last executing test programs: 4.460914668s ago: executing program 3 (id=4366): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000a80)={r0, &(0x7f0000000980)='\x00', 0x202102, &(0x7f00000009c0)={@_ha_fsid={[0x0, 0x80]}, {0x6, 0x10b, 0x4, 0x284f}}, 0xf, &(0x7f0000000a00), &(0x7f0000000a40)=0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x71, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{r1, &(0x7f0000000240)='syzkaller\x00', 0x8000, &(0x7f0000000280)={@_ha_fsid={[0x2, 0x8]}, {0x9, 0xa, 0x6, 0x2b21}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}, 0x2, &(0x7f0000000480)=[{0x3, 0xffff, &(0x7f0000000340)='\x00', &(0x7f0000000380)="a549b1b6df47", 0x6}, {0x2, 0x137, &(0x7f00000003c0)='\x00', &(0x7f0000000540)="469a2c58dacc7dbf0cc84ceae7bd99f07e3c7b3044c8d3b9a4737e0074a17652bdd5c7e47394f8ab4ff8761894d828f63963ea631d1bf8e005981e8dee9ca648bb42924d64a98fcae1057f93e95f2fbc0084ff589755", 0x56, 0x28}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{r1, &(0x7f0000000240)='syzkaller\x00', 0x8000, &(0x7f0000000280)={@_ha_fsid={[0x2, 0x8]}, {0x9, 0xa, 0x6, 0x2b21}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}, 0x2, &(0x7f0000000480)=[{0x3, 0xffff, &(0x7f0000000340)='\x00', &(0x7f0000000380)="a549b1b6df47", 0x6}, {0x2, 0x137, &(0x7f00000003c0)='\x00', &(0x7f0000000540)="469a2c58dacc7dbf0cc84ceae7bd99f07e3c7b3044c8d3b9a4737e0074a17652bdd5c7e47394f8ab4ff8761894d828f63963ea631d1bf8e005981e8dee9ca648bb42924d64a98fcae1057f93e95f2fbc0084ff589755", 0x56, 0x28}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x7fff, [{0x9, 0x1, 0x2}, {0x6, 0x1, 0x6}, {0x7, 0x3, 0xde}, {0x7, 0x3, 0x6}, {0x10, 0x1, 0x5}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000800)=""/190, 0x8b, 0xbe, 0x0, 0x8}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x7fff, [{0x9, 0x1, 0x2}, {0x6, 0x1, 0x6}, {0x7, 0x3, 0xde}, {0x7, 0x3, 0x6}, {0x10, 0x1, 0x5}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000800)=""/190, 0x8b, 0xbe, 0x0, 0x8}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="8000000000000000ee00"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="020000000400"/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="8000000000000000ee00"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="020000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000002000000060000000900000000400000", @ANYRES32=r1, @ANYBLOB='@\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000040000000100000000000000000000000000000000000000f2526df5d0d8a586fec497a3815356f096126f441adbc0cd26fc04973a02c48f04314b0b76c2b51a"], 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB="a072e447bd2b23b8dd8f6cfa00000000000000140003007665f81298245a75b0", @ANYBLOB="78e17446920c460576e5f0db31848bcbb5e7249949418f3da0ff763a287156e0ddc2aa37a03c9930917c88788365f65eea96b7922c208761eae579955e77d916c0fb50a47eca92920899d30e263ad254134ecd7ffe561d8115a58c69e329f2343776ec40c0567f27393e2b11d38e580cd6238cadf8b434315cc8b80c0270957fb06dbe3009b0b903c22436256adbd4bf5e33851c", @ANYBLOB='\b\x00('], 0x44}}, 0x404c8c4) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINK={0x8, 0x5, r6}]}, 0x28}}, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="72981764df096d5051babb532c137afaab", @ANYRES16=r13, @ANYBLOB="010025bd7000fcdbdf254a00000008000300040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x44, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x20, 0xa8, 0x0, 0x1, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x2e}, @nested={0x4, 0x107}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 3.364854015s ago: executing program 3 (id=4376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008884}, 0x20c5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.732383706s ago: executing program 0 (id=4381): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0xc044) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x38}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x488d1) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000400)={0x2, 'lo\x00', 0x1}, 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (async, rerun: 64) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/224, 0xe0}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/66, 0x42}, {&(0x7f0000000940)=""/138, 0x8a}, {&(0x7f0000000a00)=""/2, 0x2}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/53, 0x35}], 0xa, 0x9, 0x6) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x18, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x7, 0xf, 0x6c, 0x800, 0x80, 0x2a, 0x3}, &(0x7f0000000e80)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000ec0)={r4, 0x8}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000f00)={r4, 0x8, 0x6e, "e9fc534e19e883465234283e9af8b6c81ca0c956ba12bf6d3277b66b751194bb75f956f7bf0204d7c2c9313fd05f3acd24dfb1650d9cca4ae89edbc1b89c9d8ef5a0e78f55c455510ba49f49553966bc35068670300e6d28fa2322b0d1e423b7cfdaf38530ff35a604131b83ab9b"}, 0x76) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20044080) (async, rerun: 32) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000001080)={0x16}) (rerun: 32) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000010c0)=0x100, 0x4) (async) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001100)=""/67, &(0x7f0000001180)=0x43) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000011c0)) (async, rerun: 64) getpeername$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540)={r0, 0xffffffffffffffff}, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@generic={&(0x7f0000001580)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x0, 0x13, &(0x7f0000001240)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}], &(0x7f0000001300)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000001340)=""/241, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000014c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x2, 0xa, 0xe, 0x10001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001680)=[r8, r0, 0x1, r9, 0x1, r0, r10], &(0x7f00000016c0)=[{0x2, 0x4, 0x0, 0x9}, {0x2, 0x3, 0xc}, {0x2, 0x4, 0xf, 0xb}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x1}, 0x94) (async) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000017c0)={0xffffffffffffffff}) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001880), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r11, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, r12, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x3c}}, 0x20008081) 2.714331508s ago: executing program 4 (id=4382): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.596589042s ago: executing program 1 (id=4383): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) 2.485069305s ago: executing program 3 (id=4384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x3, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x1, 0x10a4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}, 0x1, 0x2}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x80000000, 0x4de5, 0x24, 0xfffffffffffffbff, 0x4, 0xd9]}, &(0x7f00000002c0)=0x78) 2.467444434s ago: executing program 2 (id=4385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x1ec116baf9eb8489]}}, &(0x7f0000002180)=""/4096, 0x53, 0x1000, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000031c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x161, '\x00', 0x0, r3}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.345630338s ago: executing program 0 (id=4386): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e25, 0x81, @mcast2, 0xff}}}, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) 2.212688045s ago: executing program 1 (id=4387): syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3386dd606e230000140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000000e2e7d9819300000000"], 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) (async, rerun: 64) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4000009, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd5, &(0x7f0000000400)=""/213, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e0600c16a010054001280110001006272696467655f736c617665000000003c00058005001c00ff00000005002000000000000500050000000000050019001200"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4001000010002300000700000000000000000000010000000000000000b2ffffff8000000000000000000000000000bb00000000000000000000000000000000c9a0ddfb94d8b2f95792619fe59ccaf750c1931e63511ad4feacb604b391fac248a21639", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0081000000"], 0x140}}, 0x400c000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) bind$pptp(r13, &(0x7f00000003c0)={0x18, 0x2, {0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002f80)={&(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x2d4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @initdev}, &(0x7f0000000140)=0xc) 2.193922397s ago: executing program 4 (id=4388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x5, 0x0) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socket(0x1e, 0x805, 0x0) (async) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$rds(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)=""/233, 0xe9}], 0x2, 0x0, 0x0, 0x4014}, 0x40040) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)=""/233, 0xe9}], 0x2, 0x0, 0x0, 0x4014}, 0x40040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0xc005) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0xc005) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x8, 0x3}, {}, {0x8, 0xfff3}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x8, 0x3}, {}, {0x8, 0xfff3}}}, 0x24}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) (async) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) socket(0x1, 0x1, 0x7) (async) socket(0x1, 0x1, 0x7) 1.934860419s ago: executing program 2 (id=4389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="5bbf0100000002001c0012800b00010062726964676500000c0002800500190000000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/time_for_children\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="45261a984dede2fb437c0ad0fed4a8a62dc69e3ec3bf2b4174a5c8fcbbae145486b3d4df91a39ff9dd87e8bda883bc4032b564d2a191b53c486aa227e914c4899d4e1673b306bb48dab85d029f97e2169b2c8ca99c6993bab81cd2d26d8812ed53d7fd2c413e55f04f244d98f5405c6b1af78ee7ed2397bd007fa50b0a69eb31876ddd03084f90f83ab029d691f3c0605b0c1b21abbb79e68751e73391168fa8ebb6b318057c29c01a96153299de07f2e1451b97055b", @ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="8e1be9eb7e1e17e77342ad17107e7b566c9106e1c8af5f0f2e7abb6ca099b72d45a04234539a4b83666da8de8ac4762042d09d1c92bef699ef5c1f138bc9bed118e57ac1eb7918cfb8acaebec9f0518a368e3ed2ce52a921b65bec1b82103f8925b528bb8d6392285a33aaf1b1b941f69dfb6e58bc91186cc888f0e3d627311e89a3e94cbc1112fe7c9c1b140d8a805ac60e2b8394064b18c2a5c7a16f07b18b284f4ee25fcf337f99d3a63381270f009dfaa8", @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES32=r2], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r7, r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000004181803b376e05ea78b40000100009520740000000000bd1176e803f139e9121df51fc3aef2ef82caa0ad5570351196ecc6c0a5b13ae2681a3c95c557ef7ee143a85529817121d17d966e92ff9c57417888abf8854a523532817ce993d9368e45c6c2cd46ac2231b8be464c53823ca91968929fe58ae25e11cfac11325270a57a94d6f30285162ab1e7518c3cd2c600000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xb7, &(0x7f000000cf3d)=""/183, 0x41000, 0xe0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0xffffffffffffffa1) 1.584910414s ago: executing program 3 (id=4390): syz_80211_inject_frame(0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) (async, rerun: 32) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) 1.544250931s ago: executing program 1 (id=4391): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002240)={0x10, 0x12, 0x1, 0x70bd29, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008041) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x884) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) 1.528000489s ago: executing program 4 (id=4392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000f8ffffffffffffff090000788463fb000d7516fe6b3fcb99af3a16f3e3b02c0e690cc2692e6e7ccd429500a279508ca59e1964d31845e6fd7fa692689d0b4af864da8253015dd1ff985b0dfa45dec1c57318ac0ec47cbaf0b893612d70cb74918228c6068ea984c7d258", @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x200000e4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x602, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000001) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00028006"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0xd05, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x8001) 1.37283106s ago: executing program 2 (id=4393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'veth1_to_batadv\x00', @random="010020004e0b"}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='\x00', 0x0, 0x4000, r0}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000ea00bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000390000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.191944215s ago: executing program 0 (id=4394): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 1.178245036s ago: executing program 4 (id=4395): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000)=0x6f0, 0x4) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x60, 0x0, 0x0) socket(0x10, 0x8080b, 0x0) 1.056239815s ago: executing program 1 (id=4396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) 1.0290875s ago: executing program 2 (id=4397): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r2 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000340)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r5, 0x10e, 0xc, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 933.927548ms ago: executing program 3 (id=4398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r4, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcb8}, @ldst={0x0, 0x0, 0x0, 0xa, 0xa, 0x6, 0x1}, @jmp={0x5, 0x0, 0x4, 0xa, 0xb, 0x100, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x31}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, &(0x7f0000000300), 0x40f00, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x9, 0x2, 0x18}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000380)=[r0, r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x1, 0x3, 0x7, 0x2}, {0x2, 0x3, 0x6, 0x7}, {0x0, 0x1, 0x0, 0x6}, {0x2, 0x5, 0x8, 0xc}, {0x1, 0x4, 0xe, 0x2}], 0x10, 0xee0c}, 0x94) 860.961554ms ago: executing program 4 (id=4399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x274, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x248, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x2, 0x0, 0x7a, 0x20, 0x20, 0x17, 0x3}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xb0}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}]}, 0x274}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x1000000, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2, @ANYRES8=r5, @ANYRES32=r5, @ANYRES64=r5, @ANYRES32=r0, @ANYRES16=r3, @ANYRES16=r3], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c20000001060101000001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) 859.297077ms ago: executing program 0 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000200)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e1d, 0x3, 'fo\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x5, 0xffffffff, 0x36}}, 0x44) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, 0x0) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "111363", 0x3ff, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [@routing={0x3c, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x4}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) 774.254972ms ago: executing program 1 (id=4401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tun(r8, &(0x7f0000000500)={@val={0x0, 0x88b5}, @void, @x25={0x0, 0xaa, 0x0, "b83bfe0917e48076b0c754f74e23c1f24f886a43d370c91d952d21723138eaee533a71eff6ef6bb39175a364a0014788becd0844627738d4ff636834fe07e47f324cc977bdb9b336ff9e663755175cada17cf3b06abb1f3603edf58b99fd4744b21ae8699a0cd2a72d83eb81c93636fe389182a5948513a7b688429a41755bffe76573e1c1242b5d5b2e71b443e49a831fb3f8cc951ce2233aa77ab1275cd5f8fbb6f259db18e4b4bad4"}}, 0xb1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x2c, r9, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044880}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRES16=r8, @ANYRES32=r7, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESOCT], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 636.792984ms ago: executing program 2 (id=4402): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x10, 0x3, 0x0) ppoll(&(0x7f00000002c0)=[{r4, 0x1284}, {r5, 0x4200}], 0x2, 0x0, 0x0, 0x0) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_extract_tcp_res(&(0x7f0000000280), 0xd, 0x6) syz_extract_tcp_res(&(0x7f00000002c0), 0x1, 0x81) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x15}, @void, @x25={0x2, 0x0, 0x23, "d3bec400dcdd84fd24ffe26479b2f5fb9b169345acfaf69e84ef788cb93e3ea140be8987e0a5578d002536198f151af5d6ddbafcfb108ca164de4cb18c18ed28ea91b1cbb752b47067ef9812bb3dfbce23079936277427ad3734f47579875a499fd269fee3240860c576a2287936fd7fbd"}}, 0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r9 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @multicast2, 0x1}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000110000030000000000000004000000009597bdfe7ff8e07001a3b9a4448719f50e3899fabf0bab7491c7a3253e5b74799f12654a82d83e2694387d81136c5fae37cd21e499604b85b2216e14000000000000000000", @ANYRES32=r8, @ANYBLOB="132004000e020200"], 0x20}, 0x1, 0x0, 0x0, 0x886}, 0x0) 488.881644ms ago: executing program 3 (id=4403): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000080)) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0x80000, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) socket$packet(0x11, 0x2, 0x300) 404.505335ms ago: executing program 0 (id=4404): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 244.245542ms ago: executing program 4 (id=4405): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023bc7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002d8004"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48002) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001800)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f00000012c0)={0x4e0, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x7}, {0x3, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0x6}, {0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x42, 0x18, 0x6c, 0x5b, 0x16, 0x6, 0x9, 0x5, 0x69, 0x5, 0x3, 0x3, 0x4, 0x18, 0x36, 0x18, 0x48, 0x3, 0x5, 0x1b, 0x0, 0x30, 0x1b, 0xc, 0x36, 0x9, 0x9, 0x1b, 0x18, 0x12, 0x6c]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x7}, {0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x1}, {0x4, 0x5}, {0x4}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x1}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7ff, 0x3, 0x4, 0x3, 0x1, 0x401]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x716f, 0x1, 0x8296, 0x2, 0x6, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1f, 0x4, 0x7edd, 0xd3b4, 0xc000, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0xc, 0x0, 0x9, 0x1, 0xea, 0x8]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x7f, 0x691a, 0x0, 0x8000, 0x1f, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x7}, {0x7, 0xb}, {0x5, 0x2}, {0x2, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0xffc0, 0x3, 0x0, 0x6, 0x5, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x26, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x7, 0x4, 0x8001, 0x6, 0x0, 0x143d, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x6, 0x0, 0x2, 0x2, 0xf, 0x29, 0xbe]}}]}]}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}], @acl_policy, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x90}, 0x8086) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f00000011c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000a80)="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", 0x2b9}], 0x1}}], 0x4, 0x2400c0a2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0xe, [@perr={0x84, 0x28, {0x5, 0x2, [{{0x0, 0x1}, @broadcast, 0xffffffff, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0x8000, @value=@device_b, 0x15}]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000004}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210026bd7000fbdbdf25200000001c002d8005000100410000000800020003000000080003000600000008000300", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x184, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb0}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xdc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9045}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x184}, 0x1, 0x0, 0x0, 0x11}, 0x2020) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000", @ANYRES16=r2, @ANYBLOB="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"], 0x63c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 109.044071ms ago: executing program 0 (id=4406): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x2}}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/56, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 37.541076ms ago: executing program 1 (id=4407): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=4408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x234, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb83}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6a2c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff3}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5d, @remote, 0x80000001}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x8, 0x3, "78d8b86e"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4b}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x4c040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map, 0xffffffffffffffff, 0x31}, 0x20) sendmmsg(r8, &(0x7f000000e380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[{0x10, 0x0, 0x8}], 0x10}}], 0x1, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x10) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r12, 0x9}, 0x8) kernel console output (not intermixed with test programs): 25659][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2909'. [ 514.360959][T16726] netlink: 'syz.0.2909': attribute type 10 has an invalid length. [ 514.408922][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'. [ 514.436125][T16728] netlink: 'syz.3.2911': attribute type 10 has an invalid length. [ 514.456734][T16728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2911'. [ 514.487966][T13382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.649115][T16738] openvswitch: netlink: Flow actions attr not present in new flow. [ 514.918958][T16718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.952703][T16477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 515.018505][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.041649][T16477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.131412][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.159737][T16477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.219413][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.238935][T16477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.268654][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.492816][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.530633][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.573464][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.581149][T12505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.627128][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.634468][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.225962][ T5621] Bluetooth: hci5: command tx timeout [ 516.288896][T16807] openvswitch: netlink: Multiple metadata blocks provided [ 516.347711][T16807] ip_tables: iptables: counters copy to user failed while replacing table [ 516.854771][T16835] __nla_validate_parse: 6 callbacks suppressed [ 516.854792][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 516.880107][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2941'. [ 516.934185][T16841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2941'. [ 516.971230][T16843] ip_tables: iptables: counters copy to user failed while replacing table [ 516.981830][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.984142][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.076943][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.144197][T16844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.148223][T16477] veth0_vlan: entered promiscuous mode [ 517.261834][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051968000: rx timeout, send abort [ 517.270997][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888051968000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 517.371345][T16477] veth1_vlan: entered promiscuous mode [ 517.468335][T16855] af_packet: packet size is too long (32 > 25) [ 517.482451][T16477] veth0_macvtap: entered promiscuous mode [ 517.564684][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 517.688191][T16866] syzkaller1: entered promiscuous mode [ 517.735327][T16866] syzkaller1: entered allmulticast mode [ 517.764679][T16477] veth1_macvtap: entered promiscuous mode [ 517.901510][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.942628][T16880] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2954'. [ 517.962633][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.104726][T16882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2955'. [ 518.185638][T15413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.337437][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 518.452452][T12505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.474378][T12505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.519127][T15413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.552690][T15413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.620816][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 518.659008][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.676226][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.818853][T16911] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2964'. [ 518.856904][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.096660][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 519.489812][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.547996][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.889845][T16951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.902867][T16951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.922895][T16951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.941581][T16951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.942179][T16950] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 519.971392][T16951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.377106][T16969] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 520.437154][T16974] 8021q: VLANs not supported on ip6gre0 [ 520.727153][ T3282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.744067][ T3282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.760042][ T3282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 520.973949][ T3282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.995351][ T3282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.016642][ T3282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 521.132716][T16986] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 521.173352][T16994] tipc: Enabled bearer , priority 10 [ 521.351154][ T3282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.396116][ T3282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.422319][ T3282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 521.591598][ T3282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.603970][ T3282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.619593][ T3282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 522.066569][ T5621] Bluetooth: hci0: command tx timeout [ 522.127791][T17022] __nla_validate_parse: 8 callbacks suppressed [ 522.127812][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2998'. [ 522.337690][T17029] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2999'. [ 522.413876][ T3282] dvmrp0: left allmulticast mode [ 522.582873][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 522.624690][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 523.512852][T17078] Bluetooth: MGMT ver 1.23 [ 523.663902][ T3282] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 523.699090][ T3282] bond7 (unregistering): (slave bridge0): Releasing active interface [ 523.707338][ T3282] bridge0 (unregistering): left promiscuous mode [ 523.717136][ T3282] bridge0 (unregistering): left allmulticast mode [ 523.737060][ T3282] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 523.746878][ T3282] bridge4 (unregistering): left promiscuous mode [ 523.851396][ T3282] bond0 (unregistering): left promiscuous mode [ 523.859928][ T3282] bond0 (unregistering): Released all slaves [ 523.880849][ T3282] bond1 (unregistering): Released all slaves [ 523.912516][ T3282] bond2 (unregistering): Released all slaves [ 523.939929][ T3282] bond3 (unregistering): Released all slaves [ 523.961838][ T3282] bond4 (unregistering): Released all slaves [ 523.980996][ T3282] bond5 (unregistering): Released all slaves [ 523.997561][ T3282] bond6 (unregistering): Released all slaves [ 524.028552][ T3282] bond7 (unregistering): Released all slaves [ 524.043571][ T3282] bond8 (unregistering): Released all slaves [ 524.070170][ T3282] bond9 (unregistering): Released all slaves [ 524.086656][ T3282] bond10 (unregistering): Released all slaves [ 524.102569][ T3282] bond11 (unregistering): Released all slaves [ 524.129547][ T3282] bond12 (unregistering): Released all slaves [ 524.144724][ T3282] bond13 (unregistering): Released all slaves [ 524.151376][ T5621] Bluetooth: hci0: command tx timeout [ 524.170384][ T3282] bond14 (unregistering): Released all slaves [ 524.185606][ T3282] bond15 (unregistering): Released all slaves [ 524.200869][ T3282] bond16 (unregistering): Released all slaves [ 524.219967][T17030] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 524.363471][T17080] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3009'. [ 524.375274][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 524.425469][ T3282] tipc: Disabling bearer [ 524.431140][ T3282] tipc: Disabling bearer [ 524.447703][ T3282] tipc: Left network mode [ 524.477831][T17093] netlink: Unknown nat attribute (0) [ 524.483268][T17093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.503765][T17091] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 524.673590][T17103] netlink: 15051 bytes leftover after parsing attributes in process `syz.4.3013'. [ 524.740535][T17091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.107482][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.802489][T17147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3022'. [ 525.832781][T17145] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3017'. [ 526.225462][ T5621] Bluetooth: hci0: command tx timeout [ 526.227802][T17166] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 526.395711][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 526.551601][T17175] bond6: (slave gretap3): making interface the new active one [ 526.590403][T17175] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 526.853062][T17186] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 527.063636][ T3282] batadv0: left promiscuous mode [ 527.166566][ T3282] hsr_slave_0: left promiscuous mode [ 527.213230][ T3282] hsr_slave_1: left promiscuous mode [ 527.305691][T17203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3033'. [ 527.338665][ T3282] vlan0: left allmulticast mode [ 527.357740][ T3282] veth0_vlan: left allmulticast mode [ 527.372381][ T3282] vlan0: left promiscuous mode [ 527.382349][ T3282] veth1_vlan: left allmulticast mode [ 527.393156][ T3282] veth0_macvtap: left allmulticast mode [ 527.406743][ T3282] veth0_macvtap: left promiscuous mode [ 527.431993][ T3282] veth1_vlan: left promiscuous mode [ 527.443762][ T3282] veth0_vlan: left promiscuous mode [ 527.777707][T17219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3036'. [ 528.321684][ T5621] Bluetooth: hci0: command tx timeout [ 528.622112][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'. [ 528.645881][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 528.665267][T17220] bridge_slave_0: left allmulticast mode [ 528.671138][T17220] bridge_slave_0: left promiscuous mode [ 528.678239][T17220] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.698386][T17220] bridge_slave_1: left allmulticast mode [ 528.710235][T17220] bridge_slave_1: left promiscuous mode [ 528.739516][T17220] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.773177][T17220] bond0: (slave bond_slave_0): Releasing backup interface [ 528.791776][T17220] bond0: (slave bond_slave_1): Releasing backup interface [ 528.813867][T17220] team0: Port device team_slave_0 removed [ 528.827713][T17220] team0: Port device team_slave_1 removed [ 528.835190][T17220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.855424][T17220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.871747][T17220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.895693][T17220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.908382][T17220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.956887][T17221] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 529.115433][T17245] netlink: 'syz.4.3039': attribute type 1 has an invalid length. [ 529.165302][T16948] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.167358][T17245] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3039'. [ 529.177100][T16948] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.190877][T16948] bridge_slave_0: entered allmulticast mode [ 529.203497][T16948] bridge_slave_0: entered promiscuous mode [ 529.213542][T16948] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.221458][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.229221][T16948] bridge_slave_1: entered allmulticast mode [ 529.238423][T16948] bridge_slave_1: entered promiscuous mode [ 529.442048][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 529.501019][T16948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.663435][T16948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.803997][T16948] team0: Port device team_slave_0 added [ 529.859382][T16948] team0: Port device team_slave_1 added [ 529.983789][T17266] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 530.077580][T16948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.087356][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.124484][T16948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.161661][T16948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.180695][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.192100][T17296] netlink: zone id is out of range [ 530.303862][T16948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.323176][T17296] netlink: zone id is out of range [ 530.366765][T17296] netlink: zone id is out of range [ 530.371962][T17296] netlink: zone id is out of range [ 530.402948][T17296] netlink: zone id is out of range [ 530.403887][T17308] openvswitch: netlink: IP tunnel dst address not specified [ 530.415478][T17296] netlink: zone id is out of range [ 530.426903][T17296] netlink: zone id is out of range [ 530.463162][T16948] hsr_slave_0: entered promiscuous mode [ 530.481188][T17308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.492708][T16948] hsr_slave_1: entered promiscuous mode [ 530.504320][T16948] debugfs: 'hsr0' already exists in 'hsr' [ 530.513917][T16948] Cannot create hsr debugfs directory [ 530.638726][T17313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.762883][T17313] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 530.810599][T17313] bond5 (unregistering): Released all slaves [ 530.863135][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 530.978513][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 531.138596][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'. [ 531.148980][T17315] netlink: 'syz.0.3057': attribute type 3 has an invalid length. [ 531.161003][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'. [ 531.179590][T17315] netlink: 'syz.0.3057': attribute type 3 has an invalid length. [ 531.231406][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 531.345854][T17346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3062'. [ 531.524211][T17360] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 531.671237][T17360] bond7: entered promiscuous mode [ 531.677692][T17360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.695346][T17363] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 531.708448][T17363] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 531.719235][T17363] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 531.871213][T17366] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 531.886360][T17366] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 532.270121][T17388] bond0: Caught tx_queue_len zero misconfig [ 532.425754][T17392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3071'. [ 532.559826][T17401] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 532.639176][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3074'. [ 533.424276][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3084'. [ 533.439023][T16948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.492708][T16948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.527548][T16948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.569711][T16948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.598660][T16948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.634480][T16948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.661302][T16948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.717367][T16948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.923545][T17483] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 533.956183][T17483] netlink: 'syz.0.3088': attribute type 3 has an invalid length. [ 533.989785][T17483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3088'. [ 534.011792][T16948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.081100][T16948] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.111459][T15413] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.118725][T15413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.151482][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.158819][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.780069][T16948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.856980][T16948] veth0_vlan: entered promiscuous mode [ 534.877885][T16948] veth1_vlan: entered promiscuous mode [ 534.926306][T16948] veth0_macvtap: entered promiscuous mode [ 534.938210][T16948] veth1_macvtap: entered promiscuous mode [ 534.973596][T16948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.993644][T16948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.083204][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.111942][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.137770][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.173867][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.189002][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.202778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.255400][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.268766][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.413201][T16951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.435933][T16951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.447594][T16951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.461862][T16951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.474508][T16951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.599887][T17592] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 558.665703][T17593] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3097'. [ 558.712328][T17593] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3097'. [ 558.756562][T17598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3097'. [ 559.005480][T17607] netlink: 'syz.1.3101': attribute type 10 has an invalid length. [ 559.026602][T17607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3101'. [ 559.075615][T17614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3104'. [ 559.423942][T15413] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.485374][T15413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.628601][T17629] vlan2: entered allmulticast mode [ 559.650474][T17629] bond0: entered allmulticast mode [ 559.680495][T17629] bond_slave_0: entered allmulticast mode [ 559.700804][T17629] bond_slave_1: entered allmulticast mode [ 559.713634][T17636] x_tables: duplicate underflow at hook 2 [ 559.735850][T15413] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.769226][T15413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.903377][T15413] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.935549][T15413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.122173][T15413] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.149920][T15413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.192370][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3116'. [ 560.257913][T17650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'. [ 560.472441][T17668] netlink: set zone limit has 4 unknown bytes [ 560.510963][T17668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3118'. [ 560.529136][T17670] netlink: 'syz.1.3119': attribute type 13 has an invalid length. [ 560.548792][ T5621] Bluetooth: hci3: command tx timeout [ 560.724155][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'. [ 560.894705][T15413] pim6reg527: left allmulticast mode [ 560.911286][T15413] dvmrp0: left allmulticast mode [ 560.920016][T15413] ÿÿÿÿÿÿ: left allmulticast mode [ 560.930492][T15413] veth0_vlan: left allmulticast mode [ 560.942716][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 561.528417][T15413] bond6 (unregistering): (slave gretap3): Releasing active interface [ 561.623965][T15413] bond2 (unregistering): (slave geneve2): Releasing active interface [ 561.697049][T15413] bond1 (unregistering): Released all slaves [ 561.726102][T15413] bond2 (unregistering): Released all slaves [ 561.750461][T15413] bond3 (unregistering): Released all slaves [ 561.766746][T15413] bond0 (unregistering): Released all slaves [ 561.781624][T15413] bond4 (unregistering): Released all slaves [ 561.796716][T15413] bond5 (unregistering): Released all slaves [ 561.826211][T15413] bond6 (unregistering): Released all slaves [ 561.846634][T15413] bond7 (unregistering): Released all slaves [ 562.083547][T17718] bond0: (slave team0): Releasing backup interface [ 562.134264][T17718] batman_adv: batadv0: Interface deactivated: ªªªªª» [ 562.145912][T17718] batman_adv: batadv0: Removing interface: ªªªªª» [ 562.160230][T17718] bridge_slave_0: left allmulticast mode [ 562.166424][T17718] bridge_slave_0: left promiscuous mode [ 562.172456][T17718] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.211395][T17718] bridge_slave_1: left allmulticast mode [ 562.230833][T17718] bridge_slave_1: left promiscuous mode [ 562.246337][T17718] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.308118][T17718] bond0: (slave bond_slave_0): Releasing backup interface [ 562.403685][T17718] team0: Port device team_slave_0 removed [ 562.441264][T17735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 562.455073][T17718] team0: Port device team_slave_1 removed [ 562.485990][T17718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.505825][T17718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.517080][T17718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.626081][ T5621] Bluetooth: hci3: command tx timeout [ 562.637611][T17576] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.673194][T17576] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.699095][T17576] bridge_slave_0: entered allmulticast mode [ 562.731509][T17576] bridge_slave_0: entered promiscuous mode [ 562.795609][T17576] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.826710][T17576] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.849364][T17576] bridge_slave_1: entered allmulticast mode [ 562.860163][T17752] netlink: 'syz.3.3138': attribute type 1 has an invalid length. [ 562.867147][T17576] bridge_slave_1: entered promiscuous mode [ 563.160571][T17576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.185176][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.196897][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.214346][T17576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.332613][T17774] netlink: 'syz.4.3143': attribute type 21 has an invalid length. [ 563.397458][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 563.503928][T17774] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 563.542407][T17774] bond5 (unregistering): Released all slaves [ 563.588852][T17576] team0: Port device team_slave_0 added [ 563.612375][T17576] team0: Port device team_slave_1 added [ 563.699123][T17792] xt_recent: Unsupported userspace flags (000000b1) [ 563.830813][T17576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.851199][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.885767][T17576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.977860][T17576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.996321][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.043967][T17576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.090678][T17809] openvswitch: netlink: Key type 31 is not supported [ 564.124340][T17815] x_tables: unsorted underflow at hook 2 [ 564.223138][T17817] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 564.318405][T17820] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 564.409554][T17576] hsr_slave_0: entered promiscuous mode [ 564.433739][T17576] hsr_slave_1: entered promiscuous mode [ 564.456643][T17576] debugfs: 'hsr0' already exists in 'hsr' [ 564.479901][T17576] Cannot create hsr debugfs directory [ 564.675664][T17839] __nla_validate_parse: 1 callbacks suppressed [ 564.675686][T17839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3159'. [ 564.707872][ T5621] Bluetooth: hci3: command tx timeout [ 565.121934][T17852] tipc: Started in network mode [ 565.142455][T17852] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 565.175929][T17846] xt_hashlimit: overflow, try lower: 3/0 [ 565.213687][T17852] tipc: Enabled bearer , priority 0 [ 565.677240][T17874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3165'. [ 565.730768][T15413] hsr_slave_0: left promiscuous mode [ 565.752888][T15413] hsr_slave_1: left promiscuous mode [ 565.764624][T15413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.789495][T15413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.854481][T15413] veth0_macvtap: left promiscuous mode [ 565.871402][T15413] veth1_vlan: left promiscuous mode [ 565.885411][T15413] veth0_vlan: left promiscuous mode [ 566.041240][T17887] netlink: 5996 bytes leftover after parsing attributes in process `syz.1.3169'. [ 566.050737][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3169'. [ 566.292651][T15413] team0 (unregistering): Port device team_slave_1 removed [ 566.312888][T15413] team0 (unregistering): Port device team_slave_0 removed [ 566.451295][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 566.523142][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 566.564595][ T5615] tipc: Node number set to 43690 [ 566.706697][T17895] xt_l2tp: missing protocol rule (udp|l2tpip) [ 566.786243][ T5621] Bluetooth: hci3: command tx timeout [ 566.806442][T17900] ip6tnl0: Caught tx_queue_len zero misconfig [ 566.896232][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3172'. [ 567.222051][T15413] IPVS: stop unused estimator thread 0... [ 567.785436][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 567.865356][T17950] netlink: 'syz.3.3185': attribute type 3 has an invalid length. [ 568.008800][T17959] sctp: [Deprecated]: syz.1.3187 (pid 17959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.008800][T17959] Use struct sctp_sack_info instead [ 568.081921][T17967] netlink: 'syz.4.3189': attribute type 10 has an invalid length. [ 568.129744][T17967] team0: Device veth0_macvtap failed to register rx_handler [ 568.840186][T17994] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3193'. [ 568.901646][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 570.733914][T17950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.759030][T17576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.802015][T17576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.819295][T17576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.872630][T17576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.902893][T17576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.942939][T17576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.981946][T17576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 571.019841][T18090] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.032397][T18091] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.060367][T17576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.107683][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3202'. [ 571.303938][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3204'. [ 571.540777][T17576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.628164][T17576] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.673891][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.681157][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.722239][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.729558][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.740647][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3209'. [ 571.821387][T18125] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 571.949894][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 572.027212][T18125] netlink: 'syz.4.3208': attribute type 10 has an invalid length. [ 572.057888][T18136] veth71: entered promiscuous mode [ 572.084109][T18136] bond5: (slave veth71): Enslaving as a backup interface with a down link [ 572.102999][T18140] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.199916][T18125] veth0_to_bond: left allmulticast mode [ 572.359692][T18153] netlink: 'syz.1.3212': attribute type 16 has an invalid length. [ 572.410425][T18153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3212'. [ 572.463159][T18153] veth0_macvtap: entered allmulticast mode [ 572.774035][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 572.814462][T18169] sit1: entered promiscuous mode [ 572.847015][T18169] sit1: entered allmulticast mode [ 572.873866][T18178] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3215'. [ 572.971528][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 573.830005][T18227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3227'. [ 573.978119][T18229] netlink: 'syz.3.3227': attribute type 3 has an invalid length. [ 574.008207][T18229] netlink: 'syz.3.3227': attribute type 4 has an invalid length. [ 574.032293][T18229] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.3227'. [ 574.249279][T17576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.438145][T18239] IPVS: length: 239 != 24 [ 574.472548][T18243] netlink: 'syz.3.3229': attribute type 29 has an invalid length. [ 574.513474][T17576] veth0_vlan: entered promiscuous mode [ 574.632527][T17576] veth1_vlan: entered promiscuous mode [ 574.813676][T17576] veth0_macvtap: entered promiscuous mode [ 574.924618][T17576] veth1_macvtap: entered promiscuous mode [ 575.026189][T17576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.076560][T17576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.176288][T15413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.222009][T15413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.446121][ T3282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.521271][T12505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.605504][T12505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.643081][T12505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.770479][T12505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.809154][T12505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.830163][T18299] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 576.214080][T18308] __nla_validate_parse: 6 callbacks suppressed [ 576.214104][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 576.318839][T18319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.380179][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 576.389207][ T149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.396469][ T149] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.451575][ T149] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.515119][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.076577][T16951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.091306][T16951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.102061][T16951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.126665][T16951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.135912][T16951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 577.257623][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 577.288719][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 577.313964][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 577.368783][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 578.035716][ T3282] IPVS: starting estimator thread 0... [ 578.089827][T18394] xt_TCPMSS: Only works on TCP SYN packets [ 578.122519][T18394] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 578.155058][T18393] IPVS: using max 28 ests per chain, 67200 per kthread [ 578.220846][T18388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3259'. [ 578.260323][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 578.341806][T18405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 578.669632][T18414] lo: entered promiscuous mode [ 578.684736][T18414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.954433][T18424] netlink: 'syz.0.3266': attribute type 7 has an invalid length. [ 579.091283][T18423] netlink: 'syz.0.3266': attribute type 5 has an invalid length. [ 579.188630][ T5621] Bluetooth: hci1: command tx timeout [ 579.272385][T18436] Unsupported ieee802154 address type: 0 [ 579.581740][T18468] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 579.597005][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 579.617926][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 579.667518][T18473] nft_compat: unsupported protocol 1 [ 579.779816][T18468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.934892][T18476] bond2: (slave geneve3): making interface the new active one [ 579.964449][T18476] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 579.989649][T18479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.041279][T18526] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.050427][T18526] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.085693][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.093029][T18342] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.102687][T18342] bridge_slave_0: entered allmulticast mode [ 581.118929][T18342] bridge_slave_0: entered promiscuous mode [ 581.141331][T18342] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.148895][T18342] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.156855][T18342] bridge_slave_1: entered allmulticast mode [ 581.170665][T18342] bridge_slave_1: entered promiscuous mode [ 581.230502][T18342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.252149][T18342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.265383][ T5621] Bluetooth: hci1: command tx timeout [ 581.319805][T18342] team0: Port device team_slave_0 added [ 581.328732][T18342] team0: Port device team_slave_1 added [ 581.377076][T18342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.384181][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.420445][T18342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.434070][T18342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.441346][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.475676][T18342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.539262][T18342] hsr_slave_0: entered promiscuous mode [ 581.546354][T18342] hsr_slave_1: entered promiscuous mode [ 581.583542][T18540] __nla_validate_parse: 6 callbacks suppressed [ 581.583557][T18540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3291'. [ 581.599974][T18540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3291'. [ 581.734261][T18342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.747000][T18342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.852131][T18342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.862531][T18342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.950330][T18342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.962397][T18342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.030123][T18342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.040616][T18342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.345261][ T5621] Bluetooth: hci1: command tx timeout [ 583.554538][T18504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.578207][T18342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 583.649179][T18342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.678688][T18342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 583.757521][T18342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.770053][T18342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 583.816236][T18342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.850519][T18342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.898765][T18342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.111857][T18572] netlink: 'syz.3.3297': attribute type 12 has an invalid length. [ 584.346977][T18342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.419522][T18342] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.456636][T18454] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.463936][T18454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.496402][T18454] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.503672][T18454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.639725][T18589] Bluetooth: hci0: unsupported parameter 5161 [ 584.656656][T18589] Bluetooth: hci0: unsupported parameter 8192 [ 584.663067][T18589] Bluetooth: hci0: unsupported parameter 5161 [ 584.682749][T18589] Bluetooth: hci0: unsupported parameter 8192 [ 584.691558][T18595] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 584.749750][T18593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3303'. [ 584.761274][T18595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3302'. [ 585.425177][ T5621] Bluetooth: hci1: command tx timeout [ 585.430508][T18624] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 585.501149][T18624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.696662][T18627] bond1: (slave gretap1): making interface the new active one [ 585.718650][T18627] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 585.874278][T18637] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3315'. [ 586.020155][T18342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.180893][T18342] veth0_vlan: entered promiscuous mode [ 586.254065][T18624] syzkaller1: entered promiscuous mode [ 586.262838][T18624] syzkaller1: entered allmulticast mode [ 586.272604][T18342] veth1_vlan: entered promiscuous mode [ 586.273037][T18624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3312'. [ 586.359630][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 586.404646][T18342] veth0_macvtap: entered promiscuous mode [ 586.473528][T18342] veth1_macvtap: entered promiscuous mode [ 586.509892][T18342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.549877][T18342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.617965][T18454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.646282][T18454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.739737][T18454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.756864][T18664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3321'. [ 586.766554][T18454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.781154][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'. [ 586.833029][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3323'. [ 587.030096][T18447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.058732][T18447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.152725][T18676] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 587.169677][T18447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.197258][T18447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.203343][T18676] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3325'. [ 587.222101][T18683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3326'. [ 587.244409][T18684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3327'. [ 587.256508][T18676] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 587.264366][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 587.277068][T18676] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.3325'. [ 587.534585][T18690] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 587.710077][T18701] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 587.762791][T18701] netlink: 'syz.3.3332': attribute type 30 has an invalid length. [ 587.830740][T18704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3332'. [ 587.892042][T16951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.903143][T16951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.906804][T18701] bond3: option arp_missed_max: invalid value (0) [ 587.915096][T16951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.930768][T16951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.940960][T16951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.981369][T18704] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3332'. [ 587.986524][T18701] bond3: option arp_missed_max: allowed values 1 - 255 [ 587.991865][T18704] netlink: 'syz.3.3332': attribute type 6 has an invalid length. [ 588.005711][T18704] netlink: 'syz.3.3332': attribute type 5 has an invalid length. [ 588.111720][T18701] bond3 (unregistering): Released all slaves [ 588.984721][T18457] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 589.087338][T18760] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 589.097595][T18760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.916953][T18792] tipc: New replicast peer: 255.255.255.255 [ 589.931925][T18792] tipc: Enabled bearer , priority 10 [ 589.985660][T16951] Bluetooth: hci2: command tx timeout [ 590.159927][T18806] openvswitch: netlink: IP tunnel dst address not specified [ 590.274018][T18447] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.305486][T18447] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.395159][T18451] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.416460][T18451] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.472528][T18820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.571175][T18824] Bluetooth: MGMT ver 1.23 [ 590.715858][T18703] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.724348][T18703] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.732115][T18703] bridge_slave_0: entered allmulticast mode [ 590.740884][T18703] bridge_slave_0: entered promiscuous mode [ 590.750771][T18703] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.759696][T18703] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.769185][T18703] bridge_slave_1: entered allmulticast mode [ 590.786064][T18703] bridge_slave_1: entered promiscuous mode [ 590.834441][T18703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.858093][T18703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.941663][T18703] team0: Port device team_slave_0 added [ 590.969277][T18703] team0: Port device team_slave_1 added [ 591.006530][T18703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.022830][T18703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.059199][T18703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.072830][T18703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.080430][T18703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.110099][T18703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.263404][T18703] hsr_slave_0: entered promiscuous mode [ 591.279650][T18703] hsr_slave_1: entered promiscuous mode [ 591.287819][T18703] debugfs: 'hsr0' already exists in 'hsr' [ 591.296193][T18703] Cannot create hsr debugfs directory [ 591.836813][T18862] geneve3: entered promiscuous mode [ 591.873408][T18870] netlink: 'syz.0.3374': attribute type 8 has an invalid length. [ 591.888120][T18870] sch_fq: defrate 0 ignored. [ 592.066798][T16951] Bluetooth: hci2: command tx timeout [ 592.318155][T18886] bond3: option all_slaves_active: invalid value (222) [ 592.332793][T18886] bond3 (unregistering): Released all slaves [ 592.485335][T18703] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.497058][T18703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.693953][T18703] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.704672][T18703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.709752][T18904] __nla_validate_parse: 11 callbacks suppressed [ 592.709772][T18904] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3384'. [ 592.741150][T18447] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52600 - 0 [ 592.769131][T18457] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 52600 - 0 [ 592.784202][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 592.785503][T18457] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52600 - 0 [ 592.802731][T18457] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52600 - 0 [ 592.837286][T18703] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.849339][T18703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.984256][T18703] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.015748][T18703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.193396][T18914] bond1: option all_slaves_active: invalid value (222) [ 593.204388][T18914] bond1 (unregistering): Released all slaves [ 593.358514][T18919] bond3: Removing last ns target with arp_interval on [ 593.383168][T18929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3392'. [ 593.428384][T18929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3392'. [ 593.515862][T18938] ip_tables: iptables: counters copy to user failed while replacing table [ 593.810222][T18949] netlink: 'syz.0.3396': attribute type 4 has an invalid length. [ 593.866155][T18957] netlink: 'syz.0.3396': attribute type 4 has an invalid length. [ 593.880447][T18703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 593.925974][T18703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.941351][T18703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 593.958535][T18703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.971540][T18703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 593.994182][T18703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.008546][T18703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 594.043767][T18703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.147375][T16951] Bluetooth: hci2: command tx timeout [ 594.305444][T18703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.359221][T18703] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.399361][T18461] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.406689][T18461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.431770][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.439090][T18451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.453112][T18977] syzkaller0: entered promiscuous mode [ 594.459164][T18977] syzkaller0: entered allmulticast mode [ 595.129824][T19002] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3409'. [ 595.509343][T19017] veth0_macvtap: entered allmulticast mode [ 595.529519][T19017] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 595.961287][T18703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.225385][T16951] Bluetooth: hci2: command tx timeout [ 596.342416][T19061] bond3 (unregistering): Released all slaves [ 596.576862][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 596.586058][T19072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.606367][T19072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3426'. [ 596.701128][T19072] bond4 (unregistering): Released all slaves [ 596.703383][T19082] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3429'. [ 596.797692][T19085] lo: entered allmulticast mode [ 596.882844][T19080] lo: left allmulticast mode [ 596.914188][T18703] veth0_vlan: entered promiscuous mode [ 596.989282][T18703] veth1_vlan: entered promiscuous mode [ 597.094012][T19096] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.102087][T19096] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.126108][T19098] netlink: 'syz.0.3434': attribute type 1 has an invalid length. [ 597.140985][T18703] veth0_macvtap: entered promiscuous mode [ 597.162604][T19095] syzkaller0: entered promiscuous mode [ 597.169890][T19095] syzkaller0: entered allmulticast mode [ 597.232121][T19100] team0: Device ipvlan0 failed to register rx_handler [ 597.266565][T18703] veth1_macvtap: entered promiscuous mode [ 597.287744][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3432'. [ 597.316028][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'. [ 597.318101][T18703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.414464][T18703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.442421][T19107] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 597.476401][T18461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.525380][T18447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.635935][T18454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.678677][T18454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.739006][T18451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.770274][T18451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.854086][T18454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.887574][T18454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.014615][T19131] xt_ipcomp: unknown flags 1D [ 598.034237][T19136] __nla_validate_parse: 43 callbacks suppressed [ 598.034258][T19136] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3446'. [ 598.118086][T19137] syzkaller0: entered promiscuous mode [ 598.125142][T19137] syzkaller0: entered allmulticast mode [ 598.140558][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3445'. [ 598.249977][T18447] IPVS: starting estimator thread 0... [ 598.251878][T19141] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 598.281394][T19146] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3448'. [ 598.294748][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3448'. [ 598.355925][T19144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.365208][T19145] IPVS: using max 28 ests per chain, 67200 per kthread [ 598.621341][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 598.654046][T19167] netlink: 'syz.2.3454': attribute type 15 has an invalid length. [ 598.657332][T19168] netlink: 'syz.2.3454': attribute type 15 has an invalid length. [ 598.674404][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 598.702826][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 598.730661][T19167] netlink: 'syz.2.3454': attribute type 15 has an invalid length. [ 598.735533][T19168] netlink: 'syz.2.3454': attribute type 15 has an invalid length. [ 598.747048][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 598.748497][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 598.756931][T18454] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 598.758872][T18455] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 598.797269][T18455] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 598.808428][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3455'. [ 598.825438][T18455] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.903933][T19197] infiniband syz1: set active [ 599.913657][T19197] infiniband syz1: added batadv_slave_0 [ 599.964183][T19197] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 599.988149][T19197] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 600.006366][T19197] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 600.061218][T19197] RDS/IB: syz1: added [ 600.080545][T19197] smc: adding ib device syz1 with port count 1 [ 600.098245][T19197] smc: ib device syz1 port 1 has no pnetid [ 600.130712][T19233] veth0_to_bond: default FDB implementation only supports local addresses [ 600.279661][T19237] syzkaller0: entered promiscuous mode [ 600.286401][T19237] syzkaller0: entered allmulticast mode [ 600.293815][T19237] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 600.481421][T19239] netlink: 'syz.4.3477': attribute type 1 has an invalid length. [ 601.568698][T19279] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 602.038537][T19290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.143635][T19291] netlink: zone id is out of range [ 602.163220][T19291] netlink: zone id is out of range [ 602.174685][T19291] netlink: zone id is out of range [ 602.183180][T19291] netlink: zone id is out of range [ 602.188981][T19291] netlink: zone id is out of range [ 602.198696][T19291] netlink: zone id is out of range [ 602.210019][T19291] netlink: zone id is out of range [ 602.235311][T19291] netlink: zone id is out of range [ 602.252091][T19291] netlink: zone id is out of range [ 602.449355][T19300] Bluetooth: hci0: unsupported parameter 5134 [ 602.457630][T19300] Bluetooth: hci0: unsupported parameter 8192 [ 602.463824][T19300] Bluetooth: hci0: unsupported parameter 5134 [ 602.480804][T19300] Bluetooth: hci0: unsupported parameter 8192 [ 602.736595][T19311] netlink: 'syz.1.3501': attribute type 2 has an invalid length. [ 602.785636][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 602.791902][T16951] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 602.821524][T19311] : entered promiscuous mode [ 602.980978][T19325] netlink: 'syz.1.3505': attribute type 196 has an invalid length. [ 603.016664][T19320] hsr_slave_1 (unregistering): left promiscuous mode [ 603.373135][T19337] __nla_validate_parse: 12 callbacks suppressed [ 603.373150][T19337] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3509'. [ 603.429388][T19337] gretap0: entered promiscuous mode [ 603.432065][T19339] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3509'. [ 603.497784][T19339] 0ªî{X¹¦: renamed from gretap0 [ 603.531870][T19339] 0ªî{X¹¦: left promiscuous mode [ 603.542649][T19339] 0ªî{X¹¦: entered allmulticast mode [ 603.689089][T19345] netlink: 'syz.1.3512': attribute type 4 has an invalid length. [ 603.700223][T19345] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3512'. [ 603.886187][T19350] netlink: 'syz.0.3514': attribute type 4 has an invalid length. [ 603.998540][T19355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'. [ 604.264879][T19367] netlink: 'syz.1.3518': attribute type 10 has an invalid length. [ 604.351536][T19367] veth0_to_bond: entered promiscuous mode [ 604.392713][T19373] netlink: 'syz.0.3520': attribute type 1 has an invalid length. [ 604.450934][T19373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.530058][T19379] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 604.552192][T19384] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3523'. [ 604.573330][T19384] netlink: 'syz.4.3523': attribute type 10 has an invalid length. [ 604.583333][T19384] syz_tun: entered promiscuous mode [ 604.616600][T19384] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 604.692679][T19388] tipc: Started in network mode [ 604.705366][T19388] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 604.730343][T19388] tipc: Enabling of bearer rejected, failed to enable media [ 604.778296][T19389] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 604.802816][T19391] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3525'. [ 605.032530][T19397] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3527'. [ 605.072108][T19398] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3527'. [ 606.033886][T19436] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 606.247262][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 606.298921][T19443] netlink: 'syz.3.3538': attribute type 8 has an invalid length. [ 606.492570][T19449] netlink: 524 bytes leftover after parsing attributes in process `syz.1.3539'. [ 607.650686][T19497] syzkaller0: entered promiscuous mode [ 607.668453][T19497] syzkaller0: entered allmulticast mode [ 608.078404][T19516] net_ratelimit: 18 callbacks suppressed [ 608.078425][T19516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.383851][T19536] __nla_validate_parse: 9 callbacks suppressed [ 608.383872][T19536] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3571'. [ 608.859813][T19562] netlink: 'syz.4.3578': attribute type 1 has an invalid length. [ 608.909802][T19562] netlink: 'syz.4.3578': attribute type 1 has an invalid length. [ 609.050568][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3583'. [ 609.060437][T19571] openvswitch: netlink: ct_state flags ffffffff unsupported [ 609.070763][T19571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.110654][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 609.137207][T19576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3585'. [ 609.157922][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.167585][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.175713][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.183717][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.191734][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.199725][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.207781][T19576] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 609.294075][T18461] vxlan0: left allmulticast mode [ 609.312811][T18461] vxlan0: left promiscuous mode [ 609.373035][T18461] bridge0: port 1(vxlan0) entered disabled state [ 609.442258][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 609.450139][T18461] dvmrp0: left allmulticast mode [ 609.462292][T18461] tipc: Resetting bearer [ 609.467664][T19585] xt_ipcomp: unknown flags 1D [ 609.471971][T18461] batman_adv: batadv0: Interface deactivated: gretap0 [ 609.528717][T19593] Cannot find add_set index 0 as target [ 609.756198][T18461] tipc: Disabling bearer [ 609.917123][T18461] batman_adv: batadv0: Removing interface: gretap0 [ 610.033077][T18461] bond0 (unregistering): Released all slaves [ 610.072464][T18461] bond1 (unregistering): (slave veth9): Releasing active interface [ 610.083956][T18461] bond1 (unregistering): Released all slaves [ 610.110532][T18461] bond2 (unregistering): Released all slaves [ 610.141160][T18461] bond3 (unregistering): Released all slaves [ 610.171577][T18461] bond4 (unregistering): Released all slaves [ 610.191080][T18461] bond5 (unregistering): (slave veth71): Releasing backup interface [ 610.201155][T18461] bond5 (unregistering): Released all slaves [ 610.280402][T19611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.620964][T19593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.690060][T18461] tipc: Disabling bearer [ 610.695731][T18461] tipc: Left network mode [ 610.700723][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 610.717207][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'. [ 610.849770][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'. [ 610.917741][T19593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.084085][T19593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.354466][T19593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.420305][T19647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3607'. [ 611.479205][T19652] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 611.734366][T19645] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3608'. [ 611.741872][T19652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.948813][T19670] netlink: 'syz.3.3614': attribute type 1 has an invalid length. [ 612.120477][T19670] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 612.163920][T18455] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.257657][T19685] xt_hashlimit: size too large, truncated to 1048576 [ 612.335294][T18455] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.632770][T18451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.885924][T18455] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.128213][T19728] netlink: 'syz.4.3629': attribute type 21 has an invalid length. [ 613.176858][T19728] netlink: 'syz.4.3629': attribute type 5 has an invalid length. [ 613.672063][T19756] __nla_validate_parse: 4 callbacks suppressed [ 613.672083][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 613.828835][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 613.928709][T18461] hsr_slave_0: left promiscuous mode [ 613.958291][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3642'. [ 614.007637][T18461] veth1_macvtap: left promiscuous mode [ 614.150737][T19790] Bluetooth: hci0: unsupported parameter 5135 [ 614.159062][T19790] Bluetooth: hci0: unsupported parameter 8192 [ 614.167409][T19790] Bluetooth: hci0: unsupported parameter 5135 [ 614.174002][T19790] Bluetooth: hci0: unsupported parameter 8192 [ 614.859500][T18461] team0 (unregistering): Port device dummy0 removed [ 614.928439][T19775] bond0: entered promiscuous mode [ 614.933556][T19775] bond_slave_0: entered promiscuous mode [ 614.939547][T19775] bond_slave_1: entered promiscuous mode [ 614.949556][T19775] batadv0: entered promiscuous mode [ 614.959097][T19775] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 614.978172][T19775] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 615.007046][T19775] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 615.030447][T19775] bond0: left promiscuous mode [ 615.042993][T19775] bond_slave_0: left promiscuous mode [ 615.049222][T19775] bond_slave_1: left promiscuous mode [ 615.057649][T19775] batadv0: left promiscuous mode [ 615.094066][T19778] netlink: 'syz.1.3643': attribute type 4 has an invalid length. [ 615.617070][T19815] net_ratelimit: 48 callbacks suppressed [ 615.617092][T19815] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 615.818098][T18461] IPVS: stop unused estimator thread 0... [ 615.982649][T19838] netlink: 'syz.0.3660': attribute type 2 has an invalid length. [ 615.995299][T19838] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3660'. [ 616.131505][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 616.480708][T19858] xt_CT: No such helper "snmp" [ 616.518125][T19872] FAULT_INJECTION: forcing a failure. [ 616.518125][T19872] name failslab, interval 1, probability 0, space 0, times 0 [ 616.568717][T19872] CPU: 1 UID: 0 PID: 19872 Comm: syz.4.3667 Not tainted syzkaller #0 PREEMPT(full) [ 616.568746][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.568757][T19872] Call Trace: [ 616.568765][T19872] [ 616.568775][T19872] dump_stack_lvl+0xe8/0x150 [ 616.568814][T19872] should_fail_ex+0x410/0x560 [ 616.568851][T19872] should_failslab+0xa8/0x100 [ 616.568885][T19872] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 616.568908][T19872] ? local_lock_release+0x9c/0x160 [ 616.569047][T19872] ? __alloc_skb+0x1db/0x7a0 [ 616.569071][T19872] ? __alloc_skb+0x1db/0x7a0 [ 616.569113][T19872] __alloc_skb+0x1db/0x7a0 [ 616.569144][T19872] alloc_skb_with_frags+0xc6/0x760 [ 616.569203][T19872] ? __lock_acquire+0x683/0x2cf0 [ 616.569236][T19872] ? kernel_text_address+0xa5/0xe0 [ 616.569276][T19872] sock_alloc_send_pskb+0x878/0x990 [ 616.569303][T19872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 616.569363][T19872] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 616.569390][T19872] ? dev_get_by_index+0x22/0x2d0 [ 616.569432][T19872] ? dev_get_by_index+0x22/0x2d0 [ 616.569460][T19872] packet_sendmsg+0x31bb/0x4f80 [ 616.569533][T19872] ? process_measurement+0x443/0x1c10 [ 616.569590][T19872] ? aa_label_sk_perm+0x532/0x6e0 [ 616.569626][T19872] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 616.569655][T19872] ? process_measurement+0x7b2/0x1c10 [ 616.569682][T19872] ? up_write+0x19d/0x4a0 [ 616.569708][T19872] ? __lock_acquire+0x683/0x2cf0 [ 616.569748][T19872] ? __pfx_packet_sendmsg+0x10/0x10 [ 616.569780][T19872] ? __pfx_aa_sk_perm+0x10/0x10 [ 616.569809][T19872] ? aa_sock_msg_perm+0xf6/0x1c0 [ 616.569872][T19872] ? __pfx_packet_sendmsg+0x10/0x10 [ 616.569893][T19872] sock_sendmsg_nosec+0x13a/0x180 [ 616.569942][T19872] ____sys_sendmsg+0x54e/0x850 [ 616.569997][T19872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.570035][T19872] ? import_iovec+0x73/0xa0 [ 616.570109][T19872] ___sys_sendmsg+0x2a5/0x360 [ 616.570138][T19872] ? __lock_acquire+0x683/0x2cf0 [ 616.570167][T19872] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.570201][T19872] ? kstrtouint+0x6e/0xe0 [ 616.570277][T19872] ? __fget_files+0x2a/0x420 [ 616.570304][T19872] ? __fget_files+0x3a2/0x420 [ 616.570339][T19872] __sys_sendmmsg+0x273/0x4d0 [ 616.570375][T19872] ? __pfx___sys_sendmmsg+0x10/0x10 [ 616.570413][T19872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.570502][T19872] ? ksys_write+0x242/0x270 [ 616.570535][T19872] ? __pfx_ksys_write+0x10/0x10 [ 616.570568][T19872] __x64_sys_sendmmsg+0xa0/0xc0 [ 616.570597][T19872] do_syscall_64+0x166/0x520 [ 616.570621][T19872] ? trace_irq_disable+0x3b/0x140 [ 616.570667][T19872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.570689][T19872] ? clear_bhb_loop+0x70/0xc0 [ 616.570713][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.570733][T19872] RIP: 0033:0x7ff25959e0d9 [ 616.570754][T19872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.570772][T19872] RSP: 002b:00007ff2577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.570793][T19872] RAX: ffffffffffffffda RBX: 00007ff259825fa0 RCX: 00007ff25959e0d9 [ 616.570808][T19872] RDX: 0000000000000003 RSI: 00002000000033c0 RDI: 0000000000000003 [ 616.570821][T19872] RBP: 00007ff2577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 616.570834][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.570845][T19872] R13: 00007ff259826038 R14: 00007ff259825fa0 R15: 00007fff4c7e93c8 [ 616.570877][T19872] [ 617.171859][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 617.185515][T19880] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 617.769139][T19915] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 617.784165][T19917] FAULT_INJECTION: forcing a failure. [ 617.784165][T19917] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 617.823659][T19917] CPU: 1 UID: 0 PID: 19917 Comm: syz.1.3682 Not tainted syzkaller #0 PREEMPT(full) [ 617.823686][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.823697][T19917] Call Trace: [ 617.823705][T19917] [ 617.823713][T19917] dump_stack_lvl+0xe8/0x150 [ 617.823747][T19917] should_fail_ex+0x410/0x560 [ 617.823782][T19917] _copy_from_user+0x2d/0xb0 [ 617.823803][T19917] ___sys_sendmsg+0x1c6/0x360 [ 617.823829][T19917] ? __lock_acquire+0x683/0x2cf0 [ 617.823861][T19917] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.823885][T19917] ? __lock_acquire+0x683/0x2cf0 [ 617.823914][T19917] ? kstrtouint+0x6e/0xe0 [ 617.823980][T19917] __sys_sendmmsg+0x273/0x4d0 [ 617.824015][T19917] ? __pfx___sys_sendmmsg+0x10/0x10 [ 617.824064][T19917] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.824109][T19917] ? ksys_write+0x242/0x270 [ 617.824140][T19917] ? __pfx_ksys_write+0x10/0x10 [ 617.824173][T19917] __x64_sys_sendmmsg+0xa0/0xc0 [ 617.824205][T19917] do_syscall_64+0x166/0x520 [ 617.824227][T19917] ? trace_irq_disable+0x3b/0x140 [ 617.824251][T19917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.824271][T19917] ? clear_bhb_loop+0x70/0xc0 [ 617.824295][T19917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.824314][T19917] RIP: 0033:0x7f94d5d9e0d9 [ 617.824335][T19917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.824351][T19917] RSP: 002b:00007f94d6d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 617.824375][T19917] RAX: ffffffffffffffda RBX: 00007f94d6025fa0 RCX: 00007f94d5d9e0d9 [ 617.824389][T19917] RDX: 0000000000000003 RSI: 00002000000033c0 RDI: 0000000000000003 [ 617.824402][T19917] RBP: 00007f94d6d09090 R08: 0000000000000000 R09: 0000000000000000 [ 617.824414][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.824426][T19917] R13: 00007f94d6026038 R14: 00007f94d6025fa0 R15: 00007ffcebdf6508 [ 617.824459][T19917] [ 618.090985][T19919] kthread_run failed with err -4 [ 618.564458][T19937] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3687'. [ 618.651303][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 618.682338][T19950] netlink: 'syz.2.3690': attribute type 5 has an invalid length. [ 618.712293][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 618.820561][T19955] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3693'. [ 618.881246][T19958] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3693'. [ 618.907509][T19955] gretap0: entered promiscuous mode [ 618.946753][T19958] 0ªî{X¹¦: renamed from gretap0 [ 618.967997][T19958] 0ªî{X¹¦: left promiscuous mode [ 618.981850][T19958] 0ªî{X¹¦: entered allmulticast mode [ 618.999819][T19958] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 619.023756][T19966] ipvlan2: entered allmulticast mode [ 619.030345][T19966] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 619.052709][T19966] batman_adv: batadv0: Adding interface: ipvlan2 [ 619.062297][T19966] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.092835][T19966] batman_adv: batadv0: Interface activated: ipvlan2 [ 619.359108][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 619.445954][T19989] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 619.546997][T19990] netlink: 'syz.4.3704': attribute type 11 has an invalid length. [ 619.553820][T19996] netlink: 'syz.2.3706': attribute type 17 has an invalid length. [ 619.579007][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3706'. [ 619.594753][T19989] bridge2: entered promiscuous mode [ 619.605831][T19989] bond2: (slave bridge2): making interface the new active one [ 619.614337][T19996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 619.623954][T19989] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 619.791847][T19996] erspan0: entered promiscuous mode [ 619.816982][T19996] erspan0: left promiscuous mode [ 619.922222][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3711'. [ 619.932047][T20017] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 619.972538][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3712'. [ 620.002018][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3712'. [ 620.200915][T20027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3715'. [ 620.246069][T20029] FAULT_INJECTION: forcing a failure. [ 620.246069][T20029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.317687][T20029] CPU: 1 UID: 0 PID: 20029 Comm: syz.1.3716 Not tainted syzkaller #0 PREEMPT(full) [ 620.317716][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.317727][T20029] Call Trace: [ 620.317734][T20029] [ 620.317743][T20029] dump_stack_lvl+0xe8/0x150 [ 620.317779][T20029] should_fail_ex+0x410/0x560 [ 620.317813][T20029] _copy_to_user+0x31/0xb0 [ 620.317838][T20029] simple_read_from_buffer+0xe1/0x170 [ 620.317868][T20029] proc_fail_nth_read+0x1bb/0x230 [ 620.317936][T20029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.317968][T20029] ? rw_verify_area+0x24a/0x4c0 [ 620.318007][T20029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.318034][T20029] vfs_read+0x213/0xa80 [ 620.318067][T20029] ? __pfx___mutex_lock+0x10/0x10 [ 620.318093][T20029] ? __pfx_vfs_read+0x10/0x10 [ 620.318122][T20029] ? __fget_files+0x2a/0x420 [ 620.318152][T20029] ? __fget_files+0x3a2/0x420 [ 620.318176][T20029] ? __fget_files+0x2a/0x420 [ 620.318211][T20029] ksys_read+0x150/0x270 [ 620.318240][T20029] ? __pfx_ksys_read+0x10/0x10 [ 620.318278][T20029] do_syscall_64+0x166/0x520 [ 620.318299][T20029] ? trace_irq_disable+0x3b/0x140 [ 620.318324][T20029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.318344][T20029] ? clear_bhb_loop+0x70/0xc0 [ 620.318367][T20029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.318387][T20029] RIP: 0033:0x7f94d5d5e90e [ 620.318405][T20029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 620.318422][T20029] RSP: 002b:00007f94d6d08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.318444][T20029] RAX: ffffffffffffffda RBX: 00007f94d6d096c0 RCX: 00007f94d5d5e90e [ 620.318458][T20029] RDX: 000000000000000f RSI: 00007f94d6d090a0 RDI: 0000000000000006 [ 620.318470][T20029] RBP: 00007f94d6d09090 R08: 0000000000000000 R09: 0000000000000000 [ 620.318481][T20029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.318491][T20029] R13: 00007f94d6026038 R14: 00007f94d6025fa0 R15: 00007ffcebdf6508 [ 620.318524][T20029] [ 620.823305][T20052] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 620.832479][T20052] syzkaller1: linktype set to 823 [ 621.287847][T20086] IPVS: length: 8 != 1152 [ 621.336470][T20076] openvswitch: netlink: Flow key attr not present in new flow. [ 621.548519][T20097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.559742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.783104][T20107] veth1_macvtap: left promiscuous mode [ 622.223145][T20131] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 622.343219][T20131] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 622.354549][T20131] bond5 (unregistering): Released all slaves [ 622.381147][T20136] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 622.977093][T20164] geneve2: entered promiscuous mode [ 622.984634][T20164] geneve2: entered allmulticast mode [ 623.006768][T18452] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 623.020961][T18452] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 623.055158][T18455] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 623.068102][T18455] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 623.743878][T20197] __nla_validate_parse: 12 callbacks suppressed [ 623.743899][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3768'. [ 623.816528][T20194] syzkaller0: entered promiscuous mode [ 623.829576][T20194] syzkaller0: entered allmulticast mode [ 623.937575][T20209] netlink: 'syz.2.3768': attribute type 13 has an invalid length. [ 624.015655][T20209] netlink: 'syz.2.3768': attribute type 17 has an invalid length. [ 624.112823][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.132620][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.158341][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.180870][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.205568][T20209] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.209469][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.212916][T20209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.230289][T20209] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.237623][T20209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.267860][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.587408][T20209] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 624.614614][T20209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.637618][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.703660][T20239] openvswitch: netlink: IP tunnel dst address not specified [ 624.706225][T20209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.721713][T20213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3767'. [ 624.829235][T20240] dvmrp0: entered allmulticast mode [ 624.994263][T20249] sctp: [Deprecated]: syz.1.3781 (pid 20249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.994263][T20249] Use struct sctp_sack_info instead [ 625.016750][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3780'. [ 625.082405][T20250] netlink: 'syz.3.3780': attribute type 83 has an invalid length. [ 625.126550][T20252] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3783'. [ 625.210602][T20255] syzkaller0: entered promiscuous mode [ 625.222702][T20255] syzkaller0: entered allmulticast mode [ 625.803708][T20294] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 626.392702][T20324] bridge2: entered promiscuous mode [ 626.405426][T20324] bridge2: entered allmulticast mode [ 626.503277][T20330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3807'. [ 626.609838][T20332] syzkaller1: entered promiscuous mode [ 626.635740][T20332] syzkaller1: entered allmulticast mode [ 626.657136][T20341] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 626.688640][T20339] net_ratelimit: 2 callbacks suppressed [ 626.688660][T20339] netlink: Failed to add batadv0 helper -22 [ 626.715568][T20339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.976363][T20350] syzkaller0: entered promiscuous mode [ 627.012418][T20350] syzkaller0: entered allmulticast mode [ 627.399749][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3821'. [ 627.893186][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 627.910386][T20401] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 628.188057][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3832'. [ 628.230457][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3832'. [ 628.252808][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.262212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.286795][T20408] sctp: [Deprecated]: syz.0.3830 (pid 20408) Use of int in maxseg socket option. [ 628.286795][T20408] Use struct sctp_assoc_value instead [ 628.297654][T20412] geneve3: entered promiscuous mode [ 628.314404][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.322873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.331904][T20414] veth1_virt_wifi: entered promiscuous mode [ 628.614504][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'. [ 629.006570][T20462] netlink: 'syz.4.3844': attribute type 2 has an invalid length. [ 629.068197][T20462] : entered promiscuous mode [ 629.078217][T20468] batadv_slave_1: entered promiscuous mode [ 629.106652][T20464] batadv_slave_1: left promiscuous mode [ 629.650733][T20499] netlink: 'syz.2.3857': attribute type 12 has an invalid length. [ 629.671927][T20499] netlink: 'syz.2.3857': attribute type 29 has an invalid length. [ 629.688421][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3857'. [ 629.716661][T20499] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3857'. [ 629.739441][T20501] syzkaller0: entered promiscuous mode [ 629.760266][T20501] syzkaller0: entered allmulticast mode [ 629.896372][T20514] netlink: 'syz.1.3860': attribute type 1 has an invalid length. [ 630.118162][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 630.118519][T20525] SET target dimension over the limit! [ 630.146369][T20527] SET target dimension over the limit! [ 630.163553][T20522] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 630.211678][T20533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3868'. [ 630.318182][T20536] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3869'. [ 630.351497][T20536] tipc: Invalid UDP bearer configuration [ 630.351563][T20536] tipc: Enabling of bearer rejected, failed to enable media [ 630.467569][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 630.518251][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3868'. [ 630.743298][T20556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3876'. [ 630.781032][T20558] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3874'. [ 630.879685][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 631.035726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.090101][T20569] 8021q: VLANs not supported on ip_vti0 [ 631.210862][T16951] block nbd2: Receive control failed (result -32) [ 631.211385][ T5618] block nbd2: Receive control failed (result -32) [ 631.226307][T20567] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 631.480887][T20584] netlink: 'syz.1.3882': attribute type 16 has an invalid length. [ 631.502740][T20581] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 631.726879][T20589] tap0: tun_chr_ioctl cmd 2148553947 [ 631.830528][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 632.250866][T20613] xt_l2tp: missing protocol rule (udp|l2tpip) [ 632.268060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a034800: rx timeout, send abort [ 632.295302][T20616] openvswitch: netlink: Missing key (keys=40, expected=100) [ 632.768250][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a036000: rx timeout, send abort [ 632.777177][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a034800: abort rx timeout. Force session deactivation [ 632.977622][T20651] bond0: Error: Cannot enslave bond to itself. [ 633.223271][T20664] 0ªî{X¹¦: left allmulticast mode [ 633.276602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a036000: abort rx timeout. Force session deactivation [ 633.334154][T20669] openvswitch: netlink: Duplicate or invalid key (type 0). [ 633.334366][T20670] openvswitch: netlink: Duplicate or invalid key (type 0). [ 633.409971][T20664] veth0_macvtap: left allmulticast mode [ 633.418699][T20664] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 633.440441][T20664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.458564][T20676] netlink: 'syz.2.3908': attribute type 6 has an invalid length. [ 633.460016][T20664] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 633.479744][T20676] netlink: 'syz.2.3908': attribute type 5 has an invalid length. [ 633.496276][T20664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.506934][T20664] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 633.545767][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 633.735961][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 633.979836][T20687] syzkaller0: entered promiscuous mode [ 633.999707][T20687] syzkaller0: entered allmulticast mode [ 634.879278][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.153381][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.243712][T20703] __nla_validate_parse: 16 callbacks suppressed [ 637.243736][T20703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3916'. [ 637.453450][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3921'. [ 637.497233][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3923'. [ 637.560720][T20711] syzkaller0: left promiscuous mode [ 637.789078][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 637.878440][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 637.906024][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 638.046026][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 638.152481][T20752] netlink: 'syz.1.3931': attribute type 2 has an invalid length. [ 638.196205][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 638.234123][T20763] netlink: 'syz.3.3934': attribute type 2 has an invalid length. [ 638.277686][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 638.327393][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 638.457255][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 638.550276][T20784] Bluetooth: hci0: unsupported parameter 5135 [ 638.566666][T20784] Bluetooth: hci0: unsupported parameter 8192 [ 638.581939][T20784] Bluetooth: hci0: unsupported parameter 5135 [ 638.598837][T20784] Bluetooth: hci0: unsupported parameter 8192 [ 638.608580][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 638.705953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.735742][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 638.866201][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 638.883327][T20803] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3945'. [ 639.592568][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'. [ 639.689089][T20831] ip6erspan0: entered allmulticast mode [ 639.991541][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 640.022185][T20854] netlink: 'syz.3.3963': attribute type 11 has an invalid length. [ 640.041864][T20854] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3963'. [ 640.091829][T20853] block nbd4: not configured, cannot reconfigure [ 640.112035][T20853] netlink: 'syz.4.3961': attribute type 13 has an invalid length. [ 640.130527][T20862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3965'. [ 642.282064][T20958] __nla_validate_parse: 3 callbacks suppressed [ 642.282085][T20958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3993'. [ 642.335930][T20959] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3993'. [ 642.647865][T20972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3995'. [ 642.895484][ T64] net_ratelimit: 30 callbacks suppressed [ 642.895506][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 643.056767][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 643.085829][T20990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4001'. [ 643.193031][T20987] netlink: Failed to add batadv0 helper -22 [ 643.221222][T20987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.233471][T21006] netlink: 'syz.1.4005': attribute type 21 has an invalid length. [ 643.261174][T21006] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4005'. [ 643.365767][T21006] netlink: 'syz.1.4005': attribute type 4 has an invalid length. [ 643.415317][T21006] netlink: 'syz.1.4005': attribute type 5 has an invalid length. [ 643.482450][T21006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4005'. [ 643.555788][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 643.685264][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 643.828708][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 644.077187][T21048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.086826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.103113][T21049] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4012'. [ 644.147722][T21048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.628118][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4022'. [ 645.662707][T21090] netlink: 'syz.1.4022': attribute type 10 has an invalid length. [ 645.688923][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 645.711699][T21094] erspan0: entered promiscuous mode [ 645.735695][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4023'. [ 645.810018][T21090] geneve4: entered promiscuous mode [ 645.858800][T21090] geneve4: entered allmulticast mode [ 646.368979][T21118] 0ªî{X¹¦: entered promiscuous mode [ 646.642890][T21121] bond1: entered promiscuous mode [ 646.683794][T21121] bond1: entered allmulticast mode [ 646.752142][T21121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.037800][T21150] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 647.195459][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 647.512446][T21176] __nla_validate_parse: 6 callbacks suppressed [ 647.512466][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 647.599858][T21178] netlink: 'syz.1.4044': attribute type 22 has an invalid length. [ 647.636750][T21183] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 647.641350][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 647.822337][T21185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.841185][T21178] netlink: 'syz.1.4044': attribute type 22 has an invalid length. [ 647.901461][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 647.946176][T18451] net_ratelimit: 25 callbacks suppressed [ 647.946197][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 648.096940][T21201] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 648.101939][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 648.167496][T21203] erspan1: entered allmulticast mode [ 648.380721][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 648.442939][T21201] bond3: entered promiscuous mode [ 648.462786][T21201] bond3: entered allmulticast mode [ 648.476188][T21201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.512073][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4050'. [ 648.584665][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4050'. [ 648.610303][T18447] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.633595][T18447] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.678411][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4050'. [ 648.688796][T18447] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.720525][T18447] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.779591][T21221] syzkaller1: entered promiscuous mode [ 648.799340][T21221] syzkaller1: entered allmulticast mode [ 648.801842][T21237] openvswitch: netlink: Message has 4 unknown bytes. [ 648.816403][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 648.955909][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 649.160721][T21246] bond2: option lp_interval: invalid value (0) [ 649.167178][T21246] bond2: option lp_interval: allowed values 1 - 2147483647 [ 649.183519][T21246] bond2 (unregistering): Released all slaves [ 649.184531][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4057'. [ 649.336726][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 649.459706][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 649.603847][T21257] veth5: entered allmulticast mode [ 649.636181][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 649.755579][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 649.887720][T18447] bond1: (slave vlan2): failed to get link speed/duplex [ 649.907227][T21276] netlink: 'syz.1.4065': attribute type 1 has an invalid length. [ 650.012815][T21282] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4065'. [ 650.091268][T21285] veth1_macvtap: left promiscuous mode [ 650.106967][T21285] macsec0: entered promiscuous mode [ 650.502487][T21298] sctp: [Deprecated]: syz.0.4072 (pid 21298) Use of int in maxseg socket option. [ 650.502487][T21298] Use struct sctp_assoc_value instead [ 650.510493][T21302] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 650.549270][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'. [ 651.180776][T21335] syzkaller0: entered promiscuous mode [ 651.204036][T21335] syzkaller0: entered allmulticast mode [ 652.240255][T21389] nbd: socks must be embedded in a SOCK_ITEM attr [ 652.424751][T21399] syzkaller0: entered promiscuous mode [ 652.451421][T21399] syzkaller0: entered allmulticast mode [ 652.478120][T21399] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 652.879386][T21419] geneve0: entered allmulticast mode [ 653.036577][T18457] net_ratelimit: 30 callbacks suppressed [ 653.036600][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 653.237529][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 653.355247][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 653.477022][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 653.605502][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 653.628458][T21465] xt_ecn: cannot match TCP bits for non-tcp packets [ 653.735099][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 653.842777][T21472] syzkaller0: entered promiscuous mode [ 653.849195][T21472] syzkaller0: entered allmulticast mode [ 653.885360][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 653.997310][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 654.125415][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 654.235354][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 655.717876][T21418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.935761][T21485] __nla_validate_parse: 5 callbacks suppressed [ 655.935783][T21485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4129'. [ 656.170839][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 656.320759][T21509] netlink: 'syz.2.4136': attribute type 12 has an invalid length. [ 656.347182][T21509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4136'. [ 656.379489][T21513] netlink: 'syz.1.4139': attribute type 2 has an invalid length. [ 656.575247][T21526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4142'. [ 656.578773][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4141'. [ 656.741938][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4144'. [ 656.781054][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 656.902938][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4147'. [ 656.989435][T21545] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4150'. [ 657.021049][T21545] 0·: renamed from hsr0 (while UP) [ 657.080736][T21545] 0·: entered allmulticast mode [ 657.094579][T21545] hsr_slave_0: entered allmulticast mode [ 657.100654][T21545] hsr_slave_1: entered allmulticast mode [ 657.108084][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4148'. [ 658.055966][T18457] net_ratelimit: 33 callbacks suppressed [ 658.055989][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 658.187510][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 658.248514][T21611] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 658.305946][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 658.426818][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 658.577375][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 658.673598][T21640] macvlan0: entered promiscuous mode [ 658.687697][T21641] xt_NFQUEUE: number of total queues is 0 [ 658.727048][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 658.856103][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 658.995484][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 659.176266][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 659.445216][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 661.184309][T21732] __nla_validate_parse: 9 callbacks suppressed [ 661.184407][T21732] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4202'. [ 662.578845][T21683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.065545][ T64] net_ratelimit: 31 callbacks suppressed [ 663.065568][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 663.160103][T21746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4205'. [ 663.265244][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 663.348422][T21746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4205'. [ 663.813096][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 663.966008][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 664.126997][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 664.285473][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 664.456068][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 664.585154][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 664.705784][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 664.827117][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 665.579441][ T5272] veth1_vlan: left promiscuous mode [ 665.619359][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 666.119208][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4230'. [ 666.177356][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4230'. [ 666.212307][T21832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4229'. [ 666.530314][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4230'. [ 666.596183][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4230'. [ 666.654574][T21853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4234'. [ 666.750319][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 666.781684][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 667.190533][T21875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4240'. [ 667.260137][T21875] vlan3: entered promiscuous mode [ 667.347263][T21875] bridge0: entered promiscuous mode [ 667.856126][T21903] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4245'. [ 667.980939][T21903] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4245'. [ 668.150747][T18452] net_ratelimit: 25 callbacks suppressed [ 668.150769][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 668.349592][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 668.507649][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 668.655148][T18461] bond1: (slave vlan2): failed to get link speed/duplex [ 668.796011][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 669.061376][T21938] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4253'. [ 669.075849][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 669.196361][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 669.341912][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 669.426136][ T885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.495197][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 670.602547][T21986] nbd3: detected capacity change from 0 to 63 [ 670.646936][ T5618] block nbd3: Receive control failed (result -32) [ 670.670874][ T1641] block nbd3: Dead connection, failed to find a fallback [ 670.679013][ T1641] block nbd3: shutting down sockets [ 670.687868][ T1641] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.700606][ T1641] Buffer I/O error on dev nbd3, logical block 0, async page read [ 670.720020][ T1641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.729772][ T1641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 670.738770][ T1641] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.750484][ T1641] Buffer I/O error on dev nbd3, logical block 2, async page read [ 670.760035][ T1641] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.771059][ T1641] Buffer I/O error on dev nbd3, logical block 3, async page read [ 670.780435][ T1641] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.790334][ T1641] Buffer I/O error on dev nbd3, logical block 0, async page read [ 670.798747][ T1641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.809503][ T1641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 670.817810][ T1641] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.828030][ T1641] Buffer I/O error on dev nbd3, logical block 2, async page read [ 670.836614][ T1641] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.846493][ T1641] Buffer I/O error on dev nbd3, logical block 3, async page read [ 670.859067][ T1641] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.872048][ T1641] Buffer I/O error on dev nbd3, logical block 0, async page read [ 670.880267][ T1641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 670.890203][ T1641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 670.907971][T20719] ldm_validate_partition_table(): Disk read failed. [ 670.921468][T20719] Dev nbd3: unable to read RDB block 0 [ 670.929486][T20719] nbd3: unable to read partition table [ 670.946188][T20719] ldm_validate_partition_table(): Disk read failed. [ 670.954710][T20719] Dev nbd3: unable to read RDB block 0 [ 670.967611][T20719] nbd3: unable to read partition table [ 671.220413][T22010] __nla_validate_parse: 5 callbacks suppressed [ 671.220436][T22010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4275'. [ 671.337698][T22010] netlink: 'syz.2.4275': attribute type 7 has an invalid length. [ 671.393397][T22010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4275'. [ 671.433811][T22014] ªªªªª»: renamed from bond_slave_0 (while UP) [ 671.732184][T22030] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4283'. [ 672.132386][T22038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4284'. [ 672.472585][T22050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4287'. [ 672.553847][T22052] FAULT_INJECTION: forcing a failure. [ 672.553847][T22052] name failslab, interval 1, probability 0, space 0, times 0 [ 672.611186][T22052] CPU: 0 UID: 0 PID: 22052 Comm: syz.3.4288 Not tainted syzkaller #0 PREEMPT(full) [ 672.611217][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.611229][T22052] Call Trace: [ 672.611237][T22052] [ 672.611246][T22052] dump_stack_lvl+0xe8/0x150 [ 672.611286][T22052] should_fail_ex+0x410/0x560 [ 672.611324][T22052] should_failslab+0xa8/0x100 [ 672.611355][T22052] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 672.611378][T22052] ? local_lock_release+0x9c/0x160 [ 672.611408][T22052] ? __alloc_skb+0x1db/0x7a0 [ 672.611432][T22052] ? __alloc_skb+0x1db/0x7a0 [ 672.611463][T22052] __alloc_skb+0x1db/0x7a0 [ 672.611492][T22052] alloc_skb_with_frags+0xc6/0x760 [ 672.611520][T22052] ? __lock_acquire+0x683/0x2cf0 [ 672.611552][T22052] ? kernel_text_address+0xa5/0xe0 [ 672.611577][T22052] sock_alloc_send_pskb+0x878/0x990 [ 672.611604][T22052] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 672.611642][T22052] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 672.611668][T22052] ? dev_get_by_index+0x22/0x2d0 [ 672.611689][T22052] ? dev_get_by_index+0x22/0x2d0 [ 672.611717][T22052] packet_sendmsg+0x31bb/0x4f80 [ 672.611743][T22052] ? process_measurement+0x443/0x1c10 [ 672.611773][T22052] ? aa_label_sk_perm+0x532/0x6e0 [ 672.611811][T22052] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 672.611841][T22052] ? process_measurement+0x7b2/0x1c10 [ 672.611870][T22052] ? up_write+0x19d/0x4a0 [ 672.611899][T22052] ? __lock_acquire+0x683/0x2cf0 [ 672.611941][T22052] ? __pfx_packet_sendmsg+0x10/0x10 [ 672.611976][T22052] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.612006][T22052] ? aa_sock_msg_perm+0xf6/0x1c0 [ 672.612042][T22052] ? __pfx_packet_sendmsg+0x10/0x10 [ 672.612065][T22052] sock_sendmsg_nosec+0x13a/0x180 [ 672.612092][T22052] ____sys_sendmsg+0x54e/0x850 [ 672.612127][T22052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.612165][T22052] ? import_iovec+0x73/0xa0 [ 672.612190][T22052] ___sys_sendmsg+0x2a5/0x360 [ 672.612217][T22052] ? __lock_acquire+0x683/0x2cf0 [ 672.612247][T22052] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.612278][T22052] ? kstrtouint+0x6e/0xe0 [ 672.612331][T22052] ? __fget_files+0x2a/0x420 [ 672.612357][T22052] ? __fget_files+0x3a2/0x420 [ 672.612392][T22052] __sys_sendmmsg+0x273/0x4d0 [ 672.612427][T22052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 672.612465][T22052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 672.612508][T22052] ? ksys_write+0x242/0x270 [ 672.612539][T22052] ? __pfx_ksys_write+0x10/0x10 [ 672.612576][T22052] __x64_sys_sendmmsg+0xa0/0xc0 [ 672.612609][T22052] do_syscall_64+0x166/0x520 [ 672.612641][T22052] ? trace_irq_disable+0x3b/0x140 [ 672.612668][T22052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.612690][T22052] ? clear_bhb_loop+0x70/0xc0 [ 672.612712][T22052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.612737][T22052] RIP: 0033:0x7fdcd159e0d9 [ 672.612756][T22052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.612772][T22052] RSP: 002b:00007fdcd24ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 672.612793][T22052] RAX: ffffffffffffffda RBX: 00007fdcd1825fa0 RCX: 00007fdcd159e0d9 [ 672.612808][T22052] RDX: 0000000000000002 RSI: 00002000000033c0 RDI: 0000000000000003 [ 672.612820][T22052] RBP: 00007fdcd24ba090 R08: 0000000000000000 R09: 0000000000000000 [ 672.612832][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.612844][T22052] R13: 00007fdcd1826038 R14: 00007fdcd1825fa0 R15: 00007ffdca18aaa8 [ 672.612877][T22052] [ 673.176289][T18454] net_ratelimit: 25 callbacks suppressed [ 673.176310][T18454] bond1: (slave vlan2): failed to get link speed/duplex [ 673.316073][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 673.465635][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 673.615288][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 673.783803][T22075] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 673.835698][T18455] bond1: (slave vlan2): failed to get link speed/duplex [ 673.861855][T22075] netlink: 'syz.1.4294': attribute type 20 has an invalid length. [ 673.876790][T22080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4297'. [ 673.902197][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4295'. [ 673.963083][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 674.096783][T18461] bond1: (slave vlan2): failed to get link speed/duplex [ 674.235288][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 674.376507][T18457] bond1: (slave vlan2): failed to get link speed/duplex [ 674.646850][T22104] veth0_to_bond: entered allmulticast mode [ 675.824945][T22141] bridge0: port 3(team0) entered blocking state [ 675.839295][T22141] bridge0: port 3(team0) entered disabled state [ 675.859902][T22141] team0: entered allmulticast mode [ 675.881544][T22141] team_slave_0: entered allmulticast mode [ 675.908600][T22141] team_slave_1: entered allmulticast mode [ 675.962884][T22141] team0: entered promiscuous mode [ 675.974940][T22141] team_slave_0: entered promiscuous mode [ 676.060632][T22141] team_slave_1: entered promiscuous mode [ 676.116378][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 676.211937][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 676.345824][T22152] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 676.608368][T22162] lo: Caught tx_queue_len zero misconfig [ 676.677620][T22162] syzkaller0: entered promiscuous mode [ 676.704013][T22162] syzkaller0: entered allmulticast mode [ 676.960791][T22182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4322'. [ 677.032593][T22182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4322'. [ 677.422681][T22194] netlink: 'syz.2.4326': attribute type 23 has an invalid length. [ 677.859627][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 677.908117][T22209] Bluetooth: hci0: unsupported parameter 5161 [ 677.943326][T22209] Bluetooth: hci0: unsupported parameter 8192 [ 677.949174][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 677.992410][T22209] Bluetooth: hci0: unsupported parameter 5161 [ 678.023987][T22214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4329'. [ 678.060083][T22209] Bluetooth: hci0: unsupported parameter 8192 [ 678.116847][T22211] syzkaller0: entered promiscuous mode [ 678.134283][T22211] syzkaller0: entered allmulticast mode [ 678.225634][T18448] net_ratelimit: 25 callbacks suppressed [ 678.225654][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 678.279967][T22218] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4329'. [ 678.389491][T22224] syzkaller1: entered promiscuous mode [ 678.411761][T22224] syzkaller1: entered allmulticast mode [ 678.455825][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 678.562640][T22231] xt_connbytes: Forcing CT accounting to be enabled [ 678.585176][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 678.625633][T22231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.662747][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4333'. [ 678.719600][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 679.036765][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.088954][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4336'. [ 679.446487][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 679.685938][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 679.836041][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 680.077788][ T157] bond1: (slave vlan2): failed to get link speed/duplex [ 680.292062][ T157] bond1: (slave vlan2): failed to get link speed/duplex [ 680.433982][T22283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4348'. [ 680.613857][T22291] bridge0: entered promiscuous mode [ 680.644269][T22291] bridge0: entered allmulticast mode [ 680.649581][T22294] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 680.683526][T22294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4349'. [ 681.222570][T22308] netlink: 'syz.2.4355': attribute type 1 has an invalid length. [ 681.285895][T22309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.448993][T22309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.478010][T22318] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.645121][T22325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.664418][T22308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.813456][T22320] veth0_to_team: Caught tx_queue_len zero misconfig [ 681.969893][T22317] __nla_validate_parse: 1 callbacks suppressed [ 681.969917][T22317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4358'. [ 682.186467][T22343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4362'. [ 682.590717][T22358] sctp: [Deprecated]: syz.2.4367 (pid 22358) Use of int in maxseg socket option. [ 682.590717][T22358] Use struct sctp_assoc_value instead [ 682.688101][T22352] netlink: 'syz.3.4366': attribute type 1 has an invalid length. [ 682.889538][T22368] netlink: 'syz.0.4370': attribute type 1 has an invalid length. [ 683.276077][T18448] net_ratelimit: 21 callbacks suppressed [ 683.276100][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 683.425758][ T5830] bond1: (slave vlan2): failed to get link speed/duplex [ 683.451210][T22385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4375'. [ 683.532631][T22388] netlink: 'syz.2.4375': attribute type 8 has an invalid length. [ 683.575252][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 683.593592][T22388] netlink: 'syz.2.4375': attribute type 3 has an invalid length. [ 683.625518][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 683.643622][T22388] netlink: 'syz.2.4375': attribute type 4 has an invalid length. [ 683.677283][T22394] netlink: 'syz.4.4378': attribute type 4 has an invalid length. [ 683.685717][T22388] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.4375'. [ 683.718305][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 683.867273][ T5830] bond1: (slave vlan2): failed to get link speed/duplex [ 683.950748][T22402] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4380'. [ 684.015428][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 684.140936][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 684.306615][ T5830] bond1: (slave vlan2): failed to get link speed/duplex [ 684.341807][T22411] netlink: 'syz.4.4382': attribute type 10 has an invalid length. [ 684.483480][T22411] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.528481][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 684.678375][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 684.714371][T22422] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 684.732990][T22422] syzkaller1: linktype set to 823 [ 685.030919][T22438] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4387'. [ 685.159503][T22445] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.170258][T22445] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.503302][T22459] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 685.577169][T22463] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 685.596016][T22459] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 685.811484][T22452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.078739][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.168299][T22489] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 686.240943][T18451] IPVS: starting estimator thread 0... [ 686.365310][T22493] IPVS: using max 27 ests per chain, 64800 per kthread [ 686.478283][T22489] veth1: entered promiscuous mode [ 686.541753][T22489] bond5: (slave veth1): Enslaving as a backup interface with a down link [ 686.894425][T18448] [ 686.896832][T18448] ====================================================== [ 686.903964][T18448] WARNING: possible circular locking dependency detected [ 686.911069][T18448] syzkaller #0 Not tainted [ 686.915637][T18448] ------------------------------------------------------ [ 686.922660][T18448] kworker/u8:24/18448 is trying to acquire lock: [ 686.929269][T18448] ffffffff8ec66b20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 686.939202][T18448] [ 686.939202][T18448] but task is already holding lock: [ 686.946685][T18448] ffffffff8e9f6d80 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 686.956105][T18448] [ 686.956105][T18448] which lock already depends on the new lock. [ 686.956105][T18448] [ 686.966523][T18448] [ 686.966523][T18448] the existing dependency chain (in reverse order) is: [ 686.975559][T18448] [ 686.975559][T18448] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 686.983234][T18448] __mutex_lock+0x19d/0x1550 [ 686.988371][T18448] __alloc_workqueue+0xa9c/0x2060 [ 686.993928][T18448] alloc_workqueue_noprof+0xe3/0x210 [ 686.999757][T18448] padata_alloc+0xbe/0x360 [ 687.004744][T18448] pcrypt_init_padata+0x27/0x100 [ 687.010754][T18448] pcrypt_init+0x60/0xc0 [ 687.015624][T18448] do_one_initcall+0x250/0x870 [ 687.021007][T18448] do_initcall_level+0x10a/0x1a0 [ 687.026794][T18448] do_initcalls+0x59/0xa0 [ 687.031928][T18448] kernel_init_freeable+0x29d/0x3e0 [ 687.037838][T18448] kernel_init+0x22/0x1d0 [ 687.042706][T18448] ret_from_fork+0x514/0xb70 [ 687.048385][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.053679][T18448] [ 687.053679][T18448] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 687.061515][T18448] cpus_read_lock+0x42/0x160 [ 687.066669][T18448] static_key_slow_inc+0x12/0x30 [ 687.072159][T18448] nbd_genl_reconfigure+0x1301/0x1e80 [ 687.078252][T18448] genl_family_rcv_msg_doit+0x233/0x340 [ 687.084402][T18448] genl_rcv_msg+0x614/0x7a0 [ 687.089445][T18448] netlink_rcv_skb+0x226/0x4a0 [ 687.094832][T18448] genl_rcv+0x28/0x40 [ 687.099353][T18448] netlink_unicast+0x7bd/0x940 [ 687.104786][T18448] netlink_sendmsg+0x813/0xb40 [ 687.110160][T18448] sock_sendmsg_nosec+0x13a/0x180 [ 687.115710][T18448] ____sys_sendmsg+0x54e/0x850 [ 687.121265][T18448] ___sys_sendmsg+0x2a5/0x360 [ 687.126730][T18448] __x64_sys_sendmsg+0x1b1/0x290 [ 687.132196][T18448] do_syscall_64+0x166/0x520 [ 687.137316][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.143734][T18448] [ 687.143734][T18448] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 687.151386][T18448] __mutex_lock+0x19d/0x1550 [ 687.156515][T18448] nbd_queue_rq+0x373/0x1150 [ 687.161656][T18448] blk_mq_dispatch_rq_list+0x499/0x1990 [ 687.167881][T18448] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 687.174879][T18448] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 687.181472][T18448] blk_mq_run_work_fn+0x16c/0x300 [ 687.187024][T18448] process_scheduled_works+0xa88/0x14c0 [ 687.193094][T18448] worker_thread+0xa47/0xfb0 [ 687.198304][T18448] kthread+0x38b/0x480 [ 687.203108][T18448] ret_from_fork+0x514/0xb70 [ 687.208313][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.213609][T18448] [ 687.213609][T18448] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 687.221605][T18448] __mutex_lock+0x19d/0x1550 [ 687.226720][T18448] nbd_queue_rq+0xc1/0x1150 [ 687.231837][T18448] blk_mq_dispatch_rq_list+0x499/0x1990 [ 687.237920][T18448] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 687.245123][T18448] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 687.251631][T18448] blk_mq_run_work_fn+0x16c/0x300 [ 687.257181][T18448] process_scheduled_works+0xa88/0x14c0 [ 687.263254][T18448] worker_thread+0xa47/0xfb0 [ 687.268369][T18448] kthread+0x38b/0x480 [ 687.272997][T18448] ret_from_fork+0x514/0xb70 [ 687.278119][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.283438][T18448] [ 687.283438][T18448] -> #4 (set->srcu){.+.+}-{0:0}: [ 687.290669][T18448] __synchronize_srcu+0xc9/0x2f0 [ 687.296183][T18448] elevator_switch+0x1e8/0x7b0 [ 687.301642][T18448] elevator_change+0x2fa/0x480 [ 687.307180][T18448] elevator_set_default+0x375/0x440 [ 687.312916][T18448] blk_register_queue+0x3f3/0x4e0 [ 687.318511][T18448] __add_disk+0x6cb/0xe30 [ 687.323466][T18448] add_disk_fwnode+0x100/0x3a0 [ 687.328780][T18448] nbd_dev_add+0x733/0xb60 [ 687.333859][T18448] nbd_init+0x15f/0x1e0 [ 687.338698][T18448] do_one_initcall+0x250/0x870 [ 687.344163][T18448] do_initcall_level+0x10a/0x1a0 [ 687.349629][T18448] do_initcalls+0x59/0xa0 [ 687.354489][T18448] kernel_init_freeable+0x29d/0x3e0 [ 687.360216][T18448] kernel_init+0x22/0x1d0 [ 687.365093][T18448] ret_from_fork+0x514/0xb70 [ 687.370225][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.375521][T18448] [ 687.375521][T18448] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 687.384655][T18448] __mutex_lock+0x19d/0x1550 [ 687.389944][T18448] elevator_change+0x1af/0x480 [ 687.395240][T18448] elevator_set_none+0xb5/0x140 [ 687.400628][T18448] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 687.406958][T18448] nbd_start_device+0x189/0xb30 [ 687.412600][T18448] nbd_genl_connect+0x1597/0x1c10 [ 687.418149][T18448] genl_family_rcv_msg_doit+0x233/0x340 [ 687.424774][T18448] genl_rcv_msg+0x614/0x7a0 [ 687.429831][T18448] netlink_rcv_skb+0x226/0x4a0 [ 687.435338][T18448] genl_rcv+0x28/0x40 [ 687.439881][T18448] netlink_unicast+0x7bd/0x940 [ 687.445261][T18448] netlink_sendmsg+0x813/0xb40 [ 687.450639][T18448] sock_sendmsg_nosec+0x13a/0x180 [ 687.456457][T18448] ____sys_sendmsg+0x54e/0x850 [ 687.461755][T18448] ___sys_sendmsg+0x2a5/0x360 [ 687.466963][T18448] __x64_sys_sendmsg+0x1b1/0x290 [ 687.472539][T18448] do_syscall_64+0x166/0x520 [ 687.477766][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.484371][T18448] [ 687.484371][T18448] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 687.493076][T18448] blk_alloc_queue+0x544/0x690 [ 687.498464][T18448] __blk_mq_alloc_disk+0x194/0x390 [ 687.504099][T18448] nbd_dev_add+0x494/0xb60 [ 687.509136][T18448] nbd_init+0x15f/0x1e0 [ 687.513836][T18448] do_one_initcall+0x250/0x870 [ 687.519129][T18448] do_initcall_level+0x10a/0x1a0 [ 687.524770][T18448] do_initcalls+0x59/0xa0 [ 687.529622][T18448] kernel_init_freeable+0x29d/0x3e0 [ 687.535361][T18448] kernel_init+0x22/0x1d0 [ 687.540394][T18448] ret_from_fork+0x514/0xb70 [ 687.545527][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.550848][T18448] [ 687.550848][T18448] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 687.558066][T18448] fs_reclaim_acquire+0x71/0x100 [ 687.563532][T18448] prepare_alloc_pages+0x15b/0x650 [ 687.569183][T18448] __alloc_frozen_pages_noprof+0x12f/0x380 [ 687.575530][T18448] __alloc_pages_noprof+0x10/0x100 [ 687.581293][T18448] pcpu_populate_chunk+0x181/0xb30 [ 687.587033][T18448] pcpu_alloc_noprof+0xbca/0x1900 [ 687.592673][T18448] bpf_map_alloc_percpu+0x65/0x180 [ 687.598597][T18448] array_map_alloc+0x377/0x710 [ 687.603903][T18448] map_create+0xf3d/0x1b70 [ 687.608853][T18448] __sys_bpf+0xaea/0xd90 [ 687.613626][T18448] __x64_sys_bpf+0xba/0xd0 [ 687.618653][T18448] do_syscall_64+0x166/0x520 [ 687.623784][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.630216][T18448] [ 687.630216][T18448] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 687.638074][T18448] __lock_acquire+0x1520/0x2cf0 [ 687.643816][T18448] lock_acquire+0x106/0x350 [ 687.648874][T18448] __mutex_lock+0x19d/0x1550 [ 687.654021][T18448] pcpu_alloc_noprof+0x231/0x1900 [ 687.659665][T18448] __alloc_workqueue+0xb2c/0x2060 [ 687.665402][T18448] alloc_workqueue_noprof+0xe3/0x210 [ 687.671234][T18448] __rds_conn_create+0x130d/0x2250 [ 687.676982][T18448] rds_conn_create+0x43/0x60 [ 687.682214][T18448] rds_tcp_accept_one+0x44f/0xd40 [ 687.687836][T18448] rds_tcp_accept_worker+0x1d/0x70 [ 687.693513][T18448] process_scheduled_works+0xa88/0x14c0 [ 687.699584][T18448] worker_thread+0xa47/0xfb0 [ 687.704874][T18448] kthread+0x38b/0x480 [ 687.709485][T18448] ret_from_fork+0x514/0xb70 [ 687.714716][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.720011][T18448] [ 687.720011][T18448] other info that might help us debug this: [ 687.720011][T18448] [ 687.730429][T18448] Chain exists of: [ 687.730429][T18448] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 687.730429][T18448] [ 687.743558][T18448] Possible unsafe locking scenario: [ 687.743558][T18448] [ 687.751095][T18448] CPU0 CPU1 [ 687.756481][T18448] ---- ---- [ 687.761866][T18448] lock(wq_pool_mutex); [ 687.766123][T18448] lock(cpu_hotplug_lock); [ 687.773249][T18448] lock(wq_pool_mutex); [ 687.780120][T18448] lock(pcpu_alloc_mutex); [ 687.784636][T18448] [ 687.784636][T18448] *** DEADLOCK *** [ 687.784636][T18448] [ 687.792783][T18448] locks held by kworker/u8:24/18448: 4, last CPU#0: [ 687.799463][T18448] #0: ffff888032898140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 687.810369][T18448] #1: ffffc90005717c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 687.823121][T18448] #2: ffff888031fa8a60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 687.833850][T18448] #3: ffffffff8e9f6d80 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 687.843606][T18448] [ 687.843606][T18448] stack backtrace: [ 687.849495][T18448] CPU: 0 UID: 0 PID: 18448 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 687.849514][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.849525][T18448] Workqueue: krdsd rds_tcp_accept_worker [ 687.849550][T18448] Call Trace: [ 687.849557][T18448] [ 687.849563][T18448] dump_stack_lvl+0xe8/0x150 [ 687.849584][T18448] print_circular_bug+0x2e1/0x300 [ 687.849601][T18448] check_noncircular+0x12e/0x150 [ 687.849617][T18448] __lock_acquire+0x1520/0x2cf0 [ 687.849639][T18448] ? check_path+0x21/0x40 [ 687.849652][T18448] ? check_noncircular+0xda/0x150 [ 687.849666][T18448] ? add_lock_to_list+0xc7/0x100 [ 687.849680][T18448] ? lockdep_unlock+0x5c/0xd0 [ 687.849698][T18448] ? __lock_acquire+0x13e8/0x2cf0 [ 687.849719][T18448] ? pcpu_alloc_noprof+0x231/0x1900 [ 687.849735][T18448] lock_acquire+0x106/0x350 [ 687.849754][T18448] ? pcpu_alloc_noprof+0x231/0x1900 [ 687.849775][T18448] __mutex_lock+0x19d/0x1550 [ 687.849793][T18448] ? pcpu_alloc_noprof+0x231/0x1900 [ 687.849809][T18448] ? __pfx___mutex_trylock_common+0x10/0x10 [ 687.849826][T18448] ? pcpu_alloc_noprof+0x231/0x1900 [ 687.849840][T18448] ? trace_contention_end+0x3d/0x140 [ 687.849855][T18448] ? __pfx___mutex_lock+0x10/0x10 [ 687.849871][T18448] ? __mutex_lock+0x30b/0x1550 [ 687.849892][T18448] ? __pfx___mutex_lock+0x10/0x10 [ 687.849910][T18448] pcpu_alloc_noprof+0x231/0x1900 [ 687.849926][T18448] ? __kmalloc_cache_node_noprof+0x3d2/0x630 [ 687.849948][T18448] __alloc_workqueue+0xb2c/0x2060 [ 687.849974][T18448] alloc_workqueue_noprof+0xe3/0x210 [ 687.849996][T18448] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 687.850018][T18448] ? mutex_init_lockdep+0xdf/0x110 [ 687.850033][T18448] __rds_conn_create+0x130d/0x2250 [ 687.850053][T18448] ? __rds_conn_create+0x2d2/0x2250 [ 687.850076][T18448] ? __pfx___rds_conn_create+0x10/0x10 [ 687.850096][T18448] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 687.850174][T18448] ? rds_tcp_laddr_check+0x7e/0x410 [ 687.850197][T18448] rds_conn_create+0x43/0x60 [ 687.850219][T18448] rds_tcp_accept_one+0x44f/0xd40 [ 687.850246][T18448] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 687.850268][T18448] ? rcu_is_watching+0x16/0xb0 [ 687.850282][T18448] ? process_scheduled_works+0xa1a/0x14c0 [ 687.850297][T18448] rds_tcp_accept_worker+0x1d/0x70 [ 687.850318][T18448] process_scheduled_works+0xa88/0x14c0 [ 687.850342][T18448] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.850360][T18448] ? assign_work+0x3cf/0x5d0 [ 687.850377][T18448] worker_thread+0xa47/0xfb0 [ 687.850402][T18448] kthread+0x38b/0x480 [ 687.850430][T18448] ? __pfx_worker_thread+0x10/0x10 [ 687.850445][T18448] ? __pfx_kthread+0x10/0x10 [ 687.850465][T18448] ret_from_fork+0x514/0xb70 [ 687.850486][T18448] ? __pfx_ret_from_fork+0x10/0x10 [ 687.850506][T18448] ? __switch_to+0xc89/0x1420 [ 687.850523][T18448] ? __pfx_kthread+0x10/0x10 [ 687.850543][T18448] ret_from_fork_asm+0x1a/0x30 [ 687.850569][T18448] [ 688.366629][T18448] net_ratelimit: 25 callbacks suppressed [ 688.366668][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 688.525179][T18448] bond1: (slave vlan2): failed to get link speed/duplex [ 688.626288][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.635450][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 688.745947][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 688.855066][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 688.965021][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 689.075860][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 689.185396][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 689.305074][ T64] bond1: (slave vlan2): failed to get link speed/duplex [ 693.265277][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 693.375005][T18446] net_ratelimit: 36 callbacks suppressed [ 693.375028][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 693.495020][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 693.605817][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 693.715024][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 693.825103][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 693.935806][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 694.045020][T18446] bond1: (slave vlan2): failed to get link speed/duplex [ 694.155019][T18452] bond1: (slave vlan2): failed to get link speed/duplex [ 694.265905][T18451] bond1: (slave vlan2): failed to get link speed/duplex [ 694.375094][T18451] bond1: (slave vlan2): failed to get link speed/duplex