last executing test programs: 5.324358563s ago: executing program 2 (id=3565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000030000000000000000000000000000faa496196ee317841f248ad2642aef0bd39b3fbfd69c5a032f86556727a1210ed2f36af0d7d485d9a92883e6929f16bb1ef3ea749d792309cd357d933f5f033a27e141d23ded05ccc842c22af3fb243260e2bbc90526ef20c6132ddf050a85625e9d6dd22a9878a458b6d0cf43f3e012483c7ff739b3b126", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028006001000000000001400060000000000000000000000ffff000000000a000100aaaaaaaaaa000000"], 0x60}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r2 = socket(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x5411, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@local, 0x2f, r5}) 5.177046591s ago: executing program 3 (id=3566): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x94) r0 = socket(0x28, 0x800, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) listen(r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000f0ffffff000000000000000000000000000000008e7d85bd49f0dd2bdcc28aa3d1962a3de45d359aaac608794406ea62ce197f990725f9091d45e229ab6a22d8091260734c9baf568470ffb52cd46710671e6ad9e23456c51d07d9aa36cf8b09b321dd2bcbc07cc7d5f284e72b4bc72eba84499b3c86e6812dc1e54b61dbdfb11e6a29f82d6bf447fb452550e7687c23b0cdfdc09fd62b49c049320405037bfed173f7160bd2b7396bfea063363e05fb3072d1269879941479ab7475b5725eef6130fb82c6e72a987fbdeaf21098a6e8c381593851818a0e4dddd32b742ef374"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f0000000700)="bcc9b1557de1fad0f955144629ed4d073c332f71380d02e3cff8923bf5d43921bc111a262f295a8eb5408fa8ebdc85bb3e11c51989f9a41aa6d0f635a6cb5e0115e5fe45ddd20093ea892a915f000000000000", 0x53}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_police={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff7fffffffffff7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x1, 0x0, 0x3, 0x86}, {0x25, 0x1, 0x6, 0x5, 0x7f, 0x3}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x44090}, 0x404c8d0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x38f}], 0x1, 0x45833af92e4b38ff, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000180)) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000950000000000000032dc19d95d644fd9cbd6070427f7e20edb7140ce781893aa6ac97849798f7d3f1b352b3094fa55266d7f7971cbd903f7f2098df3729f1b03b41903c018f358e660789fdbf8aecfd1e459fea85d619442d5dee5c5d9df8358af752e676ba38dda3e1e478ec0116b5b3b627fff396367b396"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4a}, 0x94) socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)="39e8fc2ff0471d088028231658e77e6a724923af3e4149cd44614f6f0a93258ebdcb885dfbe4ce90e8ffdc4e75bbcfbfec25162859d365e1a9c8ad2755972c3fdf061118e111353970b720a3aab10275418aee43a8e75f3f486a7cb692ce4cecc44448c8baa77488cd203360859cd5b660101f3e580c8a533a05ee605591841320f440b685bc96418d41bfc1c3d26af227d83cc24d659174c498be514ec14c7ca15044211ea74b088e3cc486f88f79bfe616eac520ae9c0b473c504e8e50f83bad47df", &(0x7f0000000580)="2c587082256513b04e0c50f44bfe8e12df4f98e3c0734304cdbd19ba705b86eedf0e7bbf0d4d92fd3ec49147239ea8be36713a32669ce601ea1fa54ee2686e0e181a218b6ac6a8ccc487dde4343bdd9c3a6c538f24c25941ac86a1d74c46cadbc6998d305f0a0b985ee4d72f09974376f1e16f08", 0x71}, 0x38) 5.008133169s ago: executing program 2 (id=3568): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007000000072e00"], 0x18}], 0x1}, 0x0) getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) 4.840200194s ago: executing program 2 (id=3571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) (async) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80833, r5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) close(r3) (async, rerun: 64) write(r1, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) unshare(0x20400) (async) r13 = socket$inet6(0xa, 0x2, 0x0) pwritev(r13, 0x0, 0x0, 0x3f, 0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="100027bd3000fedbdf020200000000000100", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x7c2}) 4.630722161s ago: executing program 2 (id=3573): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x47}, 0x3}, 0x24, &(0x7f0000000900)=[{&(0x7f0000000240)="29c0e858de698c3aac4b0000646d670d678593e520ed8e64e1e3a196a4a3db2f07d0aa902a9246261791a2c70b00bb46e630a346ae1ed05873eca5728ec51ad3d19a50b2516fd57112788c51b99b8ac6db7453f2da6b852a219c4af11aa9690d512bf37c1e467f62cb3184a1e9e685138e7fbc206f80607382838418decff6adf2c96cf3ae0f262ab79847ce7c067085c2a320a52d290b7d2c34f8b6a5eeb33e515ef6b7d34ec507457f6bfd2c1f623da5b25806b10af457946aeb9e8434039ef3fe916579b7c4b7e599723d03a57c01dc79d59d3cc6bea41f5afd0c65887559441c8e", 0x3}], 0x1}}], 0x1, 0x4c040) 4.513636767s ago: executing program 2 (id=3574): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) socket$packet(0x11, 0x3, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xc, &(0x7f0000000800)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xe, 0xe, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000880)='GPL\x00', 0x6, 0x42, &(0x7f00000008c0)=""/66, 0x41000, 0x10, '\x00', r10, 0x0, r0, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0x0, 0x4800000}, 0x10, 0x9aad, r0, 0x3, 0x0, &(0x7f0000000a00)=[{0x3, 0x1, 0x3}, {0x3, 0x4, 0x5, 0xa}, {0x0, 0x5, 0x2, 0x9}], 0x10, 0x6}, 0x94) 4.394883063s ago: executing program 4 (id=3577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@mcast1}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000002000000000000000000000d0a000000000000000000000604"], &(0x7f0000000f40)=""/4089, 0x9e, 0xff9, 0x1, 0x1}, 0x28) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480), 0x10) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000001fcffff0400000020000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000030000000300000000000900000200"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x0, 0x4, 0x4, @private0, @local, 0x10, 0x8, 0xd, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffff247, 0x0, r3, 0x1, '\x00', r4, r1, 0x5, 0x4, 0x2}, 0x50) 4.307985316s ago: executing program 0 (id=3578): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40851) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40851) r4 = accept4(r1, 0x0, &(0x7f0000000580), 0x800) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = socket$kcm(0x29, 0x0, 0x0) sendfile(r5, r1, &(0x7f00000006c0)=0x1000, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)={@private=0xa010102, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)={@private=0xa010102, 0x0, 0x0, 0x10, 0x0, [{@broadcast}]}}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3b4b, 0x14}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x28045}, 0x24044815) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f00000009c0)={'sit0\x00', r8, 0x8080, 0x7, 0x7, 0x1, {{0x2d, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0xa3, 0x4, 0x0, @empty, @multicast1, {[@noop, @noop, @ssrr={0x89, 0x7, 0xf9, [@multicast1]}, @timestamp_addr={0x44, 0x34, 0x94, 0x1, 0x6, [{@private=0xa010100, 0xf6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x400}, {@private=0xa010102, 0x800}, {@empty, 0x1}, {@remote, 0x9}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x0, [{@remote, 0x68a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0xa}, {@rand_addr=0x64010102, 0x1}, {@multicast1, 0x6}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @generic={0xa, 0x9, "e6583b10dfb218"}, @lsrr={0x83, 0x3, 0x29}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f00000009c0)={'sit0\x00', r8, 0x8080, 0x7, 0x7, 0x1, {{0x2d, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0xa3, 0x4, 0x0, @empty, @multicast1, {[@noop, @noop, @ssrr={0x89, 0x7, 0xf9, [@multicast1]}, @timestamp_addr={0x44, 0x34, 0x94, 0x1, 0x6, [{@private=0xa010100, 0xf6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x400}, {@private=0xa010102, 0x800}, {@empty, 0x1}, {@remote, 0x9}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x0, [{@remote, 0x68a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0xa}, {@rand_addr=0x64010102, 0x1}, {@multicast1, 0x6}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @generic={0xa, 0x9, "e6583b10dfb218"}, @lsrr={0x83, 0x3, 0x29}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044050}, 0x800) (async) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044050}, 0x800) writev(r5, &(0x7f0000000f40)=[{&(0x7f0000000c40)="f1ffba658cda80f37d75ae867102aae6e79393c3290209215cfd9d1942edaa19e317a36a65671457e25e3cce44311af4634bbd6d54c4bdf1f4022a69b388dc044d563fed39fdf17f2301cc17880135c6161aeda863a9b34d269236", 0x5b}, {&(0x7f0000000cc0)="e12522c290cb0d9dc54e2cefd967a04a1ee4f0a2d3dcc33f522c8f3d962cdd3ca1ceeb316e53fcaf6c59a12860d3e0bd83d2ed58ad4cb6cde2f051ed1be27e98e22c912ea5ffaaeb989804f128c7810479d0cda6269a72ca253d9cf74ed0b5981bc78606e308b2f5eeec60f416c27c757a2859bd63e500b8bc68ca7eb8adfee26bdee9b1d7fb11e901bbe76c", 0x8c}, {&(0x7f0000000d80)="a9d4f7f12448513126274df2a08c28f77de8408c726ccb6b37b1ebf6b7001408b3e8a4b4492a6859b45afb533c29d2ceedfc9b4e27773603712cd9b8667339c44090094633ce3085", 0x48}, {&(0x7f0000000e00)="193ee29ab934502d6cd5922ce2c8cb6cd36b8f3150c7", 0x16}, {&(0x7f0000000e40)="83aad25e63741069527c2f18af3104000de08aee2cc9647e0e0e612aa2aa1abb7373f945177234cdfe1f65ae660b51e2c5061c76bf9c7eb8b7645e906958f96a513dd324635ce7ee58f44f627807", 0x4e}, {&(0x7f0000000ec0)="93bd2c69e50292d651a6522bd266023174ed631172b392dc656c2b04c9d58472f4a9f365884ba8c6acabd9cde9dc445bf1b4f3cab403de5ea12827ca3fef8d2d8e8937e29a", 0x45}], 0x6) r11 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000010c0)) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000001200)={r1, &(0x7f0000001100)='\x00', 0x1015c0, &(0x7f0000001140)={@_ha_fsid={[0x3, 0x4]}, {0x101, 0x7, 0x6}}, 0xffffff01, &(0x7f0000001180), &(0x7f00000011c0)=0x5}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x2}, 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x1d, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c}}, @jmp={0x5, 0x0, 0xd, 0xa, 0x7, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x4, 0xc, 0x17, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000015c0)=[{0x3, 0x2, 0xe, 0xc}], 0x10, 0x2}, 0x94) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x1d, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c}}, @jmp={0x5, 0x0, 0xd, 0xa, 0x7, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x4, 0xc, 0x17, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000015c0)=[{0x3, 0x2, 0xe, 0xc}], 0x10, 0x2}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r8, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0xffffffffffffffff, 0xfffffff9, 0x18}, 0xc) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0xffffffffffffffff, 0xfffffff9, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r1, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_tracing={0x1a, 0xd, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @jmp={0x5, 0x0, 0x8, 0x2, 0x9, 0xfffffffffffffff0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xc5}, @generic={0x33, 0x0, 0x6, 0xb, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}]}, &(0x7f0000001340)='GPL\x00', 0x80, 0x0, 0x0, 0x100, 0x4, '\x00', r8, 0x1a, r11, 0x8, &(0x7f0000001380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0xf, 0x4, 0x3}, 0x10, 0x13e37, r14, 0x0, &(0x7f0000001840)=[r15, r16, r17, 0x1], &(0x7f0000001880), 0x10, 0x409}, 0x94) 4.214123993s ago: executing program 4 (id=3579): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000062002000000000005f809500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r9}, 0x94) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="f7850addcfbe1fbb66ec", 0xff3b}], 0x13, 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xfff8, 0x6}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000005c0)={r11, 0x4}, 0x8) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00c90fee", @ANYRES16=r4, @ANYBLOB="02002fbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 4.16682341s ago: executing program 0 (id=3580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "1f", "985a3a", 0x88a8}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8044010b800800090000000000080009000000000008000a"], 0x174}}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 3.912574014s ago: executing program 3 (id=3583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000c30000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.706141538s ago: executing program 4 (id=3584): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x13, 0x0, 0x0) (async) setsockopt$inet_int(r2, 0x29, 0x13, 0x0, 0x0) 3.702359869s ago: executing program 3 (id=3585): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={r1, &(0x7f0000000040)='#{.\\-:(-}\x00', 0x10040, &(0x7f0000000080)={@align=0xffffffffffffffff, {0x5, 0x81, 0x5, 0xaadc}}, 0xe86f, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={r1, &(0x7f0000000040)='#{.\\-:(-}\x00', 0x10040, &(0x7f0000000080)={@align=0xffffffffffffffff, {0x5, 0x81, 0x5, 0xaadc}}, 0xe86f, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0000000000fd000000000014000500000000000000000000000010"], 0x30}, 0x1, 0x11}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f00000001c0)='\x00', 0x0, &(0x7f0000000200)={@align=0x100000000, {0x1, 0x7, 0xbf, 0x3}}, 0x1, &(0x7f0000000240), &(0x7f0000000380)=0x5}, {[0x4, 0x8, 0x8, 0x2]}, 0x4, 0x0, &(0x7f00000003c0)}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x6, &(0x7f0000000280)={&(0x7f0000000300)={0x7c, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x0, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x0, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x0, 0x6, 0x38}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}}, 0x20000084) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 3.629500843s ago: executing program 1 (id=3586): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002140)=""/4100, &(0x7f0000001040)=0x1004) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 3.53433441s ago: executing program 0 (id=3587): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x80, 0x0}, 0x8001) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1401, 0x10, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000480)="b900030000e000000062079f4b00"/23, 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x16) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x599}], 0x1}, 0x400c000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3.43691222s ago: executing program 1 (id=3588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="98e400007306000005002100100000001c00168018"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) 3.435626091s ago: executing program 3 (id=3589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 3.377749178s ago: executing program 4 (id=3590): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) 3.287690901s ago: executing program 3 (id=3591): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0x7, 0x0, 0xb45, 0xffffff81, 0xf1]}, &(0x7f0000000240)=0x54) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 3.184606873s ago: executing program 4 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x81000000, 0x40098}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f00000001c0)=0xec) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) r7 = socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) socket$inet(0x2, 0xa, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x40, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0xfe47, 0x3, 0x5f43, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000440)="5286dd000000000015abe99db538", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) 570.414561ms ago: executing program 1 (id=3593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") 528.770769ms ago: executing program 3 (id=3594): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x80709d2b, 0x25dfdc00, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004844}, 0x30004880) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x80709d2b, 0x25dfdc00, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004844}, 0x30004880) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a01080000000000000800020000080900020073796a3000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r8, 0x80186e82, &(0x7f0000000040)={0x0, 0x0, 0x38, 0x0, 0x10001}) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r8, 0x80186e82, &(0x7f0000000040)={0x0, 0x0, 0x38, 0x0, 0x10001}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7, 0x400, 0x1, 0x20800, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x1}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f0000000400)={0x200, 0xffffffffffffff01, 0x5, 0x8000, 0x4, 0x0, [{0x7, 0x5, 0x1, '\x00', 0x200}, {0x80, 0x2, 0x7, '\x00', 0x84}, {0x800, 0x2, 0x400}, {0x9, 0x800, 0x8, '\x00', 0x10}]}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f0000000400)={0x200, 0xffffffffffffff01, 0x5, 0x8000, 0x4, 0x0, [{0x7, 0x5, 0x1, '\x00', 0x200}, {0x80, 0x2, 0x7, '\x00', 0x84}, {0x800, 0x2, 0x400}, {0x9, 0x800, 0x8, '\x00', 0x10}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r11, 0x0, 0x10048051) (async) sendmsg$BATADV_CMD_SET_MESH(r11, 0x0, 0x10048051) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) 458.683351ms ago: executing program 0 (id=3595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x30, r2, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 457.924986ms ago: executing program 1 (id=3596): ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000000)={0x100, 0x3}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='.\']\x00', 0x401000, &(0x7f0000000080)={@align=0x8000000000000000, {0x6, 0x5, 0xe, 0x292f}}, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{}, 0x1000, 0x3, 0x3f}) (async) close(r0) pread64(r0, &(0x7f00000001c0)=""/132, 0x84, 0xe6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIOCLEX(r2, 0x5451) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x278, 0x30}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r3, 0x2}, 0x8) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x1, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008045}, 0x20000800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x81}}, 0x4, 0x9}, &(0x7f0000000540)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={r4, 0x1d, 0x5f89, 0x6}, 0x10) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000005c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r5, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff, 0xf}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x40}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2589c33211"}, @NL80211_ATTR_KEY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000880)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r8, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001140)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000bc0)={0x50c, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2c, 0x80, [@ibss={0x6, 0x2, 0x7}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0xff, 0x1ffe, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x80}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_FTM_RESPONDER={0x1d4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcf, 0x3, "1e904be5a3634be4004402b82a447bc52ffc5894d9daa23dca39ed57a9549cb90eb33caef4629ec81623bf17022c47b148b8ab59e49693f98bd333139479fd0ff0c4d1261004681386d23b4226bdce762dc061b9438591060338628d0d97e6c381eaa5d1a8c993be44cfd90ae7cf0911cca2bd109a7453395ab6fb5ee0765f4aa3ca55c84a3d2ddd146ee333ae907c7e74bf199216bbc56540dd59ef0e00f4231aee1e076f92d7fbf8a407a3b82cc71166cb9f7207e97b9edce1d50f8febb7802200ebcaad7827b592986e"}, @NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "b093110dfcf772ec0fc07fa4949ba5b0bed3e078f614ee565b179d68b2aae31cfd68c8e970cb5b0aa91bd9b61791eab3c4baf0669020b935f009fdc79ad7e1637b984248aee525a46e271c4a0de280e4670e988626fec7e5c2277ab2d92984bba5387f1003fbbe20c1b44a407cef16591273ec5cdbdcd668a33e4ea1a19bf71823b15accf7bd2764cfd61deb11ea4a812404cca77d94a0865dd1653d7f1b433fca5101d99fcf7ea3c1df283b008052906ab2b3c99f75e99e81fda31d4144f95f2862d6627d460b59a898f5f899c546f2fd2c6644357e219ce9af56949bb9a9f51d26a3d682bacb64963571c072bc6835"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x92, 0x7f, [@ibss={0x6, 0x2, 0x7fff}, @random_vendor={0xdd, 0x88, "0c7bae3bc3b7a1781a4d3fb65b5f1ee2b02a5d65cb02a380e53fe29744d5ae853302ca3d6a48f1d86c99d7281efbdb2abba177de8788b1321b798fc680cfe3890692bf964e839a421e28c79df342ac0e9b15383c113fbdbdbf898e3983717f862c90b266daccfc44d86bb011ca3084542767bb3a566763f3998d9acf6db987640854be17dbbd6b66"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x41, 0x80, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x6, [{0x5}, {0x12, 0x1}, {0x24}, {0x30, 0x1}, {0x3, 0x1}, {0x2}]}, @random={0x10, 0x2b, "3c815afe76bced7a5f3a939befcf6d6a41fe9a3da11d41ca84880bf27975b48f60fdfb700edf8fbc03973a"}]}, @NL80211_ATTR_IE={0x5d, 0x2a, [@cf={0x4, 0x6, {0x4, 0x1, 0x101, 0x8}}, @perr={0x84, 0x4f, {0x8, 0x5, [{{}, @broadcast, 0x979, @void, 0x8}, {{}, @broadcast, 0x200, @void, 0x2d}, {{0x0, 0x1}, @device_b, 0xce, @value=@broadcast, 0xa}, {{}, @broadcast, 0x1000, @void, 0x38}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x16}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1be, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x5, 0xff, @broadcast, 0x3, 0x7, 0x6}}, @perr={0x84, 0xd5, {0x7, 0xd, [{{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x36}, {{}, @broadcast, 0xae6f, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x32}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0xa}, {{}, @device_b, 0x3, @void, 0x33}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x2a}, {{}, @device_b, 0x4, @void, 0x24}, {{}, @device_b, 0x3, @void, 0x15}, {{}, @device_a, 0x9, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x80000000, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@broadcast, 0x33}, {{}, @device_a, 0x9, @void, 0x18}]}}, @fast_bss_trans={0x37, 0xca, {0x3, 0x4, "bb4a70018693ca1d6aaa7c15e5ce5fe2", "d755dd7bfac0aeef232b32cc80c15d2a28751e5f03e5e35ac98d96f43d89ba06", "cd60c3493244565d5b25b5153ca6b8596bd1e9c9a8a9e0503794a71e8d7532b5", [{0x4, 0x21, "8c2751b756f0a0ad2b36d0158c3047710872940f0efb8302158c577d4f72d5d136"}, {0x1, 0x23, "3b64013e782241706b83434e2be4759a03fcf95eae95b01fd08cf242c4c38d87c20508"}, {0x1, 0x4, "0e59d820"}, {0x4, 0x28, "29bdf15602a51cd5f535548e0f9e70d16581db9cf57a0c1d80e9692bb0191dded65f30b1f07aa4df"}]}}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40002}, 0x8800) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r15, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) 367.982958ms ago: executing program 1 (id=3597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000070605000000000000000000030000040900020073797a32000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x400c811}, 0x8004) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}]}}}}}}}, 0x0) 325.517602ms ago: executing program 4 (id=3598): syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e21, @in6=@mcast2}}]}, 0x10c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 199.877966ms ago: executing program 0 (id=3599): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1, 0x282, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x9, 0x3, "91abc12404"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000a2759ce078cbcce6cbf3397cb3200e000000000300009c4fe9b6c7e5cc4948533f3e29460253e2dc76012d5c04b57bab1f1d98483178d4de4b9afb582a0991a3fa7eea669ee3468ac1a94e15f8d535bc421ea68801c0ccd504bd772ffd95f9082bb20a3af08b2868aab420009f4c232633868d40b05bfd347ec9019d7e703c9d2c98a6765d09"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xfffc, 0x9, @empty, 0x2}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0000000000000064089e2d"], 0x8) sendmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004041) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0x0, 0x1}, 0xfe}, 0x18) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042000}, 0x24040002) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000001400007cd94f52fb6512b5005b89643cc0a00000400114a4a851900"/41, @ANYRESOCT=r4, @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000855}, 0x20004004) 125.790995ms ago: executing program 1 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffff4a}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r2, 0x3, 0xf092, 0x2da}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x3, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @call={0x85, 0x0, 0x0, 0x15}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000400), 0x4) syz_emit_ethernet(0x1d, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/130, &(0x7f0000000340)=0x82) 53.95975ms ago: executing program 2 (id=3601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000300000204000180000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8011}, 0x40) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x24, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xef}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r9, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x8c0c0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x56, &(0x7f0000000300)={&(0x7f0000002440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_bpf={0x0, 0xe, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x0, 0x2, {0x8001, 0x7, 0x4, 0x7f, 0xffffffac}}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x2, 0x8, 0x8, 0x9}, {0x9, 0x1, 0x5f, 0x2}, {0x29cf, 0x1, 0xf, 0x7}, {0x10, 0x2, 0x7, 0x10000}, {0x4, 0x1, 0xc3, 0x80}, {0x6, 0x9, 0x7, 0xf}, {0xc, 0x81, 0x7, 0xc3d}, {0x9, 0x3, 0x9, 0xbf}, {0x800, 0x2, 0x0, 0x8}, {0x9, 0x1, 0x0, 0x401}]}, @TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x2, 0xd, 0x3f, 0x5}, {0x5, 0xa, 0x3, 0x3ff}, {0x4, 0x6, 0xd8, 0x8}, {0x7, 0x7, 0x7, 0x5}, {0x1, 0x6, 0xb0, 0x2}]}, @TCA_ACT_BPF_FD={0x0, 0x5, r1}]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x0, 0xb, 0x5}, @TCA_CHAIN={0x0, 0xb, 0x6}, @TCA_RATE={0x0, 0x5, {0x82, 0x2}}, @filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xffffffff}, @TCA_POLICE_TBF={0x0, 0x1, {0xab3b, 0x1, 0x2, 0x8, 0x2b, {0x8, 0x0, 0x9, 0x200, 0x7, 0x7fffffff}, {0x4, 0x2, 0x5, 0x2, 0x37, 0x97d}, 0x2, 0x5, 0x7ff}}]}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_TBF={0x0, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x7f, {0x5, 0x0, 0x8, 0x1, 0x9, 0x7}, {0x9, 0x0, 0x0, 0x800, 0x5}, 0x7, 0xab, 0x8000}}]}, @TCA_CGROUP_EMATCHES={0x0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x0, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="74c055228fb71f736127"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR="44822193", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="56c104ad0d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9617", @TCF_META_TYPE_VAR="b2111fed18"]}, @TCA_EM_META_HDR={0x0, 0x1, {{0x2, 0x0, 0x2}, {0x8001, 0x3, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x121, 0x3, 0x2}, {0x4, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0x0, 0x1, {{0x8, 0x20}, {0xc29, 0x0, 0x1}}}]}}, @TCF_EM_CONTAINER={0x0, 0x2, 0x0, 0x0, {{0x9759, 0x0, 0x6}, "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"}}, @TCF_EM_IPT={0x0, 0x1, 0x0, 0x0, {{0x401}, [@TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x54}]}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0x8000, 0x7, 0xff1c}, {{0x1, 0x1}, {0x2, 0x1}}}}, @TCF_EM_NBYTE={0x0, 0x2, 0x0, 0x0, {{0x4}, {0x3, 0x0, 0x2, '\\'}}}, @TCF_EM_CMP={0x0, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0x2, 0x8, 0xfff7, 0x2, 0x9, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x6}, @TCA_POLICE_TBF={0x0, 0x1, {0x5, 0x3, 0xf, 0x2, 0x6, {0x8, 0x2, 0x30, 0xc61, 0x2, 0x6}, {0x8, 0x2, 0x7, 0x5, 0x6, 0x1}, 0x8, 0x3, 0x1ff}}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x3, 0x310b39cf, 0x400, 0x689b15b0, 0x1ff, 0xe56, 0xe, 0x4, 0x7, 0x1, 0xffffffff, 0x1, 0x1, 0xff, 0x7, 0x2, 0x8e5f, 0xfffffffa, 0x61ca, 0xc, 0x1, 0x9, 0x4, 0x17c9, 0x9, 0x1000, 0x71, 0x9, 0x7, 0x52a2, 0x6, 0x4, 0x6, 0x5a41, 0x4, 0x2b, 0x400, 0x9, 0x8000, 0x8, 0x3, 0xe, 0x4, 0x7, 0xffffffff, 0x1, 0x1ec, 0x3, 0xffffffff, 0x356, 0x8, 0x4, 0x3, 0x8, 0x6, 0x3, 0x0, 0x6, 0xd1fe, 0x0, 0x40, 0x3fd8, 0x2a4fe998, 0x6, 0x3, 0xf2, 0xe, 0x3, 0x9, 0xe537, 0x0, 0x5, 0x1, 0xffff, 0x0, 0x8000, 0x3, 0x8, 0x8000, 0xda, 0x7, 0x387c7af7, 0x5ef1, 0x4, 0x101, 0x80d, 0xc, 0x5, 0x8000, 0x0, 0x2, 0xae, 0x0, 0x7, 0x8, 0x5, 0x1, 0x0, 0x101, 0x6, 0xf, 0x5, 0x5, 0x1, 0x4, 0x1, 0xfff, 0x5, 0x8000, 0x8, 0x1, 0x9a80, 0x400, 0xe, 0x0, 0x0, 0x1ff, 0xd0, 0x2, 0xfffffff9, 0x5, 0x1, 0xcf, 0x0, 0x7, 0x0, 0x700, 0x5, 0x2, 0x1, 0x8, 0x6, 0xb, 0x7, 0x1, 0x200, 0x5, 0x0, 0xc3, 0x2, 0xd, 0x0, 0x7, 0x8, 0x100, 0x8001, 0x7fffffff, 0x749, 0x8000, 0x4, 0x0, 0xb, 0x7, 0x10000, 0x27d, 0x8, 0x40, 0xffffffff, 0x5, 0x3, 0x2, 0x5, 0x4, 0x3e6, 0x5, 0x7f, 0x1a07, 0xe3de, 0x10000, 0x2, 0xffff, 0x1000, 0x9, 0x3ee, 0xa707, 0xfffffffa, 0x3, 0x3, 0x7f, 0x3, 0x1, 0x400, 0x6, 0x9, 0x3, 0x3ff, 0x5, 0x42fb, 0x4, 0x7a, 0x6, 0xb, 0x2a, 0x5, 0x26, 0xfffffff9, 0x4, 0xcbc, 0x16, 0x2, 0xf7f1, 0x3ff, 0xa2, 0xffff7698, 0xed0, 0x7f, 0x8, 0x3, 0x2, 0x3, 0xdd73, 0x4, 0x1000, 0x81, 0xdb6, 0x7, 0x5, 0x12f477c, 0xe514, 0x80, 0x4, 0x6, 0x8000, 0xfffffffe, 0x8, 0x7, 0x7, 0xfffffffa, 0x200, 0xffffffff, 0xffff, 0x1, 0x8, 0x8, 0x8, 0x9b, 0x1865, 0x87, 0x2, 0x2, 0x80000000, 0x4, 0x2, 0x1, 0x0, 0x7, 0x0, 0x6, 0x48e0b888, 0x1, 0x9, 0x9, 0x4, 0xb, 0x101, 0x1]}, @TCA_POLICE_RATE64={0x0, 0x8, 0xffffffff80000001}]}, @TCA_CGROUP_EMATCHES={0x0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x0, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x7f}, [@TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_NFPROTO, @TCA_EM_IPT_HOOK={0x0, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x0, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO, @TCA_EM_IPT_HOOK, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0xf}, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x1}]}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x0, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x7}, {0x1, 0xa09, 0xb, 0x7, 0x0, 0x2}}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x81}, {0x8, 0xc10, 0x3, 0x7, 0x8, 0x2}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x36c}, {0x0, 0x6, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0x8}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x0, 0x3, 0x0, 0x0, {{0xab4, 0x0, 0xef3}, "0ed36be0cb64b8c41f743da7ab"}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x8}, "73ab16b058748b72689f57af94d724754cde2c976753188b84b0721aae68bab16bee87c03b2cdc5eb15dad8d1b406f24ab1f86b493335b29db6ae8bc576a07c825f72611f8e1c667c1e93cb54770ac81f6074db3ebe88a0c4e2b9654ee1d382083ec5f05e9f69f92a0019fe21c64a774ecaadc44e759a90bd2f46eb355629219731e9170a43106a6dd3564a7e6c895b8ae9a620faea0a19f3a75e426676281de42505e4b"}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x40}, {0x1, 0x0, 0x2, "8fe22e80373ab71aeaaf"}}}, @TCF_EM_IPT={0x0, 0x3, 0x0, 0x0, {{0xc, 0x9, 0xa}, [@TCA_EM_IPT_HOOK={0x0, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x0, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x0, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x8}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "48949e8c324cb1bd0afd09617192dad6f50e295e9ba486cfb0f9e85a4a098b4be37b9072aa8c533ba7b1e4626be613111c9aa4a0d67f2ea1eba0e397f0d28e898013f528348dbedc46c42ee7b4b35cfa488e06700a11092aeccf2ddaf6fbb4a39e8385028bdc31e35d7da374e55303abf3ee5969c14023cb1d7a7c07ac3106403a795df7faa4cd1eaee6a0ad20991c6e3f743c83b2097a4ce58f6623d9f9c0d22b7ac61fb3fc6e2555f3726672d66058e94eecd63b29aae302b66207"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "bf350cbd44a0f9a7a439eea5bc5e9c0fc1d74b0cbb462a8e836ff30044f2841cce150f8f3b96c5608e8479f3f28da1eb397f3e47c426b2bff03930c81c5aae0f4a075e3a26e4f68b608ba748847e7e584bf16e54036ee106fc722292d397f0a9fe1bf78d382338e136306a8db6be43eb5b25c865c134bcb2457bac74572a6d234712af9aa7932c37124f9195463aa0316b6ab3a6f55e34f558060b2a003b26dff659"}]}}, @TCF_EM_CANID={0x0, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x100}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x60}, [@TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="8a79b10b6b47f13cb2"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="46312b51f6", @TCF_META_TYPE_INT=0x10000, @TCF_META_TYPE_VAR="2d7ac1b3ed"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="481c8cdaea8dba5d", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5ecd734116d68b", @TCF_META_TYPE_VAR="f6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0x0, 0x1, {{0xe, 0xc6}, {0x6, 0x2, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0xfffa, 0x6, 0x1}, {0x81, 0x80}}}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="49580cf3", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a7cc7c3d"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x1}}]}]}}, @TCA_CHAIN={0x0, 0xb, 0xfff}, @TCA_CHAIN={0x0, 0xb, 0x6}, @TCA_CHAIN={0x0, 0xb, 0x3}, @filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_OPS={{}, {0x0, 0x5, [{0x60, 0x5, 0x9, 0xfffffff2}, {0xfff, 0x4, 0x9e, 0x9}]}}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x9, 0xb, 0x5c, 0x8}, {0x6, 0x4, 0xf7}, {0x2, 0x3, 0xce, 0x8000}, {0xb93b, 0x2, 0xf, 0x9}, {0x0, 0x80, 0x8, 0x9}, {0x3, 0x8, 0x6, 0x6b46}, {0x4, 0xc8, 0x81, 0x8b0}]}}, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x2}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) (async, rerun: 32) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 0s ago: executing program 0 (id=3602): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) bind$alg(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x1a}, @jmp={0x5, 0x0, 0x3, 0x8, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}, @alu={0x3, 0x0, 0x2, 0xd, 0xd, 0x50}, @alu={0x7, 0x0, 0x7, 0x0, 0x6, 0x4, 0xfffffffffffffff8}, @generic={0x5, 0x9, 0xb, 0x4, 0x5}, @alu={0x7, 0x1, 0x0, 0x0, 0x2, 0x18, 0xffffffffffffffe9}, @call={0x85, 0x0, 0x0, 0xc3}, @ldst={0x2, 0x3, 0x1, 0x0, 0xe, 0xf8b0dc1477692453, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x12, '\x00', r7, @fallback, r2, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x8, 0x6, 0xe3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)=[r3, r0, r5, r3, r3, r5, r3, r1, r3, r5], &(0x7f0000000700)=[{0x1, 0x3, 0x10, 0x8}, {0x4, 0x5, 0xf, 0x6}, {0x4, 0x5, 0x5, 0x4}, {0x2, 0x5, 0x7, 0x5}, {0x1, 0x3, 0xc, 0x8}, {0x3, 0x2, 0x10, 0x5}, {0x0, 0x2, 0x3, 0x2}, {0x5, 0x4, 0x8}], 0x10, 0xffffffff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000840)={r3, r8, 0x4, r2}, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xdbe0, 0x3, 0x4361, 0x7, 0xfffffff7, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0xa, 0x1, {0x30, 0x7, 0x200, 0xfffffda8, 0x2, 0x81, 0x1, 0x3}}, {0xa, 0x2, [0x3, 0x6, 0x9]}}, {{0x1c, 0x1, {0x4, 0x4, 0xfffc, 0x700, 0x2, 0xffffff01, 0x4, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0x2, 0x9, 0x6, 0x3, 0x1, 0x8, 0x1000, 0x9}}, {0x16, 0x2, [0x9, 0xe069, 0xfff1, 0x4, 0x400, 0x2, 0x3, 0x0, 0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0xe, 0x8, 0x2, 0x1300, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x9c, 0x5, 0x2, 0x0, 0x1, 0x10, 0x6, 0x7}}, {0x12, 0x2, [0x7, 0x65c1, 0x5, 0x2, 0x8, 0x81, 0xc000]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc0008c0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000180)="c992fe2b4236aa716c6447e793f5", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0xc, r7, 0x1, 0x8, 0x6, @remote}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xf, 0x0}, 0x8) r12 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): a16038 R14: 00007f21f1a15fa0 R15: 00007ffdf11e70d8 [ 318.595998][T13632] [ 318.605379][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2270'. [ 318.837813][T13638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'. [ 319.342050][T13663] netlink: 'syz.2.2278': attribute type 2 has an invalid length. [ 319.388670][T13663] netlink: 'syz.2.2278': attribute type 2 has an invalid length. [ 319.404288][T13665] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 319.838017][T13684] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 319.857846][T13684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2288'. [ 319.878348][T13684] NCSI netlink: No device for ifindex 0 [ 319.960567][T13690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.971256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.161933][T13761] __nla_validate_parse: 1 callbacks suppressed [ 321.161955][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 321.249518][T13757] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2301'. [ 321.306269][T13757] netlink: 'syz.4.2301': attribute type 9 has an invalid length. [ 321.334249][T13757] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2301'. [ 321.364580][T13757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2301'. [ 321.786831][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'. [ 321.911906][T13797] syzkaller0: entered promiscuous mode [ 321.931244][T13797] syzkaller0: entered allmulticast mode [ 321.967700][T13797] tipc: Started in network mode [ 321.981978][T13797] tipc: Node identity , cluster identity 4711 [ 321.994550][T13797] tipc: Failed to obtain node identity [ 322.006981][T13797] tipc: Enabling of bearer rejected, failed to enable media [ 323.165588][T13861] tc_dump_action: action bad kind [ 323.820245][T13875] veth1_macvtap: renamed from veth0_vlan [ 324.233155][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.297261][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.331692][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.353220][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.391600][T13912] lo speed is unknown, defaulting to 1000 [ 324.391965][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.411535][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.424603][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.434238][T13921] xt_connbytes: Forcing CT accounting to be enabled [ 324.436436][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.452206][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.462602][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.483385][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.495135][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.505684][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.516204][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.544704][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 324.564568][T13905] ip_tunnel_core: Dead loop on virtual device gre1 (net 39), fix it urgently! [ 325.686435][T13973] netlink: 'syz.3.2342': attribute type 4 has an invalid length. [ 325.958037][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 327.218330][T14033] macsec0: entered promiscuous mode [ 327.235104][T14033] virt_wifi0: entered promiscuous mode [ 327.739137][T14040] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 327.745932][T13905] syz.4.2330 (13905) used greatest stack depth: 15360 bytes left [ 327.780407][T14040] bond5: entered promiscuous mode [ 327.801332][T14040] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.892897][T14051] geneve3: entered promiscuous mode [ 327.924980][ T54] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.939028][ T54] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.987075][ T54] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.029186][ T54] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.264146][T14076] netlink: 344 bytes leftover after parsing attributes in process `syz.0.2366'. [ 328.321741][T14081] netlink: 'syz.4.2368': attribute type 13 has an invalid length. [ 328.362447][T14081] netlink: 'syz.4.2368': attribute type 17 has an invalid length. [ 328.695962][T14081] 0ªX¹¦À: left allmulticast mode [ 328.751691][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 329.191006][T14115] syzkaller0: entered promiscuous mode [ 329.212862][T14115] syzkaller0: entered allmulticast mode [ 329.236717][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 329.374070][T14126] netlink: 'syz.4.2376': attribute type 13 has an invalid length. [ 329.403893][T14126] netlink: 'syz.4.2376': attribute type 17 has an invalid length. [ 329.500292][T14134] netlink: 'syz.2.2377': attribute type 10 has an invalid length. [ 329.729095][T14125] bridge0: port 3(veth0_to_bridge) entered disabled state [ 329.736917][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.744656][T14125] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.830305][T14143] net_ratelimit: 1009 callbacks suppressed [ 329.830327][T14143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.876948][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 329.925705][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 329.935581][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 329.970267][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 330.005506][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 330.015477][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 330.025020][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 330.348260][T14125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.722213][T14126] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.756270][T14126] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 330.783420][T14134] bond0: (slave wlan1): Opening slave failed [ 330.949065][ T7135] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.976307][ T7135] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.051493][T14167] tipc: Enabled bearer , priority 0 [ 331.116871][T14153] syzkaller0: entered promiscuous mode [ 331.122442][T14153] syzkaller0: entered allmulticast mode [ 331.145161][ T7135] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.170002][ T7135] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.219237][T14147] tipc: Resetting bearer [ 331.429357][T14193] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 331.541139][T14198] netlink: 'syz.3.2394': attribute type 20 has an invalid length. [ 331.549697][T14198] netlink: 'syz.3.2394': attribute type 21 has an invalid length. [ 331.752472][T14207] xt_nfacct: accounting object `syz0' does not exist [ 333.858499][T14147] tipc: Disabling bearer [ 333.888617][T10014] tipc: Node number set to 1329141561 [ 334.264573][T14222] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 334.301478][T14222] __nla_validate_parse: 63 callbacks suppressed [ 334.301499][T14222] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2400'. [ 334.379826][T14220] lo speed is unknown, defaulting to 1000 [ 334.424363][T14232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.437045][T14232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.466137][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 334.480881][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 334.528962][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 334.934890][T14246] syzkaller0: entered promiscuous mode [ 334.964061][T14246] syzkaller0: entered allmulticast mode [ 335.339031][T14266] tipc: Enabled bearer , priority 0 [ 335.459764][T14261] syzkaller0: entered promiscuous mode [ 335.467256][T14275] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 335.478576][T14261] syzkaller0: entered allmulticast mode [ 335.489822][T14261] tipc: Resetting bearer [ 335.556433][T14260] tipc: Resetting bearer [ 336.062382][T14289] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2411'. [ 336.163177][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 337.790282][T14260] tipc: Disabling bearer [ 337.807407][ T5486] veth1_macvtap: left promiscuous mode [ 337.824506][ T5486] veth1_macvtap: entered promiscuous mode [ 337.846244][T14289] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 338.188180][T14299] delete_channel: no stack [ 338.332258][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 338.409587][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 338.482259][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 338.520694][ T54] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x63 [ 338.556544][T14322] netlink: 'syz.2.2421': attribute type 11 has an invalid length. [ 338.566835][T14322] netlink: 'syz.2.2421': attribute type 23 has an invalid length. [ 338.577619][T14322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2421'. [ 338.613862][T14332] netlink: 'syz.3.2419': attribute type 11 has an invalid length. [ 339.246847][T14352] syzkaller1: entered promiscuous mode [ 339.261601][T14352] syzkaller1: entered allmulticast mode [ 339.583797][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.594227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.609087][T14375] __nla_validate_parse: 134 callbacks suppressed [ 339.609108][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 339.641921][T14372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.656207][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.714750][T14373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.800993][T14373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.811390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.840346][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 339.886377][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 339.923336][T14355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 340.178220][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'. [ 340.251744][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 340.284671][T14394] IPVS: Scheduler module ip_vs_@ not found [ 340.423667][T14401] netlink: 352 bytes leftover after parsing attributes in process `syz.2.2437'. [ 340.446070][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 340.667583][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 340.990630][T14426] netlink: 'syz.2.2442': attribute type 83 has an invalid length. [ 341.096996][T14428] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 341.134656][T14428] team0: No ports can be present during mode change [ 341.148023][T14426] syzkaller0: entered promiscuous mode [ 341.163636][T14426] syzkaller0: entered allmulticast mode [ 341.356714][T14441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.382426][T14441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.451416][T14445] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 341.485850][T14445] bond6 (unregistering): Released all slaves [ 344.578097][T14465] netlink: 'syz.0.2455': attribute type 1 has an invalid length. [ 344.606314][T14469] net_ratelimit: 3 callbacks suppressed [ 344.606335][T14469] openvswitch: netlink: IP tunnel dst address not specified [ 344.666585][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2456'. [ 344.686026][T14476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2455'. [ 344.770193][T14465] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.921094][T14487] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 344.955437][T14469] veth1_macvtap: left promiscuous mode [ 344.980785][T14472] vlan3: entered promiscuous mode [ 344.994128][T14472] bond9: entered promiscuous mode [ 345.006019][T14472] vlan3: entered allmulticast mode [ 345.017327][T14472] bond9: entered allmulticast mode [ 345.029736][T10815] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.048114][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 345.049144][T10815] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.088287][T14476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.099236][T14476] bond9: (slave batadv0): making interface the new active one [ 345.107741][T14476] batadv0: entered promiscuous mode [ 345.113980][T14476] batadv0: entered allmulticast mode [ 345.121204][T14476] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 345.134922][T14479] syzkaller1: entered promiscuous mode [ 345.141230][T14479] syzkaller1: entered allmulticast mode [ 345.159125][T10815] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.306199][T10815] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.340384][T10815] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.383071][T10815] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 35269 - 0 [ 345.421893][T14491] vlan1: entered allmulticast mode [ 345.446696][T14491] bridge0: port 3(vlan1) entered blocking state [ 345.461484][T14491] bridge0: port 3(vlan1) entered disabled state [ 345.471934][T14491] vlan1: entered promiscuous mode [ 345.483034][T10815] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.508985][T10815] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 35269 - 0 [ 345.538873][T10815] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.557575][T10815] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 35269 - 0 [ 345.574443][T10815] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.601793][T10815] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 35269 - 0 [ 345.701380][T14512] lo speed is unknown, defaulting to 1000 [ 346.056652][T14539] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 346.175722][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 346.316867][T14550] netlink: 632 bytes leftover after parsing attributes in process `syz.4.2473'. [ 346.364688][T14551] vlan3: entered allmulticast mode [ 346.380455][T14551] bridge3: entered allmulticast mode [ 346.406117][T14539] lo speed is unknown, defaulting to 1000 [ 346.647412][T14560] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2477'. [ 346.682836][T14560] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2477'. [ 347.066457][T14583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2481'. [ 347.108276][T14586] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2480'. [ 347.375530][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2484'. [ 347.796992][T14618] netlink: 'syz.1.2489': attribute type 1 has an invalid length. [ 347.834007][T14618] NCSI netlink: No device for ifindex 764 [ 348.319927][T14641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.876839][T14674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.125537][T14687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.152912][T14691] netlink: 'syz.3.2512': attribute type 9 has an invalid length. [ 349.192880][T14692] netlink: 'syz.3.2512': attribute type 9 has an invalid length. [ 349.298944][T14702] xt_hashlimit: size too large, truncated to 1048576 [ 349.374630][T14697] lo speed is unknown, defaulting to 1000 [ 349.920318][T14724] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 349.982354][T14724] bond10: entered promiscuous mode [ 349.988061][T14724] bond10: entered allmulticast mode [ 349.994891][T14724] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.012277][T14726] erspan1: entered allmulticast mode [ 350.025399][T14726] bond10: (slave erspan1): making interface the new active one [ 350.045587][T14726] erspan1: entered promiscuous mode [ 350.057111][T14726] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 350.532054][T14732] __nla_validate_parse: 9 callbacks suppressed [ 350.532076][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2521'. [ 350.607621][T14732] geneve2: entered promiscuous mode [ 350.650039][T10816] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.661392][T10816] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.686451][T10816] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.717914][T10816] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.782135][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 350.808933][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 350.868324][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 350.904216][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 351.192400][T14765] Cannot find add_set index 3 as target [ 351.447416][T14781] netlink: 'syz.0.2536': attribute type 9 has an invalid length. [ 351.459430][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 351.478202][T14781] macvlan3: entered promiscuous mode [ 351.483908][T14781] gretap0: entered promiscuous mode [ 351.491253][T14781] macvlan3: entered allmulticast mode [ 351.497815][T14781] gretap0: entered allmulticast mode [ 351.922638][T14803] lo speed is unknown, defaulting to 1000 [ 352.115074][T14814] lo speed is unknown, defaulting to 1000 [ 352.741993][T14841] netlink: 'syz.2.2549': attribute type 7 has an invalid length. [ 352.992550][T14855] vlan4: entered promiscuous mode [ 353.058733][T14857] syzkaller0: entered promiscuous mode [ 353.086512][T14857] syzkaller0: entered allmulticast mode [ 353.719403][T14887] lo speed is unknown, defaulting to 1000 [ 354.422951][T14782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.443819][T14900] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 354.471710][T14900] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 354.503408][T14901] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2561'. [ 354.687988][T14912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2564'. [ 354.702186][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 354.724744][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 354.816271][T14904] lo speed is unknown, defaulting to 1000 [ 354.901754][T14924] vxcan5: entered promiscuous mode [ 355.469199][T14935] veth3: entered allmulticast mode [ 355.920285][T14959] __nla_validate_parse: 2 callbacks suppressed [ 355.920308][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 355.964682][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2576'. [ 356.179988][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 356.197358][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 356.304011][ T7135] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.333073][ T7135] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.378735][ T7135] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.416954][ T7135] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.141376][T15022] syzkaller0: entered promiscuous mode [ 357.152004][T15022] syzkaller0: entered allmulticast mode [ 357.172630][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 357.382097][T15027] 0ªî{X¹¦: left allmulticast mode [ 357.435812][T15027] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.478206][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.519094][T15031] macsec2: entered allmulticast mode [ 357.533118][T15031] macsec0: entered allmulticast mode [ 357.592408][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 357.602253][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 357.617341][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 357.627031][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 357.652306][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 357.897483][T15048] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 357.923754][T15048] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 358.070240][T15053] lo speed is unknown, defaulting to 1000 [ 358.490284][T15070] tipc: Started in network mode [ 358.506123][T15070] tipc: Node identity e6fbcabff95e, cluster identity 4711 [ 358.533866][T15070] tipc: Enabled bearer , priority 0 [ 358.577007][T15070] tipc: Resetting bearer [ 358.701180][T15067] tipc: Disabling bearer [ 358.818074][T15081] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 358.827379][T15081] netlink: 'syz.1.2609': attribute type 2 has an invalid length. [ 358.844754][T15081] netlink: 'syz.1.2609': attribute type 3 has an invalid length. [ 358.893171][T15081] syzkaller0: entered promiscuous mode [ 358.907764][T15081] syzkaller0: entered allmulticast mode [ 359.222304][T15096] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 359.258113][T15094] xt_HMARK: proto mask must be zero with L3 mode [ 360.125993][T15137] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 360.157724][T15137] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 360.327404][T15154] netlink: 'syz.4.2628': attribute type 3 has an invalid length. [ 360.552221][T15164] block nbd4: NBD_DISCONNECT [ 360.712723][T15167] netlink: 'syz.3.2630': attribute type 4 has an invalid length. [ 360.772871][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.802757][T15154] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 361.389527][T15190] __nla_validate_parse: 11 callbacks suppressed [ 361.389549][T15190] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2636'. [ 361.443833][T15190] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2636'. [ 361.492605][T15191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.710323][T15201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2638'. [ 362.253112][T15223] syzkaller0: entered promiscuous mode [ 362.269091][T15223] syzkaller0: entered allmulticast mode [ 362.319892][T15223] syz.2.2645 (15223) used obsolete PPPIOCDETACH ioctl [ 362.387318][T15231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2647'. [ 362.422887][T15231] netlink: 'syz.1.2647': attribute type 1 has an invalid length. [ 362.443618][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2647'. [ 363.909142][T15277] delete_channel: no stack [ 364.037073][T15285] openvswitch: netlink: Tunnel attr 335 out of range max 16 [ 364.219720][T15290] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2665'. [ 364.257743][T15290] 0ªX¹¦À: renamed from caif0 [ 364.317543][T15290] 0ªX¹¦À: entered allmulticast mode [ 364.332743][T15290] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 364.390037][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 364.417926][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 364.522668][T15295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.551580][T15299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2667'. [ 364.575514][T15299] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2667'. [ 364.850595][T15315] netlink: 'syz.3.2671': attribute type 15 has an invalid length. [ 364.862529][T15316] erspan0: entered promiscuous mode [ 364.877894][T15316] macsec1: entered promiscuous mode [ 364.893231][T15316] erspan0: left promiscuous mode [ 364.906743][T15320] xt_hashlimit: max too large, truncated to 1048576 [ 364.931839][T15320] xt_bpf: check failed: parse error [ 365.016176][T15323] xt_hashlimit: size too large, truncated to 1048576 [ 365.133090][T15332] –: renamed from vxcan1 [ 365.436196][T15339] netlink: 'syz.3.2679': attribute type 13 has an invalid length. [ 366.591491][T15378] xt_l2tp: v2 doesn't support IP mode [ 366.689497][T15387] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 366.754087][T15389] __nla_validate_parse: 6 callbacks suppressed [ 366.754110][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 366.754272][T15387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.920411][T15398] netlink: 'syz.1.2693': attribute type 2 has an invalid length. [ 367.052578][T15405] xt_l2tp: v2 doesn't support IP mode [ 367.267124][T15413] sctp: [Deprecated]: syz.1.2697 (pid 15413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.267124][T15413] Use struct sctp_sack_info instead [ 367.419291][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'. [ 367.907433][T15440] bpq0: left promiscuous mode [ 367.937341][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 367.960383][T15440] bpq0: left allmulticast mode [ 367.966566][T15447] openvswitch: netlink: Flow key attr not present in new flow. [ 368.039764][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'. [ 368.062258][T15450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2710'. [ 368.103112][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 368.141707][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 368.168229][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'. [ 368.411497][T15466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2713'. [ 368.747583][T15483] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2718'. [ 368.757299][T15483] netlink: 'syz.4.2718': attribute type 2 has an invalid length. [ 368.931148][T15488] lo speed is unknown, defaulting to 1000 [ 368.999962][T15498] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 369.094618][T15484] lo speed is unknown, defaulting to 1000 [ 369.466485][T15513] netlink: 'syz.2.2729': attribute type 58 has an invalid length. [ 369.787194][T15525] syzkaller0: entered promiscuous mode [ 369.793016][T15525] syzkaller0: entered allmulticast mode [ 370.301971][T15542] netlink: 'syz.0.2736': attribute type 7 has an invalid length. [ 370.333299][T15542] netlink: 'syz.0.2736': attribute type 8 has an invalid length. [ 370.590101][T15550] batadv_slave_0: entered promiscuous mode [ 370.648615][T15549] batadv_slave_0: left promiscuous mode [ 370.808191][T15561] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 371.060414][T15561] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.184947][T15572] bond11: (slave veth9): Enslaving as an active interface with a down link [ 371.186278][T15581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.270819][T15574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.301871][T15574] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 371.478609][T15598] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 371.820556][T15611] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 371.841089][T15611] __nla_validate_parse: 9 callbacks suppressed [ 371.841119][T15611] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2753'. [ 372.202697][T15625] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2758'. [ 372.306260][T15630] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2760'. [ 372.863706][T15650] raw_sendmsg: syz.1.2764 forgot to set AF_INET. Fix it! [ 373.503116][T15668] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2770'. [ 373.521047][T15660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.566207][T15666] tipc: Enabling of bearer rejected, failed to enable media [ 373.588891][T15670] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 373.615766][T15670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2768'. [ 373.914283][T15681] ±ÿÿÿÿa–ïD: renamed from lo [ 374.139278][T15686] lo speed is unknown, defaulting to 1000 [ 374.169602][T15690] veth1_to_bridge: entered allmulticast mode [ 374.188600][T15690] Cannot find del_set index 4 as target [ 374.406131][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 374.908297][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 374.950557][T15705] lo speed is unknown, defaulting to 1000 [ 374.964577][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 375.309092][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'. [ 375.450940][T15754] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2792'. [ 375.548260][T15756] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 375.605755][T15756] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 376.801793][T15798] netlink: 'syz.2.2808': attribute type 1 has an invalid length. [ 376.962323][T15798] bond6: entered promiscuous mode [ 376.968128][T15798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.987822][T15803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.002688][T15803] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 377.014029][T15803] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 377.027883][T15803] bond6: (slave ip6gre2): making interface the new active one [ 377.037033][T15796] xt_TCPMSS: Only works on TCP SYN packets [ 377.043205][T15803] ip6gre2: entered promiscuous mode [ 377.051328][T15803] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 377.085730][T15806] __nla_validate_parse: 1 callbacks suppressed [ 377.085762][T15806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2809'. [ 377.212989][T15809] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 377.277524][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 377.301595][T15811] syzkaller0: entered promiscuous mode [ 377.314242][T15811] syzkaller0: entered allmulticast mode [ 377.328676][T15811] tc action pedit offset 67108864 out of bounds [ 377.336684][T15811] tc action pedit offset 67108864 out of bounds [ 377.343011][T15811] tc action pedit offset 67108864 out of bounds [ 377.349380][T15811] tc action pedit offset 67108864 out of bounds [ 377.355700][T15811] tc action pedit offset 67108864 out of bounds [ 377.362069][T15811] tc action pedit offset 67108864 out of bounds [ 377.368425][T15811] tc action pedit offset 67108864 out of bounds [ 377.374761][T15811] tc action pedit offset 67108864 out of bounds [ 377.381076][T15811] tc action pedit offset 67108864 out of bounds [ 377.387411][T15811] tc action pedit offset 67108864 out of bounds [ 377.393767][T15811] TC_ACT_REPEAT abuse ? [ 377.556083][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.030630][T15834] lo speed is unknown, defaulting to 1000 [ 378.447095][T15862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.454566][T15857] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2826'. [ 378.466168][T15862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.950206][T15875] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 379.819115][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 379.934506][T15939] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 382.639393][T15940] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 382.659003][T15942] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 382.758817][T15946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2847'. [ 382.988544][T15953] lo speed is unknown, defaulting to 1000 [ 383.144959][T15965] netlink: zone id is out of range [ 383.165958][T15965] netlink: zone id is out of range [ 383.185294][T15965] netlink: zone id is out of range [ 383.193990][T15965] netlink: zone id is out of range [ 383.212629][T15965] netlink: zone id is out of range [ 383.244607][T15965] netlink: zone id is out of range [ 383.289374][T15965] netlink: zone id is out of range [ 383.316301][T15965] netlink: zone id is out of range [ 383.329847][T15965] netlink: zone id is out of range [ 383.336621][T15961] lo speed is unknown, defaulting to 1000 [ 383.344046][T15965] netlink: zone id is out of range [ 383.420130][T15974] can: request_module (can-proto-0) failed. [ 383.558444][T15959] lo speed is unknown, defaulting to 1000 [ 383.818927][T15993] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 383.885927][T15967] lo speed is unknown, defaulting to 1000 [ 383.965053][T15992] lo speed is unknown, defaulting to 1000 [ 384.363321][T16000] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2860'. [ 384.582816][T15949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.618128][T15949] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.102982][T16033] lo speed is unknown, defaulting to 1000 [ 385.430609][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2871'. [ 385.792223][T16056] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2873'. [ 386.137161][T16077] netlink: 'syz.0.2878': attribute type 1 has an invalid length. [ 386.766509][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 386.777415][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2884'. [ 386.947733][T16107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2886'. [ 387.154180][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 387.228199][T16121] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 387.285602][T16129] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 387.383108][T16132] bridge8: entered promiscuous mode [ 387.388878][T16132] bridge8: entered allmulticast mode [ 387.449989][T16136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2895'. [ 387.471537][T16136] xt_hashlimit: size too large, truncated to 1048576 [ 387.529744][T16139] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2895'. [ 387.820242][T16150] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 387.829413][T16151] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 387.874899][T16151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.891899][T16154] bond6 (unregistering): Released all slaves [ 388.603207][T16185] __nla_validate_parse: 2 callbacks suppressed [ 388.603224][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2905'. [ 389.155240][T16201] net_ratelimit: 357 callbacks suppressed [ 389.155264][T16201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.170372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.191578][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.204112][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.216346][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.226509][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.236399][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.432124][T16199] lo speed is unknown, defaulting to 1000 [ 389.763182][ T42] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.949723][ T42] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.105909][ T42] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.184786][ T42] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.274861][T16199] chnl_net:caif_netlink_parms(): no params data found [ 390.604825][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 390.637662][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.645730][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.653139][T16199] bridge_slave_0: entered allmulticast mode [ 390.662549][T16199] bridge_slave_0: entered promiscuous mode [ 390.738152][T16250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 390.747777][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.763664][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.772200][T16199] bridge_slave_1: entered allmulticast mode [ 390.784775][T16199] bridge_slave_1: entered promiscuous mode [ 390.792047][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 390.887545][T16258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.899780][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.940319][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.079310][T16267] ªªªªª: renamed from virt_wifi0 [ 391.152307][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2930'. [ 391.197880][ T42] bridge_slave_1: left allmulticast mode [ 391.215987][ T42] bridge_slave_1: left promiscuous mode [ 391.226237][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.240779][ T42] bridge_slave_0: left allmulticast mode [ 391.246640][ T42] bridge_slave_0: left promiscuous mode [ 391.252540][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.346212][ T5831] Bluetooth: hci5: command tx timeout [ 391.588649][ T42] bond10 (unregistering): (slave erspan1): Releasing active interface [ 391.600849][ T42] erspan1 (unregistering): left promiscuous mode [ 391.626622][ T42] gretap0 (unregistering): left allmulticast mode [ 391.633164][ T42] gretap0 (unregistering): left promiscuous mode [ 392.003871][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.035905][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.048275][ T42] bond0 (unregistering): Released all slaves [ 392.074214][ T42] bond1 (unregistering): Released all slaves [ 392.091332][ T42] bond2 (unregistering): Released all slaves [ 392.107856][ T42] bond3 (unregistering): Released all slaves [ 392.122641][ T42] team0: Port device bond4 removed [ 392.131499][ T42] bond4 (unregistering): Released all slaves [ 392.149387][ T42] bond5 (unregistering): Released all slaves [ 392.167167][ T42] bond6 (unregistering): Released all slaves [ 392.182879][ T42] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 392.196223][ T42] wireguard0: left promiscuous mode [ 392.202760][ T42] bond7 (unregistering): (slave wireguard1): Releasing backup interface [ 392.212141][ T42] bond7 (unregistering): Released all slaves [ 392.229750][ T42] bond8 (unregistering): Released all slaves [ 392.249490][ T42] bond9 (unregistering): (slave batadv0): Releasing active interface [ 392.257911][ T42] batadv0: left promiscuous mode [ 392.263232][ T42] batadv0: left allmulticast mode [ 392.273534][ T42] bond9 (unregistering): Released all slaves [ 392.292427][ T42] bond10 (unregistering): Released all slaves [ 392.308413][ T42] bond11 (unregistering): (slave veth9): Releasing active interface [ 392.319781][ T42] bond11 (unregistering): Released all slaves [ 392.338404][T16199] team0: Port device team_slave_0 added [ 392.378207][T16199] team0: Port device team_slave_1 added [ 392.434044][T16199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.452107][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.484662][T16199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.501098][T16199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.530294][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.563845][T16199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.780685][T16199] hsr_slave_0: entered promiscuous mode [ 392.805012][T16199] hsr_slave_1: entered promiscuous mode [ 392.811699][T16199] debugfs: 'hsr0' already exists in 'hsr' [ 392.844096][T16199] Cannot create hsr debugfs directory [ 392.853898][ T42] tipc: Left network mode [ 393.424970][ T5831] Bluetooth: hci5: command tx timeout [ 393.502124][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 393.601288][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 393.915320][ T54] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.930484][ T54] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.956668][T16327] veth0_to_bridge (unregistering): left allmulticast mode [ 393.971849][T16327] veth0_to_bridge (unregistering): left promiscuous mode [ 393.990439][T16327] bridge0: port 3(veth0_to_bridge) entered disabled state [ 394.062680][T16327] bridge_slave_0 (unregistering): left allmulticast mode [ 394.084514][T16327] bridge_slave_0 (unregistering): left promiscuous mode [ 394.109651][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.161204][T16353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.183895][T16353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.202608][T16353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.226596][T16355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2943'. [ 394.243755][T16353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.255020][T16353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.280379][ T30] audit: type=1800 audit(1776638373.049:6): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2944" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3035 res=0 errno=0 [ 394.769364][ T54] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.782095][ T54] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.790886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.799722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.809295][ T54] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.834637][ T54] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.843263][ T54] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.852072][ T54] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.869720][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 395.398228][T16378] lo speed is unknown, defaulting to 1000 [ 395.505797][ T5831] Bluetooth: hci5: command tx timeout [ 395.807502][T16400] 8021q: VLANs not supported on bond0 [ 395.889460][T16402] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2957'. [ 396.086090][T16409] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 396.172320][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2958'. [ 396.267472][ T42] hsr_slave_0: left promiscuous mode [ 396.278161][ T42] hsr_slave_1: left promiscuous mode [ 396.672878][ T42] team0 (unregistering): Port device team_slave_1 removed [ 396.676426][T16431] FAULT_INJECTION: forcing a failure. [ 396.676426][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.694136][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.1.2964 Not tainted syzkaller #0 PREEMPT(full) [ 396.694163][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.694175][T16431] Call Trace: [ 396.694183][T16431] [ 396.694192][T16431] dump_stack_lvl+0xe8/0x150 [ 396.694228][T16431] should_fail_ex+0x412/0x560 [ 396.694262][T16431] _copy_to_user+0x31/0xb0 [ 396.694284][T16431] bpf_test_finish+0x53c/0x6b0 [ 396.694316][T16431] ? trace_kmem_cache_alloc+0x29/0xe0 [ 396.694343][T16431] ? slab_build_skb+0x52/0x410 [ 396.694371][T16431] ? __pfx_bpf_test_finish+0x10/0x10 [ 396.694414][T16431] bpf_prog_test_run_skb+0x1250/0x2350 [ 396.694449][T16431] ? bpf_prog_test_run_skb+0x1d1/0x2350 [ 396.694488][T16431] ? __fget_files+0x2a/0x420 [ 396.694512][T16431] ? __fget_files+0x3a0/0x420 [ 396.694536][T16431] ? __fget_files+0x2a/0x420 [ 396.694648][T16431] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 396.694678][T16431] bpf_prog_test_run+0x2c7/0x340 [ 396.694706][T16431] __sys_bpf+0x643/0x950 [ 396.694730][T16431] ? __pfx___sys_bpf+0x10/0x10 [ 396.694766][T16431] ? ksys_write+0x242/0x270 [ 396.694797][T16431] ? __pfx_ksys_write+0x10/0x10 [ 396.694825][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.694844][T16431] __x64_sys_bpf+0x7c/0x90 [ 396.694859][T16431] do_syscall_64+0x15f/0xf80 [ 396.694874][T16431] ? trace_irq_disable+0x3b/0x140 [ 396.694887][T16431] ? clear_bhb_loop+0x40/0x90 [ 396.694901][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.694913][T16431] RIP: 0033:0x7f22d459c819 [ 396.694926][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.694938][T16431] RSP: 002b:00007f22d546f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.694952][T16431] RAX: ffffffffffffffda RBX: 00007f22d4815fa0 RCX: 00007f22d459c819 [ 396.694962][T16431] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 396.694975][T16431] RBP: 00007f22d546f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.694982][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.694989][T16431] R13: 00007f22d4816038 R14: 00007f22d4815fa0 R15: 00007ffd002aa1e8 [ 396.695012][T16431] [ 396.695887][ T42] team0 (unregistering): Port device team_slave_0 removed [ 397.260161][T16438] syzkaller0: entered promiscuous mode [ 397.322443][T16438] syzkaller0: entered allmulticast mode [ 397.590074][ T5831] Bluetooth: hci5: command tx timeout [ 397.885883][T16199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.954305][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.988266][T16199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.034984][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.223255][T16199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.247424][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.292103][T16199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.351142][T16199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.378047][ T30] audit: type=1800 audit(1776638377.149:7): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2970" name="memory.events" dev="tmpfs" ino=3065 res=0 errno=0 [ 398.465849][ T42] IPVS: stop unused estimator thread 0... [ 398.732607][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2972'. [ 398.763907][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'. [ 398.880280][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.916991][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.976914][T16498] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2973'. [ 399.008369][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.015621][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.040604][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.047970][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.775549][T16531] netlink: 'syz.2.2981': attribute type 13 has an invalid length. [ 399.884010][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'. [ 400.045578][T16541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.088457][T16541] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 400.117205][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.219556][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'. [ 400.741309][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.838393][T16554] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 400.968408][T16199] veth0_vlan: entered promiscuous mode [ 401.371830][T16564] syzkaller0: entered promiscuous mode [ 401.401684][T16564] syzkaller0: entered allmulticast mode [ 401.413898][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.420499][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.427351][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.442037][T16612] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.473844][T16612] netlink: 'syz.1.2992': attribute type 3 has an invalid length. [ 401.481433][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.493827][T16612] netlink: 'syz.1.2992': attribute type 2 has an invalid length. [ 401.514069][T16612] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2992'. [ 401.538697][T16612] netlink: 'syz.1.2992': attribute type 2 has an invalid length. [ 404.090154][T16199] veth1_vlan: entered promiscuous mode [ 404.209813][T16199] veth0_macvtap: entered promiscuous mode [ 404.225682][T16199] veth1_macvtap: entered promiscuous mode [ 404.262928][T16199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.279267][T16199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.286604][T10814] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 404.388321][T13064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.415748][T13064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.436806][T13064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.455205][T16637] syzkaller0: entered promiscuous mode [ 404.460996][T16637] syzkaller0: entered allmulticast mode [ 404.469304][T13064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.599167][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 404.634675][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 404.983347][T16632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.220107][T16657] __nla_validate_parse: 1 callbacks suppressed [ 405.220130][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3004'. [ 405.248096][T16657] netlink: 'syz.4.3004': attribute type 1 has an invalid length. [ 405.385491][T16661] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.409870][T16661] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 405.475179][T10814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.500181][T10814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.562111][T16659] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 405.596949][T16659] bond7 (unregistering): Released all slaves [ 405.728332][T16657] bond0: (slave gretap1): making interface the new active one [ 405.752189][T16657] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 405.771883][T16662] syzkaller1: entered promiscuous mode [ 405.777829][T16662] syzkaller1: entered allmulticast mode [ 405.820254][T16661] macvlan3: entered promiscuous mode [ 405.837955][T16661] macvlan3: entered allmulticast mode [ 405.854509][T16661] bond0: entered promiscuous mode [ 405.865403][T16661] gretap1: entered promiscuous mode [ 405.881927][T16661] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 405.907506][T16661] bond0: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 405.928717][T16661] bond0: left promiscuous mode [ 405.939703][T16661] gretap1: left promiscuous mode [ 406.101786][T13064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.133338][T13064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.355217][T16670] netlink: 'syz.3.3006': attribute type 4 has an invalid length. [ 406.385343][T16670] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3006'. [ 406.594367][T16672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.778401][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.795943][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.807257][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.851835][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.866806][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.253927][T16696] Unknown options in mask 6 [ 408.165663][T16684] chnl_net:caif_netlink_parms(): no params data found [ 408.642521][T16684] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.650747][T16684] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.658183][T16684] bridge_slave_0: entered allmulticast mode [ 408.667288][T16684] bridge_slave_0: entered promiscuous mode [ 408.734941][T16684] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.753223][T16684] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.774962][T16684] bridge_slave_1: entered allmulticast mode [ 408.783051][T16684] bridge_slave_1: entered promiscuous mode [ 408.944438][ T5831] Bluetooth: hci2: command tx timeout [ 408.956559][T16684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.977950][T16725] netlink: 'syz.4.3016': attribute type 10 has an invalid length. [ 409.025927][T16684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.041168][T16725] team0: Device wg1 is of different type [ 409.052875][T16726] netlink: 'syz.4.3016': attribute type 11 has an invalid length. [ 409.151364][T10814] bridge_slave_1: left allmulticast mode [ 409.173585][T10814] bridge_slave_1: left promiscuous mode [ 409.191735][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.309357][T16731] netlink: 178152 bytes leftover after parsing attributes in process `syz.2.3017'. [ 409.835710][T10814] bond1 (unregistering): Released all slaves [ 409.854258][T10814] bond0 (unregistering): (slave wireguard0): Releasing backup interface [ 409.863042][T10814] wireguard0: left promiscuous mode [ 409.869352][T10814] bond0 (unregistering): Released all slaves [ 409.886087][T10814] bond2 (unregistering): Released all slaves [ 409.911281][T10814] bond3 (unregistering): Released all slaves [ 409.929008][T10814] bond4 (unregistering): Released all slaves [ 409.948628][T10814] bond5 (unregistering): Released all slaves [ 409.964933][T10814] bond6 (unregistering): Released all slaves [ 410.045155][T16729] vxcan4: entered promiscuous mode [ 410.140585][T16730] vxcan4: entered promiscuous mode [ 410.177025][T16717] pim6reg1: entered promiscuous mode [ 410.182649][T16717] pim6reg1: entered allmulticast mode [ 410.190333][T16735] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 410.228242][T16684] team0: Port device team_slave_0 added [ 410.256211][T16684] team0: Port device team_slave_1 added [ 410.330332][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'. [ 410.340891][T10814] 5nè‹Ò: left promiscuous mode [ 410.589423][T10814] tipc: Disabling bearer [ 410.612448][T10814] tipc: Left network mode [ 410.616000][T16684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.646504][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.696669][T16684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.711281][T16764] IPVS: stopping backup sync thread 11260 ... [ 410.733368][T16684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.745672][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.794418][T16776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3023'. [ 410.819821][T16684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.870195][T16764] netlink: 624 bytes leftover after parsing attributes in process `syz.1.3023'. [ 411.023638][ T5831] Bluetooth: hci2: command tx timeout [ 411.199102][T16684] hsr_slave_0: entered promiscuous mode [ 411.221604][T16684] hsr_slave_1: entered promiscuous mode [ 411.237592][T16684] debugfs: 'hsr0' already exists in 'hsr' [ 411.253799][T16684] Cannot create hsr debugfs directory [ 411.557944][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3032'. [ 411.747908][T16819] netlink: 'syz.4.3033': attribute type 62 has an invalid length. [ 411.796021][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 411.992204][T10814] dummy0: left promiscuous mode [ 412.006058][T10814] hsr_slave_0: left promiscuous mode [ 412.015806][T10814] hsr_slave_1: left promiscuous mode [ 412.025959][T10814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.038692][T10814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.049060][T10814] virt_wifi0: left promiscuous mode [ 412.365505][T10814] team_slave_1 (unregistering): left promiscuous mode [ 412.373978][T10814] team0 (unregistering): Port device team_slave_1 removed [ 412.404873][T10814] C (unregistering): left promiscuous mode [ 412.411845][T10814] team0 (unregistering): Port device C removed [ 412.681164][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 412.745826][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3036'. [ 413.103628][ T5831] Bluetooth: hci2: command tx timeout [ 413.167649][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 413.199792][T16848] veth0_to_batadv: entered promiscuous mode [ 413.249063][T16848] veth0_to_batadv: entered allmulticast mode [ 413.283828][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 413.995515][T10814] IPVS: stop unused estimator thread 0... [ 414.122829][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 414.185587][ T5831] block nbd0: Receive control failed (result -1) [ 414.294566][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 415.007343][T16684] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.052243][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.089940][T16684] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.157678][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.194092][ T5831] Bluetooth: hci2: command tx timeout [ 415.308690][T16684] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.362527][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.446920][T16684] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.507355][T16684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.912494][T16954] __nla_validate_parse: 1 callbacks suppressed [ 415.912515][T16954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3060'. [ 416.092052][T16960] lo speed is unknown, defaulting to 1000 [ 416.157736][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.191851][T16960] lo speed is unknown, defaulting to 1000 [ 416.249166][T16965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3060'. [ 416.250811][T16684] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.300687][T16960] lo speed is unknown, defaulting to 1000 [ 416.395129][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.402424][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.456404][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.462937][T16960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 416.463679][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.514585][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 416.791589][T16960] lo speed is unknown, defaulting to 1000 [ 416.809338][T16960] lo speed is unknown, defaulting to 1000 [ 416.841844][T16960] lo speed is unknown, defaulting to 1000 [ 416.879357][T16960] lo speed is unknown, defaulting to 1000 [ 416.918795][T16960] lo speed is unknown, defaulting to 1000 [ 417.054674][T16998] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3065'. [ 417.263856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.275840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.312823][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 417.502532][T17013] lo speed is unknown, defaulting to 1000 [ 417.530187][T17022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3070'. [ 417.572791][T17029] delete_channel: no stack [ 417.609224][T17022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.621427][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.640909][T17022] xt_hashlimit: size too large, truncated to 1048576 [ 417.668714][T17032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 417.686130][T17032] bond7: (slave bond8): Enslaving as an active interface with an up link [ 417.713610][T17029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.762878][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 417.822003][T17032] bond7 (unregistering): (slave bond8): Releasing backup interface [ 417.856605][T17044] netlink: 'syz.1.3074': attribute type 2 has an invalid length. [ 417.870400][T17032] bond7 (unregistering): Released all slaves [ 417.909165][T17045] netlink: 'syz.1.3074': attribute type 2 has an invalid length. [ 417.940633][T17044] !©9: entered promiscuous mode [ 417.959609][T17045] !©9: left promiscuous mode [ 418.336164][T16684] veth0_vlan: entered promiscuous mode [ 418.499921][T16684] veth1_vlan: entered promiscuous mode [ 418.637432][T16684] veth0_macvtap: entered promiscuous mode [ 418.668818][T16684] veth1_macvtap: entered promiscuous mode [ 418.697300][T16684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.742426][T16684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.766949][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.782989][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.814011][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.836682][T13064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.894374][T17081] netlink: 'syz.2.3086': attribute type 1 has an invalid length. [ 418.902550][T17081] netlink: 'syz.2.3086': attribute type 2 has an invalid length. [ 418.931329][T17081] netlink: 'syz.2.3086': attribute type 1 has an invalid length. [ 418.945508][T17083] netlink: 'syz.1.3087': attribute type 1 has an invalid length. [ 418.970434][T17081] netlink: 'syz.2.3086': attribute type 2 has an invalid length. [ 419.059887][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.098430][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.155233][T17083] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 419.162168][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 419.174754][T17083] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 419.236048][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 419.380718][T13064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.403280][T13064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.033318][T17132] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3099'. [ 420.146965][T17135] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3100'. [ 420.322547][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.341055][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.358676][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.368585][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.378408][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.494626][T17141] lo speed is unknown, defaulting to 1000 [ 420.915521][T17165] €Â: renamed from dummy0 [ 421.225972][T17171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.236971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.406887][T17141] chnl_net:caif_netlink_parms(): no params data found [ 421.484345][T17179] __nla_validate_parse: 1 callbacks suppressed [ 421.484370][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 421.510332][T17179] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3112'. [ 421.845061][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.870328][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.905875][T17141] bridge_slave_0: entered allmulticast mode [ 421.933928][T17141] bridge_slave_0: entered promiscuous mode [ 421.965727][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.985978][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.001067][T17141] bridge_slave_1: entered allmulticast mode [ 422.017612][T17141] bridge_slave_1: entered promiscuous mode [ 422.189117][T17185] syzkaller1: entered promiscuous mode [ 422.202892][T17185] syzkaller1: entered allmulticast mode [ 422.366302][T17141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.392570][T17195] netlink: 'syz.1.3117': attribute type 9 has an invalid length. [ 422.395955][T17190] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 422.416059][T17186] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 422.427804][T17195] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3117'. [ 422.451479][T17199] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3116'. [ 422.474233][ T5836] Bluetooth: hci4: command tx timeout [ 422.508247][T17141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.584467][T17210] sctp: [Deprecated]: syz.1.3119 (pid 17210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.584467][T17210] Use struct sctp_sack_info instead [ 422.613297][T17211] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3119'. [ 422.679967][T17213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.747160][T17141] team0: Port device team_slave_0 added [ 422.787422][T17141] team0: Port device team_slave_1 added [ 422.795484][ T36] bridge_slave_1: left allmulticast mode [ 422.795595][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'. [ 422.804949][ T36] bridge_slave_1: left promiscuous mode [ 422.816886][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3121'. [ 422.843294][T17218] xt_policy: too many policy elements [ 422.847423][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.979821][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.017386][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.024379][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.028031][T17218] nbd: socks must be embedded in a SOCK_ITEM attr [ 423.031254][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.039953][T17218] block nbd1: shutting down sockets [ 423.044540][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.056666][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.063606][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.070449][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.077385][T17228] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 423.125208][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 423.197149][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 423.220008][T17233] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3124'. [ 424.107468][ T36] bond0 (unregistering): (slave gretap1): Releasing active interface [ 424.124950][ T36] bond2 (unregistering): (slave gre1): Releasing backup interface [ 424.132981][ T36] gre1 (unregistering): left promiscuous mode [ 424.288113][ T36] bond6 (unregistering): (slave bridge1): Releasing active interface [ 424.352854][ T36] bond1 (unregistering): Released all slaves [ 424.369106][ T36] bond2 (unregistering): Released all slaves [ 424.384854][ T36] bond3 (unregistering): Released all slaves [ 424.408070][ T36] bond4 (unregistering): (slave lo): Releasing backup interface [ 424.416466][ T36] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 424.429161][ T36] bond4 (unregistering): Released all slaves [ 424.451234][ T36] bond5 (unregistering): Released all slaves [ 424.468569][ T36] bond6 (unregistering): Released all slaves [ 424.489019][ T36] bond0 (unregistering): Released all slaves [ 424.505652][ T36] bond8 (unregistering): Released all slaves [ 424.543791][ T5836] Bluetooth: hci4: command tx timeout [ 424.578666][T17141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.629637][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.726057][T17141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.850424][T17141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.879798][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.956329][T17141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.460344][T17141] hsr_slave_0: entered promiscuous mode [ 425.470267][T17141] hsr_slave_1: entered promiscuous mode [ 425.477425][T17141] debugfs: 'hsr0' already exists in 'hsr' [ 425.483572][T17141] Cannot create hsr debugfs directory [ 425.636138][T17256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.897163][T17289] sctp: [Deprecated]: syz.1.3135 (pid 17289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.897163][T17289] Use struct sctp_sack_info instead [ 426.125398][ T36] hsr_slave_0: left promiscuous mode [ 426.172177][ T36] hsr_slave_1: left promiscuous mode [ 426.184660][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.228456][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.624080][ T5836] Bluetooth: hci4: command tx timeout [ 426.896629][ T36] team0 (unregistering): Port device team_slave_1 removed [ 426.940510][ T36] team0 (unregistering): Port device team_slave_0 removed [ 427.204024][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.475954][T17318] __nla_validate_parse: 4 callbacks suppressed [ 427.475976][T17318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3140'. [ 427.655090][T17320] lo speed is unknown, defaulting to 1000 [ 427.862524][ T36] IPVS: stop unused estimator thread 0... [ 428.551988][T17347] bond6 (unregistering): Released all slaves [ 428.704936][ T5836] Bluetooth: hci4: command tx timeout [ 428.917191][T17358] net_ratelimit: 3323 callbacks suppressed [ 428.917212][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.931669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.123240][T17367] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20000 [ 429.138910][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3147'. [ 429.154189][T17366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3147'. [ 429.163338][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3147'. [ 429.228423][T17141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.233612][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3149'. [ 429.271249][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.277656][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3149'. [ 429.313072][T17141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.357621][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.381443][T17141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.416746][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.439410][T17141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 429.450571][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3149'. [ 429.468315][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.471650][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3149'. [ 429.506738][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'. [ 429.518581][T17377] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 429.568763][T17377] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 429.628692][T17377] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 429.737967][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3149'. [ 429.826898][T17141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.898905][T17141] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.948016][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.955292][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.021417][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.028728][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.114034][T17141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.344666][T17455] xt_hashlimit: size too large, truncated to 1048576 [ 431.924772][T17141] veth0_vlan: entered promiscuous mode [ 431.961912][T17141] veth1_vlan: entered promiscuous mode [ 432.056533][T17141] veth0_macvtap: entered promiscuous mode [ 432.088476][T17141] veth1_macvtap: entered promiscuous mode [ 432.136641][T17141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.207857][T17141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.284307][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.318388][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.359095][T17483] netlink: 'syz.2.3165': attribute type 10 has an invalid length. [ 432.382516][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.412348][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.459088][T17490] netlink: 'syz.0.3167': attribute type 29 has an invalid length. [ 432.478389][T17490] netlink: 'syz.0.3167': attribute type 29 has an invalid length. [ 432.868568][T17505] syzkaller0: entered promiscuous mode [ 432.889647][T17505] syzkaller0: entered allmulticast mode [ 433.035120][ T6246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.068008][ T6246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.455905][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.498248][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.834349][T17529] syzkaller1: entered promiscuous mode [ 433.859045][T17529] syzkaller1: entered allmulticast mode [ 434.050856][T17537] __nla_validate_parse: 5 callbacks suppressed [ 434.050876][T17537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3175'. [ 434.116298][T17539] ÿ: renamed from bond_slave_0 (while UP) [ 434.465198][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.483039][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.493085][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.508757][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.519560][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.644759][T17556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3179'. [ 434.912057][T17556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3179'. [ 434.912081][T17568] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3181'. [ 435.136385][ T5829] syz_tun (unregistering): left allmulticast mode [ 435.194806][T17575] bond_slave_0: entered promiscuous mode [ 435.202254][T17575] bond_slave_1: entered promiscuous mode [ 435.237100][T17554] lo speed is unknown, defaulting to 1000 [ 435.244017][T17574] bond_slave_0: left promiscuous mode [ 435.251206][T17574] bond_slave_1: left promiscuous mode [ 435.318801][T17579] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3183'. [ 435.812094][T17605] nbd: must specify a size in bytes for the device [ 435.839018][T17605] nbd: must specify a size in bytes for the device [ 435.861086][T17605] nbd: must specify a size in bytes for the device [ 435.870245][T17605] nbd: must specify a size in bytes for the device [ 435.877379][T17605] nbd: must specify a size in bytes for the device [ 435.896409][T17605] nbd: must specify a size in bytes for the device [ 435.907756][T17605] nbd: must specify a size in bytes for the device [ 435.914774][T17605] nbd: must specify a size in bytes for the device [ 435.921502][T17605] nbd: must specify a size in bytes for the device [ 435.928462][T17605] nbd: must specify a size in bytes for the device [ 435.938771][T17605] nbd: must specify a size in bytes for the device [ 435.945597][T17605] nbd: must specify a size in bytes for the device [ 435.952651][T17605] nbd: must specify a size in bytes for the device [ 435.959591][T17605] nbd: must specify a size in bytes for the device [ 435.970347][T17605] nbd: must specify a size in bytes for the device [ 435.986229][T17605] nbd: must specify a size in bytes for the device [ 435.998671][T17605] nbd: must specify a size in bytes for the device [ 436.006655][T17605] nbd: must specify a size in bytes for the device [ 436.015014][T17605] nbd: must specify a size in bytes for the device [ 436.034827][T17605] nbd: must specify a size in bytes for the device [ 436.061311][T17605] nbd: must specify a size in bytes for the device [ 436.090215][T17605] nbd: must specify a size in bytes for the device [ 436.106537][T17605] nbd: must specify a size in bytes for the device [ 436.125789][T17605] nbd: must specify a size in bytes for the device [ 436.186577][T17605] nbd: must specify a size in bytes for the device [ 436.217776][T17605] nbd: must specify a size in bytes for the device [ 436.250527][T17605] nbd: must specify a size in bytes for the device [ 436.292360][T17605] nbd: must specify a size in bytes for the device [ 436.330558][T17605] nbd: must specify a size in bytes for the device [ 436.347532][T17605] nbd: must specify a size in bytes for the device [ 436.354858][T17605] nbd: must specify a size in bytes for the device [ 436.361993][T17605] nbd: must specify a size in bytes for the device [ 436.369059][T17605] nbd: must specify a size in bytes for the device [ 436.378330][T17605] nbd: must specify a size in bytes for the device [ 436.387169][T17605] nbd: must specify a size in bytes for the device [ 436.394486][T17605] nbd: must specify a size in bytes for the device [ 436.401305][T17605] nbd: must specify a size in bytes for the device [ 436.408259][T17605] nbd: must specify a size in bytes for the device [ 436.418735][T17605] nbd: must specify a size in bytes for the device [ 436.444697][T17605] nbd: must specify a size in bytes for the device [ 436.462506][T17605] nbd: must specify a size in bytes for the device [ 436.477692][T17605] nbd: must specify a size in bytes for the device [ 436.540412][T17605] nbd: must specify a size in bytes for the device [ 436.563937][T17605] nbd: must specify a size in bytes for the device [ 436.580242][T17605] nbd: must specify a size in bytes for the device [ 436.582214][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.591250][T17605] nbd: must specify a size in bytes for the device [ 436.594589][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.600990][T17605] nbd: must specify a size in bytes for the device [ 436.623778][ T5831] Bluetooth: hci1: command tx timeout [ 436.819378][T17626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.840771][T17626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.182976][T10014] lo speed is unknown, defaulting to 1000 [ 437.202566][T10014] syz2: Port: 1 Link DOWN [ 437.313717][ T148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.358289][T17554] chnl_net:caif_netlink_parms(): no params data found [ 437.419149][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 437.558319][ T148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.601989][ T148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.616246][ T148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.809598][ T7139] vlan1: left promiscuous mode [ 437.818065][ T7139] bridge0: port 3(vlan1) entered disabled state [ 437.837500][ T7139] bridge_slave_1: left allmulticast mode [ 437.847372][ T7139] bridge_slave_1: left promiscuous mode [ 437.863827][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.879339][ T7139] bridge_slave_0: left promiscuous mode [ 437.890881][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.947275][T17680] netlink: 'syz.1.3204': attribute type 13 has an invalid length. [ 437.973113][T17680] netlink: 'syz.1.3204': attribute type 17 has an invalid length. [ 438.060543][ T7139] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 438.070280][ T7139] ip6gre2 (unregistering): left promiscuous mode [ 438.688018][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 438.700869][T17686] netlink: 'syz.4.3205': attribute type 29 has an invalid length. [ 438.709024][ T5831] Bluetooth: hci1: command tx timeout [ 438.717063][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 439.130677][ T7139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.142076][ T7139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.151907][ T7139] bond0 (unregistering): Released all slaves [ 439.162857][ T7139] bond1 (unregistering): Released all slaves [ 439.180443][ T7139] bond2 (unregistering): Released all slaves [ 439.199754][ T7139] bond3 (unregistering): Released all slaves [ 439.216190][ T7139] bond4 (unregistering): Released all slaves [ 439.230834][ T7139] bond5 (unregistering): Released all slaves [ 439.249302][ T7139] bond6 (unregistering): Released all slaves [ 439.510687][T17679] macsec0: left allmulticast mode [ 439.623789][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.632794][T17680] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.645941][T17680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.748300][ T7139] tipc: Left network mode [ 439.822678][T17554] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.868776][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.885620][T17554] bridge_slave_0: entered allmulticast mode [ 439.904040][T10305] IPVS: starting estimator thread 0... [ 439.911319][T17554] bridge_slave_0: entered promiscuous mode [ 439.929103][T17554] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.938793][T17554] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.946708][T17554] bridge_slave_1: entered allmulticast mode [ 439.989213][T17554] bridge_slave_1: entered promiscuous mode [ 439.990980][T17706] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 440.003527][T17700] IPVS: using max 26 ests per chain, 62400 per kthread [ 440.046685][T17706] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3211'. [ 440.286071][T17554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.335638][T17554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.438707][T17720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.497031][T17554] team0: Port device team_slave_0 added [ 440.633810][T17554] team0: Port device team_slave_1 added [ 440.796404][ T5831] Bluetooth: hci1: command tx timeout [ 440.922315][T17554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.947030][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.004154][T17554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.237676][T17745] sctp: [Deprecated]: syz.0.3219 (pid 17745) Use of int in max_burst socket option. [ 441.237676][T17745] Use struct sctp_assoc_value instead [ 441.274280][T17745] sctp: [Deprecated]: syz.0.3219 (pid 17745) Use of int in max_burst socket option deprecated. [ 441.274280][T17745] Use struct sctp_assoc_value instead [ 441.658331][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 441.669854][T17554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.691898][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.736450][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'. [ 441.751974][T17554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.889396][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 441.985084][T17757] netlink: 'syz.1.3222': attribute type 21 has an invalid length. [ 442.262674][T17554] hsr_slave_0: entered promiscuous mode [ 442.278627][T17554] hsr_slave_1: entered promiscuous mode [ 442.295443][T17554] debugfs: 'hsr0' already exists in 'hsr' [ 442.311597][T17554] Cannot create hsr debugfs directory [ 442.567918][ T7139] hsr_slave_0: left promiscuous mode [ 442.574361][ T7139] hsr_slave_1: left promiscuous mode [ 442.587541][ T7139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.598618][ T7139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.863941][ T5831] Bluetooth: hci1: command tx timeout [ 443.312844][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 443.359869][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 443.536777][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 443.588677][ T7133] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.608370][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 443.617634][ T7133] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.682364][ T7133] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.728670][ T7133] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.787962][ T7139] IPVS: stop unused estimator thread 0... [ 444.479497][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 444.555663][T17857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3244'. [ 445.235563][T17884] syzkaller1: entered promiscuous mode [ 445.263028][T17884] syzkaller1: entered allmulticast mode [ 445.331718][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 445.633004][T17889] syzkaller0: entered promiscuous mode [ 445.722013][T17887] lo speed is unknown, defaulting to 1000 [ 445.734864][T17905] netlink: 'syz.3.3252': attribute type 16 has an invalid length. [ 445.749827][T17908] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 445.860583][T17912] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 446.943746][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 448.377000][T17914] gretap3: entered allmulticast mode [ 448.391648][T17914] bond6: (slave gretap3): making interface the new active one [ 448.414572][T17914] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 448.518190][T17938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3256'. [ 448.520021][T17936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3256'. [ 448.634173][T17554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.742503][T17554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.760238][T17554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.808873][T17554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.937536][T17954] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 449.015569][T17554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.048970][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 449.058631][T17554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.081573][T17554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.106624][T17554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.345691][T17974] IPVS: set_ctl: invalid protocol: 12 172.30.1.2:20002 [ 449.455621][T17554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.509353][T17554] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.547338][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.554604][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.607381][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.614707][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.640010][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'. [ 449.663364][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3268'. [ 450.231213][T17554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.371310][T17554] veth0_vlan: entered promiscuous mode [ 450.414427][T17554] veth1_vlan: entered promiscuous mode [ 450.498885][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 450.538371][T17554] veth0_macvtap: entered promiscuous mode [ 450.565021][T17554] veth1_macvtap: entered promiscuous mode [ 450.575236][T18007] syzkaller0: entered promiscuous mode [ 450.594508][T18007] syzkaller0: entered allmulticast mode [ 450.655152][T17554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.692129][T17554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.746151][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.763916][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.795153][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.805390][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.039698][ T6246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.069803][ T6246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.597396][ T7139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.616807][T18017] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 451.617681][ T7139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.627970][T18017] tipc: Cannot configure node identity twice [ 451.819520][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 451.933651][T18032] block nbd1: server does not support multiple connections per device. [ 451.962929][T18032] block nbd1: shutting down sockets [ 452.510628][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.527900][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.537805][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.550665][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.564983][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.801059][T18050] lo speed is unknown, defaulting to 1000 [ 453.180899][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 453.356412][T18086] netlink: 'syz.3.3291': attribute type 2 has an invalid length. [ 453.368864][T18086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3291'. [ 453.734890][T18050] chnl_net:caif_netlink_parms(): no params data found [ 454.065058][T18050] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.072410][T18050] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.080766][T18050] bridge_slave_0: entered allmulticast mode [ 454.094278][T18050] bridge_slave_0: entered promiscuous mode [ 454.104232][T18050] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.111724][T18050] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.121755][T18050] bridge_slave_1: entered allmulticast mode [ 454.134778][T18050] bridge_slave_1: entered promiscuous mode [ 454.241610][T18050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.260678][T18107] nbd1: detected capacity change from 0 to 127 [ 454.294362][T18050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.408817][T18050] team0: Port device team_slave_0 added [ 454.429565][T18050] team0: Port device team_slave_1 added [ 454.465501][ T5831] block nbd1: Receive control failed (result -104) [ 454.503105][T18050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.510415][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.537213][T18050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.551173][T18050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.558508][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.589020][T18050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.626385][ T5831] Bluetooth: hci3: command tx timeout [ 454.726298][T18050] hsr_slave_0: entered promiscuous mode [ 454.734081][T18050] hsr_slave_1: entered promiscuous mode [ 454.863964][T18128] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 454.916977][T18130] openvswitch: netlink: Actions may not be safe on all matching packets [ 454.999532][T18128] team0: Port device gretap1 added [ 455.137723][T18137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3301'. [ 455.238741][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 455.277876][T18142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3302'. [ 455.956151][T18138] lo speed is unknown, defaulting to 1000 [ 456.042226][T18158] lo speed is unknown, defaulting to 1000 [ 456.221111][T18165] lo speed is unknown, defaulting to 1000 [ 456.703767][ T5831] Bluetooth: hci3: command tx timeout [ 456.786225][T18171] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 456.838086][T18171] bond1: entered promiscuous mode [ 456.843221][T18171] bond1: entered allmulticast mode [ 456.861751][T18171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.875779][T18176] xt_policy: output policy not valid in PREROUTING and INPUT [ 456.901739][T18171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3308'. [ 456.915640][T18175] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 456.941493][T18173] erspan1: entered allmulticast mode [ 456.959134][T18173] bond1: (slave erspan1): making interface the new active one [ 456.975881][T18176] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 456.984303][T18173] erspan1: entered promiscuous mode [ 456.996379][T18173] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 457.022455][T18175] netlink: 'syz.4.3309': attribute type 13 has an invalid length. [ 457.039791][T18175] netlink: 'syz.4.3309': attribute type 17 has an invalid length. [ 457.234808][T18175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.548359][T18050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.568125][T18050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.581046][T18194] lo speed is unknown, defaulting to 1000 [ 457.587355][ T5178] block nbd1: Connection timed out, retrying (0/1 alive) [ 457.588021][ T5178] block nbd1: Connection timed out, retrying (0/1 alive) [ 457.595588][T18050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.602450][ T5178] block nbd1: Connection timed out, retrying (0/1 alive) [ 457.619072][ T5178] block nbd1: Connection timed out, retrying (0/1 alive) [ 457.629855][ T5178] block nbd1: Dead connection, failed to find a fallback [ 457.638301][ T5178] block nbd1: shutting down sockets [ 457.644126][ T5178] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.653743][ T5178] Buffer I/O error on dev nbd1, logical block 3, async page read [ 457.664506][ T5178] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.671434][T18050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.677069][ T5178] Buffer I/O error on dev nbd1, logical block 2, async page read [ 457.683178][T18200] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 457.689763][ T5178] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.689798][ T5178] Buffer I/O error on dev nbd1, logical block 1, async page read [ 457.689874][ T5178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.689898][ T5178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 457.693176][ T5877] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.728547][T18050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.735254][ T5877] Buffer I/O error on dev nbd1, logical block 0, async page read [ 457.755943][T18200] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3314'. [ 457.760801][ T5877] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.780499][ T5877] Buffer I/O error on dev nbd1, logical block 1, async page read [ 457.788715][ T5877] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.797975][ T5877] Buffer I/O error on dev nbd1, logical block 2, async page read [ 457.806128][ T5877] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.806785][T18200] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 457.815328][ T5877] Buffer I/O error on dev nbd1, logical block 3, async page read [ 457.815658][ T5877] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.815687][ T5877] Buffer I/O error on dev nbd1, logical block 0, async page read [ 457.815838][ T5877] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.815864][ T5877] Buffer I/O error on dev nbd1, logical block 1, async page read [ 457.819209][ T5877] ldm_validate_partition_table(): Disk read failed. [ 457.895834][T18200] netlink: 638 bytes leftover after parsing attributes in process `syz.3.3314'. [ 457.896557][T18050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.919046][T18200] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3314'. [ 457.989475][T18050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.999716][ T5877] Dev nbd1: unable to read RDB block 0 [ 458.012814][T18050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.044887][ T5877] nbd1: unable to read partition table [ 458.055505][T18207] netlink: 'syz.2.3316': attribute type 13 has an invalid length. [ 458.088171][T18207] netlink: 'syz.2.3316': attribute type 17 has an invalid length. [ 458.115359][T18207] netlink: 'syz.2.3316': attribute type 27 has an invalid length. [ 458.128648][ T5877] ldm_validate_partition_table(): Disk read failed. [ 458.157412][ T5877] Dev nbd1: unable to read RDB block 0 [ 458.192983][ T5877] nbd1: unable to read partition table [ 458.361333][T18220] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 458.502459][T18050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.603113][T18228] lo speed is unknown, defaulting to 1000 [ 458.698470][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3321'. [ 458.716173][T18234] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3321'. [ 458.771874][T18050] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.785717][ T5831] Bluetooth: hci3: command tx timeout [ 458.890766][T10814] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.898025][T10814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.218840][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.226272][ T7139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.691744][T18240] delete_channel: no stack [ 459.774838][T18256] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3324'. [ 459.965877][T18262] block nbd2: Unsupported socket: should be TCP or UNIX. [ 459.976213][T18263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3326'. [ 460.059137][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 460.078966][T18269] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 460.104998][T18259] lo speed is unknown, defaulting to 1000 [ 460.257882][T18270] bond2: entered promiscuous mode [ 460.264786][T18270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.578193][T18278] syzkaller1: entered promiscuous mode [ 460.597860][T18278] syzkaller1: entered allmulticast mode [ 460.762248][T18050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.863708][ T5831] Bluetooth: hci3: command tx timeout [ 461.031652][T18297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.362713][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.376075][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.558278][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3340'. [ 461.570979][T18050] veth0_vlan: entered promiscuous mode [ 461.640782][T18306] syzkaller0: entered promiscuous mode [ 461.648711][T18306] syzkaller0: entered allmulticast mode [ 461.696985][T18050] veth1_vlan: entered promiscuous mode [ 461.854196][T18330] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 461.889874][T18050] veth0_macvtap: entered promiscuous mode [ 461.923371][T18050] veth1_macvtap: entered promiscuous mode [ 461.998694][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 462.016567][T18050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.070369][T18050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.071110][T18330] sctp: [Deprecated]: syz.0.3344 (pid 18330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.071110][T18330] Use struct sctp_sack_info instead [ 462.108932][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.128826][T10814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.156654][T10814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.182541][T10814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.202642][T18335] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 462.234778][T18335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3344'. [ 462.402861][T18348] lo speed is unknown, defaulting to 1000 [ 462.416576][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 462.436303][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.440757][T18351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3349'. [ 462.454091][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.620619][T10819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.646917][T10819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.691508][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3352'. [ 462.716075][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3352'. [ 462.725866][T18359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3352'. [ 462.910952][T18365] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3354'. [ 462.938158][T18368] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 463.049403][T18373] xt_hashlimit: size too large, truncated to 1048576 [ 463.101889][T18380] –: renamed from dummy0 (while UP) [ 463.232378][T18386] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 463.255376][T18386] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3360'. [ 463.738432][T18401] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 464.145963][T18439] dummy0: entered promiscuous mode [ 464.169358][T18439] bridge0: entered promiscuous mode [ 464.188556][T18439] hsr1: entered allmulticast mode [ 464.205607][T18439] dummy0: entered allmulticast mode [ 464.212209][T18439] bridge0: entered allmulticast mode [ 466.702535][T18405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.172490][T18478] lo speed is unknown, defaulting to 1000 [ 467.574179][T18485] delete_channel: no stack [ 467.836722][T18504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3385'. [ 467.880610][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 468.132645][T18515] atomic_op ffff888026d02198 conn xmit_atomic 0000000000000000 [ 468.170341][T18515] atomic_op ffff88802ea83198 conn xmit_atomic 0000000000000000 [ 468.200477][T18515] atomic_op ffff88807a85f998 conn xmit_atomic 0000000000000000 [ 468.212768][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 468.235858][T18515] atomic_op ffff88802bbaa198 conn xmit_atomic 0000000000000000 [ 468.258121][T18515] atomic_op ffff8880785d7198 conn xmit_atomic 0000000000000000 [ 468.285278][T18515] atomic_op ffff888031f5e998 conn xmit_atomic 0000000000000000 [ 468.285929][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 468.311551][T18515] atomic_op ffff8880207ba998 conn xmit_atomic 0000000000000000 [ 468.354368][T18515] atomic_op ffff888026439198 conn xmit_atomic 0000000000000000 [ 468.373744][T18515] atomic_op ffff88802643d198 conn xmit_atomic 0000000000000000 [ 468.385093][T18515] atomic_op ffff888057505198 conn xmit_atomic 0000000000000000 [ 468.528007][T18524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3394'. [ 468.778180][T18538] nr0: tun_chr_ioctl cmd 1074025677 [ 468.796963][T18538] nr0: linktype set to 774 [ 468.811951][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3398'. [ 468.844043][T18538] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 468.861657][T18538] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3398'. [ 468.874469][T18538] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 468.906152][T18538] netlink: 634 bytes leftover after parsing attributes in process `syz.3.3398'. [ 468.933831][T18538] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3398'. [ 469.088875][T18556] pimreg: entered allmulticast mode [ 469.127487][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 469.379304][T18569] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 469.828015][T18595] : entered promiscuous mode [ 469.868854][T18599] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 470.275810][T18614] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 471.299325][T18655] netlink: 'syz.3.3425': attribute type 5 has an invalid length. [ 471.434166][T18655] macsec0: entered promiscuous mode [ 471.455843][T18655] macsec0: left promiscuous mode [ 471.694724][T18672] openvswitch: netlink: IP tunnel dst address not specified [ 471.725124][T18672] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 471.745922][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.763077][T18678] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 471.841081][T18678] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 472.794085][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.850350][T18721] lo speed is unknown, defaulting to 1000 [ 473.341106][T18751] __nla_validate_parse: 15 callbacks suppressed [ 473.341128][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3450'. [ 473.515168][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.530082][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3450'. [ 473.559598][T18761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3449'. [ 473.601866][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3449'. [ 473.823845][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.883355][T18774] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3454'. [ 473.907369][T18761] bridge0: entered promiscuous mode [ 473.923024][T18761] ip6gretap0: entered promiscuous mode [ 473.938800][T18761] debugfs: 'hsr1' already exists in 'hsr' [ 473.946197][T18761] Cannot create hsr debugfs directory [ 473.957688][T18761] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 473.989464][T18761] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 474.191273][T18790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3459'. [ 474.312854][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 474.351071][T18783] netlink: 'syz.0.3457': attribute type 1 has an invalid length. [ 474.388871][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 475.221672][T18845] netlink: 'syz.3.3468': attribute type 2 has an invalid length. [ 475.258906][T18845] Cannot find del_set index 2 as target [ 475.343869][T18854] "syz.4.3471" (18854) uses obsolete ecb(arc4) skcipher [ 475.647115][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3474'. [ 475.659740][T18871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.669198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.692169][T18871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.704883][T10814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.733657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.966003][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 476.115485][T18864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.566347][T18864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.657595][T18903] tipc: Enabling of bearer rejected, failed to enable media [ 476.810758][T18864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.943159][T18864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.154749][ T89] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.181473][ T89] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.237667][T18936] netlink: 'syz.4.3489': attribute type 83 has an invalid length. [ 477.239804][ T6246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.419280][ T148] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.779734][T18936] syzkaller0: entered promiscuous mode [ 477.808195][T18936] syzkaller0: entered allmulticast mode [ 477.870212][T18950] syzkaller1: entered promiscuous mode [ 477.889487][T18950] syzkaller1: entered allmulticast mode [ 477.914381][T18957] tipc: Invalid UDP bearer configuration [ 477.914441][T18957] tipc: Enabling of bearer rejected, failed to enable media [ 477.988335][T10306] net_ratelimit: 2 callbacks suppressed [ 477.989862][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.003826][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.407434][T18972] __nla_validate_parse: 3 callbacks suppressed [ 478.407467][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3502'. [ 481.185001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.194879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.207755][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.218447][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.240809][T18977] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3503'. [ 481.443986][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3507'. [ 481.584188][T19009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3508'. [ 481.990322][T19035] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20000 [ 482.010677][T19034] x_tables: duplicate underflow at hook 1 [ 482.200687][T19043] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 482.221912][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 482.245725][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 482.265205][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 482.275518][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'. [ 482.305537][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'. [ 482.438303][T19057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3516'. [ 482.672773][T19071] netlink: 'syz.2.3521': attribute type 83 has an invalid length. [ 482.947036][T19085] sctp: [Deprecated]: syz.4.3524 (pid 19085) Use of int in maxseg socket option. [ 482.947036][T19085] Use struct sctp_assoc_value instead [ 483.114571][T19071] syzkaller0: entered promiscuous mode [ 483.141249][T19071] syzkaller0: entered allmulticast mode [ 483.214838][T19069] syzkaller0: entered promiscuous mode [ 483.236755][T19069] syzkaller0: entered allmulticast mode [ 483.403589][T19085] netlink: 'syz.4.3524': attribute type 1 has an invalid length. [ 483.916273][T19127] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 484.077144][T19134] netlink: 'syz.4.3531': attribute type 13 has an invalid length. [ 487.398914][T19166] netlink: 'syz.1.3536': attribute type 3 has an invalid length. [ 487.424348][T19166] __nla_validate_parse: 4 callbacks suppressed [ 487.424370][T19166] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3536'. [ 487.544792][T19168] syzkaller0: entered promiscuous mode [ 487.559960][T19168] syzkaller0: entered allmulticast mode [ 487.817501][T19179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3540'. [ 488.037003][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 488.116461][T19186] syzkaller0: entered promiscuous mode [ 488.141606][T19186] syzkaller0: entered allmulticast mode [ 488.312677][T19195] lo speed is unknown, defaulting to 1000 [ 489.157796][T19217] netlink: 'syz.3.3549': attribute type 10 has an invalid length. [ 489.177691][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3550'. [ 489.216741][T19222] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 489.297366][T19224] netlink: 'syz.0.3551': attribute type 83 has an invalid length. [ 489.366578][T19217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 489.386136][T19215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.413147][T19228] syzkaller0: entered promiscuous mode [ 489.419326][T19228] syzkaller0: entered allmulticast mode [ 489.562516][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 490.030816][T19233] syzkaller0: entered promiscuous mode [ 490.074787][T19233] syzkaller0: entered allmulticast mode [ 490.124975][T19243] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3554'. [ 490.784889][T10303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.450706][T19183] Set syz1 is full, maxelem 65536 reached [ 492.687737][T19266] netlink: 'syz.2.3559': attribute type 3 has an invalid length. [ 492.695695][T19266] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3559'. [ 494.377697][T19274] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 494.447227][T19271] bond1: entered allmulticast mode [ 494.584929][T19279] vxcan3: entered promiscuous mode [ 494.591528][T19279] vxcan3: entered allmulticast mode [ 494.598000][T19279] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 494.610067][T19279] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 494.636135][T19274] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 494.661933][T19283] pim6reg1: entered promiscuous mode [ 494.681973][T19283] pim6reg1: entered allmulticast mode [ 494.858390][T19294] syzkaller0: entered promiscuous mode [ 494.866563][T19294] syzkaller0: entered allmulticast mode [ 494.889600][T19307] netlink: 'syz.3.3566': attribute type 21 has an invalid length. [ 495.011054][T19317] xt_l2tp: v2 doesn't support IP mode [ 495.079261][T19317] ipvlan2: entered promiscuous mode [ 495.237011][T19318] ipvlan2: entered promiscuous mode [ 495.626170][T19343] netlink: 'syz.2.3574': attribute type 83 has an invalid length. [ 495.836193][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 495.868964][T19353] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3580'. [ 495.999143][T19343] syzkaller0: entered promiscuous mode [ 496.028769][T19343] syzkaller0: entered allmulticast mode [ 496.083997][T19353] ipvlan3: entered promiscuous mode [ 496.101686][T19353] bridge0: port 3(ipvlan3) entered blocking state [ 496.120834][T19353] bridge0: port 3(ipvlan3) entered disabled state [ 496.129771][T19353] ipvlan3: entered allmulticast mode [ 496.137479][T19353] bridge0: entered allmulticast mode [ 496.155771][T19353] ipvlan3: left allmulticast mode [ 496.166863][T19353] bridge0: left allmulticast mode [ 496.259577][T19363] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3585'. [ 496.284413][T19364] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3585'. [ 496.568932][T19379] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3590'. [ 496.728483][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 496.748378][T19385] netlink: 'syz.4.3592': attribute type 10 has an invalid length. [ 496.769441][T19385] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3592'. [ 496.892528][T19389] netlink: 'syz.4.3592': attribute type 27 has an invalid length. [ 499.259905][T19375] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 499.287509][T19373] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 499.290637][T19385] hsr0: entered promiscuous mode [ 499.334583][T19385] bridge0: port 3(hsr0) entered blocking state [ 499.350937][T19385] bridge0: port 3(hsr0) entered disabled state [ 499.368439][T19385] hsr0: entered allmulticast mode [ 499.392088][T19385] hsr_slave_0: entered allmulticast mode [ 499.414721][T19385] hsr_slave_1: entered allmulticast mode [ 499.448892][T19385] bridge0: port 3(hsr0) entered blocking state [ 499.455429][T19385] bridge0: port 3(hsr0) entered forwarding state [ 499.612828][T19405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'. [ 499.667426][T19405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'. [ 499.733590][T19411] syzkaller1: entered promiscuous mode [ 499.758356][T19411] syzkaller1: entered allmulticast mode [ 499.800693][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 499.985162][ C0] [ 499.987561][ C0] ============================================ [ 499.993912][ C0] WARNING: possible recursive locking detected [ 500.000175][ C0] syzkaller #0 Not tainted [ 500.004628][ C0] -------------------------------------------- [ 500.010805][ C0] syz.3.3594/19394 is trying to acquire lock: [ 500.017422][ C0] ffff888055194fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 500.026532][ C0] [ 500.026532][ C0] but task is already holding lock: [ 500.033948][ C0] ffff888034ae8fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 500.044264][ C0] [ 500.044264][ C0] other info that might help us debug this: [ 500.052385][ C0] Possible unsafe locking scenario: [ 500.052385][ C0] [ 500.059952][ C0] CPU0 [ 500.063249][ C0] ---- [ 500.066536][ C0] lock(&hsr->seqnr_lock); [ 500.071064][ C0] lock(&hsr->seqnr_lock); [ 500.075601][ C0] [ 500.075601][ C0] *** DEADLOCK *** [ 500.075601][ C0] [ 500.083762][ C0] May be due to missing lock nesting notation [ 500.083762][ C0] [ 500.092221][ C0] 13 locks held by syz.3.3594/19394: [ 500.097530][ C0] #0: ffff888057df8240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 500.107781][ C0] #1: ffffffff8fe3be28 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 500.119031][ C0] #2: ffff88807d130128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 500.129589][ C0] #3: ffffffff901894e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 500.140563][ C0] #4: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 500.150142][ C0] #5: ffffc90000007cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 500.160177][ C0] #6: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 500.169370][ C0] #7: ffff888034ae8fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 500.180217][ C0] #8: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 500.189807][ C0] #9: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 500.199858][ C0] #10: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 500.209279][ C0] #11: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 500.219314][ C0] #12: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 500.228560][ C0] [ 500.228560][ C0] stack backtrace: [ 500.234451][ C0] CPU: 0 UID: 0 PID: 19394 Comm: syz.3.3594 Not tainted syzkaller #0 PREEMPT(full) [ 500.234469][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.234479][ C0] Call Trace: [ 500.234485][ C0] [ 500.234492][ C0] dump_stack_lvl+0xe8/0x150 [ 500.234514][ C0] print_deadlock_bug+0x279/0x290 [ 500.234537][ C0] __lock_acquire+0x253f/0x2cf0 [ 500.234559][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 500.234578][ C0] ? skb_network_protocol+0x234/0x400 [ 500.234602][ C0] ? hsr_dev_xmit+0x237/0x360 [ 500.234621][ C0] lock_acquire+0x106/0x350 [ 500.234638][ C0] ? hsr_dev_xmit+0x237/0x360 [ 500.234660][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 500.234673][ C0] ? lock_acquire+0x106/0x350 [ 500.234690][ C0] ? hsr_dev_xmit+0x237/0x360 [ 500.234710][ C0] _raw_spin_lock_bh+0x36/0x50 [ 500.234725][ C0] ? hsr_dev_xmit+0x237/0x360 [ 500.234744][ C0] hsr_dev_xmit+0x237/0x360 [ 500.234763][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 500.234783][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 500.234802][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 500.234820][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 500.234835][ C0] ? ebt_do_table+0x2665/0x2830 [ 500.234851][ C0] ? ebt_do_table+0x2665/0x2830 [ 500.234867][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.234889][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 500.234910][ C0] ? lock_acquire+0x106/0x350 [ 500.234932][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 500.234952][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 500.234973][ C0] NF_HOOK+0x360/0x3f0 [ 500.234993][ C0] ? NF_HOOK+0xa2/0x3f0 [ 500.235012][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 500.235032][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 500.235051][ C0] ? lock_acquire+0x106/0x350 [ 500.235072][ C0] br_forward_finish+0xd3/0x130 [ 500.235091][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 500.235110][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 500.235130][ C0] NF_HOOK+0x360/0x3f0 [ 500.235150][ C0] ? NF_HOOK+0xa2/0x3f0 [ 500.235169][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 500.235189][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 500.235209][ C0] ? __skb_clone+0x483/0x7a0 [ 500.235230][ C0] ? br_handle_vlan+0x61/0x530 [ 500.235248][ C0] __br_forward+0x397/0x540 [ 500.235266][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 500.235287][ C0] br_flood+0x6ee/0xb80 [ 500.235311][ C0] ? br_dev_xmit+0x193/0x1990 [ 500.235326][ C0] br_dev_xmit+0x12bd/0x1990 [ 500.235341][ C0] ? br_dev_xmit+0x193/0x1990 [ 500.235359][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 500.235377][ C0] ? is_skb_forwardable+0xb0/0x200 [ 500.235401][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 500.235426][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 500.235440][ C0] ? handle_softirqs+0x22a/0x840 [ 500.235460][ C0] ? __schedule+0x17bc/0x5680 [ 500.235476][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 500.235489][ C0] ? netlink_broadcast+0x37/0x50 [ 500.235507][ C0] ? device_release_driver_internal+0x76f/0x870 [ 500.235527][ C0] ? mac80211_hwsim_netlink_notify+0xfae/0x1310 [ 500.235548][ C0] ? notifier_call_chain+0x1ad/0x3d0 [ 500.235561][ C0] ? sock_close+0xc3/0x240 [ 500.235575][ C0] ? __fput+0x44f/0xa60 [ 500.235591][ C0] ? task_work_run+0x1d9/0x270 [ 500.235606][ C0] ? exit_to_user_mode_loop+0xed/0x480 [ 500.235623][ C0] ? do_syscall_64+0x33e/0xf80 [ 500.235639][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.235655][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.235673][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 500.235697][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 500.235719][ C0] ? skb_clone+0x246/0x3a0 [ 500.235733][ C0] hsr_forward_skb+0x167e/0x2a80 [ 500.235751][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 500.235766][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 500.235780][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.235797][ C0] ? __asan_memset+0x22/0x50 [ 500.235816][ C0] ? __skb_pad+0x405/0x610 [ 500.235831][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 500.235857][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 500.235879][ C0] hsr_announce+0x1db/0x370 [ 500.235898][ C0] ? hsr_announce+0x89/0x370 [ 500.235918][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 500.235937][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.235955][ C0] call_timer_fn+0x192/0x5e0 [ 500.235974][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 500.235993][ C0] ? call_timer_fn+0xd4/0x5e0 [ 500.236011][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 500.236034][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.236048][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 500.236069][ C0] __run_timer_base+0x652/0x8b0 [ 500.236086][ C0] ? ktime_get+0x45/0x220 [ 500.236105][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 500.236127][ C0] run_timer_softirq+0xb7/0x170 [ 500.236145][ C0] handle_softirqs+0x22a/0x840 [ 500.236165][ C0] ? __irq_exit_rcu+0xca/0x220 [ 500.236186][ C0] __irq_exit_rcu+0xca/0x220 [ 500.236205][ C0] irq_exit_rcu+0x9/0x30 [ 500.236223][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 500.236241][ C0] [ 500.236246][ C0] [ 500.236251][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 500.236267][ C0] RIP: 0010:finish_task_switch+0x427/0xbe0 [ 500.236287][ C0] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 f4 20 0a e8 21 6d 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80 [ 500.236300][ C0] RSP: 0018:ffffc90004c27350 EFLAGS: 00000206 [ 500.236314][ C0] RAX: 00000000000024e7 RBX: 1ffff110170c7784 RCX: 0000000080000001 [ 500.236325][ C0] RDX: 0000000000000006 RSI: ffffffff8dfb65fa RDI: ffff888029f1b568 [ 500.236336][ C0] RBP: ffffc90004c273b0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 500.236346][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b863ae88 [ 500.236357][ C0] R13: ffff888029f19ec0 R14: ffff88801e3b9ec0 R15: dffffc0000000000 [ 500.236378][ C0] __schedule+0x17bc/0x5680 [ 500.236398][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 500.236424][ C0] ? __pfx___schedule+0x10/0x10 [ 500.236442][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 500.236457][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 500.236474][ C0] preempt_schedule_common+0x82/0xd0 [ 500.236490][ C0] preempt_schedule_thunk+0x16/0x30 [ 500.236508][ C0] _raw_spin_unlock_irqrestore+0x74/0x80 [ 500.236524][ C0] __wake_up_common_lock+0x190/0x1f0 [ 500.236543][ C0] sock_def_readable+0x1eb/0x550 [ 500.236559][ C0] ? sock_def_readable+0xae/0x550 [ 500.236575][ C0] netlink_broadcast_filtered+0xb32/0xeb0 [ 500.236601][ C0] netlink_broadcast+0x37/0x50 [ 500.236619][ C0] kobject_uevent_net_broadcast+0x378/0x560 [ 500.236643][ C0] kobject_uevent_env+0x55c/0x9e0 [ 500.236666][ C0] device_release_driver_internal+0x76f/0x870 [ 500.236688][ C0] mac80211_hwsim_del_radio+0x2b7/0x490 [ 500.236710][ C0] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 500.236730][ C0] ? mac80211_hwsim_netlink_notify+0xde9/0x1310 [ 500.236752][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 500.236772][ C0] mac80211_hwsim_netlink_notify+0xfae/0x1310 [ 500.236796][ C0] ? mac80211_hwsim_netlink_notify+0x3cc/0x1310 [ 500.236818][ C0] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 500.236843][ C0] notifier_call_chain+0x1ad/0x3d0 [ 500.236860][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 500.236876][ C0] netlink_release+0x123b/0x1ad0 [ 500.236898][ C0] ? netlink_release+0x101/0x1ad0 [ 500.236918][ C0] ? __pfx_netlink_release+0x10/0x10 [ 500.236936][ C0] ? down_write+0x16d/0x200 [ 500.236955][ C0] ? __pfx_down_write+0x10/0x10 [ 500.236977][ C0] sock_close+0xc3/0x240 [ 500.236992][ C0] ? __pfx_sock_close+0x10/0x10 [ 500.237007][ C0] __fput+0x44f/0xa60 [ 500.237027][ C0] task_work_run+0x1d9/0x270 [ 500.237044][ C0] ? __pfx_task_work_run+0x10/0x10 [ 500.237061][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.237076][ C0] exit_to_user_mode_loop+0xed/0x480 [ 500.237092][ C0] ? rcu_is_watching+0x15/0xb0 [ 500.237112][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.237127][ C0] do_syscall_64+0x33e/0xf80 [ 500.237143][ C0] ? trace_irq_disable+0x3b/0x140 [ 500.237159][ C0] ? clear_bhb_loop+0x40/0x90 [ 500.237176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.237190][ C0] RIP: 0033:0x7f919699c819 [ 500.237204][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.237216][ C0] RSP: 002b:00007ffe921753a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 500.237230][ C0] RAX: 0000000000000000 RBX: 00007f9196c17da0 RCX: 00007f919699c819 [ 500.237240][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 500.237249][ C0] RBP: 00007f9196c17da0 R08: 00007f9196c16128 R09: 0000000000000000 [ 500.237259][ C0] R10: 000000000003fc68 R11: 0000000000000246 R12: 000000000007a214 [ 500.237268][ C0] R13: 00007f9196c1618c R14: 0000000000079f4e R15: 00007ffe921754b0 [ 500.237284][ C0] [ 501.127477][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.177639][T19427] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 501.186783][T19427] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 507.424860][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.433100][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog