppressed [ 447.233989][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.250821][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.260806][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.347639][T18330] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 447.377472][T18330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.395653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.428743][T18333] validate_nla: 3 callbacks suppressed [ 447.428764][T18333] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 447.678857][T18352] tap0: tun_chr_ioctl cmd 1074025678 [ 447.684235][T18352] tap0: group set to 0 [ 447.936440][T18360] SET target dimension over the limit! [ 447.936451][T18361] SET target dimension over the limit! [ 447.953044][T18363] tap0: tun_chr_ioctl cmd 1074025678 [ 447.969444][T18363] tap0: group set to 0 [ 448.074473][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 448.082607][ C1] lec:lec_tx_timeout: lec0 [ 448.087225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 448.344686][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.476631][T18369] syzkaller1: entered promiscuous mode [ 448.482167][T18369] syzkaller1: entered allmulticast mode [ 448.505795][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.856222][T18390] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 449.097448][T18404] ip6t_REJECT: ECHOREPLY is not supported [ 449.214930][T18412] syzkaller1: entered allmulticast mode [ 449.280946][T18416] netlink: 'syz.2.3554': attribute type 9 has an invalid length. [ 449.289136][T18416] netlink: 'syz.2.3554': attribute type 11 has an invalid length. [ 449.301169][T18416] netlink: 'syz.2.3554': attribute type 12 has an invalid length. [ 449.311386][T18416] __nla_validate_parse: 11 callbacks suppressed [ 449.311407][T18416] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3554'. [ 449.320038][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'. [ 449.384992][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.407099][T18418] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 449.497018][T18422] netlink: 'syz.0.3558': attribute type 1 has an invalid length. [ 449.715755][T18427] bond4: entered allmulticast mode [ 449.749156][T18428] bridge5: entered promiscuous mode [ 449.756520][T18428] bridge5: entered allmulticast mode [ 449.769429][T18428] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 449.913585][T18449] syzkaller0: entered promiscuous mode [ 449.919493][T18451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3564'. [ 449.929720][T18449] syzkaller0: entered allmulticast mode [ 449.935583][T18451] netlink: 'syz.4.3564': attribute type 7 has an invalid length. [ 449.935606][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3564'. [ 450.021216][T18459] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3565'. [ 450.343403][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 450.965325][T18519] netlink: 'syz.4.3585': attribute type 2 has an invalid length. [ 451.062516][T18527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3587'. [ 451.131211][T18527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3587'. [ 451.152811][T18527] gretap0: entered promiscuous mode [ 451.161066][T18527] erspan0: entered promiscuous mode [ 451.172135][T18527] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 451.325440][T18548] netlink: 'syz.2.3589': attribute type 10 has an invalid length. [ 451.400483][T18548] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 451.509271][T18556] Bluetooth: MGMT ver 1.23 [ 451.535224][T18556] netlink: 'syz.0.3592': attribute type 24 has an invalid length. [ 451.592759][T18564] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 451.765219][T18564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.899066][T18578] veth0_macvtap: left promiscuous mode [ 451.902604][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3599'. [ 451.915594][T18583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3599'. [ 451.939097][T18578] macvtap0: entered allmulticast mode [ 451.968229][T18578] macvtap0: refused to change device tx_queue_len [ 452.286828][T18605] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20000 [ 452.349062][ T7926] net_ratelimit: 7 callbacks suppressed [ 452.349080][ T7926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.364062][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.377220][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.473416][T18616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 452.507242][T18623] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 452.514295][T18620] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 452.825275][T18646] openvswitch: netlink: Missing valid actions attribute. [ 452.832643][T18646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.064526][T18602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.096977][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.105098][ C1] lec:lec_tx_timeout: lec0 [ 453.110864][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.366118][T18659] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 453.477412][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.510741][T18673] syzkaller0: entered promiscuous mode [ 453.519091][T18673] syzkaller0: entered allmulticast mode [ 453.640795][T18672] delete_channel: no stack [ 454.209789][T18722] validate_nla: 3 callbacks suppressed [ 454.209809][T18722] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 454.240538][T18722] netlink: 'syz.2.3640': attribute type 18 has an invalid length. [ 454.270306][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.424229][T18727] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.443086][T18727] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.450389][T18727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.471028][T18732] netlink: 'syz.2.3644': attribute type 9 has an invalid length. [ 454.506475][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.685743][T18746] dvmrp0: entered allmulticast mode [ 454.809026][T18753] __nla_validate_parse: 13 callbacks suppressed [ 454.809083][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'. [ 454.921601][T18769] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3654'. [ 455.007890][T18769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 455.077498][T18769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 455.117070][T18779] 0: reclassify loop, rule prio 0, protocol 800 [ 455.364049][T18792] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.547531][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.763393][T18827] bond5: (slave vlan0): Enslaving as a backup interface with an up link [ 455.891327][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 455.908639][T18835] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3668'. [ 455.951964][T18835] vlan3: entered allmulticast mode [ 455.966002][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3667'. [ 456.005126][T18835] gretap0: entered allmulticast mode [ 456.045383][T18844] netlink: 'syz.4.3670': attribute type 2 has an invalid length. [ 456.384044][T18862] xt_socket: unknown flags 0x50 [ 456.395632][T18864] netlink: 'syz.2.3676': attribute type 10 has an invalid length. [ 456.408686][T18864] team0: Device vxcan1 is of different type [ 457.066711][T18907] netem: incorrect ge model size [ 457.072200][T18907] netem: change failed [ 457.257561][T18913] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.271926][T18913] bridge_slave_0 (unregistering): left allmulticast mode [ 457.279473][T18913] bridge_slave_0 (unregistering): left promiscuous mode [ 457.294942][T18913] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.626181][T13345] net_ratelimit: 11 callbacks suppressed [ 457.626203][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.107074][ T7921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.115670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.124277][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.132502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 458.140642][ C1] lec:lec_tx_timeout: lec0 [ 458.145719][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.150047][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.229124][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.302723][T18862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.315496][T18891] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3680'. [ 459.528398][T18923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3690'. [ 459.650791][T18930] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 459.660938][T18930] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 459.730005][T18936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.741254][T18936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.752400][T18936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 459.766620][T18936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.798047][T18936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.809260][T18936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.991932][T18942] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.002090][ T5896] IPVS: starting estimator thread 0... [ 460.094647][T18948] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.121190][T18954] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3700'. [ 460.131270][T18954] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3700'. [ 460.264982][T13680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.326965][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 460.371764][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.498762][T18980] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 460.552728][T18974] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3707'. [ 460.600061][T18980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.681853][T18982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.691037][T18982] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 460.709644][T18982] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 460.727248][T18988] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 460.826082][T18980] veth3: entered promiscuous mode [ 460.847557][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.856552][T18988] bridge_slave_1: left allmulticast mode [ 460.867043][T18988] bridge_slave_1: left promiscuous mode [ 460.873406][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.903194][T18988] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 460.943211][T18996] syzkaller0: entered promiscuous mode [ 460.949962][T18996] syzkaller0: entered allmulticast mode [ 461.204103][T19009] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 461.246903][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'. [ 461.285340][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'. [ 461.316896][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.480999][T19009] bond3: entered promiscuous mode [ 461.491259][T19009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.546963][T19014] bond3: (slave bridge3): making interface the new active one [ 461.558699][T19014] bridge3: entered promiscuous mode [ 461.568723][T19014] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 461.652712][T19013] : renamed from hsr0 (while UP) [ 461.749528][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3725'. [ 462.122514][T19060] syzkaller0: entered promiscuous mode [ 462.139944][T19060] syzkaller0: entered allmulticast mode [ 462.171366][T19060] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3731'. [ 462.361433][T19079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3738'. [ 462.419235][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3738'. [ 462.610497][T19093] xt_bpf: check failed: parse error [ 462.777886][T19103] netlink: 'syz.0.3745': attribute type 2 has an invalid length. [ 462.798025][T19103] v: entered promiscuous mode [ 462.953250][T19116] net_ratelimit: 14 callbacks suppressed [ 462.953271][T19116] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 463.154671][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 463.162775][ C1] lec:lec_tx_timeout: lec0 [ 463.168128][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.389157][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.397350][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.506430][T19132] bond7 (unregistering): Released all slaves [ 463.983300][T19154] veth3: entered allmulticast mode [ 464.252801][T19178] netlink: 'syz.0.3770': attribute type 1 has an invalid length. [ 464.343843][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.369854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.423677][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.452990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.475224][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.490525][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.499476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.779556][T19209] netlink: 'syz.0.3780': attribute type 12 has an invalid length. [ 464.794278][T19209] netlink: 'syz.0.3780': attribute type 11 has an invalid length. [ 464.830676][T19209] IPVS: Error connecting to the multicast addr [ 464.889934][T19211] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 464.907114][T19211] bond4: entered promiscuous mode [ 464.912215][T19211] bond4: entered allmulticast mode [ 464.922088][T19211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.149105][T19228] __nla_validate_parse: 11 callbacks suppressed [ 465.149127][T19228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3786'. [ 465.173833][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 465.190546][T19230] netlink: 'syz.4.3788': attribute type 1 has an invalid length. [ 465.200548][T19230] netlink: 'syz.4.3788': attribute type 21 has an invalid length. [ 465.208670][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 465.219073][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 465.268997][T19232] geneve2: entered promiscuous mode [ 465.280339][T19232] geneve2: entered allmulticast mode [ 465.299352][ T7921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.307912][ T7921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.323352][T19230] netlink: 'syz.4.3788': attribute type 21 has an invalid length. [ 465.334029][ T7921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.354764][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 465.354994][ T7921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.600902][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'. [ 465.853816][T19266] syzkaller0: entered promiscuous mode [ 465.859631][T19266] syzkaller0: entered allmulticast mode [ 467.608469][T19282] mac80211_hwsim hwsim23 syzkaller0: Caught tx_queue_len zero misconfig [ 467.678504][T19289] erspan0: left allmulticast mode [ 467.783932][T19293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3804'. [ 467.821545][T19293] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3804'. [ 467.854961][T19293] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3804'. [ 467.998140][T19302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3807'. [ 468.029264][T19295] netlink: 'syz.3.3805': attribute type 13 has an invalid length. [ 468.119614][T19312] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.138146][T19295] bond0: left promiscuous mode [ 468.143904][T19295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.153543][T19312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.160920][T19312] IPv6: NLM_F_CREATE should be set when creating new route [ 468.174777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 468.182874][ C1] lec:lec_tx_timeout: lec0 [ 468.194552][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.214333][T19295] net_ratelimit: 9 callbacks suppressed [ 468.214346][T19295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.224855][T19312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.347717][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.665219][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.686715][T19343] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 468.744734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.780867][T19341] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.821937][T19341] bond6: (slave lo): Enslaving as an active interface with an up link [ 468.876954][T19341] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.964653][T19358] netlink: 'syz.4.3824': attribute type 12 has an invalid length. [ 469.705923][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.801257][T19419] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 469.985694][T19425] netlink: 'syz.2.3840': attribute type 1 has an invalid length. [ 470.077789][T19425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.141162][T19427] bond4: (slave veth7): Enslaving as an active interface with a down link [ 470.172976][T19425] netlink: 'syz.2.3840': attribute type 1 has an invalid length. [ 470.180869][T19425] __nla_validate_parse: 7 callbacks suppressed [ 470.180886][T19425] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3840'. [ 470.214272][T19425] macvlan2: entered promiscuous mode [ 470.220984][T19425] macvlan2: entered allmulticast mode [ 470.239183][T19425] bond4: entered promiscuous mode [ 470.247161][T19425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.250696][T19435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3842'. [ 470.270349][T19425] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 470.281387][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 470.305759][T19425] bond4: left promiscuous mode [ 470.340017][T19439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.348744][T19439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.357019][T19439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.365245][T19439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.405052][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 470.415402][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 470.427658][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 470.711849][T19448] xt_hashlimit: max too large, truncated to 1048576 [ 470.755861][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 470.765783][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3846'. [ 470.831695][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'. [ 471.485573][T19479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3854'. [ 471.649366][T19488] netlink: 'syz.2.3857': attribute type 17 has an invalid length. [ 472.079534][T19514] syzkaller1: entered promiscuous mode [ 472.120220][T19514] syzkaller1: entered allmulticast mode [ 472.349037][T19524] netlink: 'syz.0.3866': attribute type 12 has an invalid length. [ 472.566611][T19535] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 472.655287][T19535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.668618][T19537] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 472.730628][T19537] bond5: entered allmulticast mode [ 472.795459][T19535] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 472.817482][T19539] netlink: 'syz.0.3872': attribute type 1 has an invalid length. [ 473.204748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 473.212835][ C1] lec:lec_tx_timeout: lec0 [ 473.217675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.624945][T13338] net_ratelimit: 203 callbacks suppressed [ 473.624968][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.866897][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.373832][T19627] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 474.604908][T19636] netlink: 'syz.0.3897': attribute type 32 has an invalid length. [ 474.820121][T19642] netlink: 'syz.3.3898': attribute type 2 has an invalid length. [ 474.861483][T19642] 9: entered promiscuous mode [ 474.883251][T19647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.915390][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.035776][T19650] xt_hashlimit: max too large, truncated to 1048576 [ 475.464862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.473836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.482310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.772378][T19682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.780857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.806502][T19681] gtp0: entered promiscuous mode [ 475.811964][T19681] gtp0: entered allmulticast mode [ 475.826420][T19682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.834812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.058311][T19687] __nla_validate_parse: 11 callbacks suppressed [ 476.058331][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 476.133473][T19692] tipc: Started in network mode [ 476.138824][T19692] tipc: Node identity e0000001, cluster identity 4711 [ 476.154943][T19692] tipc: Enabling of bearer rejected, failed to enable media [ 476.380653][T19705] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3918'. [ 476.412535][T19706] tap0: tun_chr_ioctl cmd 2148553947 [ 476.484066][T19706] syzkaller1: entered allmulticast mode [ 476.526004][T19710] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3918'. [ 476.543322][T19713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3921'. [ 476.558024][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3919'. [ 476.583986][T19715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3919'. [ 476.754018][T19719] netlink: 'syz.0.3922': attribute type 58 has an invalid length. [ 476.762393][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3922'. [ 477.008466][T19725] bond7 (unregistering): Released all slaves [ 477.407933][T19752] kthread_run failed with err -4 [ 477.862627][T19777] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3936'. [ 477.922831][T19777] netlink: 'syz.3.3936': attribute type 9 has an invalid length. [ 477.988809][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 478.292114][T19793] netlink: 'syz.2.3941': attribute type 2 has an invalid length. [ 478.330347][T19796] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3942'. [ 478.437706][T19800] bond0: Caught tx_queue_len zero misconfig [ 479.032061][T19833] syzkaller0: entered promiscuous mode [ 479.037804][T19833] syzkaller0: entered allmulticast mode [ 479.067791][ T5910] net_ratelimit: 187 callbacks suppressed [ 479.067813][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.144790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.216455][T19847] x_tables: duplicate underflow at hook 1 [ 479.225141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 479.233224][ C1] lec:lec_tx_timeout: lec0 [ 479.239239][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.506225][T19841] "syz.2.3952" (19841) uses obsolete ecb(arc4) skcipher [ 479.705117][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.722016][T19865] lo: Caught tx_queue_len zero misconfig [ 479.881735][T19874] bridge_slave_1: left allmulticast mode [ 479.889846][T19874] bridge_slave_1: left promiscuous mode [ 479.923145][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.959906][T19874] bridge_slave_0: left allmulticast mode [ 479.966160][T19874] bridge_slave_0: left promiscuous mode [ 479.972098][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.106983][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.146231][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.249881][T19911] __nla_validate_parse: 3 callbacks suppressed [ 481.249903][T19911] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3968'. [ 481.455360][T19925] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3972'. [ 481.471522][T19924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.591236][T19929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3973'. [ 481.710564][T19941] netlink: 'syz.1.3975': attribute type 11 has an invalid length. [ 481.764635][T19941] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3975'. [ 481.849960][T19948] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 482.011593][T19951] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 482.095620][ T5145] Bluetooth: hci2: link tx timeout [ 482.101398][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.115066][ T5145] Bluetooth: hci2: link tx timeout [ 482.120245][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.131770][ T5145] Bluetooth: hci2: link tx timeout [ 482.138376][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.147250][ T5145] Bluetooth: hci2: link tx timeout [ 482.152410][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.163126][ T5145] Bluetooth: hci2: link tx timeout [ 482.169092][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.176968][ T5145] Bluetooth: hci2: link tx timeout [ 482.182126][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.191047][ T5145] Bluetooth: hci2: link tx timeout [ 482.196480][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.204301][ T5145] Bluetooth: hci2: link tx timeout [ 482.206414][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.210072][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.290035][ T5145] Bluetooth: hci2: link tx timeout [ 482.295287][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.302975][ T5145] Bluetooth: hci2: link tx timeout [ 482.308263][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.316245][ T5145] Bluetooth: hci2: link tx timeout [ 482.321410][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.333935][ T5145] Bluetooth: hci2: link tx timeout [ 482.340153][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.351180][ T5145] Bluetooth: hci2: link tx timeout [ 482.356466][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.364148][ T5145] Bluetooth: hci2: link tx timeout [ 482.369393][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.377279][ T5145] Bluetooth: hci2: link tx timeout [ 482.382465][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.390710][ T5145] Bluetooth: hci2: link tx timeout [ 482.397339][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.405124][ T5145] Bluetooth: hci2: link tx timeout [ 482.410458][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.418220][ T5145] Bluetooth: hci2: link tx timeout [ 482.423378][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.436562][ T5145] Bluetooth: hci2: link tx timeout [ 482.441743][ T5145] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.449514][ T5145] Bluetooth: hci2: link tx timeout [ 482.454795][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 482.538830][T19951] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.587660][T19964] lo speed is unknown, defaulting to 1000 [ 482.602945][T19975] netlink: 'syz.2.3983': attribute type 5 has an invalid length. [ 482.757277][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.880582][T19985] netlink: 'syz.0.3984': attribute type 10 has an invalid length. [ 482.928839][T19985] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3984'. [ 483.234679][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.273954][T19996] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3988'. [ 484.121874][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.185725][ T5145] Bluetooth: hci2: command 0x0401 tx timeout [ 484.210635][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.265684][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.305420][T20055] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 484.313232][T20055] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4001'. [ 484.317637][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.368141][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.404685][T20055] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 484.421554][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.424189][T20055] netlink: 'syz.2.4001': attribute type 8 has an invalid length. [ 484.457846][T20050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.465272][T20059] netlink: 'syz.1.4003': attribute type 16 has an invalid length. [ 484.478003][T20060] netlink: 'syz.3.4002': attribute type 9 has an invalid length. [ 484.486496][T20055] netlink: 606 bytes leftover after parsing attributes in process `syz.2.4001'. [ 484.505047][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4003'. [ 484.514908][T20055] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4001'. [ 484.554045][T20049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.827719][T20075] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 484.984437][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 484.992584][ C1] lec:lec_tx_timeout: lec0 [ 484.999620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.149832][T20100] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 485.307705][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.435406][T20096] team0: Caught tx_queue_len zero misconfig [ 485.441750][T20096] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 485.451631][T20100] tipc: Started in network mode [ 485.484685][T20100] tipc: Node identity 080211000001, cluster identity 4711 [ 485.514762][T20100] tipc: Enabled bearer , priority 0 [ 485.624756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.272245][T20131] tipc: Enabling of bearer rejected, already enabled [ 486.435386][ T5145] Bluetooth: hci2: command 0x0401 tx timeout [ 486.605109][ T5975] tipc: Node number set to 134418688 [ 486.647444][T20144] __nla_validate_parse: 4 callbacks suppressed [ 486.647466][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4021'. [ 486.709647][T20149] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4021'. [ 486.739695][T20148] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4024'. [ 486.909492][T20158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4027'. [ 486.912369][T20156] syzkaller1: entered promiscuous mode [ 486.954979][T20156] syzkaller1: entered allmulticast mode [ 487.206784][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 487.216213][T20175] validate_nla: 2 callbacks suppressed [ 487.216234][T20175] netlink: 'syz.0.4030': attribute type 1 has an invalid length. [ 487.449760][T20179] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 487.544133][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4034'. [ 488.193149][T20210] veth3: entered promiscuous mode [ 488.209453][T20210] veth3: entered allmulticast mode [ 488.315683][T20218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4044'. [ 488.341267][T20218] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4044'. [ 488.372352][T20220] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4044'. [ 488.615156][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 488.640181][T20232] lo: entered allmulticast mode [ 488.652906][T20232] lo: left allmulticast mode [ 488.731974][T20232] vlan3: entered allmulticast mode [ 488.749003][T20234] sctp: [Deprecated]: syz.3.4049 (pid 20234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.749003][T20234] Use struct sctp_sack_info instead [ 488.772064][T20232] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 489.035459][T20241] xt_bpf: check failed: parse error [ 489.084220][T20248] netlink: 'syz.3.4053': attribute type 6 has an invalid length. [ 489.304936][ T24] net_ratelimit: 11 callbacks suppressed [ 489.304959][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.448711][T20266] netlink: 'syz.2.4057': attribute type 2 has an invalid length. [ 489.465922][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.509051][T20266] netlink: 'syz.2.4057': attribute type 2 has an invalid length. [ 490.024578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 490.032690][ C1] lec:lec_tx_timeout: lec0 [ 490.037654][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.131247][T20299] bond3: ARP target 1.0.0.0 is already present [ 490.139043][T20299] bond3: option arp_ip_target: invalid value (1) [ 490.148967][T20299] bond3 (unregistering): Released all slaves [ 490.264906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.379069][T20303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.421795][T20327] xt_hashlimit: size too large, truncated to 1048576 [ 490.507877][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.711660][T20337] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 490.747818][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.832025][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 490.949671][T20342] netlink: 'syz.0.4075': attribute type 11 has an invalid length. [ 491.254411][T20354] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 491.546637][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.594934][T20371] netlink: 'syz.1.4083': attribute type 1 has an invalid length. [ 491.712682][T20369] veth5: entered promiscuous mode [ 491.733636][T20369] veth5: entered allmulticast mode [ 491.812466][T20381] __nla_validate_parse: 13 callbacks suppressed [ 491.812487][T20381] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4085'. [ 491.944705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.047414][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.337923][T20398] netlink: 'syz.0.4092': attribute type 1 has an invalid length. [ 492.346947][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.503170][T20398] bond3: entered promiscuous mode [ 492.523658][T20398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.629021][T20409] macvtap1: entered allmulticast mode [ 492.707718][T20412] bond3: (slave bridge4): making interface the new active one [ 492.715678][T20412] bridge4: entered promiscuous mode [ 492.723136][T20412] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 492.990100][T20425] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4098'. [ 493.000157][T20425] xt_policy: neither incoming nor outgoing policy selected [ 493.254276][T20440] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4102'. [ 493.597596][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4106'. [ 493.643124][T20455] bond7: entered promiscuous mode [ 493.649275][T20455] bond7: entered allmulticast mode [ 493.660260][T20455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.686828][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4109'. [ 493.968455][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 494.023341][T20492] xt_cgroup: xt_cgroup: no path or classid specified [ 494.025669][T20486] xt_cgroup: xt_cgroup: no path or classid specified [ 494.365032][T20507] C: renamed from lo [ 494.374042][T20507] net_ratelimit: 2 callbacks suppressed [ 494.374061][T20507] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 494.414972][T20498] nbd2: detected capacity change from 0 to 63 [ 494.528942][T20519] xt_hashlimit: size too large, truncated to 1048576 [ 494.577371][T20527] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4126'. [ 494.588419][T20526] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.4127'. [ 494.771940][T20533] netlink: 'syz.3.4130': attribute type 21 has an invalid length. [ 494.805352][T20533] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.819301][T20533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.826628][T20533] IPv6: NLM_F_CREATE should be set when creating new route [ 494.833967][T20533] IPv6: NLM_F_CREATE should be set when creating new route [ 494.841304][T20533] IPv6: NLM_F_CREATE should be set when creating new route [ 494.891147][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4132'. [ 494.905709][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.932900][T20538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.942524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.955109][T20538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.964569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.991625][ T5832] block nbd2: Receive control failed (result -104) [ 495.002244][ T5145] block nbd2: Receive control failed (result -32) [ 495.044428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 495.052488][ C1] lec:lec_tx_timeout: lec0 [ 495.057576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.384777][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.396773][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 495.945455][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.116341][T20596] bridge0: Caught tx_queue_len zero misconfig [ 496.278660][T20598] pim6reg: entered allmulticast mode [ 496.469679][T20611] bond0: entered promiscuous mode [ 496.477765][T20611] bond_slave_0: entered promiscuous mode [ 496.485280][T20611] bond_slave_1: entered promiscuous mode [ 496.494098][T20611] bond0: left promiscuous mode [ 496.512752][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.533534][T20611] bond_slave_0: left promiscuous mode [ 496.539926][T20611] bond_slave_1: left promiscuous mode [ 496.869520][T20640] tipc: Enabled bearer , priority 0 [ 496.880483][T20645] __nla_validate_parse: 69 callbacks suppressed [ 496.880510][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 496.899549][T20645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4164'. [ 496.989225][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.010803][T20640] tipc: Disabling bearer [ 497.221874][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 497.242549][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4169'. [ 497.259363][T20660] bond8: option xmit_hash_policy: invalid value (64) [ 497.268443][T20660] bond8 (unregistering): Released all slaves [ 497.301007][T20664] [ 497.303504][T20664] ====================================================== [ 497.309750][T20671] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4169'. [ 497.310727][T20664] WARNING: possible circular locking dependency detected [ 497.326790][T20664] syzkaller #0 Not tainted [ 497.331415][T20664] ------------------------------------------------------ [ 497.338552][T20664] syz.4.4169/20664 is trying to acquire lock: [ 497.344734][T20664] ffff888033380398 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x3e0 [ 497.353714][T20664] [ 497.353714][T20664] but task is already holding lock: [ 497.361112][T20664] ffff888028593548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 497.370867][T20664] [ 497.370867][T20664] which lock already depends on the new lock. [ 497.370867][T20664] [ 497.381492][T20664] [ 497.381492][T20664] the existing dependency chain (in reverse order) is: [ 497.391501][T20664] [ 497.391501][T20664] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 497.399492][T20664] __mutex_lock+0x19f/0x1300 [ 497.404827][T20664] elevator_change+0x1b3/0x450 [ 497.410520][T20664] elevator_set_none+0xb5/0x140 [ 497.416210][T20664] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 497.422686][T20664] nbd_start_device+0x17f/0xb10 [ 497.428231][T20664] nbd_genl_connect+0x165b/0x1cf0 [ 497.433841][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 497.440055][T20664] genl_rcv_msg+0x61c/0x7a0 [ 497.445905][T20664] netlink_rcv_skb+0x232/0x4b0 [ 497.451321][T20664] genl_rcv+0x28/0x40 [ 497.455876][T20664] netlink_unicast+0x80f/0x9b0 [ 497.461214][T20664] netlink_sendmsg+0x813/0xb40 [ 497.466558][T20664] ____sys_sendmsg+0x972/0x9f0 [ 497.471980][T20664] ___sys_sendmsg+0x2a5/0x360 [ 497.477229][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.482735][T20664] do_syscall_64+0x14d/0xf80 [ 497.487891][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.494533][T20664] [ 497.494533][T20664] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 497.503216][T20664] blk_alloc_queue+0x546/0x680 [ 497.508668][T20664] __blk_mq_alloc_disk+0x197/0x390 [ 497.514438][T20664] nbd_dev_add+0x499/0xb50 [ 497.519445][T20664] nbd_init+0x168/0x1f0 [ 497.524421][T20664] do_one_initcall+0x250/0x8d0 [ 497.529815][T20664] do_initcall_level+0x104/0x190 [ 497.535397][T20664] do_initcalls+0x59/0xa0 [ 497.540312][T20664] kernel_init_freeable+0x2a6/0x3e0 [ 497.546090][T20664] kernel_init+0x1d/0x1d0 [ 497.551069][T20664] ret_from_fork+0x51e/0xb90 [ 497.556232][T20664] ret_from_fork_asm+0x1a/0x30 [ 497.561547][T20664] [ 497.561547][T20664] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 497.568788][T20664] fs_reclaim_acquire+0x71/0x100 [ 497.574287][T20664] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 497.580561][T20664] create_worker+0x113/0x7e0 [ 497.585736][T20664] workqueue_prepare_cpu+0xe4/0x170 [ 497.591476][T20664] cpuhp_invoke_callback+0x445/0x860 [ 497.597309][T20664] _cpu_up+0x2ce/0x5b0 [ 497.601921][T20664] cpu_up+0x1d2/0x220 [ 497.606454][T20664] cpuhp_bringup_mask+0xb2/0x1a0 [ 497.612032][T20664] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 497.618381][T20664] bringup_nonboot_cpus+0x17/0x30 [ 497.623965][T20664] smp_init+0x32/0x110 [ 497.628640][T20664] kernel_init_freeable+0x288/0x3e0 [ 497.634384][T20664] kernel_init+0x1d/0x1d0 [ 497.639283][T20664] ret_from_fork+0x51e/0xb90 [ 497.644421][T20664] ret_from_fork_asm+0x1a/0x30 [ 497.649747][T20664] [ 497.649747][T20664] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 497.657541][T20664] cpus_read_lock+0x42/0x160 [ 497.662678][T20664] static_key_slow_inc+0x12/0x30 [ 497.668213][T20664] nbd_genl_reconfigure+0x132f/0x1ea0 [ 497.674133][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 497.680231][T20664] genl_rcv_msg+0x61c/0x7a0 [ 497.685362][T20664] netlink_rcv_skb+0x232/0x4b0 [ 497.690712][T20664] genl_rcv+0x28/0x40 [ 497.695234][T20664] netlink_unicast+0x80f/0x9b0 [ 497.700544][T20664] netlink_sendmsg+0x813/0xb40 [ 497.706025][T20664] ____sys_sendmsg+0x972/0x9f0 [ 497.711333][T20664] ___sys_sendmsg+0x2a5/0x360 [ 497.716548][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.722021][T20664] do_syscall_64+0x14d/0xf80 [ 497.727151][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.733581][T20664] [ 497.733581][T20664] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 497.741319][T20664] __mutex_lock+0x19f/0x1300 [ 497.746450][T20664] nbd_queue_rq+0x37b/0x1100 [ 497.751586][T20664] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 497.757765][T20664] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 497.765168][T20664] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 497.771697][T20664] blk_mq_run_hw_queue+0x348/0x4f0 [ 497.777420][T20664] blk_mq_dispatch_list+0xd16/0xe10 [ 497.783157][T20664] blk_mq_flush_plug_list+0x48d/0x570 [ 497.789076][T20664] __blk_flush_plug+0x3ed/0x4d0 [ 497.794470][T20664] __submit_bio+0x28d/0x580 [ 497.799625][T20664] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 497.805821][T20664] block_read_full_folio+0x599/0x830 [ 497.811704][T20664] filemap_read_folio+0x137/0x3b0 [ 497.817275][T20664] do_read_cache_folio+0x358/0x590 [ 497.822931][T20664] read_part_sector+0xb6/0x2b0 [ 497.828313][T20664] adfspart_check_ICS+0xa5/0xa40 [ 497.833793][T20664] bdev_disk_changed+0x7ba/0x1550 [ 497.839358][T20664] blkdev_get_whole+0x380/0x510 [ 497.844812][T20664] bdev_open+0x31e/0xd30 [ 497.849594][T20664] blkdev_open+0x470/0x610 [ 497.854551][T20664] do_dentry_open+0x785/0x14e0 [ 497.859891][T20664] vfs_open+0x3b/0x340 [ 497.864536][T20664] path_openat+0x2e08/0x3860 [ 497.869703][T20664] do_file_open+0x23e/0x4a0 [ 497.874761][T20664] do_sys_openat2+0x113/0x200 [ 497.880102][T20664] __x64_sys_openat+0x138/0x170 [ 497.885511][T20664] do_syscall_64+0x14d/0xf80 [ 497.890731][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.897259][T20664] [ 497.897259][T20664] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 497.904624][T20664] __mutex_lock+0x19f/0x1300 [ 497.909774][T20664] nbd_queue_rq+0xc6/0x1100 [ 497.914929][T20664] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 497.921289][T20664] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 497.928391][T20664] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 497.935175][T20664] blk_mq_run_hw_queue+0x348/0x4f0 [ 497.940977][T20664] blk_mq_dispatch_list+0xd16/0xe10 [ 497.946726][T20664] blk_mq_flush_plug_list+0x48d/0x570 [ 497.952642][T20664] __blk_flush_plug+0x3ed/0x4d0 [ 497.958052][T20664] __submit_bio+0x28d/0x580 [ 497.963119][T20664] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 497.969306][T20664] block_read_full_folio+0x599/0x830 [ 497.975244][T20664] filemap_read_folio+0x137/0x3b0 [ 497.980867][T20664] do_read_cache_folio+0x358/0x590 [ 497.986533][T20664] read_part_sector+0xb6/0x2b0 [ 497.991902][T20664] adfspart_check_ICS+0xa5/0xa40 [ 497.997554][T20664] bdev_disk_changed+0x7ba/0x1550 [ 498.003120][T20664] blkdev_get_whole+0x380/0x510 [ 498.008508][T20664] bdev_open+0x31e/0xd30 [ 498.013539][T20664] blkdev_open+0x470/0x610 [ 498.018879][T20664] do_dentry_open+0x785/0x14e0 [ 498.024284][T20664] vfs_open+0x3b/0x340 [ 498.028931][T20664] path_openat+0x2e08/0x3860 [ 498.034071][T20664] do_file_open+0x23e/0x4a0 [ 498.039458][T20664] do_sys_openat2+0x113/0x200 [ 498.044686][T20664] __x64_sys_openat+0x138/0x170 [ 498.050085][T20664] do_syscall_64+0x14d/0xf80 [ 498.055212][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.061652][T20664] [ 498.061652][T20664] -> #0 (set->srcu){.+.+}-{0:0}: [ 498.068798][T20664] __lock_acquire+0x15a5/0x2cf0 [ 498.074204][T20664] lock_sync+0x9d/0x120 [ 498.078990][T20664] __synchronize_srcu+0xca/0x3e0 [ 498.084665][T20664] elevator_switch+0x1e8/0x7a0 [ 498.089964][T20664] elevator_change+0x2cc/0x450 [ 498.095354][T20664] elevator_set_default+0x36c/0x430 [ 498.101265][T20664] blk_register_queue+0x366/0x430 [ 498.106930][T20664] __add_disk+0x677/0xd50 [ 498.111830][T20664] add_disk_fwnode+0xfb/0x480 [ 498.117242][T20664] nbd_dev_add+0x72c/0xb50 [ 498.122388][T20664] nbd_genl_connect+0x962/0x1cf0 [ 498.128057][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 498.134370][T20664] genl_rcv_msg+0x61c/0x7a0 [ 498.139439][T20664] netlink_rcv_skb+0x232/0x4b0 [ 498.144844][T20664] genl_rcv+0x28/0x40 [ 498.149368][T20664] netlink_unicast+0x80f/0x9b0 [ 498.154681][T20664] netlink_sendmsg+0x813/0xb40 [ 498.160004][T20664] ____sys_sendmsg+0x972/0x9f0 [ 498.165441][T20664] ___sys_sendmsg+0x2a5/0x360 [ 498.170663][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.176276][T20664] do_syscall_64+0x14d/0xf80 [ 498.181417][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.187977][T20664] [ 498.187977][T20664] other info that might help us debug this: [ 498.187977][T20664] [ 498.198414][T20664] Chain exists of: [ 498.198414][T20664] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 498.198414][T20664] [ 498.212203][T20664] Possible unsafe locking scenario: [ 498.212203][T20664] [ 498.219788][T20664] CPU0 CPU1 [ 498.225179][T20664] ---- ---- [ 498.230614][T20664] lock(&q->elevator_lock); [ 498.235267][T20664] lock(&q->q_usage_counter(io)#51); [ 498.243227][T20664] lock(&q->elevator_lock); [ 498.250479][T20664] sync(set->srcu); [ 498.254406][T20664] [ 498.254406][T20664] *** DEADLOCK *** [ 498.254406][T20664] [ 498.262684][T20664] 6 locks held by syz.4.4169/20664: [ 498.267897][T20664] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.276116][T20664] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 498.285106][T20664] #2: ffff88803c2749d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 498.295514][T20664] #3: ffff8880285935d8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 498.305477][T20664] #4: ffff888028593040 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 498.316488][T20664] #5: ffff888028593548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 498.326351][T20664] [ 498.326351][T20664] stack backtrace: [ 498.332328][T20664] CPU: 1 UID: 0 PID: 20664 Comm: syz.4.4169 Not tainted syzkaller #0 PREEMPT(full) [ 498.332355][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.332367][T20664] Call Trace: [ 498.332378][T20664] [ 498.332388][T20664] dump_stack_lvl+0xe8/0x150 [ 498.332419][T20664] print_circular_bug+0x2e1/0x300 [ 498.332451][T20664] check_noncircular+0x12e/0x150 [ 498.332496][T20664] __lock_acquire+0x15a5/0x2cf0 [ 498.332540][T20664] ? check_path+0x21/0x40 [ 498.332578][T20664] ? lockdep_unlock+0x5d/0xd0 [ 498.332598][T20664] ? __lock_acquire+0x146e/0x2cf0 [ 498.332624][T20664] ? __synchronize_srcu+0xb6/0x3e0 [ 498.332646][T20664] lock_sync+0x9d/0x120 [ 498.332668][T20664] ? __synchronize_srcu+0xb6/0x3e0 [ 498.332693][T20664] __synchronize_srcu+0xca/0x3e0 [ 498.332716][T20664] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.332734][T20664] ? __pfx___synchronize_srcu+0x10/0x10 [ 498.332762][T20664] ? read_tsc+0x9/0x20 [ 498.332783][T20664] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 498.332850][T20664] ? synchronize_srcu+0x295/0x2c0 [ 498.332874][T20664] elevator_switch+0x1e8/0x7a0 [ 498.332893][T20664] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 498.332916][T20664] elevator_change+0x2cc/0x450 [ 498.332934][T20664] ? do_raw_spin_unlock+0xf5/0x210 [ 498.332955][T20664] elevator_set_default+0x36c/0x430 [ 498.332975][T20664] ? __pfx_elevator_set_default+0x10/0x10 [ 498.332998][T20664] ? disk_register_independent_access_ranges+0x2db/0x380 [ 498.333028][T20664] ? blk_crypto_sysfs_register+0x11c/0x170 [ 498.333144][T20664] blk_register_queue+0x366/0x430 [ 498.333170][T20664] __add_disk+0x677/0xd50 [ 498.333194][T20664] ? down_read+0x272/0x2e0 [ 498.333216][T20664] add_disk_fwnode+0xfb/0x480 [ 498.333243][T20664] nbd_dev_add+0x72c/0xb50 [ 498.333273][T20664] ? __pfx_nbd_dev_add+0x10/0x10 [ 498.333319][T20664] ? bpf_lsm_capable+0x9/0x20 [ 498.333345][T20664] ? security_capable+0x7e/0x2c0 [ 498.333421][T20664] ? radix_tree_lookup+0x25c/0x290 [ 498.333483][T20664] nbd_genl_connect+0x962/0x1cf0 [ 498.333517][T20664] ? __pfx_nbd_genl_connect+0x10/0x10 [ 498.333548][T20664] ? rcu_is_watching+0x15/0xb0 [ 498.333573][T20664] ? trace_kmalloc+0x2a/0x110 [ 498.333596][T20664] ? __nla_parse+0x40/0x60 [ 498.333664][T20664] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 498.333690][T20664] genl_family_rcv_msg_doit+0x22a/0x330 [ 498.333713][T20664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.333739][T20664] ? __lock_acquire+0x6b5/0x2cf0 [ 498.333765][T20664] genl_rcv_msg+0x61c/0x7a0 [ 498.333787][T20664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.333805][T20664] ? __pfx_nbd_genl_connect+0x10/0x10 [ 498.333833][T20664] ? __lock_acquire+0x6b5/0x2cf0 [ 498.333862][T20664] netlink_rcv_skb+0x232/0x4b0 [ 498.333887][T20664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.333906][T20664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.333939][T20664] ? down_read+0x272/0x2e0 [ 498.333957][T20664] ? genl_rcv+0xd/0x40 [ 498.333974][T20664] genl_rcv+0x28/0x40 [ 498.333990][T20664] netlink_unicast+0x80f/0x9b0 [ 498.334016][T20664] ? __pfx_netlink_unicast+0x10/0x10 [ 498.334039][T20664] ? netlink_sendmsg+0x650/0xb40 [ 498.334064][T20664] ? skb_put+0x11b/0x210 [ 498.334121][T20664] netlink_sendmsg+0x813/0xb40 [ 498.334151][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.334178][T20664] ? aa_sock_msg_perm+0xf1/0x1b0 [ 498.334204][T20664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.334226][T20664] ____sys_sendmsg+0x972/0x9f0 [ 498.334244][T20664] ? futex_unqueue+0x211/0x240 [ 498.334275][T20664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.334304][T20664] ? import_iovec+0x73/0xa0 [ 498.334360][T20664] ___sys_sendmsg+0x2a5/0x360 [ 498.334382][T20664] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.334405][T20664] ? futex_wait+0x29a/0x380 [ 498.334447][T20664] ? __fget_files+0x2a/0x420 [ 498.334478][T20664] ? __fget_files+0x3a0/0x420 [ 498.334515][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.334539][T20664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.334566][T20664] ? rcu_is_watching+0x15/0xb0 [ 498.334604][T20664] do_syscall_64+0x14d/0xf80 [ 498.334625][T20664] ? trace_irq_disable+0x3b/0x150 [ 498.334658][T20664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.334681][T20664] ? clear_bhb_loop+0x40/0x90 [ 498.334706][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.334729][T20664] RIP: 0033:0x7f9d9e79c799 [ 498.334752][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.334773][T20664] RSP: 002b:00007f9d9f6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.334798][T20664] RAX: ffffffffffffffda RBX: 00007f9d9ea15fa0 RCX: 00007f9d9e79c799 [ 498.334814][T20664] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 498.334828][T20664] RBP: 00007f9d9e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 498.334840][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.334851][T20664] R13: 00007f9d9ea16038 R14: 00007f9d9ea15fa0 R15: 00007ffe6b1b41b8 [ 498.334873][T20664] [ 498.835978][ T5145] Bluetooth: hci5: command 0x0406 tx timeout [ 499.008364][T10851] udevd[10851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 499.029657][T10851] udevd[10851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 499.388004][ T5975] net_ratelimit: 2 callbacks suppressed [ 499.388021][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.552452][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.864787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.064453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 500.072578][ C1] lec:lec_tx_timeout: lec0 [ 500.077624][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 500.427200][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.468086][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.626620][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627966][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.268271][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.507224][T13345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.584746][T13338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.549407][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.587300][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.084454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 505.092573][ C1] lec:lec_tx_timeout: lec0 [ 505.097304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 505.625904][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.634046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.664897][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog