last executing test programs: 4.203071871s ago: executing program 3 (id=3734): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001180)="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", 0x10c}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a98522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r1, @ANYRESOCT=r2], 0x44}}, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x8864, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x5001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002680)={'gretap0\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x700, 0x700, 0xac, 0x9, {{0xd, 0x4, 0x0, 0x0, 0xffffffffffffffb8, 0x67, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@ssrr={0x89, 0x5f, 0x5a, [@remote, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @loopback]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000002980)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002c80)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf251900000040000180080003000200000008000100", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="0800030001000000440001801400020064766d727030000000000000000000000800030001000000140002006272696467655f736c6176655f310000080003000100000008000300010000008400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e64300000000000000000000000080003000100000008000100", @ANYRESDEC, @ANYBLOB="140002006272696467655f736c6176655f310000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f7769666900080003000100000008007aaf02000000500001800800030001adef0008000100e0159447f948bc2450d17e7bb6e9bfef9fe02a6558abe75c496b78d71065cdb7080000005d6691da65d1b3294aa2a04d8b1c4009b7ca078a3257fd26a585a4058576edb2cbbb6619f3402af303fbc3e1ae5660", @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000001400020064766d72703100000000000000000000140002006d6163766c616e3000000000000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657470636930000000000000000000080003000100000008000300020000001400020064756d6d7930000000000000000000004c000180080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300010000001400020076657468315f746f5f687372000000001400020076657468315f6d61637674617000000050000180080003000200000008000100", @ANYRES32=r13, @ANYBLOB="1400020065727370616e30000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r13, @ANYBLOB], 0x278}, 0x1, 0x0, 0x0, 0x20040801}, 0x84010) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) write$bt_hci(r4, &(0x7f0000001080)=ANY=[@ANYBLOB="0142200609068e060500ea4a65594635d49c1fc23571cc65ebbb7858962593042ce5d5b1089d"], 0xa) sendmmsg$sock(r3, &(0x7f0000000f00), 0x0, 0x200088d0) socket$igmp6(0xa, 0x3, 0x2) 3.204509033s ago: executing program 0 (id=3746): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd8662", 0x15}], 0x1}, 0x0) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.094980781s ago: executing program 3 (id=3748): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x3b, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230055) close(0x3) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x4, 0x3}, {0x4, 0x4}]}]}, {0x0, [0x5f]}}, 0x0, 0x37, 0x0, 0x1}, 0x28) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x2, [{}, {}]}, 0x48) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r5, 0x20, &(0x7f0000001580)={&(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/113, 0x71}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r8) mkdirat$cgroup(r8, &(0x7f00000002c0)='syz0\x00', 0x1ff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="9f8b5c3dc5ccc227254818265889413e09cacdad22dbd59ba5cdb824c1eb064f45ea93779aa7ae91f8dd4d2d354717f07c533c2c39208535e5c0062829a82479ca9069e95383576348f118f4088ac1d4f2da4a635e3b6b8251250bffd124edfb85428c3b4e56d5662119cc2edb03c3cc748356f892ac83c57ad23dcaaaaf57afe5c16a6d8763b4ff38fb03bef82eb29d9b73c2b4b33201ad4f1dda387d9778ad84a72542ca949b7a458a4d9a29f3f3de3fd18527e50287ea03fa01d7926e885ff6ed4e05aace46bc24d40fe2aaf174fcbd5a3757fb4534b05abcae1e627651d45e1fe0c19c6b5cc7e5b8150000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44040) 2.724639659s ago: executing program 4 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x2020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x3f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.552966477s ago: executing program 0 (id=3753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000181}, 0x40000) close(0x3) 1.859491251s ago: executing program 4 (id=3754): openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xfffffa03, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f00000018c0)=""/120, 0x78}], 0x8}}], 0x1, 0x40010122, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffffc, 0x49, @mcast1, @mcast1, 0x7800, 0x7800}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@local, 0x70, r4}) ioctl$FIONCLEX(r2, 0x5450) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r5 = openat$cgroup_type(r0, &(0x7f0000001580), 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r7, &(0x7f0000000440)=0x2, 0xe4270493) write$nci(r8, 0x0, 0xffffffd1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000015c0)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0103080ac900800009000900b38f5c6e46aaa1240600"], 0xe) setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000000)=0x13, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1000, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000001940)={r5, &(0x7f0000001600)='[(\x00', 0x800, &(0x7f0000001640)={@_ha_fsid={[0x0, 0xfffffffd]}, {0x23e, 0xff70, 0x18e9, 0x200}}, 0xc, &(0x7f0000001680)={@_ha_fsid}, &(0x7f0000001800)=0xfffffff7}) 1.859118473s ago: executing program 0 (id=3755): socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid=r2}, @generic="b2"]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', r0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="23de00000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x2b, 0x80801, 0x1) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)={0x14, 0x0, 0x2, 0x2, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44018}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r6, 0x701, 0x0, 0x0, {0x2e}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c018}, 0x4008010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x2, 0x6}}}, 0x24}}, 0x4000000) sendmsg$nl_generic(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000290004002abd7000fedbdf250f000000e5d0de1d05217506a1caec0e34772a5cb3b0e52ac877da18bd312e339270fbca96b4523b7e5a17781b32735b85a95fbee7dc1bcd2d304fdf3010bed13fb36159447492b9ada2f6e39ce3ff84bc3bf69d6e2fdee73f9ff6baa8fcfedd8590a78e7a551e06919f9a0aa200209de1cf34fca3afc151997cc6ee6511defada55c38c77a918c9391107e06502f8dfb7d4e9d72f6120cdba4f0c2b1499b5b76d8873e2ffc555f7948f2f9103b719093bc1fd65151fa61adb000b97b87c027d59f1f82d11c08075503c2885f68a712b5fa5c23a38fb79d062c2dd9504dff69d6215d37813c96fc93022c3ed374d7d755b95c7bb48c8b3c678a2eadd00e98091fedb7a423c56c858f62d5467f9489e8f7902e1197f3edaca90a4d00e908b9be68505a28007025f2870a9062a41764f2c74a954f3674fa511fdd9567468eb1e43e1ed99db70b8833b32168ce6f0fcd5a9ded79d0d8c36ac8639bfd7eff19b69ddd82e44c290b8533ee5efe1c9bac8d284f72d9d970c00f7001a0000000000000011008c002f6465762f6e65742f74756e00000000040009801300060072b7ce19dbcb53de3ed77844e1fd640054b24702f3beece5aee1b9777e0d0351de0fa6b9c95732f9990175b7be05a1f074bd04b3cfe1ab275aed0825000000150014006c65868b53efd1035cd1daf4cdac9e6e7d00000035006e800400548042cbdab3adf76c205d08cfb0854db46c181febb53b06be8d9e84b80bbb10bc01e756c47b8590a097ffee20a04800000000"], 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x48000) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 1.857192132s ago: executing program 2 (id=3756): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000545add3f9f4e0e73d6a0871f1789a8eb2ecfe60affa0fd043cd8957e20ba4513e8777a342aee85ab2bf542b293394b6559187d6ac446503e063515bef4d173f114d043c478232b6d95a73cd67fb780739c03a2780905b50ac355e0fc7f192bcc05d26b99c3ffa59ef4d34c6204e0f41aabfed488c7b5126e2b1cc0d889ccc20961bb2b41ca60710871366b518f72e72758177ed4a21d64b56877356fb02109bfc663f378462f49b84d1f4b571164"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000101401002dbd700001dcdf2508004b00130000000a0003"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) r6 = socket(0x2a, 0x6, 0x3) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x8}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ff80}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4048800}, 0x14) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.620031267s ago: executing program 3 (id=3758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x13, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x8001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 1.563699565s ago: executing program 2 (id=3760): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) unshare(0xa020480) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x204) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.416414347s ago: executing program 3 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) (async) 1.364075776s ago: executing program 4 (id=3762): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001f00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4048800) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x1, 0x74bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendto$packet(r0, &(0x7f0000000140)="cd96de6cec98ccae2f48e5f6934749bc29335b82d9ddbba3a3517c63dc8d5bae5aedb9de10586d3c3bb51c1c3fbc67735406087c7f4c3ce5fe014aa6b88396f950259bcedee380a6de80888ee12ea34b740f64d074660fe378203fb7d3a281ea15b7306eb6e1d151665ee259e51043ff04dcf04dff17d47fb77a87e9754a905a5b2aac2673d9ae0c22c9bdcb9c24a881023066fe4073812154db175ca48beb613b1f78b7608f6bc315544a93b1ad252705515ae1b3a34f0f5f7c657b8ccee8e93f6977d1d007", 0xc6, 0x4000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket(0x5, 0x3, 0xf5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x2, 0x5, 0x4d8, 0x220, 0xf0, 0xffffffff, 0x338, 0x338, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff, 0xffffffff], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x68, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@initdev={0xac, 0x1e, 0x2, 0x0}, @gre_key=0x5, @gre_key=0x8}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x0, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000000)={r7, r10}) 1.358505665s ago: executing program 2 (id=3763): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e297346508b851c1b95e8d06c383032313100"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000014c0)='THAWED\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000720000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f0000000080), &(0x7f0000000a00)}, 0x20) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) socket$inet6(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.174312534s ago: executing program 3 (id=3764): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000140)=@default_ap_ssid, 0x6, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) 1.028821518s ago: executing program 0 (id=3765): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket(0x2, 0x80805, 0x0) accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4018}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x4}, &(0x7f00000000c0)=0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000002000000b702000008000000b7030000feffffff85000000060000003500fcffffffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080010008500000006000000bf91000000000000b702000003000000850000002a000000b70000000005000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x14, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000600)={r5, 0x2, 0x10000, 0x7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r7) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r9, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x34}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r11) sendmsg$NFC_CMD_LLC_SET_PARAMS(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bdf000fedbdf251000000008e60100", @ANYRES32=0x0, @ANYBLOB="06001100a8050000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, &(0x7f0000000000)={0x80}) syz_emit_ethernet(0x46, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "7d52f5", 0x10, 0x11, 0x1, @remote, @local, {[], {0x4e24, 0x4e23, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000500)={0x2, 0x0, 0xfd, 0x300000, 0x7, 0x6}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, r8, 0x5, 0x0, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xc3, 0x64, 0x7}}, @ssid={0x0, 0x2, @random='|v'}]}]}, 0x24}}, 0x1) 953.536153ms ago: executing program 1 (id=3766): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000440)=0x2, 0xe4270493) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000140)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x0, 0x0, 0xffffffff, 0x250, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000080), {[{{@ipv6={@private2, @loopback, [0xff, 0xff, 0x100fffeff, 0xffffff00], [0xffffff00, 0xff, 0xff000000], 'macsec0\x00', 'pimreg0\x00', {}, {}, 0x3c, 0x2, 0x0, 0x8}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0xdbcb, 0x1, 0x0, [0xbb1a, 0x3, 0x1, 0x101, 0x20, 0x1c, 0x1c, 0x11, 0x0, 0x400, 0x2, 0x4, 0x100, 0xb65a, 0x88a1, 0x5], 0x4}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@mcast2, @ipv6=@local, @icmp_id=0x64, @gre_key=0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff00, 0xff, 0x0, 0xff], 'macvlan0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x5c, 0x10, 0x0, 0xa}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, @ipv6=@remote, @gre_key=0x9, @port=0x4e20}}}, {{@ipv6={@local, @remote, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0x72b83740acb81872, 0xffffff00], 'veth1\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2c, 0x5, 0x0, 0x1c}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x8], 0x3, 0x3}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@mcast2, @gre_key=0xd060, @gre_key=0xe4e}}}, {{@ipv6={@private0, @remote, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'bond0\x00', 'macvlan1\x00', {0xff}, {}, 0x32, 0x80, 0x0, 0x8404fd512c36228e}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x53, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 763.71251ms ago: executing program 0 (id=3767): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt(0xffffffffffffffff, 0x9, 0x1, &(0x7f0000000100)="3c4a4629d235c4ed8735b3b1b8ad5b0478f883f71bc23da054f856a6bf09e71f58ee1f180b971cddedbfddb2adea478365d1680059e18b1dc1b0a3607f8ae56842c3a53b0de26ed05213f3ead8a68e190b0febe7e7b178f9743aaf9cbd2ae79bb99be90ce35b2bf75c0a748c82b5060b0d497578dac0e287debc6815ae4b44511f45540b2af9d58b08ff56bdeec398963e15b3ce28d500f22d35cefe86854be057a318da68834f08f3e0f46742699439d3f5c5818e7f", 0xb6) 685.808115ms ago: executing program 1 (id=3768): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0xb, 0x148, 0xd8, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x215, 0x3, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0xffffff00, 'veth1_to_bridge\x00', 'nr0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x8, 0x401, 0xfe, 'snmp\x00', 'syz0\x00', {0xfffffbfffffffff8}}}}, {{@ip={@empty, @remote, 0xff000000, 0x0, 'team0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x8, 0x7, 0x7fc, '\x00', 'syz1\x00', {0xba0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @empty}}]}, 0x30}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000040)) write$cgroup_pressure(r1, &(0x7f0000000000)={'full', 0x20, 0x0, 0x20, 0xfd}, 0x2f) 674.87887ms ago: executing program 4 (id=3769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00140805df4b03df2adc426e44000098e2c6080000000000", @ANYBLOB="074617f556878f7c24a357c0f3def82d009647aa820bf110ac56d08ea0525381e82b7818c5a3dd98e279797d29c74e4ebaa2675084817da294e18a1427d797127a9db3419b2edc3bdc8151545f1f30a5d51c255c9fa62dd746be29394e33caf68c2ca8ff182b0d2deb9ec1ac28f91298dfe423f49b541d5a031ec32ddf1b2dcb102824f1a8be1851b13e5c9d1ceee73ed95fa406a1dfe405", @ANYRES32, @ANYBLOB="000000000000000200000000007c4980e775cb73f4ffd30a000000000000000040000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000c6f184ceaeff939d0fbf679e85fb3be82d0a7a087a7401dd9bdc7b63cec2572aaf5f51458bfdd8710f154c1fd41bae90b0972f52117ddf92f92454720c287a447c25859024368db2518c460b6a95f6850ed8f78fad02fca7a6f5d61e2a3f63ac7741aa32e9b0f5a98c6eddf8", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, 0xfffffffffffffffc, 0x1) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'pimreg\x00'}) socket$rds(0x15, 0x5, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4f}, [@cb_func={0x18, 0x6}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000340)=""/91, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r6], &(0x7f0000000580)=[{0x4, 0x2, 0x3, 0x2}, {0x2, 0x2, 0x0, 0xb}, {0x0, 0x3, 0xd, 0x6}, {0x4, 0x5, 0x2}, {0x2, 0x4, 0xd, 0x4}], 0x10, 0xfffffffc}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000040)={0x1d, r10}, 0x10) bind$can_raw(r8, &(0x7f00000000c0)={0x1d, r9}, 0x8) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r11, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000370429bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c04de67000000500012800b000100697036746e6c000040000280140003002001000000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="0400130014000200fe"], 0x70}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004884) 641.277424ms ago: executing program 0 (id=3770): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x4001}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x24000840}, 0x4000050) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0xf}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x9c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x884}, 0x40) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, r3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340030000f50800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) getsockopt(r10, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffd14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 531.873411ms ago: executing program 1 (id=3771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x710d2}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5492}]}, 0x28}}, 0x0) 507.623989ms ago: executing program 1 (id=3772): r0 = socket(0x1f, 0x1, 0x400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa010101}, 0x0, 0x1, 0x0, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000de000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) socket$inet(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000370400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="62726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x6, 0xf2b, 0x5, 0x7, 0x3}) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x11e, 0x5, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x6) 475.901157ms ago: executing program 4 (id=3773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x2f}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x4, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d588380003c1"}]}}, {"ec03110a900ac361a4ef895e60b5497200005d8444d25e730971e6b681b9cf8527852a1d4f01c6ab2bcc"}}}}}, 0x6c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003b00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000240)=0x1, 0x4) 392.421924ms ago: executing program 2 (id=3774): close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061197c00000000009d00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 372.531392ms ago: executing program 1 (id=3775): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x2a8, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "1bede9e54307b60d4c0472b3163dfa173ef2ad078f35c5c526079e84d02c85193da65b1737566907577466ac53dfc26282909ab0e33dae62fb8a4ccabba85c6797702d0f9b762450b19c75e8b43ce0cd406bb8a6373824251273ef3532a4d5f2ab9c7aab2cb07b2a0c60e0b98e43f08002605a30420c8181350fa7285c766c426ab0287ad4a4a19928368b6014643b72674bafb1f7f13c5234f9dc7ea3108223dda14e36f8fbf452af866b8822dab17aa5b0ac42204a65da5385f7ed1812925b5d"}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "97c643ab9e926fe55a53ef3486e6e5406d3f3452fe9ea6662243ce4036e79748b7a1c6685a91a138ca9e46da180c9738fe9a61bc8bec0ac6a26985535f29f9b280e31ddd8369d3798e6a74137e8009c2c96cec47fb92eb8c6843142ac1410cda02af07784078479e0e617567cadaade655d38dd1d37e37ddecbc097176012d7213e638497870595ea93f9bc03fd663d9931adea07320250ebd611fce9764386f5671fe"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x50}, 0x24040411) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000004c0)={0x7f, 0x4, 0x6, 0x9, 0xf1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={'pimreg0\x00', {0x2, 0x4e22, @empty}}) bind$llc(0xffffffffffffffff, &(0x7f0000000540)={0x1a, 0x303, 0x97, 0x7, 0x7, 0x2, @multicast}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000580)={0x7, 0x7, 0x2}, &(0x7f00000005c0)=0x28) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x400d0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x65}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x87, 0x2, "6d117f3fa913ebfe814ac62fa49b2869bf811bcfd13b8a23f6ee06744bb7b3c3835250be66ff73cd2ccd81577a358dc8a45ea3ed601a12f9b0b0c4c217989da12bb083677157bd27476aa16d4187ee4369dbadeb739df7da8303c1090a04df45942c1f357a8f1e0a85060805588f2e57a81e4e7457413ddfa295afcfbb1027c97c266b"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000900)="a72cad9dd650fb1b61b95881e8dfdd82bd635dc1c657ca13e8b14a3997953827cefd76e9740b9f010a027402aacac446edd390b6e9b3599446f3fe49e18e689a2b4f66979ab0830348534947edb92e355fed2f1fc8d41516ab17ce4d45c3d6561f60c77ebdd53757f36f", &(0x7f0000000980)=""/186, &(0x7f0000000a40)="e92f1da179625442b7d40cdf81fd0a5d4fc989cce235bdafaa636fa249eb8a84140a79ddc42de887ec16b50c539dc4ed282906c0182128a3764726ffe829e6976d1d07be94e380782491d08d9b2ff73ac69ca1ebe4406fcbc6c35e11746148859d5d2c3a2141aeede7c1e6f76562fe9dadba403bfed904072fd222e631ddbe49c87592ef71f4d450761f988e351c0eb21d495c21b218c4980f3dff5aa10c05d73367b86c091f1c812fb2483a11a4fca3737ab8e534876205066456b7c30c667b4197792824629b851c83999d84ae1151b7136b1d48a16375", &(0x7f0000000b40)="0d713f5b9298c1ac751a6e722dfa54d45e4ac2903dbf93e2b46ba4dfdaa4db3dee843f20c0e6d08b59ad6681908b5a59d8d19dfd124fc1785edae89b8adfe1e704e2e3b90352e760a32b09af363e07b3a82cfd6ef796944a23f1af2b69d1b3455aa87c07846e44f9d8fba2451f927cbb72b79bec6aeabedc6dbd07b0ad45a6e94bc229f89b9869890105f73a1f7b8b8576aa1203743621c59d91df69f558882f277e53a6", 0xe0f, r4, 0x4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000cc0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000d00)=0x7, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000d80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000000) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x40) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r9, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4814) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r7) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xc8, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a2ae4ec9d473cfea18af36a3dc745d9a2ef1374ab1027b9420288596a5c76bee58"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "5685a574e23234a84e97362c0adeaf7fc58b711aea834d"}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa8, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004081}, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f0000002980)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002940)={&(0x7f0000001640)={0x12dc, 0xe, 0xa, 0x0, 0x70bd28, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@nested={0x28, 0x76, 0x0, 0x1, [@typed={0xc, 0x11b, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xff}, @typed={0xd, 0xed, 0x0, 0x0, @str='gcm(aes)\x00'}, @nested={0x4, 0xe0}]}, @generic="a14a3494e6fe010d319af49c4a032dae26905c140e6d24d748ac20f1e9097b5f8d5f09911040a3f5922ecd5002a174fe7cd9b3", @generic="d0f28e0acb8323d09e11ae9141d5a2cd76ee1908c33cf1113bd890e28d21be492cdfec8d2ce152d539ea4ef101d96e8193a2d96c82226890a7c4fa8bea1b74475e350ee1e598c33a1456d198b0e901e8e22512b95499f7b88ebe6c4890da1c3cbf931b2600acb8d34d34db5ae47108866a89c88eb786c24b947262f29db79d34ce4d385427de790e06cb43e42c56", @nested={0x28, 0xf, 0x0, 0x1, [@nested={0x4, 0xee}, @nested={0x4, 0x33}, @typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x73, 0x0, 0x0, @str='/\x9c%\x00'}]}, @generic="e2a534a73bab91564cffc85dde63ade05060648f14d50db53946dcd2dbb246efd3ac9ed4eac0176bb30b5e2797b14e61812ff0d2d2f4c1b83e803656975b314cf504380ee13ec1677345f9bd04bca62fddbb88ed", @generic="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", @generic="d5837d6727ab99beb3142f42c4f0c8895503355de101ed2110d66aa52e368794138084f843b52f547eefdc825134b3c0282aebbd2c65488af1d6563318", @generic="3aeeb25a03cb75807edad1b298f62934b2b5b398a504869a78a8a06725a4a89656ada583f09637533cb780abcb95ce5ae936629517ef594489aeb921e8cb71e7d92086bfa31488f09876658eb608ebd84957bcee712987156499086485a87309420a317da3216fb287ab28ee58b4847404677eb6e485d31578230ea746eb2cc85d1264ba2a52f0e3dad512272d517c2299a4cbeda6ea18df1ab7862f68f2907708f65cb33616d849463ee909b2f1ac6bec", @generic="c0ffd1a0586b143de39b9afa34bbe80a4a2f408eba35f9e376475ef90e3995afde22b072ddc72210a766f7c8796a1cb594b31eb9d1eedc697c189c06bcd09863ab02d5b258ddd69afcd6d6cfe7058ecb7996d668e6464e6dbf9a284d927e192483f7b902b32f989be8701d5f52f61ba781ca4c2eba"]}, 0x12dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) syz_genetlink_get_family_id$mptcp(&(0x7f00000029c0), r0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000002a00)={0x0, 0x800, 0x7}) 281.866085ms ago: executing program 2 (id=3776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x11c, 0x1e, 0x109, 0x2, 0x25dfdbfc, {}, [{0x108, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xd4, 0x20, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1e}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x6d, 0x6, "51263bf53ab0bffc7a233887398d2e481c49ff55b2576d869d668bd0a57ba6f5e6f775146e7f47929d08ee148e9f85979ff67b9ac7532523636cb02d657184b18ec1e3e2a0e013ba7435ce87cf746166f8d3cde56a0446076dc6b6244e5072736c4f073685fd538ea0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x11c}, 0x1, 0x2b1e, 0x0, 0x20044000}, 0x48040) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r3, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000100)=""/130, 0x82}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/2, 0x2}], 0x7, &(0x7f0000000780)=""/171, 0xab}, 0x40016002) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in6=@private1, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x3, 0x76a, 0x80000000000010, 0x3, 0x0, 0x9}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x60, "ee975d40df06c77860e09d464fffd622034fe232"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 115.209929ms ago: executing program 1 (id=3777): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000001600), 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) unshare(0x28000600) shutdown(r7, 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0xfffffd19, &(0x7f0000000080)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x24048851) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r11, 0x25, 0x8, @val=@tcx={@void, @value=r10}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) 114.662364ms ago: executing program 4 (id=3778): socket(0x8, 0x3, 0x9) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x810) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x4002) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721", 0x9c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/83, 0x53}], 0x5}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4064, 0xfe0, 0x1, 0x0}, &(0x7f0000000080)=0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) r6 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000600)=@ethtool_stats={0x11}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f000067e000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0xc6d3f000) openat$cgroup_ro(r7, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x8010, r4, 0x5382f000) 64.045861ms ago: executing program 3 (id=3779): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xffffff92, @mcast2, 0x40, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x88, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008"], 0x20}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="127d", 0x2}], 0x1}}], 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000002f8ff000000000900000085000000290000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000088000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) shutdown(r1, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "db4a"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 0s ago: executing program 2 (id=3780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x65, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}}, 0x20060000) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x65, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}}, 0x20060000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000085000000ae00000018110000000000000000000034c1dfd3a2072aae40d5d424c001df78f303600dd92d2daaf30cf796", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a00000600000000e500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c3000000850000000600000018000000020000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186900000d00000000000000fe00000018210000", @ANYRES32=r6, @ANYBLOB="0000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013060000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018260000", @ANYRES32, @ANYBLOB="00000000f4000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000a00000600000000e500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c3000000850000000600000018000000020000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186900000d00000000000000fe00000018210000", @ANYRES32=r6, @ANYBLOB="0000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013060000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018260000", @ANYRES32, @ANYBLOB="00000000f4000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @local, 0x2}, 0x7) (async) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @local, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r8, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r12, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) (async) recvfrom$llc(r12, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) bind$inet(r11, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x4000000) kernel console output (not intermixed with test programs): syzkaller0: entered promiscuous mode [ 327.355610][T16334] syzkaller0: entered allmulticast mode [ 328.591201][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2736'. [ 328.637179][T16372] bond18: (slave vti0): The slave device specified does not support setting the MAC address [ 328.649938][T16372] bond18: (slave vti0): Error -95 calling set_mac_address [ 328.754960][T16381] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.794301][T16386] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 328.803020][T16386] netlink: 'syz.0.2740': attribute type 4 has an invalid length. [ 328.810904][T16386] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2740'. [ 328.831475][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 328.878017][T16390] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 328.886493][T16390] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 328.988402][T16396] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 328.998592][T16397] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 329.034525][T16401] macsec0: entered promiscuous mode [ 329.043092][T16401] macsec0: left promiscuous mode [ 329.057190][T16401] netlink: 'syz.0.2743': attribute type 2 has an invalid length. [ 329.065496][T16401] netlink: 'syz.0.2743': attribute type 8 has an invalid length. [ 329.073360][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2743'. [ 329.087949][T16401] netlink: 'syz.0.2743': attribute type 2 has an invalid length. [ 329.095928][T16401] netlink: 'syz.0.2743': attribute type 8 has an invalid length. [ 329.104040][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2743'. [ 329.116815][T16401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2743'. [ 329.902334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.958322][T16314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.108651][T16410] (: renamed from bridge_slave_0 (while UP) [ 330.476538][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 330.527989][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'. [ 330.614123][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 331.725216][T16492] __nla_validate_parse: 2 callbacks suppressed [ 331.725234][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2770'. [ 331.771876][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 331.798965][T16502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2772'. [ 331.812934][T16492] netlink: 'syz.4.2770': attribute type 1 has an invalid length. [ 331.833705][T16492] net_ratelimit: 2 callbacks suppressed [ 331.833724][T16492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.878975][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2775'. [ 332.059461][T16512] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2776'. [ 332.099010][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 332.150833][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 332.505560][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'. [ 332.519941][T16542] netlink: 'syz.2.2782': attribute type 2 has an invalid length. [ 332.619605][T16553] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 332.635126][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.755951][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 332.857082][T16548] bond10: (slave veth0_to_bond): making interface the new active one [ 332.879288][T16548] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 332.943370][T16563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'. [ 333.027310][T16557] 8021q: adding VLAN 0 to HW filter on device bond10 [ 333.506847][T16597] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 333.588802][T16601] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 333.716917][T16601] tipc: Disabling bearer [ 333.923688][T16614] lo speed is unknown, defaulting to 1000 [ 333.932253][T16618] netlink: 'syz.2.2802': attribute type 2 has an invalid length. [ 333.966517][T16618] : entered promiscuous mode [ 334.303873][T16630] openvswitch: netlink: IP tunnel dst address not specified [ 334.412391][T16637] netlink: 'syz.1.2806': attribute type 10 has an invalid length. [ 334.423212][T16637] netlink: 'syz.1.2806': attribute type 10 has an invalid length. [ 334.661150][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.685101][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.724963][T16652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.754048][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.778265][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.818006][T16657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.050664][T16673] netlink: 'syz.4.2817': attribute type 30 has an invalid length. [ 335.104306][T16672] netlink: 'syz.4.2817': attribute type 30 has an invalid length. [ 335.147353][T16677] netlink: 'syz.3.2816': attribute type 10 has an invalid length. [ 335.309830][T16683] nbd: nbd4 already in use [ 335.644458][T16704] syzkaller1: entered allmulticast mode [ 335.651602][T16706] sctp: [Deprecated]: syz.1.2825 (pid 16706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.651602][T16706] Use struct sctp_sack_info instead [ 335.674667][T16706] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 335.851767][T16714] 8021q: adding VLAN 0 to HW filter on device bond19 [ 336.237517][T16685] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 336.519118][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.537151][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.546628][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.554723][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.564112][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.009847][T16776] __nla_validate_parse: 6 callbacks suppressed [ 337.009867][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2842'. [ 337.166735][ T5617] bond13: (slave syz_tun): Releasing backup interface [ 337.248724][T16748] lo speed is unknown, defaulting to 1000 [ 337.421583][T16789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2847'. [ 337.570093][T16795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2848'. [ 337.989735][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 338.157134][T16820] net_ratelimit: 97 callbacks suppressed [ 338.157152][T16820] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 338.181100][T16820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2854'. [ 338.192297][T16825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2853'. [ 338.256699][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.266774][T16827] nbd: couldn't find a device at index 0 [ 338.272818][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.296377][T16748] bridge_slave_0: entered allmulticast mode [ 338.311592][T16748] bridge_slave_0: entered promiscuous mode [ 338.321106][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.323496][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 338.328481][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.346070][T16748] bridge_slave_1: entered allmulticast mode [ 338.357604][T16748] bridge_slave_1: entered promiscuous mode [ 338.395899][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.408342][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.448131][T16748] team0: Port device team_slave_0 added [ 338.456919][T16748] team0: Port device team_slave_1 added [ 338.513186][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.522381][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.544713][T16801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 338.574747][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.597604][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.603122][T16838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2856'. [ 338.612039][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.640901][ T5628] Bluetooth: hci5: command tx timeout [ 338.651799][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.739299][T16748] hsr_slave_0: entered promiscuous mode [ 338.746244][T16748] hsr_slave_1: entered promiscuous mode [ 338.752937][T16748] debugfs: 'hsr0' already exists in 'hsr' [ 338.758719][T16748] Cannot create hsr debugfs directory [ 338.840410][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'. [ 339.023770][ C1] bridge0: port 1(() entered learning state [ 339.037282][T16848] syzkaller1: entered promiscuous mode [ 339.044580][T16848] syzkaller1: entered allmulticast mode [ 339.183354][T16854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.349909][T16858] bridge0: entered allmulticast mode [ 339.364306][T16858] pim6reg: entered allmulticast mode [ 339.554144][T16748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.568139][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.570237][T16866] ipt_rpfilter: unknown options [ 339.578061][T16748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.595576][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.608402][T16748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.621736][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.637278][T16748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.660923][T16748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.940037][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.034012][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.043361][T16890] validate_nla: 82 callbacks suppressed [ 340.043380][T16890] netlink: 'syz.4.2870': attribute type 3 has an invalid length. [ 340.067377][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.074637][T15299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.141890][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.149141][T15299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.385400][T16897] syzkaller0: entered promiscuous mode [ 340.402804][T16897] syzkaller0: entered allmulticast mode [ 340.418077][T16899] tipc: Enabled bearer , priority 0 [ 340.527568][T16899] syzkaller0: entered promiscuous mode [ 340.561333][T16899] syzkaller0: entered allmulticast mode [ 340.702362][ T5628] Bluetooth: hci5: command tx timeout [ 340.709357][T16911] tipc: Resetting bearer [ 340.866001][T16911] netdevsim netdevsim4: Direct firmware load for .® failed with error -2 [ 340.902513][T16911] netdevsim netdevsim4: Falling back to sysfs fallback for: .® [ 341.126050][T16898] tipc: Resetting bearer [ 341.235819][T16898] tipc: Disabling bearer [ 341.418545][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'. [ 341.787332][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.989915][T16748] veth0_vlan: entered promiscuous mode [ 342.046249][T16748] veth1_vlan: entered promiscuous mode [ 342.169729][T16748] veth0_macvtap: entered promiscuous mode [ 342.207747][T16748] veth1_macvtap: entered promiscuous mode [ 342.225182][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.279368][T16989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.288216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.325196][T16992] nbd: must specify an index to disconnect [ 342.336968][T16992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.376295][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.399403][T16986] lo speed is unknown, defaulting to 1000 [ 342.408407][ T30] audit: type=1800 audit(1784683198.722:15): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2894" name="memory.events" dev="tmpfs" ino=2986 res=0 errno=0 [ 342.414748][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.452337][ T30] audit: type=1804 audit(1784683198.752:16): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2894" name="/newroot/579/memory.events" dev="tmpfs" ino=2986 res=1 errno=0 [ 342.495990][ T6338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.506380][ T6338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.543199][ T6338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.553645][ T6338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.782924][ T5628] Bluetooth: hci5: command tx timeout [ 342.904827][T15299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.933667][T17007] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 342.946869][T15299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.973775][T17007] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 343.007830][T17007] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 343.104033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.132665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.165150][T17012] __nla_validate_parse: 2 callbacks suppressed [ 343.165167][T17012] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2900'. [ 343.218771][T17015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2900'. [ 343.351707][T17018] syzkaller0: entered promiscuous mode [ 343.372614][T17018] syzkaller0: entered allmulticast mode [ 343.574738][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'. [ 343.586113][T17023] netlink: 'syz.1.2904': attribute type 12 has an invalid length. [ 343.726003][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.739448][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.749604][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.760722][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.770127][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.909584][T17021] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.967842][T17021] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 344.013606][T17021] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.300734][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'. [ 344.303826][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.352682][T17023] netlink: 'syz.1.2904': attribute type 12 has an invalid length. [ 344.862466][ T5624] Bluetooth: hci5: command tx timeout [ 345.902231][ T5624] Bluetooth: hci1: command tx timeout [ 346.341051][T17028] syzkaller0: entered promiscuous mode [ 346.352076][T17028] syzkaller0: entered allmulticast mode [ 346.367652][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.738030][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 346.780984][T17059] nbd0: detected capacity change from 0 to 63 [ 346.789095][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 346.805365][T17064] nbd: must specify an index to disconnect [ 346.980501][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 346.989557][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 347.237932][ T5624] block nbd0: Receive control failed (result -104) [ 347.994645][ T5624] Bluetooth: hci1: command tx timeout [ 349.031678][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.047031][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.166711][T17048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.177868][T17048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 349.190298][T17048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.291912][T17026] lo speed is unknown, defaulting to 1000 [ 349.336329][T17048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.353066][T17048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 349.364245][T17048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.465856][T17091] netlink: 616 bytes leftover after parsing attributes in process `syz.1.2915'. [ 349.520223][T17048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.536445][T17048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 349.547235][T17048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.575926][T17091] batman_adv: batadv0: Removing interface: dummy0 [ 349.621304][T17091] bond5: (slave veth0_to_bond): Releasing active interface [ 349.726605][T17103] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2918'. [ 349.999196][T17091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.090876][ T5624] Bluetooth: hci1: command tx timeout [ 350.298298][T15298] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.309261][T15298] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 350.318557][T15298] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.378912][T15298] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.414728][T15298] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 350.455001][T15298] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.539610][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.561693][ T12] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 350.587601][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.828096][T15297] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.858178][T15297] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 350.893356][T15297] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.059452][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 351.086589][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.097410][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.105475][T17026] bridge_slave_0: entered allmulticast mode [ 351.115720][T17026] bridge_slave_0: entered promiscuous mode [ 351.125060][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.132572][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.141804][T17026] bridge_slave_1: entered allmulticast mode [ 351.151076][T17026] bridge_slave_1: entered promiscuous mode [ 351.197376][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.210627][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.284361][T17152] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 351.330801][T17026] team0: Port device team_slave_0 added [ 351.363227][T17026] team0: Port device team_slave_1 added [ 351.401680][T17155] syzkaller0: entered promiscuous mode [ 351.407859][T17155] syzkaller0: entered allmulticast mode [ 351.479002][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.486946][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.513703][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.545700][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.552960][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.579853][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.592569][T17167] syzkaller0: entered promiscuous mode [ 351.598105][T17167] syzkaller0: entered allmulticast mode [ 351.669329][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2930'. [ 351.719872][T17026] hsr_slave_0: entered promiscuous mode [ 351.734594][T17026] hsr_slave_1: entered promiscuous mode [ 351.754873][T17026] debugfs: 'hsr0' already exists in 'hsr' [ 351.764231][T17026] Cannot create hsr debugfs directory [ 351.803435][T17173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 351.825912][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.144141][ T5624] Bluetooth: hci1: command tx timeout [ 352.203531][T17026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.238731][T17162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.613033][T17026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.719284][T17199] ip6tnl1: entered promiscuous mode [ 352.727817][T17190] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2934'. [ 352.738514][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2934'. [ 352.857861][T17026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.909550][T17201] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2938'. [ 352.925078][T17195] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2938'. [ 353.029673][T17026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.049627][T17214] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 353.057662][T17215] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 353.331561][T17229] xt_bpf: check failed: parse error [ 353.661804][T17026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.737273][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.756485][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.765217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.781928][T17026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.787362][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.798937][T15297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.812491][T11490] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.846681][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.852200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.860066][T17026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.893179][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.918563][ T6332] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.943863][T17026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.966642][T17026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.966843][T17267] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 353.984519][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2957'. [ 354.242606][ T1224] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.256472][T17026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.291592][T17026] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.341134][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.348354][T15299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.401631][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.408855][T15299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.579033][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.590731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.591227][T17294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.706587][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 354.790717][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'. [ 354.857744][T17306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2963'. [ 354.874854][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 354.974072][ T6338] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.004288][ T6338] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.143116][T17318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 355.193018][ T187] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.400301][T17328] syzkaller0: entered promiscuous mode [ 355.406653][T17328] syzkaller0: entered allmulticast mode [ 355.413171][T17333] netlink: 584 bytes leftover after parsing attributes in process `syz.1.2970'. [ 355.565540][T17026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.803941][T17350] batman_adv: batadv0: Adding interface: dummy0 [ 355.822702][T17350] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.879434][T17350] batman_adv: batadv0: Interface activated: dummy0 [ 355.887805][T17352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.921006][T17026] veth0_vlan: entered promiscuous mode [ 355.928107][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2975'. [ 355.937550][T17026] veth1_vlan: entered promiscuous mode [ 355.975935][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 355.997411][T17026] veth0_macvtap: entered promiscuous mode [ 356.022900][T17026] veth1_macvtap: entered promiscuous mode [ 356.098028][T17026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.123992][T17026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.154941][T17367] syzkaller0: entered promiscuous mode [ 356.165937][T17367] syzkaller0: entered allmulticast mode [ 356.191939][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.205384][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.219233][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.229203][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.250102][T17373] netlink: 'syz.4.2981': attribute type 4 has an invalid length. [ 356.272113][T17373] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2981'. [ 357.229069][T17384] vlan2: entered promiscuous mode [ 357.240415][T17389] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2985'. [ 357.302256][T17375] lo speed is unknown, defaulting to 1000 [ 357.347383][T17376] lo speed is unknown, defaulting to 1000 [ 357.487802][T17395] netlink: 'syz.0.2987': attribute type 15 has an invalid length. [ 357.488744][T15298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.509090][T15298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.686940][T15297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.697117][T15297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.910883][T17416] FAULT_INJECTION: forcing a failure. [ 357.910883][T17416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.945700][T17416] CPU: 1 UID: 0 PID: 17416 Comm: syz.0.2992 Not tainted syzkaller #0 PREEMPT(full) [ 357.945726][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 357.945744][T17416] Call Trace: [ 357.945829][T17416] [ 357.945904][T17416] dump_stack_lvl+0xe8/0x150 [ 357.946045][T17416] should_fail_ex+0x40c/0x560 [ 357.946139][T17416] _copy_from_user+0x2d/0xb0 [ 357.946219][T17416] ___sys_sendmsg+0x1c6/0x360 [ 357.946314][T17416] ? __lock_acquire+0x683/0x2cf0 [ 357.946396][T17416] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.946450][T17416] ? __fget_files+0x2a/0x420 [ 357.946493][T17416] ? __fget_files+0x3a2/0x420 [ 357.946525][T17416] __x64_sys_sendmsg+0x1b1/0x290 [ 357.946547][T17416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.946584][T17416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.946620][T17416] do_syscall_64+0x174/0x580 [ 357.946717][T17416] ? trace_irq_disable+0x3b/0x140 [ 357.946754][T17416] ? clear_bhb_loop+0x40/0x90 [ 357.946777][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.946796][T17416] RIP: 0033:0x7fc292d9de99 [ 357.946838][T17416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.946854][T17416] RSP: 002b:00007fc293c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.946900][T17416] RAX: ffffffffffffffda RBX: 00007fc293025fa0 RCX: 00007fc292d9de99 [ 357.946913][T17416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 357.946924][T17416] RBP: 00007fc293c43090 R08: 0000000000000000 R09: 0000000000000000 [ 357.946935][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.946945][T17416] R13: 00007fc293026038 R14: 00007fc293025fa0 R15: 00007ffdb40fb4f8 [ 357.946973][T17416] [ 358.348733][T17436] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 358.448233][T17441] bond1: entered promiscuous mode [ 358.454301][T17441] bond1: entered allmulticast mode [ 358.470150][T17441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.538815][T17436] bridge2: entered promiscuous mode [ 358.563132][T15297] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 358.582471][T17436] bridge2: entered allmulticast mode [ 358.593172][T17436] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 358.707198][T15298] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 358.992343][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.010729][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.022705][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.033667][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.047183][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.269322][T17471] netlink: zone id is out of range [ 359.289355][T17471] netlink: zone id is out of range [ 359.308403][T17471] netlink: zone id is out of range [ 359.327231][T17471] netlink: zone id is out of range [ 359.342595][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.367620][T17471] netlink: zone id is out of range [ 359.384086][T17471] netlink: zone id is out of range [ 359.408154][T17471] netlink: zone id is out of range [ 359.469652][T17475] bond11 (unregistering): Released all slaves [ 359.588355][ T8549] IPVS: starting estimator thread 0... [ 359.704557][T17490] IPVS: using max 31 ests per chain, 74400 per kthread [ 359.724236][T17455] lo speed is unknown, defaulting to 1000 [ 359.884979][T17504] syzkaller1: entered promiscuous mode [ 359.890523][T17504] syzkaller1: entered allmulticast mode [ 360.046583][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.053895][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.061384][T17455] bridge_slave_0: entered allmulticast mode [ 360.069416][T17455] bridge_slave_0: entered promiscuous mode [ 360.077633][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.085069][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.092986][T17455] bridge_slave_1: entered allmulticast mode [ 360.101000][T17455] bridge_slave_1: entered promiscuous mode [ 360.145347][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.177421][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.188425][T17512] __nla_validate_parse: 3 callbacks suppressed [ 360.188472][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 360.217090][T17455] team0: Port device team_slave_0 added [ 360.226253][T17455] team0: Port device team_slave_1 added [ 360.254342][T17455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.261299][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.288285][T17455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.301041][T17455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.308292][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.335137][T17455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.379489][T17455] hsr_slave_0: entered promiscuous mode [ 360.386864][T17455] hsr_slave_1: entered promiscuous mode [ 360.393453][T17455] debugfs: 'hsr0' already exists in 'hsr' [ 360.399347][T17455] Cannot create hsr debugfs directory [ 360.516883][T17455] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.566878][T17455] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.599701][T17455] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.647258][T17455] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.955228][T17517] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 361.102143][ T5624] Bluetooth: hci2: command tx timeout [ 361.425147][ T5759] net_ratelimit: 30 callbacks suppressed [ 361.425240][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.306520][T17485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.338211][T17455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.365623][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.386743][T17455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.431887][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.460640][T17455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.473685][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.491807][T17529] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 362.503248][T17529] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 362.507599][T17455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.530199][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.542654][T17527] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 362.736082][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.816006][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.836310][T17536] syzkaller0: entered promiscuous mode [ 362.842759][T17536] syzkaller0: entered allmulticast mode [ 362.865878][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.873052][T15297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.966126][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.973360][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.993632][T17557] nbd: must specify at least one socket [ 363.000243][T17557] netlink: 'syz.2.3024': attribute type 2 has an invalid length. [ 363.009005][T17557] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 363.019642][T17557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3024'. [ 363.183227][ T5624] Bluetooth: hci2: command tx timeout [ 363.436464][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 363.452409][T17580] netlink: set zone limit has 4 unknown bytes [ 363.482365][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 363.930505][T17596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3031'. [ 363.955816][T17600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3033'. [ 364.087616][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.246004][T17455] veth0_vlan: entered promiscuous mode [ 364.274810][T17455] veth1_vlan: entered promiscuous mode [ 364.386107][T17455] veth0_macvtap: entered promiscuous mode [ 364.411823][T17455] veth1_macvtap: entered promiscuous mode [ 364.481377][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.507786][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.547428][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.569408][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.599363][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.609235][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.629906][T17607] sit0: entered promiscuous mode [ 364.658703][T17607] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 364.678998][T17607] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3036'. [ 364.957142][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.982416][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.066747][T15299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.091931][T15299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.263057][ T5624] Bluetooth: hci2: command tx timeout [ 365.299044][T17642] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 365.307917][T17642] netlink: 'syz.4.3045': attribute type 4 has an invalid length. [ 365.316584][T17642] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3045'. [ 365.329915][T17642] netlink: 'syz.4.3045': attribute type 1 has an invalid length. [ 365.338118][T17642] netlink: 'syz.4.3045': attribute type 4 has an invalid length. [ 365.353027][T17642] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3045'. [ 365.442999][T17646] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 365.650959][T17652] team0: Device vxcan1 is of different type [ 365.749610][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.765818][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.776438][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.786772][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.796223][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.226772][ T5623] bridge0: port 3(syz_tun) entered disabled state [ 366.314134][ T5623] syz_tun (unregistering): left allmulticast mode [ 366.322292][ T5623] syz_tun (unregistering): left promiscuous mode [ 366.333058][ T5623] bridge0: port 3(syz_tun) entered disabled state [ 366.373550][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 366.392794][T17673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3054'. [ 366.877185][T17655] lo speed is unknown, defaulting to 1000 [ 366.961538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.991446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.996247][ T30] audit: type=1804 audit(1784683223.312:17): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3057" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=38 res=1 errno=0 [ 367.085696][ T30] audit: type=1800 audit(1784683223.312:18): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3057" name="cgroup.controllers" dev="tmpfs" ino=38 res=0 errno=0 [ 367.342132][ T5624] Bluetooth: hci2: command tx timeout [ 367.466673][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.474378][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.481696][T17655] bridge_slave_0: entered allmulticast mode [ 367.489752][T17655] bridge_slave_0: entered promiscuous mode [ 367.499702][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.507816][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.515471][T17655] bridge_slave_1: entered allmulticast mode [ 367.523718][T17655] bridge_slave_1: entered promiscuous mode [ 367.569453][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.583103][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.622820][T17655] team0: Port device team_slave_0 added [ 367.632568][T17655] team0: Port device team_slave_1 added [ 367.669370][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.687015][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.748795][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.778403][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.792119][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.851394][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.906695][ T5624] Bluetooth: hci0: command tx timeout [ 367.927553][T17736] xt_l2tp: v2 sid > 0xffff: 262144 [ 367.965223][T17655] hsr_slave_0: entered promiscuous mode [ 367.972155][T17655] hsr_slave_1: entered promiscuous mode [ 367.978535][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 367.986890][T17655] Cannot create hsr debugfs directory [ 368.427784][T17655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.462387][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.100633][T17655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.115521][ C1] bridge0: port 1(() entered forwarding state [ 369.115567][ C1] bridge0: topology change detected, propagating [ 369.331586][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3074'. [ 369.355630][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3074'. [ 369.435815][T17795] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3076'. [ 369.509727][T17655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.535289][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 369.578371][T17799] netlink: 'syz.1.3077': attribute type 3 has an invalid length. [ 369.597917][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 369.621937][T17799] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 369.726272][T17655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.730977][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 369.811755][T17798] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 369.852302][T17798] netlink: 'syz.0.3078': attribute type 1 has an invalid length. [ 369.995439][ T5624] Bluetooth: hci0: command tx timeout [ 370.091499][T17800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.270437][T17800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.451487][T17800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.604386][T15301] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.634933][T15301] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.747811][T17800] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.777757][T15301] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.791018][T15301] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.886535][T17655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.910813][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.016949][T17830] : option downdelay: invalid value (18446744073709547007) [ 371.030081][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.051899][T17830] : option downdelay: allowed values 0 - 2147483647 [ 371.063801][T17840] __nla_validate_parse: 1 callbacks suppressed [ 371.063833][T17840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 371.086802][T17830]  (unregistering): Released all slaves [ 371.087375][T17839] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 371.173483][T17655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.230998][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.273125][T17840] ip6gre1: entered promiscuous mode [ 371.282965][T17840] ip6gre1: entered allmulticast mode [ 371.324244][T17655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.353847][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.361881][T17655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.372926][T17655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.438712][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.510249][T15301] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.574434][T15301] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.603604][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.644260][T17803] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.672872][T17863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3090'. [ 371.709979][T17868] xt_hashlimit: size too large, truncated to 1048576 [ 371.746482][T17803] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.750147][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3091'. [ 371.825417][T17876] netlink: 'syz.3.3092': attribute type 11 has an invalid length. [ 371.891252][T17879] tipc: Started in network mode [ 371.908884][T17879] tipc: Node identity ac14140f, cluster identity 4711 [ 371.928841][T17879] tipc: New replicast peer: 255.255.255.255 [ 371.944974][T17879] tipc: Enabled bearer , priority 10 [ 371.957705][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3094'. [ 371.966668][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.002798][T17803] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.046165][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.063292][ T5624] Bluetooth: hci0: command tx timeout [ 372.076766][T17803] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.106278][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.113511][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.131293][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.138510][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.227025][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.251630][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.259522][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.378917][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.397401][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.430042][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.468508][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.682837][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.940739][T17910] netlink: 'syz.0.3101': attribute type 4 has an invalid length. [ 372.964285][T17910] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3101'. [ 373.005195][T17908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.029518][ T1224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.062348][ T1224] tipc: Node number set to 2886997007 [ 373.130583][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.454056][T17655] veth0_vlan: entered promiscuous mode [ 373.468100][T17655] veth1_vlan: entered promiscuous mode [ 373.499557][T17655] veth0_macvtap: entered promiscuous mode [ 373.511242][T17655] veth1_macvtap: entered promiscuous mode [ 373.532663][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.546474][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.559462][ T6338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.569449][ T6338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.586166][ T6338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.607717][ T6338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.690230][T17934] IPVS: Error connecting to the multicast addr [ 373.894729][T15299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.915790][T15299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.979714][T15301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.999652][T15301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.143240][ T5624] Bluetooth: hci0: command tx timeout [ 374.238047][T17953] xt_connbytes: Forcing CT accounting to be enabled [ 374.290355][T17953] netlink: 'syz.0.3110': attribute type 13 has an invalid length. [ 374.398151][T17953] tipc: Enabled bearer , priority 0 [ 374.406663][ T1224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.416097][T17953] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 374.425388][ T1224] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.446113][T17953] syzkaller0: entered promiscuous mode [ 374.451702][T17953] syzkaller0: entered allmulticast mode [ 374.461648][T17952] tipc: Resetting bearer [ 374.482833][T15301] bond1: (slave bridge2): link status up again after 0 ms [ 374.494187][T17952] tipc: Disabling bearer [ 374.532734][T15301] bond1: (slave bridge2): link status up again after 0 ms [ 374.540431][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 374.642403][ T1224] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.663604][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 374.693696][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 374.785742][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 374.814922][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 374.847074][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 374.862624][ T1224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.886587][T17969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3115'. [ 374.895796][T17967] netlink: 'syz.0.3114': attribute type 12 has an invalid length. [ 374.911682][T15299] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.914149][T17967] netlink: 'syz.0.3114': attribute type 14 has an invalid length. [ 374.961710][T15301] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.017919][T17971] lo speed is unknown, defaulting to 1000 [ 375.059790][T15297] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.141657][T15297] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.460721][T17982] syzkaller0: entered promiscuous mode [ 375.466449][T17982] syzkaller0: entered allmulticast mode [ 376.063934][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.435259][ T1668] block nbd0: Possible stuck request ffff88805f6c0000: control (read@0,4096B). Runtime 30 seconds [ 378.384781][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 378.534310][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 378.636149][T18019] erspan0: entered promiscuous mode [ 378.683224][T18018] netlink: 'syz.4.3125': attribute type 12 has an invalid length. [ 378.708294][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.733465][ T6338] bond1: (slave bridge2): failed to get link speed/duplex [ 378.859801][T18027] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 378.899236][T18027] bond1 (unregistering): Released all slaves [ 378.954086][ T6338] bond1: (slave bridge2): failed to get link speed/duplex [ 379.073227][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 379.150396][T18039] batadv0: entered promiscuous mode [ 379.178557][T18039] vlan2: entered promiscuous mode [ 379.252256][T18044] syzkaller0: entered promiscuous mode [ 379.259089][T18044] syzkaller0: entered allmulticast mode [ 379.318506][T18042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3131'. [ 379.358376][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 379.372229][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 379.471863][T18050] netlink: 97 bytes leftover after parsing attributes in process `syz.2.3134'. [ 379.522327][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 379.535696][T18053] netlink: 'syz.0.3133': attribute type 1 has an invalid length. [ 379.623330][T18055] netlink: 'syz.0.3133': attribute type 1 has an invalid length. [ 379.643557][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 379.686700][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3133'. [ 379.794823][T18055] bond3: entered promiscuous mode [ 379.813879][T18055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.833954][ T5352] IPVS: starting estimator thread 0... [ 379.872803][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 379.922566][T18071] IPVS: using max 30 ests per chain, 72000 per kthread [ 379.968460][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 379.985170][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 380.092928][T18082] netlink: 'syz.2.3139': attribute type 12 has an invalid length. [ 380.111467][T18082] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3139'. [ 380.168823][T18090] veth0: entered promiscuous mode [ 380.198634][T18090] veth0: left promiscuous mode [ 380.265452][T18096] nft_compat: unsupported protocol 5 [ 380.619120][T18105] lo: Caught tx_queue_len zero misconfig [ 380.630952][T18105] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 380.664483][T18106] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 380.825840][T18103] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 380.903690][T18117] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 380.956388][T18117] syzkaller0: entered promiscuous mode [ 380.978581][T18117] syzkaller0: entered allmulticast mode [ 381.431789][T18122] can: request_module (can-proto-0) failed. [ 381.527111][T18128] netlink: 'syz.2.3153': attribute type 58 has an invalid length. [ 381.552644][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'. [ 381.811099][T18138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3154'. [ 381.876421][ T9887] IPVS: starting estimator thread 0... [ 381.927683][T18126] bridge1: entered promiscuous mode [ 381.937437][T18126] bridge1: entered allmulticast mode [ 381.961744][T18126] team0: Port device bridge1 added [ 381.982678][T18151] IPVS: using max 32 ests per chain, 76800 per kthread [ 382.039799][T18132] bridge2: entered promiscuous mode [ 382.073456][T18132] bridge2: entered allmulticast mode [ 382.087969][T18132] team0: Port device bridge2 added [ 382.294866][T18165] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 382.309630][T18166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.510409][T18180] netlink: 'syz.2.3166': attribute type 11 has an invalid length. [ 382.526498][T18180] netlink: 'syz.2.3166': attribute type 4 has an invalid length. [ 382.535859][T18180] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3166'. [ 382.841340][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 382.871154][T18190] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 382.888284][T18190] netlink: 'syz.0.3169': attribute type 2 has an invalid length. [ 383.338827][T18195] lo speed is unknown, defaulting to 1000 [ 383.414419][T18216] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 383.434401][T18218] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 383.793723][T18244] netlink: 'syz.4.3178': attribute type 3 has an invalid length. [ 383.822186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.874680][T18244] netlink: 'syz.4.3178': attribute type 3 has an invalid length. [ 383.987743][T18250] syzkaller0: entered promiscuous mode [ 384.003605][T18250] syzkaller0: entered allmulticast mode [ 384.143312][ T13] net_ratelimit: 15 callbacks suppressed [ 384.143333][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 384.168087][T18263] bond0: invalid NS target ff00:: specified for addition [ 384.197194][T18263] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.262685][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 384.408657][T18192] dvmrp0: entered allmulticast mode [ 384.560921][T18270] bond3: invalid ARP target 0.0.0.0 specified for addition [ 384.598035][T18270] bond3: option arp_ip_target: invalid value (0) [ 384.630511][T18270] bond3 (unregistering): Released all slaves [ 385.209321][T18305] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 385.218101][T18305] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 385.222405][T18309] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 385.229537][T18305] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 385.237499][T18309] __nla_validate_parse: 5 callbacks suppressed [ 385.237517][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3195'. [ 385.270033][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 385.397255][T18300] syzkaller0: entered promiscuous mode [ 385.413081][T18300] syzkaller0: entered allmulticast mode [ 385.442587][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 385.664769][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 385.715261][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 386.388077][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.504079][T18351] IPv6: sit1: Disabled Multicast RS [ 388.522243][ T6338] bond1: (slave bridge2): failed to get link speed/duplex [ 388.652483][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 388.733229][T18371] Bluetooth: MGMT ver 1.23 [ 388.774172][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 388.823165][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 388.902470][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 389.016351][T18387] siw: device registration error -23 [ 389.154300][ T6338] net_ratelimit: 1 callbacks suppressed [ 389.154320][ T6338] bond1: (slave bridge2): failed to get link speed/duplex [ 389.302108][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 389.358134][T18409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3219'. [ 389.460263][T18409] gretap1: entered promiscuous mode [ 389.475979][T18415] netlink: 'syz.1.3220': attribute type 10 has an invalid length. [ 389.491106][T18413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3221'. [ 389.503348][T18413] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 389.511055][T18415] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.518536][T18415] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.532756][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 389.558092][T18415] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.565640][T18415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.573249][T18415] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.580576][T18415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.608068][T18415] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 389.672697][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 389.687838][T18415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3220'. [ 389.713763][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3223'. [ 389.743054][T18422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3223'. [ 389.843739][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 389.953712][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 390.023174][T18443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 390.048338][T18436] lo speed is unknown, defaulting to 1000 [ 390.222883][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.255908][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 390.353953][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.371774][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.385989][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.394828][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.403192][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.469923][T18456] netlink: 'syz.0.3234': attribute type 39 has an invalid length. [ 390.500457][T18452] netlink: 'syz.0.3234': attribute type 10 has an invalid length. [ 390.643626][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3236'. [ 390.672905][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 390.853557][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 390.881486][T18464] siw: device registration error -23 [ 391.030841][T18477] IPv6: Can't replace route, no match found [ 391.147965][T18483] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 391.159451][T18483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3242'. [ 391.188854][T18482] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3241'. [ 391.361209][T18451] lo speed is unknown, defaulting to 1000 [ 391.364567][T18492] netlink: 271 bytes leftover after parsing attributes in process `syz.4.3244'. [ 391.667316][T18512] veth1_to_bond: entered allmulticast mode [ 391.692852][T18512] veth1_to_bond: entered promiscuous mode [ 391.709592][T18512] sock: sock_timestamping_bind_phc: sock not bind to device [ 391.759160][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 391.814432][T18517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3251'. [ 391.830846][T18512] veth1_to_bond (unregistering): left allmulticast mode [ 391.852999][T18512] veth1_to_bond (unregistering): left promiscuous mode [ 391.897260][T18512] bond0: (slave bond_slave_1): Releasing backup interface [ 391.973277][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 392.127143][T18527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 392.184346][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.201911][T18451] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.209914][T18451] bridge_slave_0: entered allmulticast mode [ 392.210200][ T5812] IPVS: starting estimator thread 0... [ 392.219728][T18451] bridge_slave_0: entered promiscuous mode [ 392.231652][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.239774][T18451] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.248194][T18451] bridge_slave_1: entered allmulticast mode [ 392.256895][T18451] bridge_slave_1: entered promiscuous mode [ 392.337670][T18451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.352253][T18543] IPVS: using max 34 ests per chain, 81600 per kthread [ 392.370931][T18451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.381592][T18550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 392.404969][T18547] syzkaller0: entered promiscuous mode [ 392.415171][T18547] syzkaller0: entered allmulticast mode [ 392.463203][ T5624] Bluetooth: hci4: command tx timeout [ 392.550498][T18451] team0: Port device team_slave_0 added [ 392.583826][T18451] team0: Port device team_slave_1 added [ 392.771806][T18451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.794505][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.865701][T18451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.908629][T18451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.920005][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.965719][T18570] netlink: 'syz.4.3261': attribute type 13 has an invalid length. [ 392.988327][T18451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.371039][T18451] hsr_slave_0: entered promiscuous mode [ 393.392487][T18451] hsr_slave_1: entered promiscuous mode [ 393.395345][T18585] x_tables: duplicate underflow at hook 2 [ 393.413636][T18451] debugfs: 'hsr0' already exists in 'hsr' [ 393.438027][T18451] Cannot create hsr debugfs directory [ 393.906309][T18604] lo speed is unknown, defaulting to 1000 [ 393.999046][T18607] lo speed is unknown, defaulting to 1000 [ 394.137180][T18451] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.178116][T18451] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 394.210355][T18451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.377501][T18618] hsr0: entered promiscuous mode [ 394.542498][ T5624] Bluetooth: hci4: command tx timeout [ 394.554394][T18451] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.579973][T18451] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 394.600392][T18451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.719856][T18624] dvmrp1: entered allmulticast mode [ 394.763402][T18451] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.794735][T18451] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 394.812194][T18451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.881309][T18631] netlink: 'syz.1.3275': attribute type 4 has an invalid length. [ 394.901805][T18451] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.911725][T18451] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 394.924046][T18451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.936236][T18632] netlink: 'syz.1.3275': attribute type 4 has an invalid length. [ 395.008018][T18634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'. [ 395.471785][T15297] syzkaller0: tun_net_xmit 76 [ 395.483339][T15297] syzkaller0: tun_net_xmit 48 [ 395.492466][ T5730] syzkaller0: tun_net_xmit 76 [ 395.512850][T15297] net_ratelimit: 8 callbacks suppressed [ 395.512870][T15297] bond1: (slave bridge2): failed to get link speed/duplex [ 395.528042][T18658] tipc: Started in network mode [ 395.542967][T18658] tipc: Node identity e6838b63647e, cluster identity 4711 [ 395.561015][T18658] tipc: Enabled bearer , priority 0 [ 395.580107][T18630] syzkaller0: delete flow: hash 371191723 index 1 [ 395.665492][T18662] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 396.627522][ T5624] Bluetooth: hci4: command tx timeout [ 398.421867][T18652] syzkaller0: entered promiscuous mode [ 398.427973][T18652] syzkaller0: entered allmulticast mode [ 398.504471][T18691] IPv6: addrconf: prefix option has invalid lifetime [ 398.514050][T18650] tipc: Resetting bearer [ 398.540566][T18650] tipc: Disabling bearer [ 398.577722][ T187] tipc: Node number set to 2197654371 [ 398.702685][ T5624] Bluetooth: hci4: command tx timeout [ 398.756071][T18451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.804752][T18451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.823649][T18451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.859450][T18451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.883141][T18705] netlink: 'syz.4.3290': attribute type 6 has an invalid length. [ 398.895193][T18705] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.895514][T18451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.908845][T18705] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3290'. [ 398.927173][T18451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.048609][T18702] syzkaller0: entered promiscuous mode [ 399.055566][T18702] syzkaller0: entered allmulticast mode [ 399.063131][T18451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 399.084287][T18451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.091655][T18712] xt_hashlimit: max too large, truncated to 1048576 [ 399.183370][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.831042][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.477170][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b86b400: rx timeout, send abort [ 400.989334][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b86b400: abort rx timeout. Force session deactivation [ 401.893708][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 401.930934][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 401.953918][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 401.983239][T18733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3295'. [ 402.010815][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 402.046867][T15297] bond1: (slave bridge2): failed to get link speed/duplex [ 402.065452][T18733] syzkaller1: entered promiscuous mode [ 402.071115][T18737] netlink: 'syz.1.3298': attribute type 1 has an invalid length. [ 402.071704][T18733] syzkaller1: entered allmulticast mode [ 402.117159][T18730] team0: Port device team_slave_0 removed [ 402.176710][T18737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.195073][T18733] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 402.231059][T18745] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.258735][T18744] vlan2: entered allmulticast mode [ 402.270568][T18744] bond1: entered allmulticast mode [ 402.294868][T18745] tipc: Enabled bearer , priority 0 [ 402.391741][T18737] bond1: (slave geneve2): making interface the new active one [ 402.403519][T18737] geneve2: entered allmulticast mode [ 402.422668][T18737] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 402.491517][T18735] syzkaller0: entered promiscuous mode [ 402.497518][T18735] syzkaller0: entered allmulticast mode [ 402.504355][T18735] tipc: Resetting bearer [ 402.533054][T18758] netlink: 'syz.1.3302': attribute type 13 has an invalid length. [ 402.543523][T18758] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3302'. [ 402.562413][T18758] syz_tun: refused to change device tx_queue_len [ 402.645653][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 402.746164][T18451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.783058][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 402.896645][ T48] tipc: Resetting bearer [ 402.911567][T18451] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.938456][T18734] tipc: Resetting bearer [ 402.999858][T18770] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.500260][T18734] tipc: Disabling bearer [ 405.559363][T18777] syzkaller0: entered promiscuous mode [ 405.585840][T18777] syzkaller0: entered allmulticast mode [ 406.145143][T18798] nbd: must specify at least one socket [ 407.519729][ T1668] block nbd0: Possible stuck request ffff88805f6c0000: control (read@0,4096B). Runtime 60 seconds [ 407.942875][ T4986] udevd[4986]: worker [16195] /devices/virtual/block/nbd0 is taking a long time [ 408.701667][T15301] bridge_slave_1: left allmulticast mode [ 408.707788][T15301] bridge_slave_1: left promiscuous mode [ 408.718480][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.732886][T15301] bridge_slave_0: left allmulticast mode [ 408.738699][T15301] bridge_slave_0: left promiscuous mode [ 408.745202][T15301] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.775026][T15301] erspan0: left allmulticast mode [ 408.780230][T15301] erspan0: left promiscuous mode [ 408.786987][T15301] bridge7: port 1(erspan0) entered disabled state [ 408.815920][T15301] batman_adv: batadv0: Interface deactivated: gretap1 [ 408.928771][T15301] ip6gretap0 (unregistering): left allmulticast mode [ 409.097278][T15301] batman_adv: batadv0: Removing interface: gretap1 [ 409.113947][T15301] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 409.121933][T15301] ipip0 (unregistering): left promiscuous mode [ 409.141349][T15301] bond4 (unregistering): (slave geneve2): Releasing active interface [ 409.149632][T15301] geneve2 (unregistering): left allmulticast mode [ 409.252262][T15301] team0: Port device bridge8 removed [ 409.294872][T15301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.307622][T15301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.317932][T15301] bond0 (unregistering): Released all slaves [ 409.328323][T15301] bond1 (unregistering): Released all slaves [ 409.341598][T15301] bond2 (unregistering): Released all slaves [ 409.360013][T15301] bond3 (unregistering): Released all slaves [ 409.377683][T15301] bond4 (unregistering): Released all slaves [ 409.390897][T15301] bond5 (unregistering): Released all slaves [ 409.404497][T15301] bond6 (unregistering): Released all slaves [ 409.430290][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.431879][T15301] bond7 (unregistering): Released all slaves [ 409.454112][T15301] bond8 (unregistering): Released all slaves [ 409.473674][T15301] bond9 (unregistering): Released all slaves [ 409.488343][T15301] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 409.498696][T15301] bond10 (unregistering): Released all slaves [ 409.520228][T15301] bond11 (unregistering): Released all slaves [ 409.559941][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.567180][T15299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.609244][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.616474][T15299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.793944][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 409.898341][T18812] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3316'. [ 409.913405][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'. [ 409.932655][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 409.958072][T15301] : left promiscuous mode [ 410.472848][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 410.517776][T15301] tipc: Disabling bearer [ 410.543397][T15301] tipc: Left network mode [ 410.602199][ T6338] bond1: (slave bridge2): failed to get link speed/duplex [ 410.743337][T15298] bond1: (slave bridge2): failed to get link speed/duplex [ 410.932150][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 411.175864][ T33] bond1: (slave bridge2): failed to get link speed/duplex [ 411.274993][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 411.386299][ T6334] bond1: (slave bridge2): failed to get link speed/duplex [ 411.475790][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 411.522896][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 411.572219][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 412.052731][T18451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.319477][T18935] syzkaller1: entered promiscuous mode [ 412.338162][T18935] syzkaller1: entered allmulticast mode [ 412.351349][T18937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3338'. [ 412.505944][T18451] veth0_vlan: entered promiscuous mode [ 412.615950][T15301] hsr_slave_0: left promiscuous mode [ 412.635834][T15301] hsr_slave_1: left promiscuous mode [ 412.649280][T15301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.660570][T15301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.669640][T15301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.677397][T15301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.687178][T15301] batman_adv: batadv0: Interface deactivated: dummy0 [ 412.694480][T15301] batman_adv: batadv0: Removing interface: dummy0 [ 412.767873][T15301] veth1_vlan: left promiscuous mode [ 412.788734][T15301] veth0_vlan: left promiscuous mode [ 413.322197][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 413.347709][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'. [ 413.357857][T15301] team0 (unregistering): Port device team_slave_1 removed [ 413.426499][T15301] team0 (unregistering): Port device team_slave_0 removed [ 413.718194][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 413.731817][T18451] veth1_vlan: entered promiscuous mode [ 413.735207][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'. [ 413.741502][T18949] lo speed is unknown, defaulting to 1000 [ 413.755824][ T6330] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.779353][ T6330] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.830794][ T6330] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.852188][ T6330] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.041116][T18978] syzkaller0: entered promiscuous mode [ 414.049535][T18978] syzkaller0: entered allmulticast mode [ 416.644872][T18980] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3351'. [ 416.658811][T18986] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 416.727938][T18451] veth0_macvtap: entered promiscuous mode [ 416.778740][T18451] veth1_macvtap: entered promiscuous mode [ 416.886548][T18451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.925961][T18451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.947486][T15299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.980819][T15299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.010711][T15299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.024720][T15301] IPVS: stop unused estimator thread 0... [ 417.044667][T15299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.096883][T19003] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3357'. [ 417.107267][ T80] net_ratelimit: 6 callbacks suppressed [ 417.107286][ T80] bond1: (slave bridge2): failed to get link speed/duplex [ 417.262170][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 417.397114][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.407897][T19011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3358'. [ 417.428115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.495780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.502778][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 417.509690][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.601154][T19017] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 417.634439][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 417.650109][T19017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3360'. [ 417.695358][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 417.728883][T19021] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 417.755414][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 417.886066][T19024] netlink: 'syz.3.3362': attribute type 4 has an invalid length. [ 417.894038][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 417.946808][T19024] netlink: 'syz.3.3362': attribute type 8 has an invalid length. [ 417.978512][T19024] netlink: 'syz.3.3362': attribute type 4 has an invalid length. [ 418.209543][T19030] syzkaller0: entered promiscuous mode [ 418.224568][T19030] syzkaller0: entered allmulticast mode [ 419.029883][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.000703][T19054] netlink: 'syz.4.3369': attribute type 178 has an invalid length. [ 421.087321][T19044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.179583][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 421.272278][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 421.278503][T19061] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 421.458774][T19074] bond3: option min_links: invalid value (18446744073709551612) [ 421.459454][T19084] netlink: 'syz.0.3378': attribute type 3 has an invalid length. [ 421.512592][T19074] bond3: option min_links: allowed values 0 - 2147483647 [ 421.541391][T19074] bond3 (unregistering): Released all slaves [ 421.582540][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 421.629998][T19094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3379'. [ 421.648805][T15301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.696005][T15301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.987974][T19106] tipc: Enabling of bearer rejected, failed to enable media [ 422.207788][T19105] syzkaller0: entered promiscuous mode [ 422.229054][T19105] syzkaller0: entered allmulticast mode [ 422.263552][ T80] net_ratelimit: 3 callbacks suppressed [ 422.263573][ T80] bond1: (slave bridge2): failed to get link speed/duplex [ 422.448817][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 422.475069][T19115] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3382'. [ 422.568179][T19127] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 422.582117][T19127] netlink: 'syz.1.3386': attribute type 7 has an invalid length. [ 422.590011][T19127] netlink: 'syz.1.3386': attribute type 8 has an invalid length. [ 422.599629][T19127] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3386'. [ 422.609264][T19127] NCSI netlink: No device for ifindex 1073545264 [ 425.122833][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 425.272208][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 425.322181][T19141] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3390'. [ 425.349238][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3390'. [ 425.415881][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 425.541054][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3392'. [ 425.552084][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 425.588072][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 425.692697][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 425.802675][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 425.857169][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 425.867363][T19163] bridge1: entered promiscuous mode [ 425.882579][T19163] bridge1: entered allmulticast mode [ 425.945279][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 426.014902][T19171] netlink: 'syz.2.3399': attribute type 32 has an invalid length. [ 426.072124][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 426.212870][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 426.284825][T19182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3402'. [ 426.324373][T19182] netlink: 'syz.2.3402': attribute type 21 has an invalid length. [ 426.332644][T19182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3402'. [ 426.341901][T19182] netlink: 'syz.2.3402': attribute type 5 has an invalid length. [ 426.609747][T19192] lo speed is unknown, defaulting to 1000 [ 427.283028][ T6336] net_ratelimit: 8 callbacks suppressed [ 427.283048][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 427.480181][T16233] udevd[16233]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 427.593630][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 427.732793][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 427.873047][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 428.022084][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 428.147233][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 428.282122][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 428.389003][T19231] __nla_validate_parse: 3 callbacks suppressed [ 428.389024][T19231] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3412'. [ 428.410598][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 428.429650][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 428.486024][T15301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.504348][T15301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.562162][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 428.623084][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 428.631600][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.918567][T19263] sctp: [Deprecated]: syz.0.3420 (pid 19263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.918567][T19263] Use struct sctp_sack_info instead [ 429.066733][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 429.376577][T19283] lo speed is unknown, defaulting to 1000 [ 429.684342][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3430'. [ 429.897028][T19277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 429.923727][T19277] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 429.935474][T19307] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3433'. [ 430.112111][T19277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 430.123368][T19277] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 430.129024][T19319] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 430.185395][T19319] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3436'. [ 430.192764][T19277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 430.214531][T19277] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 430.318709][T19277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 430.328090][T19277] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 430.406450][T19277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 430.424712][T19277] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 430.467669][T19325] PKCS7: Unknown OID: [4] (bad) [ 430.473085][T19325] PKCS7: Only support pkcs7_signedData type [ 430.821464][T19338] macsec1: entered promiscuous mode [ 431.018408][T19355] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 431.046638][T19355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3443'. [ 431.067878][T19355] NCSI netlink: No device for ifindex 0 [ 431.205716][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 431.780811][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 431.942488][T19370] vlan0: entered promiscuous mode [ 432.025042][T19380] Bluetooth: MGMT ver 1.23 [ 432.139582][T19385] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 432.233215][T19388] Cannot find del_set index 0 as target [ 432.294230][T19382] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.301690][T19382] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.327504][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 432.361932][T19391] netlink: 'syz.2.3457': attribute type 11 has an invalid length. [ 432.539045][ T30] audit: type=1800 audit(1784683288.852:19): pid=19383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3454" name="memory.events" dev="tmpfs" ino=100 res=0 errno=0 [ 432.618120][T19382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.639005][T19382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.782888][ T8549] net_ratelimit: 56 callbacks suppressed [ 432.782905][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.810952][T19382] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 432.828918][T19382] vlan2: left allmulticast mode [ 432.835747][T19382] bond1: left allmulticast mode [ 432.840642][T19382] geneve2: left allmulticast mode [ 432.868526][T19415] nbd: nbd3 already in use [ 432.920651][T15301] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.940803][T15301] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.963583][T15301] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.022218][T19415] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 433.121137][T15301] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.194863][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 433.323844][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 433.490676][T19442] netlink: 'syz.0.3466': attribute type 1 has an invalid length. [ 433.545240][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 433.639597][T19442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.662461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.674684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.683085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.698041][T19447] bond5: (slave geneve2): making interface the new active one [ 433.716411][T19447] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 433.736129][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 433.759155][T19432] netlink: 'syz.0.3466': attribute type 4 has an invalid length. [ 433.822427][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.202882][T19475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.268447][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3475'. [ 434.804150][T19519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3483'. [ 435.179086][T19530] lo speed is unknown, defaulting to 1000 [ 435.571606][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3489'. [ 435.811147][T19551] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 435.936802][T19551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.987331][T19553] : renamed from dummy0 [ 436.136416][T19563] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 436.231907][T19563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.359677][T19566] bond6: (slave veth3): Enslaving as an active interface with a down link [ 436.421825][T19566] netlink: 'syz.0.3494': attribute type 2 has an invalid length. [ 436.460590][T19563] bond6: (slave veth5): Enslaving as an active interface with a down link [ 436.988800][T19598] lo speed is unknown, defaulting to 1000 [ 437.027225][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 437.168810][T19611] syzkaller0: entered promiscuous mode [ 437.177233][T19611] syzkaller0: entered allmulticast mode [ 437.414437][T19615] bond0: (slave bridge0): Releasing backup interface [ 437.437274][T19615] bridge_slave_0: left allmulticast mode [ 437.448798][T19615] bridge_slave_0: left promiscuous mode [ 437.461176][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.481641][T19615] bridge_slave_1: left allmulticast mode [ 437.509333][T19615] bridge_slave_1: left promiscuous mode [ 437.525142][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.556494][T19615] bond0: (slave bond_slave_0): Releasing backup interface [ 437.575717][T19615] bond0: (slave bond_slave_1): Releasing backup interface [ 437.584821][ T1668] block nbd0: Possible stuck request ffff88805f6c0000: control (read@0,4096B). Runtime 90 seconds [ 437.605639][T19615] team0: Port device team_slave_0 removed [ 437.623777][T19615] team0: Port device team_slave_1 removed [ 437.648763][T19615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.684602][T19619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3507'. [ 437.703496][T19615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.798681][T19613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3505'. [ 437.835696][ T6326] net_ratelimit: 27 callbacks suppressed [ 437.835716][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 437.884919][T19621] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3508'. [ 437.983490][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 437.984808][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.038264][T19623] macsec0: entered promiscuous mode [ 438.055968][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'. [ 438.087993][T19623] veth1_macvtap: left promiscuous mode [ 438.130024][T19623] macsec0 (unregistering): left promiscuous mode [ 438.172055][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 438.223693][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.223815][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.282844][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 438.364751][T19625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3511'. [ 438.392466][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 438.427193][T19628] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 438.452643][T19628] syzkaller1: linktype set to 0 [ 438.513103][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 438.632799][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 442.922169][ T6336] net_ratelimit: 43 callbacks suppressed [ 442.922189][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 443.042159][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 443.152191][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 443.182583][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.262160][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 443.342815][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.352864][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.372112][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 443.482193][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 443.592306][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 448.032909][ T6330] net_ratelimit: 47 callbacks suppressed [ 448.032930][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 448.152221][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 448.262139][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 448.372208][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 448.382789][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.482476][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 448.592445][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 448.702443][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 448.812245][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 448.922223][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 453.122468][ T6326] net_ratelimit: 43 callbacks suppressed [ 453.122489][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 453.242242][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 453.352204][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 453.462404][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 453.572679][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 453.582912][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.592897][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.682708][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 453.742463][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.792488][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 458.192617][ T6332] net_ratelimit: 46 callbacks suppressed [ 458.192640][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 458.312831][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 458.422268][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 458.532458][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 458.642452][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 458.752483][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 458.782389][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.862258][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 458.972464][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 459.082326][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 463.272433][ T6330] net_ratelimit: 43 callbacks suppressed [ 463.272450][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 463.392220][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 463.502321][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 463.612488][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 463.722690][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 463.832158][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 463.942687][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 463.983681][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.991810][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.052236][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 467.663508][ T1668] block nbd0: Possible stuck request ffff88805f6c0000: control (read@0,4096B). Runtime 120 seconds [ 468.352632][T15301] net_ratelimit: 44 callbacks suppressed [ 468.352653][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 468.472253][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 468.582497][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 468.692517][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 468.802294][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 468.912474][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 469.032457][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 469.142485][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 469.182529][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.252245][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 473.425489][ T5812] net_ratelimit: 44 callbacks suppressed [ 473.425508][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.452455][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 473.562347][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 473.672221][ T6336] bond1: (slave bridge2): failed to get link speed/duplex [ 473.792528][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 473.902602][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 474.012168][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 474.069780][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.122446][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 474.232439][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 475.838473][T19649] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 475.868108][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 476.023639][T19650] tunl0: Caught tx_queue_len zero misconfig [ 476.088323][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3521'. [ 476.107578][T19652] bond1: (slave bridge1): making interface the new active one [ 476.124298][T19652] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 476.752969][T19671] syzkaller0: entered promiscuous mode [ 476.767648][T19671] syzkaller0: entered allmulticast mode [ 476.926241][T19704] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 477.215115][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3534'. [ 477.291520][T19727] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 477.431344][T19731] IPVS: set_ctl: invalid protocol: 20 100.1.1.0:20004 [ 477.454699][T19733] veth0: entered promiscuous mode [ 477.511846][T19733] veth0: left promiscuous mode [ 477.701870][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 477.728795][T19745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3540'. [ 477.767295][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 477.909890][T19760] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3544'. [ 477.923462][T19758] sctp: [Deprecated]: syz.0.3542 (pid 19758) Use of int in maxseg socket option. [ 477.923462][T19758] Use struct sctp_assoc_value instead [ 477.940076][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 477.956521][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3543'. [ 478.156040][T19763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.169079][T19763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.179818][T19781] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3547'. [ 478.267896][T19773] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 478.277228][T15301] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.369193][ T6332] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.383229][ T6332] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 478.501221][T19763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.513580][T19763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.527079][T19763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.554288][ T5352] net_ratelimit: 36 callbacks suppressed [ 478.554305][ T5352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.592410][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 478.726377][T19789] ip6erspan0: entered allmulticast mode [ 478.752779][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 478.841240][T19763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.853074][T19763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.865385][T19763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 478.902419][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 479.025345][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.038510][T19763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.064020][T19763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.086067][T19763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 479.124860][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 479.221308][T19812] netlink: 'syz.2.3556': attribute type 12 has an invalid length. [ 479.272117][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 479.457641][ T6332] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.487545][ T6332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.506922][ T6332] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.555812][T19808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.566642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.645279][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.755770][T19836] bond7: option lacp_rate: invalid value (3) [ 479.776145][T19836] bond7 (unregistering): Released all slaves [ 479.835741][ T6332] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.848907][ T6332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.859548][ T6332] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.868463][T15301] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.899382][T15301] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.911005][T15301] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.934553][T15301] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.944453][T15301] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 479.953402][T15301] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 480.197181][T19859] bond0: Caught tx_queue_len zero misconfig [ 481.052921][T19904] lo speed is unknown, defaulting to 1000 [ 481.261344][T19916] syzkaller0: entered promiscuous mode [ 481.278725][T19916] syzkaller0: entered allmulticast mode [ 481.486850][T19904] xt_limit: Overflow, try lower: 2/2147483648 [ 481.841406][T19926] ip6tnl2: entered allmulticast mode [ 481.876197][T15299] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.893907][T15299] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.902766][ T9887] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.936078][T19934] netlink: 'syz.1.3587': attribute type 9 has an invalid length. [ 481.944821][T19934] netlink: 'syz.1.3587': attribute type 5 has an invalid length. [ 481.955383][T19934] __nla_validate_parse: 6 callbacks suppressed [ 481.955400][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 482.077711][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 482.087227][T19940] sctp: [Deprecated]: syz.2.3590 (pid 19940) Use of int in max_burst socket option. [ 482.087227][T19940] Use struct sctp_assoc_value instead [ 482.154457][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 482.168547][T19944] SET target dimension over the limit! [ 482.180317][T19945] macvlan2: entered allmulticast mode [ 482.195515][T19940] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.259612][T19948] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 482.863008][ T9887] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.871146][ T8549] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 483.198865][T19972] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3598'. [ 483.211413][T19972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3598'. [ 483.497585][T19984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3600'. [ 483.642570][ T12] net_ratelimit: 46 callbacks suppressed [ 483.642591][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 483.665338][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.691367][T19981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.724839][T19981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.789890][T19997] lo speed is unknown, defaulting to 1000 [ 483.795858][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 483.822862][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.933588][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 484.064379][ T6332] bond1: (slave bridge2): failed to get link speed/duplex [ 484.172125][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 484.259316][T19997] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3605'. [ 484.292693][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 484.300261][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 484.323115][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 484.332804][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 484.688652][T20034] netlink: 'syz.3.3615': attribute type 25 has an invalid length. [ 485.205461][T20060] netlink: 'syz.1.3622': attribute type 1 has an invalid length. [ 485.822238][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.238706][T20093] ip6tnl0: Caught tx_queue_len zero misconfig [ 486.905695][T17285] udevd[17285]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 486.936103][T16233] udevd[16233]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.148399][T20132] __nla_validate_parse: 12 callbacks suppressed [ 487.148418][T20132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3641'. [ 487.329907][T17285] udevd[17285]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.364680][T20144] dvmrp8: entered allmulticast mode [ 487.374423][T16233] udevd[16233]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.566674][T20156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3647'. [ 487.802146][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 488.168101][T20193] 8021q: VLANs not supported on vcan0 [ 488.433429][T20201] IPVS: length: 137 != 8 [ 488.481558][T20206] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3663'. [ 488.615873][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 488.633462][T20213] netlink: 'syz.1.3666': attribute type 3 has an invalid length. [ 488.649394][T20213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3666'. [ 488.729893][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 488.737748][T20213] syzkaller0: entered promiscuous mode [ 488.744658][T20213] syzkaller0: entered allmulticast mode [ 491.345896][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.437043][T20225] ip6tnl4: entered allmulticast mode [ 491.479679][T20229] syzkaller0: entered promiscuous mode [ 491.501060][T20229] syzkaller0: entered allmulticast mode [ 491.543920][T15299] net_ratelimit: 46 callbacks suppressed [ 491.543952][T15299] bond1: (slave bridge2): failed to get link speed/duplex [ 491.561379][T20244] IPv6: addrconf: prefix option has invalid lifetime [ 491.594010][ T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.601747][ T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.618220][ T9887] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 491.815751][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 491.983440][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.991698][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.999924][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.008104][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.018135][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.026345][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.034506][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.302683][ T5352] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 492.383009][ T5352] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 492.452860][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3687'. [ 492.581600][T20303] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3688'. [ 492.625955][T20303] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3688'. [ 492.661704][T20303] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3688'. [ 492.681673][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3688'. [ 492.682660][T20303] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3688'. [ 492.725498][T20303] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3688'. [ 493.256605][T20328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3694'. [ 493.301707][T20330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3695'. [ 493.577460][T20338] lo speed is unknown, defaulting to 1000 [ 493.607906][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 493.643794][T20345] netlink: 'syz.3.3696': attribute type 10 has an invalid length. [ 493.675458][T20345] geneve2: entered promiscuous mode [ 493.685299][T20345] geneve2: entered allmulticast mode [ 493.767325][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045f3ec00: rx timeout, send abort [ 493.775869][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045f3ec00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 493.902201][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 494.295381][T20363] vlan2: entered allmulticast mode [ 494.322772][T20363] bridge2: entered allmulticast mode [ 494.435555][T20372] syzkaller0: entered promiscuous mode [ 494.455183][T20372] syzkaller0: entered allmulticast mode [ 494.479083][T20360] bond0: Caught tx_queue_len zero misconfig [ 495.586108][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 496.472963][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 497.731904][T20360] netlink: 'syz.0.3705': attribute type 2 has an invalid length. [ 497.740954][T20389] lo: Caught tx_queue_len zero misconfig [ 497.747055][ T6326] net_ratelimit: 16 callbacks suppressed [ 497.747070][ T6326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.747198][ T6326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.747245][ T6326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.747290][ T6326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.751013][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.754251][ T1668] block nbd0: Possible stuck request ffff88805f6c0000: control (read@0,4096B). Runtime 150 seconds [ 497.762236][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.762291][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.824793][ T9887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.833785][ T80] bond1: (slave bridge2): failed to get link speed/duplex [ 497.936931][T20396] lo speed is unknown, defaulting to 1000 [ 497.953233][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 498.133154][T20434] __nla_validate_parse: 4 callbacks suppressed [ 498.133174][T20434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3717'. [ 498.168913][T20432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3714'. [ 498.310394][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3719'. [ 498.333763][T20439] netlink: 'syz.4.3719': attribute type 10 has an invalid length. [ 498.352483][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3719'. [ 501.484796][T20452] netlink: 'syz.1.3723': attribute type 1 has an invalid length. [ 501.642281][T20458] bond3: (slave gretap1): making interface the new active one [ 501.652900][T20458] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 501.663175][T20457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.761868][T20457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.060996][T20476] netlink: 'syz.3.3728': attribute type 29 has an invalid length. [ 502.101388][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3728'. [ 502.124069][T20476] pim6reg1: entered promiscuous mode [ 502.136869][T20476] pim6reg1: entered allmulticast mode [ 502.466800][T20471] netlink: 'syz.1.3727': attribute type 9 has an invalid length. [ 502.545017][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3735'. [ 502.832103][ T80] net_ratelimit: 11 callbacks suppressed [ 502.832122][ T80] bond1: (slave bridge2): failed to get link speed/duplex [ 502.918912][T20516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.982290][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 502.995912][T20516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3739'. [ 503.036682][ T5628] block nbd0: Receive control failed (result -107) [ 503.057538][T20516] block nbd0: reconnected socket [ 503.089689][T20527] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 503.122808][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 503.304781][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 503.462245][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 503.500077][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'. [ 503.509288][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 503.623271][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 503.666753][T20548] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.699993][T20548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.765913][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.783970][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.793852][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.817556][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.845462][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.868409][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.885218][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 503.898891][T20549] lo speed is unknown, defaulting to 1000 [ 504.901580][T20574] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 504.911089][T20577] netlink: 'syz.2.3756': attribute type 3 has an invalid length. [ 504.957155][T20579] pimreg: entered allmulticast mode [ 504.989340][T20571] lo speed is unknown, defaulting to 1000 [ 505.142595][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 505.209602][T20590] nbd: must specify a size in bytes for the device [ 505.556956][T20602] tipc: Enabled bearer , priority 10 [ 506.043585][T20619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.155490][T20626] netlink: 'syz.0.3770': attribute type 15 has an invalid length. [ 506.298004][T20633] netlink: 'syz.4.3773': attribute type 10 has an invalid length. [ 506.481168][T20641] netlink: 'syz.2.3776': attribute type 9 has an invalid length. [ 506.529919][T20641] netlink: 'syz.2.3776': attribute type 6 has an invalid length. [ 506.749690][ T6330] [ 506.752055][ T6330] ====================================================== [ 506.759096][ T6330] WARNING: possible circular locking dependency detected [ 506.766215][ T6330] syzkaller #0 Not tainted [ 506.770617][ T6330] ------------------------------------------------------ [ 506.777664][ T6330] kworker/u8:11/6330 is trying to acquire lock: [ 506.783889][ T6330] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 506.793594][ T6330] [ 506.793594][ T6330] but task is already holding lock: [ 506.800956][ T6330] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 506.810334][ T6330] [ 506.810334][ T6330] which lock already depends on the new lock. [ 506.810334][ T6330] [ 506.820754][ T6330] [ 506.820754][ T6330] the existing dependency chain (in reverse order) is: [ 506.829756][ T6330] [ 506.829756][ T6330] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 506.837328][ T6330] __mutex_lock+0x19d/0x1550 [ 506.842509][ T6330] __alloc_workqueue+0xa9c/0x2060 [ 506.848059][ T6330] alloc_workqueue_noprof+0xe3/0x210 [ 506.853860][ T6330] padata_alloc+0xbe/0x360 [ 506.858841][ T6330] pcrypt_init_padata+0x27/0x100 [ 506.864385][ T6330] pcrypt_init+0x60/0xc0 [ 506.869329][ T6330] do_one_initcall+0x250/0x870 [ 506.874604][ T6330] do_initcall_level+0x10a/0x1a0 [ 506.880110][ T6330] do_initcalls+0x59/0xa0 [ 506.884948][ T6330] kernel_init_freeable+0x29d/0x3e0 [ 506.890657][ T6330] kernel_init+0x1d/0x1d0 [ 506.895497][ T6330] ret_from_fork+0x514/0xb70 [ 506.900626][ T6330] ret_from_fork_asm+0x1a/0x30 [ 506.905921][ T6330] [ 506.905921][ T6330] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 506.913642][ T6330] cpus_read_lock+0x42/0x160 [ 506.918745][ T6330] static_key_slow_inc+0x12/0x30 [ 506.924204][ T6330] nbd_genl_reconfigure+0x1301/0x1e80 [ 506.930233][ T6330] genl_family_rcv_msg_doit+0x233/0x340 [ 506.936383][ T6330] genl_rcv_msg+0x614/0x7a0 [ 506.941404][ T6330] netlink_rcv_skb+0x226/0x4a0 [ 506.946677][ T6330] genl_rcv+0x28/0x40 [ 506.951173][ T6330] netlink_unicast+0x7bb/0x940 [ 506.956513][ T6330] netlink_sendmsg+0x813/0xb40 [ 506.961783][ T6330] sock_sendmsg_nosec+0x13a/0x180 [ 506.967318][ T6330] ____sys_sendmsg+0x54e/0x850 [ 506.972592][ T6330] ___sys_sendmsg+0x2a5/0x360 [ 506.977772][ T6330] __x64_sys_sendmsg+0x1b1/0x290 [ 506.983216][ T6330] do_syscall_64+0x174/0x580 [ 506.988321][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.994723][ T6330] [ 506.994723][ T6330] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 507.002355][ T6330] __mutex_lock+0x19d/0x1550 [ 507.007453][ T6330] nbd_queue_rq+0x373/0x1150 [ 507.012556][ T6330] blk_mq_dispatch_rq_list+0x499/0x1990 [ 507.018763][ T6330] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 507.025642][ T6330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 507.032246][ T6330] blk_mq_run_work_fn+0x16c/0x300 [ 507.037868][ T6330] process_scheduled_works+0xa8e/0x14e0 [ 507.043943][ T6330] worker_thread+0xa47/0xfb0 [ 507.049060][ T6330] kthread+0x388/0x470 [ 507.053656][ T6330] ret_from_fork+0x514/0xb70 [ 507.058760][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.064036][ T6330] [ 507.064036][ T6330] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 507.071235][ T6330] __mutex_lock+0x19d/0x1550 [ 507.076343][ T6330] nbd_queue_rq+0xc1/0x1150 [ 507.081367][ T6330] blk_mq_dispatch_rq_list+0x499/0x1990 [ 507.087422][ T6330] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 507.094281][ T6330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 507.100775][ T6330] blk_mq_run_work_fn+0x16c/0x300 [ 507.106335][ T6330] process_scheduled_works+0xa8e/0x14e0 [ 507.112399][ T6330] worker_thread+0xa47/0xfb0 [ 507.117500][ T6330] kthread+0x388/0x470 [ 507.122080][ T6330] ret_from_fork+0x514/0xb70 [ 507.127190][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.132470][ T6330] [ 507.132470][ T6330] -> #4 (set->srcu){.+.+}-{0:0}: [ 507.139591][ T6330] __synchronize_srcu+0xc9/0x2f0 [ 507.145100][ T6330] elevator_switch+0x1e8/0x7b0 [ 507.150466][ T6330] elevator_change+0x2fa/0x480 [ 507.155747][ T6330] elevator_set_default+0x375/0x440 [ 507.161474][ T6330] blk_register_queue+0x3f3/0x4e0 [ 507.167059][ T6330] __add_disk+0x6cb/0xe30 [ 507.171897][ T6330] add_disk_fwnode+0x100/0x3a0 [ 507.177199][ T6330] nbd_dev_add+0x733/0xb60 [ 507.182132][ T6330] nbd_init+0x15f/0x1e0 [ 507.186897][ T6330] do_one_initcall+0x250/0x870 [ 507.192182][ T6330] do_initcall_level+0x10a/0x1a0 [ 507.197664][ T6330] do_initcalls+0x59/0xa0 [ 507.202513][ T6330] kernel_init_freeable+0x29d/0x3e0 [ 507.208220][ T6330] kernel_init+0x1d/0x1d0 [ 507.213067][ T6330] ret_from_fork+0x514/0xb70 [ 507.218168][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.223446][ T6330] [ 507.223446][ T6330] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 507.231256][ T6330] __mutex_lock+0x19d/0x1550 [ 507.236361][ T6330] elevator_change+0x1af/0x480 [ 507.241640][ T6330] elevator_set_none+0xb5/0x140 [ 507.247000][ T6330] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 507.253321][ T6330] nbd_start_device+0x189/0xb30 [ 507.258686][ T6330] nbd_genl_connect+0x1597/0x1c10 [ 507.264225][ T6330] genl_family_rcv_msg_doit+0x233/0x340 [ 507.270285][ T6330] genl_rcv_msg+0x614/0x7a0 [ 507.275301][ T6330] netlink_rcv_skb+0x226/0x4a0 [ 507.280571][ T6330] genl_rcv+0x28/0x40 [ 507.285063][ T6330] netlink_unicast+0x7bb/0x940 [ 507.290367][ T6330] netlink_sendmsg+0x813/0xb40 [ 507.295651][ T6330] sock_sendmsg_nosec+0x13a/0x180 [ 507.301205][ T6330] ____sys_sendmsg+0x54e/0x850 [ 507.306493][ T6330] ___sys_sendmsg+0x2a5/0x360 [ 507.311685][ T6330] __x64_sys_sendmsg+0x1b1/0x290 [ 507.317130][ T6330] do_syscall_64+0x174/0x580 [ 507.322238][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.328647][ T6330] [ 507.328647][ T6330] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 507.337273][ T6330] blk_alloc_queue+0x544/0x690 [ 507.342587][ T6330] __blk_mq_alloc_disk+0x194/0x390 [ 507.348244][ T6330] nbd_dev_add+0x494/0xb60 [ 507.353181][ T6330] nbd_init+0x15f/0x1e0 [ 507.357851][ T6330] do_one_initcall+0x250/0x870 [ 507.363131][ T6330] do_initcall_level+0x10a/0x1a0 [ 507.368675][ T6330] do_initcalls+0x59/0xa0 [ 507.373510][ T6330] kernel_init_freeable+0x29d/0x3e0 [ 507.379305][ T6330] kernel_init+0x1d/0x1d0 [ 507.384147][ T6330] ret_from_fork+0x514/0xb70 [ 507.389259][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.394542][ T6330] [ 507.394542][ T6330] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 507.401757][ T6330] fs_reclaim_acquire+0x71/0x100 [ 507.407257][ T6330] prepare_alloc_pages+0x15b/0x650 [ 507.412881][ T6330] __alloc_frozen_pages_noprof+0x12f/0x380 [ 507.419232][ T6330] __alloc_pages_noprof+0x10/0x100 [ 507.424878][ T6330] pcpu_populate_chunk+0x181/0xb30 [ 507.430510][ T6330] pcpu_alloc_noprof+0xbca/0x1900 [ 507.436045][ T6330] xt_percpu_counter_alloc+0x145/0x1e0 [ 507.442128][ T6330] translate_table+0x129a/0x1f80 [ 507.447633][ T6330] ipt_register_table+0x112/0x310 [ 507.453162][ T6330] iptable_mangle_table_init+0x41/0x70 [ 507.459142][ T6330] xt_find_table_lock+0x311/0x400 [ 507.464696][ T6330] xt_request_find_table_lock+0x26/0x100 [ 507.470843][ T6330] do_ipt_get_ctl+0x77f/0x1300 [ 507.476114][ T6330] nf_getsockopt+0x26e/0x290 [ 507.481288][ T6330] ip_getsockopt+0x19e/0x230 [ 507.486444][ T6330] do_sock_getsockopt+0x51d/0x7e0 [ 507.491978][ T6330] __x64_sys_getsockopt+0x1a4/0x240 [ 507.497686][ T6330] do_syscall_64+0x174/0x580 [ 507.502784][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.509185][ T6330] [ 507.509185][ T6330] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 507.516900][ T6330] __lock_acquire+0x1520/0x2cf0 [ 507.522265][ T6330] lock_acquire+0x106/0x350 [ 507.527279][ T6330] __mutex_lock+0x19d/0x1550 [ 507.532375][ T6330] pcpu_alloc_noprof+0x231/0x1900 [ 507.537903][ T6330] __alloc_workqueue+0xb2c/0x2060 [ 507.543446][ T6330] alloc_workqueue_noprof+0xe3/0x210 [ 507.549263][ T6330] __rds_conn_create+0x130d/0x2250 [ 507.554990][ T6330] rds_conn_create+0x43/0x60 [ 507.560093][ T6330] rds_tcp_accept_one+0x44f/0xd40 [ 507.565740][ T6330] rds_tcp_accept_worker+0x1d/0x70 [ 507.571362][ T6330] process_scheduled_works+0xa8e/0x14e0 [ 507.577421][ T6330] worker_thread+0xa47/0xfb0 [ 507.582526][ T6330] kthread+0x388/0x470 [ 507.587120][ T6330] ret_from_fork+0x514/0xb70 [ 507.592234][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.597503][ T6330] [ 507.597503][ T6330] other info that might help us debug this: [ 507.597503][ T6330] [ 507.607712][ T6330] Chain exists of: [ 507.607712][ T6330] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 507.607712][ T6330] [ 507.620823][ T6330] Possible unsafe locking scenario: [ 507.620823][ T6330] [ 507.628279][ T6330] CPU0 CPU1 [ 507.633681][ T6330] ---- ---- [ 507.639043][ T6330] lock(wq_pool_mutex); [ 507.643273][ T6330] lock(cpu_hotplug_lock); [ 507.650282][ T6330] lock(wq_pool_mutex); [ 507.657027][ T6330] lock(pcpu_alloc_mutex); [ 507.661518][ T6330] [ 507.661518][ T6330] *** DEADLOCK *** [ 507.661518][ T6330] [ 507.669719][ T6330] 4 locks held by kworker/u8:11/6330: [ 507.675085][ T6330] #0: ffff888032755140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 507.686014][ T6330] #1: ffffc900033afc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 507.698698][ T6330] #2: ffff888077fbda60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 507.709391][ T6330] #3: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 507.719124][ T6330] [ 507.719124][ T6330] stack backtrace: [ 507.725000][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 507.725018][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 507.725029][ T6330] Workqueue: krdsd rds_tcp_accept_worker [ 507.725052][ T6330] Call Trace: [ 507.725059][ T6330] [ 507.725067][ T6330] dump_stack_lvl+0xe8/0x150 [ 507.725089][ T6330] print_circular_bug+0x2e1/0x300 [ 507.725105][ T6330] check_noncircular+0x12e/0x150 [ 507.725129][ T6330] __lock_acquire+0x1520/0x2cf0 [ 507.725149][ T6330] ? check_path+0x21/0x40 [ 507.725169][ T6330] ? check_noncircular+0xda/0x150 [ 507.725196][ T6330] ? add_lock_to_list+0xc7/0x100 [ 507.725217][ T6330] ? lockdep_unlock+0x5d/0xd0 [ 507.725232][ T6330] ? __lock_acquire+0x13e8/0x2cf0 [ 507.725253][ T6330] ? pcpu_alloc_noprof+0x231/0x1900 [ 507.725269][ T6330] lock_acquire+0x106/0x350 [ 507.725286][ T6330] ? pcpu_alloc_noprof+0x231/0x1900 [ 507.725307][ T6330] __mutex_lock+0x19d/0x1550 [ 507.725323][ T6330] ? pcpu_alloc_noprof+0x231/0x1900 [ 507.725339][ T6330] ? __pfx___mutex_trylock_common+0x10/0x10 [ 507.725355][ T6330] ? pcpu_alloc_noprof+0x231/0x1900 [ 507.725371][ T6330] ? trace_contention_end+0x3d/0x140 [ 507.725385][ T6330] ? __pfx___mutex_lock+0x10/0x10 [ 507.725398][ T6330] ? __mutex_lock+0x30d/0x1550 [ 507.725418][ T6330] ? __pfx___mutex_lock+0x10/0x10 [ 507.725433][ T6330] pcpu_alloc_noprof+0x231/0x1900 [ 507.725450][ T6330] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 507.725473][ T6330] __alloc_workqueue+0xb2c/0x2060 [ 507.725498][ T6330] alloc_workqueue_noprof+0xe3/0x210 [ 507.725520][ T6330] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 507.725542][ T6330] ? mutex_init_lockdep+0xdf/0x110 [ 507.725564][ T6330] __rds_conn_create+0x130d/0x2250 [ 507.725581][ T6330] ? __rds_conn_create+0x2d2/0x2250 [ 507.725603][ T6330] ? __pfx___rds_conn_create+0x10/0x10 [ 507.725621][ T6330] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 507.725722][ T6330] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 507.725740][ T6330] rds_conn_create+0x43/0x60 [ 507.725759][ T6330] rds_tcp_accept_one+0x44f/0xd40 [ 507.725780][ T6330] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 507.725800][ T6330] ? rcu_is_watching+0x15/0xb0 [ 507.725822][ T6330] ? process_scheduled_works+0xa20/0x14e0 [ 507.725837][ T6330] rds_tcp_accept_worker+0x1d/0x70 [ 507.725855][ T6330] process_scheduled_works+0xa8e/0x14e0 [ 507.725880][ T6330] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.725898][ T6330] ? assign_work+0x3cf/0x5d0 [ 507.725914][ T6330] worker_thread+0xa47/0xfb0 [ 507.725939][ T6330] kthread+0x388/0x470 [ 507.725958][ T6330] ? __pfx_worker_thread+0x10/0x10 [ 507.725973][ T6330] ? __pfx_kthread+0x10/0x10 [ 507.725992][ T6330] ret_from_fork+0x514/0xb70 [ 507.726013][ T6330] ? __pfx_ret_from_fork+0x10/0x10 [ 507.726031][ T6330] ? __switch_to+0xc89/0x1420 [ 507.726049][ T6330] ? __pfx_kthread+0x10/0x10 [ 507.726068][ T6330] ret_from_fork_asm+0x1a/0x30 [ 507.726086][ T6330] [ 508.017556][ T8549] net_ratelimit: 10 callbacks suppressed [ 508.017572][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.078322][T20655] syzkaller0: entered promiscuous mode [ 508.084901][T20655] syzkaller0: entered allmulticast mode [ 508.162087][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 508.272091][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 508.382098][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 508.492119][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 508.602478][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 508.712188][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 508.822465][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 508.932147][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 509.042107][T15301] bond1: (slave bridge2): failed to get link speed/duplex [ 509.912130][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 513.052348][ T49] net_ratelimit: 35 callbacks suppressed [ 513.052364][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 513.172087][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 513.292418][ T6326] bond1: (slave bridge2): failed to get link speed/duplex [ 513.402169][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 513.512431][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 513.622368][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 513.732162][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 513.842185][ T6330] bond1: (slave bridge2): failed to get link speed/duplex [ 513.952180][ T6341] bond1: (slave bridge2): failed to get link speed/duplex [ 514.062333][ T6341] bond1: (slave bridge2): failed to get link speed/duplex