last executing test programs: 2.592373065s ago: executing program 1 (id=5918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000001fffd00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000100020000000000000000000000000000000700000000020000fbff0000000000000000000000009ceee8d1254ad4770000feffffffffffffff0200"/112], 0xb8}}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x3}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000940)={r4, 0x7fffffff}, &(0x7f0000000bc0)=0xc) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffff27c0eb0c3f01761e00000000000000000000000000000000000000000000000000000000000000fffb007ccc00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000001000000000000000000000000000000000000000000000900000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d400000000020103000000000000000007000002c0000a8008000140000000009c00028006000340000000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb060003400004000014000180080001000000000008000200ac1e01011400018008000100ac1414aa080002007f0000012c00018014000300fc00000000000000000000000700000114000400fc0000000000000000000000000000010600034000030000080001400000000008000140000000010800014000000001"], 0xd4}, 0x1, 0x0, 0x0, 0x4040015}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000002b00)=0xa, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x1}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000700000008000200020000002c0004800500030002000000050003000000000005000300000000000500030001e0ff000500030002"], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400), 0x4) r10 = socket(0x10, 0x803, 0x0) recvmsg(r5, &(0x7f00000048c0)={&(0x7f00000006c0)=@alg, 0x80, &(0x7f0000004800)=[{&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f0000000880)=""/73, 0x49}, {&(0x7f0000000a00)=""/218, 0xda}, {&(0x7f0000000b00)=""/175, 0xaf}, {&(0x7f0000000d00)=""/182, 0xb6}, {&(0x7f0000000dc0)=""/116, 0x74}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7, &(0x7f0000004880)=""/50, 0x32}, 0x2160) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.255959106s ago: executing program 1 (id=5922): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7a7289590b36af5}, 0x48) unshare(0x20000400) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.160505385s ago: executing program 1 (id=5925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) recvmmsg(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000580)=""/252, 0xfc}, 0x5b61113b}, {{&(0x7f0000000680)=@qipcrtr, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/24, 0x18}, {&(0x7f00000019c0)=""/185, 0xb9}, {&(0x7f0000001a80)=""/126, 0x7e}], 0x6, &(0x7f0000001b80)=""/42, 0x2a}, 0x15}], 0x2, 0x100e3, &(0x7f0000001c40)) getsockopt$inet_udp_int(r6, 0x11, 0x64, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.104940453s ago: executing program 4 (id=5926): r0 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x4}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r6, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) (async) getgid() (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.092092039s ago: executing program 3 (id=5927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20f88798cec54924b192e2dfcdd23d7b3e1efedad544af5219573b59efa35015bda748a3efeb35760436fed802271d016a38118d82a22a50b3f31acd9f01342cb02e0272eea2ea75bb64cc6f5ed3a4a8ca44a0113aa7da44dcaeb8d9416ab0d925e37e5d91061f66f0c37c9210d274c19ba04a14a6c2c48aaebb0e8771c53942be0335c02fb8133bb858bc35b2965b6421b0c23710cc445d1114a5597b8412d8dca4d452", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c40d9b83a0000"], 0x1c}}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000001100)={@val={0x6f01, 0x19}, @val={0x1, 0x0, 0x8, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x98, {[@window={0x9, 0x3}]}}, {"5fd514c9cbcce45d056fc2c9c3fffad2653f018b5650592c6f544f4a1ed4151da19450a481ce9708fc7d019f03c927987954054ccbafed7217d5bc2b915d784adbcf41d2fd7f2094e3c7e4f234d0a2fe89b6b58a4b3bb27e571eb1d8bb807f309aa169d17e9f6c923448564aadf7cb8936fcdbdb0af2ff5630643f87fafb13fbce6cc189eded388040421f124b69abf500e98d280234125f18e2a235a97c11b2acf18ec32d1d9a5429edf680f3adf330e26ecc6cb6ea8deabf1a349035c671ad50d1ea349d7c354d377659f7551134c79d1466"}}}}}, 0x10d) close(0x4) (async, rerun: 64) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r4) (async, rerun: 32) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (rerun: 32) r11 = accept(r9, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r10, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) (async) mmap(&(0x7f0000b1d000/0xc000)=nil, 0xc000, 0x0, 0x3032, r0, 0x0) (async) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)) (async, rerun: 32) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) (rerun: 32) 1.988982245s ago: executing program 1 (id=5929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600001459b6d2047f9ec100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0x4, 0x64, 0x8, 0x0, 0xb, 0x1, 0x34, 0x7, 0x8, 0x87, 0x4, 0x0, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000240)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r4, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600001459b6d2047f9ec100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0x4, 0x64, 0x8, 0x0, 0xb, 0x1, 0x34, 0x7, 0x8, 0x87, 0x4, 0x0, 0x8}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000240)=0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r4, 0x0) (async) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.954628714s ago: executing program 1 (id=5930): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="24df5a35c2201ceb165a7c1ce91c11bda75e2732078753d46103d737da679268654435c306e60dc9eaff03eb262abd870a974e09a5509aa58fc8385912a9c94644141d59a12fa8b3d7319b4f2c70857dfd135826faae999194dadda81fbd8912a845b14633d8b9fadba76cd652b7b341e229950ec260ecda02714b48f06fddf9601c1745d388810d75288bee32d0a9a947352558507d50927bd2767d1bd307788147f69f92053ebe186092b1fc22417b366aa5699470b3ec14ef43b056254c0a6677e70607962e39e8db1ecb0f0f94a585a038a58d71c4f9ecfb57d923ce574de666181e33763b00c1466efda090f9"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.915390075s ago: executing program 4 (id=5931): socket$netlink(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x5, 0x7f, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @multicast2, {[@generic={0x7, 0x7, "5e468537b4"}, @cipso={0x86, 0x71, 0xffffffffffffffff, [{0x0, 0xe, "da11618200ade7828c5dd768"}, {0x5, 0x11, "bbd8bdcf9884b5e2034f27158cc565"}, {0x1, 0xe, "5d2ac54fa1a7b56cc9488865"}, {0x7, 0xd, "8d1bd3b04087f716b4798b"}, {0x0, 0x12, "b2ab4828877c607a4b2f65d440d1b5b7"}, {0x7, 0x7, "e766e7dae9"}, {0x0, 0x11, "44b65e82a251e77893ee4f2c1653e1"}, {0x0, 0x7, "3eee1efad4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xa9, 0x0, 0x8, [0x4, 0x640]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@dellinkprop={0x20, 0x6d, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x0, 0x50108}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x28, r5, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) (async) close(0x4) 1.772437428s ago: executing program 3 (id=5933): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc) 1.747542435s ago: executing program 1 (id=5934): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r2], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.67600338s ago: executing program 3 (id=5935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r3 = socket(0x10, 0x803, 0x0) sendfile(r3, r0, &(0x7f0000000000)=0x10, 0x1000) 1.578892891s ago: executing program 4 (id=5938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x7, "79ce0e", 0xf, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/142, 0x8e, 0x20, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0x81, 0x8, 0x8f1c}) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x4, 0x81, 0x8009, 0x2, 0xfff, 0x5, 0x5, 0x7f, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={r3, 0x9, 0x5, 0x0, 0xfffe, 0x5, 0x7f, 0xfffffffd, {r4, @in={{0x2, 0x4e23, @local}}, 0x7, 0xfbe, 0x2, 0x20, 0x800}}, &(0x7f00000004c0)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r4, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f0000000540)='}\x00', 0x195041, &(0x7f0000000580)={@_ha_fsid={[0x4, 0x8]}, {0x7, 0x4, 0xffffffff, 0x3}}, 0x7, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x7}, {[0x7, 0x5805, 0x2]}, 0xfffffbff, 0xb4, &(0x7f0000000640)=""/180}) ioctl$FITHAW(r6, 0xc0045878) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000780), &(0x7f00000007c0)=0x40) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000800), &(0x7f0000000840)=0x30) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000880)={0x0, 'bridge_slave_0\x00', {}, 0xffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000008c0)=0x1, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000900)={0x100, 0x5}) recvfrom$netrom(r6, &(0x7f0000000940)=""/129, 0x81, 0x2001, &(0x7f0000000a00)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000a80)=0x8, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000ac0)=r6, 0x4) writev(r1, &(0x7f0000001e40)=[{&(0x7f0000000b00)="edc5fa84620ed0d37ebef5d7edd5904e64cfcbe3ee2d1baa0c5963b01853f0d8f9e45e8eb13ee7374bf1106049724275418a40fd26dd2bdcdf69a35cbf95a23c3a", 0x41}, {&(0x7f0000000b80)="223148016fa98d888a3b2b25127c39c0fc140230feb1a596375c15b4f3ff3ae542b9510f14b4eb7c56846aa27e4d3eefe000c39cade348f516ba5d03aab126d4e642699ab976e12f6789f069d94bee8d0e41114195ef13cae457d75cb1102936c873ea21bd822d3b2fe4540d7f15a5d7c5c95b6c4512c320105bab410807001a93bbda8560f2ad474f747dd469d10ccf64fee027f570ec3458160ac8716bf71e24c618cb394b41320cb101fc47a95992f1161ffa43f8060488cb2533b1fadc69ce03923495ea365c182086f98a82cfe60e", 0xd1}, {&(0x7f0000000c80)="357d4bb39620442667fc7b3d98291a92fc2326c9ddcce2f678587e55286195928812412dcac6b557d4a86e53e82da5e955709dacca9f214dbeeaf2b6167b064d84a66af0ed30afc19aec7b376876466f230c4f2a7944d61488bfb2f9e1e8853b595f9cb486cd6a93b434978b562a06f9b2abadd14e3cf4e618987cd75a0874c2eef7f94a458e2135f001", 0x8a}, {&(0x7f0000000d40)="61abc6587fe67c81c1e6f84e510be32d54fc3f3a9d097cf51cb31ff551feda8cfe871b49453b618f90b15597604cb01c87fb9c9a26a4b044a6e0077f652198c9811f7ec3d6fe5eff5b8b90ea4acff5af6108718594b88f506227c10f6f3354e987a3ca8b9498e60bd7d8f09215db696f1ec01eb5fde8db3412d133131a59ee7c0cd55602d31308", 0x87}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="57d16e72360f75c943de603215bf1a8e6782c94f7f31c9a675175269a1f59d9628de98b10bd271f231a6cff219cfed32", 0x30}], 0x6) bind$rxrpc(r1, &(0x7f0000001ec0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @private2, 0x8}}, 0x24) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000001f80)={&(0x7f0000001f00)=[{0x0, 0x0, 0xfffffffffffffff4, 0x2, 0x3, 0x1000, 0xcd}, {0x1, 0x0, 0x8, 0x8, 0x5, 0x9, 0x0, 0x7}], 0x2, 0x38, 0x0, 0x7fffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001fc0)={r5, 0x7ff, 0xcc70b10ae0608bbc}, &(0x7f0000002000)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002080), r2) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}}, 0x10) r9 = accept$packet(r6, 0x0, &(0x7f0000002180)) writev(r9, &(0x7f0000002200)=[{&(0x7f00000021c0)="50f4390013686e40e650ab434973a8435c29376fb1939adf42f66f70a3ea117ae6b21c4266ab4496d9d468bd36e9", 0x2e}], 0x1) 1.341184693s ago: executing program 2 (id=5941): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x3, 0x2}, 0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400200000000000000000000072ce35d50da7a42de9e89892663eb36250926c189649214e292184f6b4aa06fe3131eedeebbd59ea7895104d60491a962e15d87b6a3de19d005ff39a782c105951253e1048f0ee3f4d9a38d35ecf177c5af6158b6779ecb3b2ca7397e9df13f39eac95bb04d59b049f57bd45a9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c0002800600020003000000"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3399", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf253600000008000300", @ANYRES32=r7, @ANYBLOB="2b0099000700000029000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040884) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x3, 0x2}, 0x6) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400200000000000000000000072ce35d50da7a42de9e89892663eb36250926c189649214e292184f6b4aa06fe3131eedeebbd59ea7895104d60491a962e15d87b6a3de19d005ff39a782c105951253e1048f0ee3f4d9a38d35ecf177c5af6158b6779ecb3b2ca7397e9df13f39eac95bb04d59b049f57bd45a9", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c0002800600020003000000"], 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3399", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf253600000008000300", @ANYRES32=r7, @ANYBLOB="2b0099000700000029000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040884) (async) 1.160240954s ago: executing program 4 (id=5943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$inet6(r3, &(0x7f0000000f00)={&(0x7f00000000c0)={0xa, 0x4e24, 0x82, @mcast1, 0x1a1}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000380)="1e993dcf5f941be71069ffdee8d9ba0caed7170051bd456e3983aa66f13e3e286fed244dd3066082222aa90868047f7eba25d13382f584f999152f7b51c2b42be7c4a6ee340bd45039ad19ad14e73b53cc92a498cdca5d0a8a5746a693f39d4a6258079d764dd65b6c8ad497cbfcf0ae8a79a86d43f4", 0x76}, {&(0x7f0000000d00)="a542f549c362d44349c9138294e92d534d3088eb03a3b6d1b02a98d59090537511139d1a8293ae76b8da6f2b866b610390a6337e419ef337555fd79750b4ba0acfb9ef5ca99c22", 0x47}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x128}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000f40)={0x34c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0xff}}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x2eb, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x48}}, @random_vendor={0xdd, 0x4c, "aa2f196af27a4f71a5d618091a15d4962a23ae92fe0bdc950b97ac64d950826d65f2566e0fadf699699234665b9b672f942737729b87ad6e60914e0a9260aae0fe409c66600b02543cd1166f"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x1, @device_a, 0x96, @value, 0x4, 0x1, @broadcast, 0xd3e4}}, @random={0x1, 0xe6, "a904ea367ff0bd3bf80dacfc0f6a231f094a4e35ba666df7f9bd736f4827f0b6d69b132bfcd9af21fa8e9fac72d1035e971fbf4997c056fc653b1cd137fa57a84afe525cd98574670f05589d81f598086a9737e7d2cb7d76160d0be01553672368348557f2d7af5ddd320a9de6280908e947f974f7e8c803b5b0ceb7ee5689ce0bbfa12c751a5e735bf16a4ac415488c4a565d85b40b7fbf364fc20a4977235498e105669d124ca0d30ffdc975e549597a5a0742cb3f40f44ff73e176566294f74881e8a9221e970a865ecd38c0b94a9443090ea2bbdd62085d362f1c81ec082087c0f81f53c"}, @challenge={0x10, 0x1, 0x1d}, @fast_bss_trans={0x37, 0xd8, {0xe, 0x6, "6202b1cb61932e3820cf69f477fa3070", "afc9c8dba3493c65d94575f324e2e69546201c02867f43f143a061245152d195", "1b83092d2bf71bf37c07ea247f13469301874bc2108849aaf591b936e5fe101c", [{0x2, 0xe, "5820ffd9b5593234cad4219daa44"}, {0x2, 0xd, "f64ad9d32bd329c1337206ceaf"}, {0x2, 0x8, "19e43cacac3ed3ae"}, {0x2, 0x17, "8d5b3a854baee05076fe97d743fd6ee6317e76e0f0d176"}, {0x4, 0x25, "fcb8d866c8d3791cd349f096d88e6a5111657025904bc14c5d49b84db6b9d817edaf6b5217"}, {0x1, 0x1b, "2baa7bfbe3339518339fbd13f448d712a08af89f7f3fb1a6944bc0"}]}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x3, 0x0, {0xcf83, 0x1, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x5, 0x3}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x2, 0x1, @device_b, 0x200, 0x576, 0x4}}, @challenge={0x10, 0x1, 0x59}, @ssid={0x0, 0x1f, @random="ed6f2f7999cc347c04808951df9455f63c260a58645ddc91257799ef83f342"}, @preq={0x82, 0x25, {{0x1}, 0x8, 0x13, 0xab, @broadcast, 0x40, @void, 0x4, 0x8000, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @ibss={0x6, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x28, 0xc}}, @ht={0x2d, 0x1a, {0x2000, 0x2, 0x0, 0x0, {0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xb6f, 0xad}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000080) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="000500001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x500}}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000425bd70b6163267794776faf100fcdbdf251000000008003808000000cb080000082087455624f3ffffffffffffff010000000000000000000000000000dd4c92ffd80a4652cdc38035ae2455b0b741568454d8767d4bcf1eb867348398df22f3ddc07113ec8d541c6592f7f4901af49b403de224c1150d32de2d841043c01e717bacd5d5801087d4c62f56c25c7449c9b21f8789100f54e656ea2fedc6066b9d9f41c36f3e"], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) 1.058555219s ago: executing program 3 (id=5944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r1, 0x3}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x20, 0x10001, 0xce44c5ba}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x35, 0x200, 0x20, @empty, @loopback, 0x40, 0x700, 0x1800000, 0x8000}}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in=@empty, @in=@broadcast, 0x4e24, 0xb, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x4, r6, 0xee00}, {0x7, 0xde6f, 0x80, 0x3, 0x3, 0x7fffffff000000, 0xfff, 0x1df0}, {0x0, 0x7, 0x6, 0x28ef}, 0x9, 0x6e6bb1, 0x0, 0x1, 0x6, 0x3}, {{@in=@broadcast, 0x4d4, 0x47}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x2, 0x3, 0x4, 0x4, 0x6, 0x3}}, 0xe8) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}}, 0x0) 912.149201ms ago: executing program 0 (id=5945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) unshare(0x26020480) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) r2 = socket(0x1a, 0x5, 0x6c5e) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) unshare(0x26020480) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) (async) socket(0x1a, 0x5, 0x6c5e) (async) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) (async) 841.015218ms ago: executing program 2 (id=5946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002280)=ANY=[@ANYRES32=r1], 0x8) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0x3ff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) 838.387457ms ago: executing program 4 (id=5947): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000140)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1120000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x8044) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) accept4(r0, 0x0, 0x0, 0x0) (async) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x100) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r9, 0x7) listen(r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 745.13994ms ago: executing program 2 (id=5948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) socket(0x26, 0x800, 0x800) 670.709389ms ago: executing program 0 (id=5949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) unshare(0x6020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) unshare(0x22020400) close(r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1}, 0x94) 517.40634ms ago: executing program 3 (id=5950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x8, 0x7f) syz_emit_ethernet(0xf7, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x3, 0x8, 0xe9, 0x64, 0x0, 0xff, 0x6, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xc, [{@loopback, 0x27}, {@local, 0x8}, {@loopback, 0xb9}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}, {{0x4e20, 0x4e23, r1, r3, 0x1, 0x0, 0xb, 0x40, 0x8, 0x0, 0x8, {[@sack={0x5, 0x16, [0x8, 0x7d, 0x6, 0xb33, 0x7]}]}}, {"3d7052f553d9c0bded6093496f6b8a2ddeec9d59b364c8d89c01809d31288c769c3db50df0179b252d943c78b1c283e0c0b61be43671735f8ebb1d12a4157c4117073e36b08f5d3eda0b539629f9fb68b1490efa8114df1449fc1aa2000abf5361740aa9bc5ba3147ae7640dc328131bfcaa16f1b3a5b7fdacd37769d6"}}}}}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100eb0000000000ffee0c00006e123d9e002c0067ff02000000000000000000000b04000000001e5fe15efaea4fe9d77e66affcac263eeb969319d467dd1fb5e49bb9edf8cd6f8f8975551d0280bf6cfbcc18ba099030529539ca01dfca422d86dfe19c7146938f70ebba5f959922edd0b010a8109af80e295b18df"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller0\x00'}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) 517.139109ms ago: executing program 0 (id=5951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) 516.305772ms ago: executing program 4 (id=5952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400108000000000000000000002f3d807e89b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0040000000"], 0x3c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 451.735339ms ago: executing program 2 (id=5953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8007ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 375.659414ms ago: executing program 0 (id=5954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000001b000000000000000000000061106a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) close(r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="110000000400000004be73d4f1808885a8000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x31, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r6, @ANYBLOB="00000000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500009e8a2566922c9e24f9ad0001f5fffffffa1b0c8fc25833b4b03193981198137fd2ba5757536f97f1cbe21583a8cb1b6ea0a0a405a3a1ac0fa48009"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ffe46ac}, 0x94) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000003c0)=0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'ip6_vti0\x00', @remote}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="0d3248da0259fb49c49677ca5350755faf648c5a2fa5c862db0ae6df3ef493d27b11763f5e7ec46f809ba1e2e9a06694c886ad33c933aa8ab4f6290ee81e0f30", 0x40}, {&(0x7f0000000540)="056a6cb2ab137d5ececd93b0a9e73cf4559659c42f45371b35556f1390d4783d64d3e7071eead319cb0e2e4da267a70ea4a74ed4", 0x34}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r13, @ANYBLOB="039a7600000000"], 0xb) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r13, 0x793, 0x7}, 0xc) 260.463538ms ago: executing program 2 (id=5955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000540)=[{&(0x7f0000000580)='-', 0x1}], 0x1, 0x1) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg(r8, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r6, 0x0, r7, 0x0, 0xfffd, 0xa) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xd0, &(0x7f0000000400)=""/208, 0x40f00, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x0, 0x7}, {0x3, 0x5, 0xf29, 0x2}, {0x2, 0x5, 0x4, 0x3}, {0x3, 0x2, 0x5, 0x7}], 0x10, 0xcec}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r1, 0x101, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4100}, 0x200080d4) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r11, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x44084) 260.036667ms ago: executing program 0 (id=5956): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)="750c3c8eb7c4f3486237980f31e263f4178bf70590b2c05f0c9f752575fa0cd779bbe04d2c8b363c70c990e9032f8143fae0fbdc169fddc500bed3cd7ec0a289332f28f5ec8e07aa177a2cb9c1557a209a74cea23f1df69431d0d2bfc714506ef423a82f7b54227a5f253410ea2a172376cf92be4c737d775c05c265a27ab1005f5878fa4e7d3d3b263ba7012d87a5d33df3c12d5629931b9712cd08f63fc8a30b48c20e2e464c0b994d53a00fc481276c32b602730d7f0765c1a01796ce3192e27a34", 0xc3}, {&(0x7f0000000340)="11788546001298f859de5be4d1af7530a727721ee16b956daf9edadcb53bd8f9dde9cefd17a31e805f5b7bcc5e14edbdebf262f15f524c3bb169fd87311ef430bf877b5ac7eb19115a423218b0debae103fa35801850d6c23b197f12a96baf5cdad4c3cbeff13ab04e717853246207571a43147ed883db05f31bee4385", 0x7d}, {&(0x7f00000003c0)="28197b1c66558df4f0e21fd4fc67246ea40604c10edb78594bc73c4a42305f3df4d7ee9682863b3953fdf3686266d252a7b1fe28f9e5ceaac5e01d9634958799c98f40c365aea5bdc4d83d8c5c72347b5510f20f16d0ea", 0x57}, {&(0x7f0000000440)="8522658cd5fa3412b2b309e5ed05303ff87a3171dec72653b6c1c84120ac77f29de940c788", 0x25}, {&(0x7f0000000480)="fe554c246d496bfcc44456471ae654d7c2517cd7811b0135cdb5a96d10a7c153adb8748190", 0x25}, {&(0x7f00000004c0)="737f1f9f27488ed59b0ae908af8ae608fbd846eff7ee0f44e839f3734531e55975b69825345c9ee4c2947af4fd7ff9758a21cfd83062ffe22d5acfcef85a131943ad256f4edc881b9ea1aa", 0x4b}, {&(0x7f0000000540)="9fa836605e6ee2dfd6c3318e653d85bfcba48543ecf541d6bad16786873df4a3b865ef5c63b42c17b7063d9cd13fbddc4e6353334fd2e31f9c007764bbf7814810ccb8d3b68ff1098f187b8e11fc1550edc0c118724b34645fc94d1490e36e4747f808658249013b266c8a1ec9d7266546089a53c4a4a9cb8f65e28573d1fa3e732463a1aaadc600418579ead1b36c37cfeec22fa78d3b0648ab2bc1baef9e1e49ca543c3fa4c558227a136a52a95f27ee3e288ee30096a4c358657bc16ac1583e7994368e4de673532723efabf8cc31b2523bb2dabafc76f5740589508a4176c3c7d3a9069aa245", 0xe8}], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 189.690407ms ago: executing program 3 (id=5957): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) getpid() r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0xffffffffffffffe9, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000"], 0x74}}, 0x0) 91.342457ms ago: executing program 2 (id=5958): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) recvmsg$can_raw(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) 0s ago: executing program 0 (id=5959): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf2a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xafe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x4c}}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "53b5dbf5889bd8194b205d40bde13e12acd5d272ab52f3fe8cc0abe24480f636ba2df752058265f195262cfcc62001a9a5d3a818336efce872d82a2ac5"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x300}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @default}, [@default, @default, @default, @default, @null, @rose, @bcast, @bcast]}, &(0x7f00000005c0)=0x48, 0x80800) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000600)={0x0, @null, @bpq0, 0x8001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd1e, 0x4, [@default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null]}) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0xc804) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000880)={r9, 0xfff9, 0x1}, 0x8) (async) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1b0, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x95) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000b40)={r3}) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r2) sendmsg$SMC_PNETID_ADD(r10, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20048085) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x22, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000080}, 0x0) (async) accept4$bt_l2cap(r8, &(0x7f0000000e00)={0x1f, 0x0, @fixed}, &(0x7f0000000e40)=0xe, 0x80800) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff5, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x44800) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), r10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r8, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000010c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x62, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x7ff, 0x7fffffff, {{0x28, 0x4, 0x1, 0x30, 0xa0, 0x68, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1b, 0x92, [@private=0xa010100, @broadcast, @remote, @private=0xa010100, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x1, [{0x1, 0xb, "d436f16430086b00ca"}, {0x7, 0x11, "68f9631992d48d7a4f7f9e323e9901"}, {0x0, 0x11, "58316974a10a72dff85acf79cd37a4"}, {0x7, 0x3, "9e"}, {0x5, 0xf, "89453b3e01f7c23669ac867eae"}, {0x6, 0x11, "a92cbd9a1534c263ba8d5bb1666920"}, {0x7, 0x7, "77cb50e902"}, {0x5, 0x12, "ad556ee136bf0fba5dae0851107f6ae4"}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f00000014c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x48, r13, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_LINK={0x8, 0x1, r15}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x40015) (async) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) kernel console output (not intermixed with test programs): 20787] veth1: entered allmulticast mode [ 409.761257][T20787] wg0: entered allmulticast mode [ 409.777639][T20787] wg1: entered allmulticast mode [ 409.789136][T20787] wg2: entered allmulticast mode [ 409.797043][T20787] veth0_to_bridge: entered allmulticast mode [ 409.810998][T20787] veth1_to_bridge: entered allmulticast mode [ 409.826958][T20787] veth0_to_bond: entered allmulticast mode [ 409.837765][T20787] veth1_to_bond: entered allmulticast mode [ 409.855231][T20787] veth0_to_team: entered allmulticast mode [ 409.875334][T20787] veth1_to_team: entered allmulticast mode [ 409.887949][T20787] veth0_to_batadv: entered allmulticast mode [ 409.897333][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.905939][T20787] batadv_slave_0: entered allmulticast mode [ 409.917147][T20787] veth1_to_batadv: entered allmulticast mode [ 409.926829][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.937138][T20787] batadv_slave_1: entered allmulticast mode [ 409.946702][T20787] xfrm0: entered allmulticast mode [ 409.956453][T20787] veth0_to_hsr: entered allmulticast mode [ 409.966129][T20787] hsr_slave_0: entered allmulticast mode [ 409.975367][T20787] veth1_to_hsr: entered allmulticast mode [ 409.984430][T20787] hsr_slave_1: entered allmulticast mode [ 409.997983][T20787] veth1_virt_wifi: entered allmulticast mode [ 410.007898][T20787] veth0_virt_wifi: entered allmulticast mode [ 410.019283][T20787] virt_wifi0: entered allmulticast mode [ 410.029834][T20787] veth0_vlan: entered allmulticast mode [ 410.047309][T20787] vlan0: entered allmulticast mode [ 410.053483][T20787] vlan1: entered allmulticast mode [ 410.058959][T20787] macvlan0: entered allmulticast mode [ 410.067966][T20787] macvlan1: left promiscuous mode [ 410.077446][T20787] ipvlan0: entered allmulticast mode [ 410.086862][T20787] ipvlan1: entered allmulticast mode [ 410.099749][T20787] veth1_macvtap: entered allmulticast mode [ 410.110006][T20787] veth0_macvtap: entered allmulticast mode [ 410.124214][T20787] macvtap0: entered allmulticast mode [ 410.132815][T20787] macsec0: entered allmulticast mode [ 410.140951][T20787] geneve0: entered allmulticast mode [ 410.150514][T20787] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 410.162728][T20787] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 410.177712][T20787] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 410.187758][T20787] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 410.205217][T20787] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 410.224343][T20787] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 410.235081][T20787] syztnl0: entered allmulticast mode [ 410.240531][T20787] macvlan2: entered allmulticast mode [ 410.249677][T20787] vxlan0: entered allmulticast mode [ 410.257311][T20787] gtp0: entered allmulticast mode [ 410.263472][T20787] bond1: left promiscuous mode [ 410.268355][T20787] bond1: entered allmulticast mode [ 410.274262][T20787] gtp1: entered allmulticast mode [ 410.281929][T20787] ip6erspan0: entered allmulticast mode [ 410.289911][T20787] gretap1: left promiscuous mode [ 410.291010][T20822] netlink: 'syz.0.4048': attribute type 39 has an invalid length. [ 410.295680][T20787] gretap1: entered allmulticast mode [ 410.295818][T20787] ip6tnl1: entered allmulticast mode [ 410.316609][T20787] bond2: left promiscuous mode [ 410.323508][T20787] mac80211_hwsim hwsim35 t: entered allmulticast mode [ 410.330903][T20787] bridge1: entered allmulticast mode [ 410.339458][T20787] macsec1: entered allmulticast mode [ 410.345252][T20787] bond3: entered allmulticast mode [ 410.351125][T20787] bond4: left promiscuous mode [ 410.356799][T20787] ip6gre1: left promiscuous mode [ 410.361981][T20787] bond4: entered allmulticast mode [ 410.367120][T20787] ip6gre1: entered allmulticast mode [ 410.374547][T20787] bond5: entered allmulticast mode [ 410.476039][ T7515] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.485489][ T7515] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.496680][ T7515] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.516632][ T7515] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.591005][ T7515] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.630110][ T7515] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.658692][ T7515] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.695136][ T7515] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.935617][T20832] syzkaller0: entered promiscuous mode [ 410.941297][T20832] syzkaller0: entered allmulticast mode [ 411.131933][T20877] netlink: 'syz.4.4058': attribute type 1 has an invalid length. [ 411.151228][T20875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4060'. [ 411.437185][T20893] openvswitch: netlink: Key type 30 is not supported [ 411.532975][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 413.465910][T20877] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 413.579416][T20958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4065'. [ 413.619469][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 413.629259][T20958] netlink: 'syz.3.4065': attribute type 1 has an invalid length. [ 413.637561][T20958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.682714][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'. [ 413.735866][T20965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.779889][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4066'. [ 413.836205][T20976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4071'. [ 413.873563][T20985] netlink: 'syz.1.4073': attribute type 3 has an invalid length. [ 413.910664][T20986] syzkaller0: entered promiscuous mode [ 413.951029][T20986] syzkaller0: entered allmulticast mode [ 413.980956][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 414.043219][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'. [ 414.208995][T20996] syzkaller0: entered promiscuous mode [ 414.236943][T20996] syzkaller0: entered allmulticast mode [ 416.233896][T21051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4092'. [ 416.408825][T21058] syzkaller0: entered promiscuous mode [ 416.431667][T21058] syzkaller0: entered allmulticast mode [ 416.657330][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 416.795293][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'. [ 418.120315][T21084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.164744][T21084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.474493][T21123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4110'. [ 418.960339][T21157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.005381][T21157] macvtap0: left allmulticast mode [ 419.045682][T21157] bond2: left promiscuous mode [ 419.057438][T21157] bond7: left promiscuous mode [ 419.066269][T21157] bond7: left allmulticast mode [ 419.073602][ T9902] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.083782][ T9902] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.093578][ T9902] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.102882][ T9902] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.112269][ T9902] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.121283][ T9902] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.131197][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.145084][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.297652][T21112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.738673][T21184] nbd: must specify an index to disconnect [ 421.820257][T21190] tipc: Enabling of bearer rejected, failed to enable media [ 421.863500][T21195] bond6 (unregistering): Released all slaves [ 421.904103][T21199] netlink: 'syz.2.4131': attribute type 4 has an invalid length. [ 422.150370][T21217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4139'. [ 422.159666][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 422.171055][T21217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 422.192154][T21212] netlink: 'syz.3.4137': attribute type 1 has an invalid length. [ 422.201160][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 422.446519][T21237] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 422.546333][T21248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4149'. [ 422.583339][T21248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.706496][T21252] bond8: option min_links: invalid value (18446744073709551614) [ 422.716494][T21252] bond8: option min_links: allowed values 0 - 2147483647 [ 422.725671][T21252] bond8 (unregistering): Released all slaves [ 422.755307][T21256] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.818165][T21267] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4155'. [ 423.030392][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'. [ 423.037840][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 423.070535][T21283] xt_hashlimit: overflow, try lower: 3/0 [ 423.076568][T21278] netlink: 'syz.3.4161': attribute type 5 has an invalid length. [ 423.076592][T21278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4161'. [ 423.139610][T21278] geneve2: entered promiscuous mode [ 423.145630][T21278] geneve2: entered allmulticast mode [ 423.157693][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 423.252672][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 423.262104][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 423.270714][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 423.320200][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 423.387662][T21296] lo: left allmulticast mode [ 423.392584][T21296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.448077][T21300] xt_ecn: cannot match TCP bits for non-tcp packets [ 423.569071][T21302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.199362][T21340] syz.2.4183 (21340) used greatest stack depth: 17472 bytes left [ 424.423096][ T10] IPVS: starting estimator thread 0... [ 424.512181][T21369] IPVS: using max 27 ests per chain, 64800 per kthread [ 424.890222][T21378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.346672][T21426] openvswitch: netlink: IP tunnel TTL not specified. [ 426.848691][ T64] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 426.927570][ T64] erspan0 (unregistering): left allmulticast mode [ 427.005522][ T64] bond4 (unregistering): (slave geneve2): Releasing active interface [ 427.285327][ T64] bond0 (unregistering): Released all slaves [ 427.298991][ T64] bond1 (unregistering): Released all slaves [ 427.311732][ T64] bond2 (unregistering): Released all slaves [ 427.326164][ T64] bond3 (unregistering): Released all slaves [ 427.338904][ T64] bond4 (unregistering): Released all slaves [ 427.354915][ T64] bond5 (unregistering): Released all slaves [ 427.369559][ T64] bond6 (unregistering): Released all slaves [ 427.388958][ T64] bond7 (unregistering): Released all slaves [ 427.401341][ T64] bond8 (unregistering): Released all slaves [ 427.451236][T21422] __nla_validate_parse: 11 callbacks suppressed [ 427.451256][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4206'. [ 427.471866][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4206'. [ 427.481067][T21422] netlink: 'syz.3.4206': attribute type 3 has an invalid length. [ 427.593887][ T64] tipc: Disabling bearer [ 427.616755][ T64] tipc: Left network mode [ 427.638759][T21438] lo speed is unknown, defaulting to 1000 [ 427.669229][ T64] IPVS: stopping backup sync thread 6081 ... [ 427.923353][T21461] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 428.063407][ T9902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.083415][ T9902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.153611][T21467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.626148][T21480] tipc: Enabling of bearer rejected, failed to enable media [ 428.640065][T21483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4224'. [ 428.672112][T21483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4224'. [ 428.696374][T21483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4224'. [ 429.062519][T21502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4225'. [ 429.142821][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4228'. [ 429.153299][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4228'. [ 429.185141][T21506] netlink: 'syz.1.4227': attribute type 3 has an invalid length. [ 429.234332][T21506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4227'. [ 429.249166][T21506] netlink: 'syz.1.4227': attribute type 7 has an invalid length. [ 429.257068][T21506] netlink: 'syz.1.4227': attribute type 8 has an invalid length. [ 429.266055][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4227'. [ 429.365180][T21519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.378980][ T64] hsr_slave_0: left promiscuous mode [ 429.388496][ T64] hsr_slave_1: left promiscuous mode [ 429.409489][ T64] veth1_macvtap: left promiscuous mode [ 429.421867][ T64] veth0_macvtap: left promiscuous mode [ 429.434834][ T64] veth1_vlan: left promiscuous mode [ 429.448342][ T64] veth0_vlan: left promiscuous mode [ 430.179240][T21552] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 430.189836][T21554] xt_addrtype: ipv6 does not support BROADCAST matching [ 430.444180][T21573] netlink: 'syz.1.4245': attribute type 1 has an invalid length. [ 430.615952][T21582] netlink: 'syz.3.4249': attribute type 1 has an invalid length. [ 430.782772][T21596] netlink: 'syz.2.4252': attribute type 1 has an invalid length. [ 430.785204][T21588] macvlan0: entered promiscuous mode [ 430.796951][T21588] macvlan0: left allmulticast mode [ 430.807200][T21598] netlink: 'syz.2.4252': attribute type 1 has an invalid length. [ 431.001794][T21611] pim6reg1: entered promiscuous mode [ 431.022865][T21611] pim6reg1: entered allmulticast mode [ 431.119775][T21630] netlink: 'syz.4.4261': attribute type 32 has an invalid length. [ 431.222964][T21635] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.244324][T21635] bond6: (slave lo): Enslaving as an active interface with an up link [ 431.255939][T21635] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 431.347742][T21639] veth1_virt_wifi: mtu less than device minimum [ 431.529365][T21655] vcan0: entered promiscuous mode [ 431.535538][T21655] vcan0: entered allmulticast mode [ 433.133634][ T1968] block nbd0: Connection timed out, retrying (0/2 alive) [ 433.141089][ T1968] block nbd0: Connection timed out, retrying (0/2 alive) [ 433.149350][T19552] block nbd0: Dead connection, failed to find a fallback [ 433.156892][T19552] block nbd0: shutting down sockets [ 433.163999][ T1968] block nbd0: Connection timed out, retrying (0/2 alive) [ 433.171162][ T1968] block nbd0: Connection timed out, retrying (0/2 alive) [ 433.178304][T19552] blk_print_req_error: 54 callbacks suppressed [ 433.178321][T19552] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.195562][T19552] buffer_io_error: 54 callbacks suppressed [ 433.195574][T19552] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.209186][T19552] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.218957][T19552] Buffer I/O error on dev nbd0, logical block 3, async page read [ 433.227597][T19552] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.237239][T19552] Buffer I/O error on dev nbd0, logical block 2, async page read [ 433.245116][T19552] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.255178][T19552] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.263599][T15266] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.273219][T15266] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.281000][T15266] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.290991][T15266] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.298954][T15266] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.308564][T15266] Buffer I/O error on dev nbd0, logical block 2, async page read [ 433.317007][T15266] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.326567][T15266] Buffer I/O error on dev nbd0, logical block 3, async page read [ 433.334629][T15266] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.344606][T15266] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.352510][T15266] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.362362][T15266] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.370455][T15266] ldm_validate_partition_table(): Disk read failed. [ 433.377945][T15266] Dev nbd0: unable to read RDB block 0 [ 433.383899][T15266] nbd0: unable to read partition table [ 433.392164][T15266] ldm_validate_partition_table(): Disk read failed. [ 433.399009][T15266] Dev nbd0: unable to read RDB block 0 [ 433.405330][T15266] nbd0: unable to read partition table [ 433.417355][T15266] ldm_validate_partition_table(): Disk read failed. [ 433.424393][T15266] Dev nbd0: unable to read RDB block 0 [ 433.430195][T15266] nbd0: unable to read partition table [ 433.438687][T15266] ldm_validate_partition_table(): Disk read failed. [ 433.445915][T15266] Dev nbd0: unable to read RDB block 0 [ 433.452243][T15266] nbd0: unable to read partition table [ 433.859482][T21601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.022403][T21679] __nla_validate_parse: 17 callbacks suppressed [ 434.022427][T21679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4274'. [ 434.084574][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4275'. [ 434.124490][T21679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4274'. [ 434.268481][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 434.284477][T21695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'. [ 434.321672][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 434.416490][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4283'. [ 434.475278][T21704] ipvlan2: entered allmulticast mode [ 434.509764][T21707] netlink: 'syz.3.4283': attribute type 12 has an invalid length. [ 434.536458][T21707] netlink: 'syz.3.4283': attribute type 29 has an invalid length. [ 434.584585][T21707] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4283'. [ 434.604681][T21707] netlink: 'syz.3.4283': attribute type 2 has an invalid length. [ 434.623273][T21707] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4283'. [ 434.888308][T21725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4289'. [ 435.056766][T21735] netlink: 'syz.1.4292': attribute type 1 has an invalid length. [ 435.302185][T21748] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 435.327133][T21748] bond6: (slave lo): Enslaving as an active interface with an up link [ 435.352475][T21748] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 435.375112][T21751] bond6: (slave lo): Releasing backup interface [ 435.453101][T21751] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 435.505359][T21751] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 435.519839][T21751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.616756][T21770] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 435.635029][T21770] bond6 (unregistering): Released all slaves [ 435.702634][T21779] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 435.715817][T21779] bond6 (unregistering): Released all slaves [ 435.833663][T21793] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 435.902531][T21799] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 435.913409][T21799] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 435.931587][T21799] bond6: (slave ip6gre1): making interface the new active one [ 435.942165][T21799] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 436.119806][ T29] hid (null): global environment stack underflow [ 436.133027][ T29] hid-generic 0005:10CF:0004.0003: global environment stack underflow [ 436.150196][ T29] hid-generic 0005:10CF:0004.0003: item 0 0 1 11 parsing failed [ 436.203856][ T29] hid-generic 0005:10CF:0004.0003: probe with driver hid-generic failed with error -22 [ 438.930167][T21801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.264587][T21886] netlink: 'syz.0.4335': attribute type 9 has an invalid length. [ 439.334781][T21892] netlink: 'syz.2.4337': attribute type 1 has an invalid length. [ 439.387525][T21894] __nla_validate_parse: 10 callbacks suppressed [ 439.387554][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 439.464394][T21894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.620661][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4345'. [ 440.143126][T21913] infiniband syz1: set down [ 440.147998][T21913] infiniband syz1: added team_slave_1 [ 440.177109][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.256660][T21913] RDS/IB: syz1: added [ 440.260751][T21913] smc: adding ib device syz1 with port count 1 [ 440.282156][T21913] smc: ib device syz1 port 1 has no pnetid [ 440.320483][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 440.350479][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4351'. [ 440.450761][T21946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4352'. [ 440.454775][T21947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4352'. [ 440.470923][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 440.483332][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 440.485081][T21945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.499007][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4351'. [ 440.863700][T21963] netlink: 'syz.2.4358': attribute type 1 has an invalid length. [ 440.872315][T21963] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4358'. [ 441.058731][T21975] syzkaller1: entered promiscuous mode [ 441.071061][T21975] syzkaller1: entered allmulticast mode [ 441.095550][T21975] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.103859][T21975] team0: Cannot enslave team device to itself [ 441.350767][T21992] lo speed is unknown, defaulting to 1000 [ 441.675860][T22018] netdevsim netdevsim0 : renamed from netdevsim0 [ 442.717956][T22066] team_slave_1: left allmulticast mode [ 442.842789][T22077] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.146843][T22091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.485695][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.503472][T22110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.562047][T22112] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 443.570849][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.582852][T22112] netlink: 'syz.1.4401': attribute type 2 has an invalid length. [ 443.590625][T22112] netlink: 'syz.1.4401': attribute type 2 has an invalid length. [ 443.591084][T22110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.639616][T22112] netlink: 'syz.1.4401': attribute type 2 has an invalid length. [ 443.648529][T22116] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 443.667902][T22122] wireguard0: entered promiscuous mode [ 443.679348][T22122] wireguard0: entered allmulticast mode [ 443.704572][T22122] team0: Device wireguard0 is of different type [ 444.033597][T22155] openvswitch: netlink: Message has 106 unknown bytes. [ 444.062051][T22155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.174061][T22161] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.226391][T22165] sctp: [Deprecated]: syz.1.4417 (pid 22165) Use of int in maxseg socket option. [ 444.226391][T22165] Use struct sctp_assoc_value instead [ 444.265918][T22165] openvswitch: netlink: Unknown nsh attribute 0 [ 444.284846][T22165] veth0: entered promiscuous mode [ 444.304770][T22165] veth0 (unregistering): left promiscuous mode [ 444.429216][T22173] __nla_validate_parse: 22 callbacks suppressed [ 444.429236][T22173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4416'. [ 444.453180][T22177] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4419'. [ 444.517858][T22173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.567924][T22173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.605630][T22173] bond0 (unregistering): Released all slaves [ 445.034732][T22201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4424'. [ 445.103355][T22204] netlink: 'syz.3.4426': attribute type 11 has an invalid length. [ 445.111331][T22204] netlink: 'syz.3.4426': attribute type 11 has an invalid length. [ 445.129524][T22204] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4426'. [ 445.456032][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4425'. [ 446.808558][T22202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.828137][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4429'. [ 446.884431][T22205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.926357][T22228] geneve3: entered promiscuous mode [ 447.216133][T22251] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 447.269544][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 447.512775][T22278] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4443'. [ 447.645684][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4448'. [ 448.609876][T22326] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4456'. [ 450.564140][T22284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.717887][T22347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4462'. [ 450.753698][T22348] tipc: Started in network mode [ 450.758781][T22348] tipc: Node identity 401, cluster identity 4711 [ 450.765371][T22348] tipc: Node number set to 1025 [ 450.887955][T22367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4468'. [ 453.636997][T22343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.793564][T22387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4473'. [ 453.870914][T22395] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4475'. [ 454.031213][T22404] xt_TCPMSS: Only works on TCP SYN packets [ 454.200068][T22414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 454.275939][T22416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4482'. [ 454.341196][T22415] s5˙˙ř: renamed from vlan1 [ 454.360617][T22416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4482'. [ 454.556877][T22432] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.589868][T22435] tipc: Failed to obtain node identity [ 454.606734][T22435] tipc: Enabling of bearer rejected, failed to enable media [ 454.828092][T22445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4489'. [ 454.860472][T22445] bond0: ARP target 8.4.0.0 is already present [ 454.872061][T22445] bond0: option arp_ip_target: invalid value (1032) [ 454.982669][T22452] bond7: option resend_igmp: invalid value (32767) [ 455.001308][T22452] bond7: option resend_igmp: allowed values 0 - 255 [ 455.028288][T22452] bond7 (unregistering): Released all slaves [ 455.687496][T22488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4499'. [ 455.709195][T22489] sctp: [Deprecated]: syz.4.4500 (pid 22489) Use of int in max_burst socket option deprecated. [ 455.709195][T22489] Use struct sctp_assoc_value instead [ 455.837656][T22486] netlink: 'syz.0.4498': attribute type 1 has an invalid length. [ 455.908219][T22486] bond8: entered promiscuous mode [ 455.914096][T22486] bond8: entered allmulticast mode [ 455.919808][T22486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 456.597003][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4501'. [ 457.168765][T22506] netlink: set zone limit has 4 unknown bytes [ 457.310523][T22514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4506'. [ 457.345849][T22515] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 457.351552][T22519] sctp: [Deprecated]: syz.4.4505 (pid 22519) Use of int in maxseg socket option. [ 457.351552][T22519] Use struct sctp_assoc_value instead [ 457.396575][T22515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4505'. [ 457.521639][T22515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4505'. [ 457.908583][T22544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 458.042346][T22554] netlink: 'syz.4.4513': attribute type 3 has an invalid length. [ 458.050323][T22554] netlink: 'syz.4.4513': attribute type 3 has an invalid length. [ 458.081237][T22552] tipc: Started in network mode [ 458.090805][T22552] tipc: Node identity da80261955e7, cluster identity 4711 [ 458.101118][T22552] tipc: Enabled bearer , priority 0 [ 458.197149][T22552] syzkaller0: entered promiscuous mode [ 458.204924][T22552] syzkaller0: entered allmulticast mode [ 458.205497][T22556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4514'. [ 458.211241][T22552] tipc: Resetting bearer [ 458.233442][T22551] tipc: Resetting bearer [ 459.966618][T22551] tipc: Disabling bearer [ 459.975830][T22571] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.4517'. [ 459.985834][T22572] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.4517'. [ 459.995996][ T9] tipc: Node number set to 2405901849 [ 461.378901][T22563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.513486][T22601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4525'. [ 461.542473][T22601] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4525'. [ 461.550156][T22605] h: entered promiscuous mode [ 461.586794][T22605] netlink: 'syz.3.4527': attribute type 9 has an invalid length. [ 461.803995][T22616] syzkaller0: entered promiscuous mode [ 461.809526][T22616] syzkaller0: entered allmulticast mode [ 463.414501][T22640] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 463.785450][T22668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4547'. [ 464.286726][T22702] bond7 (unregistering): Released all slaves [ 464.334207][T22713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4561'. [ 464.344961][T22713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4561'. [ 464.570709][T22729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4566'. [ 464.750096][T22740] bridge2: entered promiscuous mode [ 464.766053][T22749] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4572'. [ 464.782064][T22740] bridge2: entered allmulticast mode [ 464.822614][T22748] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 464.921093][T22761] netlink: 'syz.2.4571': attribute type 1 has an invalid length. [ 464.967642][T22759] syzkaller0: entered promiscuous mode [ 464.974333][T22759] syzkaller0: entered allmulticast mode [ 464.983538][T22768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4577'. [ 464.991115][T22759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4574'. [ 465.317403][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'. [ 465.660509][T22818] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4588'. [ 465.690280][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4591'. [ 465.743787][T22826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.801015][T22827] pim6reg1: entered promiscuous mode [ 465.833125][T22827] pim6reg1: entered allmulticast mode [ 466.238536][T22878] sctp: [Deprecated]: syz.4.4605 (pid 22878) Use of int in maxseg socket option. [ 466.238536][T22878] Use struct sctp_assoc_value instead [ 466.269984][T22880] syzkaller1: entered promiscuous mode [ 466.278022][T22880] syzkaller1: entered allmulticast mode [ 466.315224][T22880] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 466.528876][T22895] openvswitch: netlink: IP tunnel TTL not specified. [ 466.901630][T22919] netlink: 'syz.1.4619': attribute type 1 has an invalid length. [ 466.967588][T22919] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 466.975181][T22924] syzkaller1: entered promiscuous mode [ 466.989297][T22924] syzkaller1: entered allmulticast mode [ 467.184123][T22937] IPv6: sit4: Disabled Multicast RS [ 467.307355][T22951] x_tables: duplicate underflow at hook 2 [ 467.560684][T22947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.620825][T22968] netlink: 'syz.4.4634': attribute type 6 has an invalid length. [ 468.058090][T22995] xt_limit: Overflow, try lower: 271964/0 [ 468.146509][T22999] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 468.260397][T23001] tipc: Enabling of bearer rejected, failed to enable media [ 468.300747][T23012] sctp: [Deprecated]: syz.3.4648 (pid 23012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.300747][T23012] Use struct sctp_sack_info instead [ 468.391766][T23015] netlink: 'syz.1.4650': attribute type 4 has an invalid length. [ 468.644867][T23039] netlink: Unknown conntrack attr (0) [ 468.793003][T23048] sit0: entered promiscuous mode [ 468.813863][T23052] __nla_validate_parse: 11 callbacks suppressed [ 468.813884][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'. [ 468.832962][T23048] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 468.859131][T23048] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4658'. [ 468.861585][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 468.880026][T23055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4661'. [ 468.912114][ T5826] Bluetooth: hci0: command 0x041b tx timeout [ 468.923316][T23052] sock: sock_set_timeout: `syz.2.4660' (pid 23052) tries to set negative timeout [ 468.959228][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 468.985286][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4660'. [ 469.069927][T23066] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4663'. [ 469.107184][T23066] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 469.156458][T23071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4664'. [ 469.365756][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 469.563879][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4670'. [ 469.632826][T23099] macsec0: entered promiscuous mode [ 469.639392][T23099] macsec0: left promiscuous mode [ 469.651723][T23099] macsec0: left allmulticast mode [ 469.767357][T23114] netlink: 'syz.2.4675': attribute type 5 has an invalid length. [ 469.807390][T23114] netlink: 'syz.2.4675': attribute type 6 has an invalid length. [ 469.922066][T23126] openvswitch: netlink: Message has 1 unknown bytes. [ 469.928836][T23126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.940675][T23120] tunl0: left allmulticast mode [ 469.946781][T23120] gre0: left allmulticast mode [ 469.952174][T23120] gretap0: left allmulticast mode [ 469.963104][T23120] erspan0: left allmulticast mode [ 469.973991][T23120] ip_vti0: left allmulticast mode [ 469.982079][T23120] ip6_vti0: left allmulticast mode [ 469.987746][T23120] sit0: left allmulticast mode [ 469.997285][T23120] ip6tnl0: left allmulticast mode [ 470.003543][T23120] ip6gre0: left allmulticast mode [ 470.008747][T23120] syz_tun: left allmulticast mode [ 470.017166][T23120] ip6gretap0: left allmulticast mode [ 470.023706][T23120] bridge0: left allmulticast mode [ 470.029039][T23120] vcan0: left allmulticast mode [ 470.039767][T23120] bond0: left allmulticast mode [ 470.051073][T23120] dummy0: left allmulticast mode [ 470.072518][T23120] nlmon0: left allmulticast mode [ 470.079052][T23120] caif0: left allmulticast mode [ 470.104327][T23120] vxcan0: left allmulticast mode [ 470.114050][T23120] vxcan1: left allmulticast mode [ 470.119275][T23120] wg0: left allmulticast mode [ 470.130709][T23120] wg1: left allmulticast mode [ 470.136024][T23120] wg2: left allmulticast mode [ 470.140993][T23120] veth0_to_bridge: left allmulticast mode [ 470.148104][T23120] ľx9˙: left allmulticast mode [ 470.153667][T23120] veth1_to_bridge: left allmulticast mode [ 470.159802][T23120] veth0_to_bond: left allmulticast mode [ 470.166144][T23120] bond_slave_0: left allmulticast mode [ 470.172898][T23120] veth1_to_bond: left allmulticast mode [ 470.178939][T23120] bond_slave_1: left allmulticast mode [ 470.185104][T23120] veth0_to_team: left allmulticast mode [ 470.190949][T23120] team_slave_0: left allmulticast mode [ 470.196970][T23120] veth1_to_team: left allmulticast mode [ 470.203723][T23120] veth0_to_batadv: left allmulticast mode [ 470.209643][T23120] batadv_slave_0: left allmulticast mode [ 470.215902][T23120] veth1_to_batadv: left allmulticast mode [ 470.222522][T23120] xfrm0: left allmulticast mode [ 470.228125][T23120] veth0_to_hsr: left allmulticast mode [ 470.234733][T23120] veth1_to_hsr: left allmulticast mode [ 470.240644][T23120] hsr0: left allmulticast mode [ 470.246060][T23120] hsr_slave_0: left allmulticast mode [ 470.252135][T23120] hsr_slave_1: left allmulticast mode [ 470.257694][T23120] veth1_virt_wifi: left allmulticast mode [ 470.264781][T23120] veth0_virt_wifi: left allmulticast mode [ 470.271028][T23120] virt_wifi0: left allmulticast mode [ 470.277121][T23120] veth1_vlan: left allmulticast mode [ 470.282965][T23120] vlan0: left allmulticast mode [ 470.288219][T23120] vlan1: left allmulticast mode [ 470.294291][T23120] macvlan0: left allmulticast mode [ 470.299837][T23120] macvlan1: left allmulticast mode [ 470.305328][T23120] ipvlan0: left allmulticast mode [ 470.310611][T23120] ipvlan1: left allmulticast mode [ 470.315805][T23120] veth0_vlan: left allmulticast mode [ 470.327453][T23120] veth1_macvtap: left allmulticast mode [ 470.333411][T23120] veth0_macvtap: left allmulticast mode [ 470.339276][T23120] macvtap0: left allmulticast mode [ 470.346884][T23120] geneve0: left allmulticast mode [ 470.352610][T23120] geneve1: left allmulticast mode [ 470.357878][T23120] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 470.365149][T23120] mac80211_hwsim hwsim42 wlan1: left allmulticast mode [ 470.372547][T23120] ip6erspan0: left allmulticast mode [ 470.378208][T23120] sit1: left allmulticast mode [ 470.383907][T23120] ipvlan2: left allmulticast mode [ 470.388949][T23120] batadv_slave_1: left allmulticast mode [ 470.395505][T23120] bond4: left promiscuous mode [ 470.401491][T23120] bridge2: left promiscuous mode [ 470.406657][T23120] bridge2: left allmulticast mode [ 470.472554][T23148] lo speed is unknown, defaulting to 1000 [ 471.043302][T23180] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 471.115943][T23180] bond7: entered promiscuous mode [ 471.125770][T23180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.215312][T23173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.232230][T23173] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 471.247539][T23173] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 471.263457][T23173] bond7: (slave ip6gre2): making interface the new active one [ 471.271194][T23173] ip6gre2: entered promiscuous mode [ 471.278946][T23173] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 471.310071][T23180] bond8: option mode: invalid value (133) [ 471.322995][T23180] bond8 (unregistering): Released all slaves [ 471.370908][T23194] syzkaller0: entered promiscuous mode [ 471.378560][T23194] syzkaller0: entered allmulticast mode [ 471.656776][T23212] netlink: 'syz.4.4706': attribute type 1 has an invalid length. [ 471.785657][T23218] block nbd5: Unsupported socket: should be TCP or UNIX. [ 471.907447][T23227] netlink: 'syz.3.4712': attribute type 1 has an invalid length. [ 471.935024][T23228] syzkaller0: entered promiscuous mode [ 471.951622][T23228] syzkaller0: entered allmulticast mode [ 472.022773][T23223] lo speed is unknown, defaulting to 1000 [ 472.037360][T23231] netlink: 'syz.4.4713': attribute type 9 has an invalid length. [ 472.078364][T23234] netlink: 'syz.3.4714': attribute type 1 has an invalid length. [ 472.204538][T23236] bond8: (slave gretap2): making interface the new active one [ 472.222655][T23236] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 472.457468][T23247] tipc: Resetting bearer [ 472.735612][T23267] netlink: 'syz.2.4725': attribute type 22 has an invalid length. [ 472.780015][T23267] netlink: 'syz.2.4725': attribute type 22 has an invalid length. [ 473.267765][T23300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.275102][T23300] IPv6: NLM_F_CREATE should be set when creating new route [ 473.285038][T23300] lo: entered allmulticast mode [ 473.298177][T23300] tunl0: entered allmulticast mode [ 473.304194][T23300] gre0: entered allmulticast mode [ 473.322672][T23300] gretap0: entered allmulticast mode [ 473.340400][T23300] erspan0: left promiscuous mode [ 473.357689][T23300] ip_vti0: entered allmulticast mode [ 473.366617][T23300] ip6_vti0: entered allmulticast mode [ 473.377323][T23300] sit0: entered allmulticast mode [ 473.402026][T23300] ip6tnl0: entered allmulticast mode [ 473.413818][T23300] ip6gre0: entered allmulticast mode [ 473.424484][T23300] syz_tun: entered allmulticast mode [ 473.439536][T23300] ip6gretap0: entered allmulticast mode [ 473.453800][T23300] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.462867][T23300] bridge0: entered allmulticast mode [ 473.486001][T23300] team0: entered allmulticast mode [ 473.491731][T23300] team_slave_0: entered allmulticast mode [ 473.497723][T23300] team_slave_1: entered allmulticast mode [ 473.511971][T23300] nlmon0: entered allmulticast mode [ 473.520333][T23300] caif0: entered allmulticast mode [ 473.526542][T23300] vxcan0: entered allmulticast mode [ 473.542187][T23300] –: entered allmulticast mode [ 473.572727][T23300] veth0: entered allmulticast mode [ 473.590134][T23300] veth1: entered allmulticast mode [ 473.604783][T23300] wg0: entered allmulticast mode [ 473.624966][T23300] wg1: entered allmulticast mode [ 473.642957][T23300] wg2: entered allmulticast mode [ 473.657002][T23300] veth0_to_bridge: entered allmulticast mode [ 473.682084][T23300] veth1_to_bridge: entered allmulticast mode [ 473.698637][T23300] veth0_to_bond: entered allmulticast mode [ 473.714287][T23300] bond_slave_0: entered allmulticast mode [ 473.727661][T23300] veth1_to_bond: entered allmulticast mode [ 473.736576][T23300] bond_slave_1: entered allmulticast mode [ 473.751040][T23300] veth0_to_team: entered allmulticast mode [ 473.765632][T23300] veth1_to_team: entered allmulticast mode [ 473.793056][T23300] veth0_to_batadv: entered allmulticast mode [ 473.821568][T23300] batadv_slave_0: entered allmulticast mode [ 473.837175][T23300] veth1_to_batadv: entered allmulticast mode [ 473.853385][T23300] batadv_slave_1: entered allmulticast mode [ 473.870356][T23300] xfrm0: entered allmulticast mode [ 473.882052][T23300] veth0_to_hsr: entered allmulticast mode [ 473.896383][T23300] hsr_slave_0: entered allmulticast mode [ 473.907802][T23300] veth1_to_hsr: entered allmulticast mode [ 473.922998][T23300] hsr_slave_1: entered allmulticast mode [ 473.933734][T23300] hsr0: entered allmulticast mode [ 473.942855][T23300] veth1_virt_wifi: entered allmulticast mode [ 473.956895][T23300] veth0_virt_wifi: entered allmulticast mode [ 473.969811][T23300] virt_wifi0: entered allmulticast mode [ 473.980119][T23300] veth1_vlan: entered allmulticast mode [ 473.993913][T23300] veth0_vlan: entered allmulticast mode [ 474.030097][T23300] vlan0: entered allmulticast mode [ 474.035617][T23300] vlan1: entered allmulticast mode [ 474.041306][T23300] macvlan0: left promiscuous mode [ 474.046842][T23300] macvlan0: entered allmulticast mode [ 474.060581][T23300] macvlan1: entered allmulticast mode [ 474.073505][T23300] ipvlan0: entered allmulticast mode [ 474.079317][T23300] ipvlan1: entered allmulticast mode [ 474.095344][T23300] veth1_macvtap: entered allmulticast mode [ 474.116315][T23300] veth0_macvtap: entered allmulticast mode [ 474.139020][T23300] macsec0: entered allmulticast mode [ 474.163348][T23300] geneve0: entered allmulticast mode [ 474.181912][T23300] geneve1: entered allmulticast mode [ 474.200443][T23300] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 474.218034][T23300] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 474.226569][T23300] erspan1: entered allmulticast mode [ 474.232242][T23300] mac80211_hwsim hwsim31 wlan2: entered allmulticast mode [ 474.239545][T23300] netdevsim netdevsim2 eth0: entered allmulticast mode [ 474.247086][T23300] netdevsim netdevsim2 eth1: entered allmulticast mode [ 474.255462][T23300] netdevsim netdevsim2 eth2: entered allmulticast mode [ 474.263066][T23300] netdevsim netdevsim2 eth3: entered allmulticast mode [ 474.272012][T23300] vxcan2: entered allmulticast mode [ 474.277385][T23300] vxcan3: entered allmulticast mode [ 474.285433][T23300] mac80211_hwsim hwsim33 wlan3: entered allmulticast mode [ 474.293938][T23300] @: entered allmulticast mode [ 474.306865][T23300] gre1: entered allmulticast mode [ 474.313078][T23300] ipip0: entered allmulticast mode [ 474.318659][T23300] mac80211_hwsim hwsim38 wlan4: entered allmulticast mode [ 474.327224][T23300] gretap1: left promiscuous mode [ 474.340641][T23300] bond1: left promiscuous mode [ 474.347120][T23300] sit1: entered allmulticast mode [ 474.352784][T23300] syztnl2: entered allmulticast mode [ 474.358262][T23300] bond2: entered allmulticast mode [ 474.363830][T23300] gretap2: entered allmulticast mode [ 474.369648][T23300] geneve2: left promiscuous mode [ 474.379541][T23300] bond3: left promiscuous mode [ 474.384642][T23300] vti0: left promiscuous mode [ 474.389573][T23300] bond3: entered allmulticast mode [ 474.395194][T23300] vti0: entered allmulticast mode [ 474.406198][T23300] bridge1: entered allmulticast mode [ 474.419590][T23300] bridge2: entered allmulticast mode [ 474.433016][T23300] macvlan2: entered allmulticast mode [ 474.442579][T23300] bond5: entered allmulticast mode [ 474.450740][T23300] gretap3: entered allmulticast mode [ 474.456601][T23300] macvlan3: entered allmulticast mode [ 474.462706][T23300] bond6: entered allmulticast mode [ 474.468393][T23300] bridge3: entered allmulticast mode [ 474.478713][T23300] geneve3: left promiscuous mode [ 474.487253][T23300] geneve3: entered allmulticast mode [ 474.497860][T23300] bridge4: entered allmulticast mode [ 474.506709][T23300] bond0: entered allmulticast mode [ 474.512821][T23300] bridge5: entered allmulticast mode [ 474.520129][T23300] gre2: entered allmulticast mode [ 474.546879][ T7513] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.561526][ T7513] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.570071][ T7513] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.581052][ T7513] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.590824][ T7513] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.602448][ T7513] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.610799][ T7513] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.619487][ T7513] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.628338][ T7513] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.642914][ T7513] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.652318][ T7513] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.661350][ T7513] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.678106][T23317] __nla_validate_parse: 56 callbacks suppressed [ 474.678120][T23317] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4736'. [ 474.696958][T23317] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4736'. [ 475.806400][T23274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.949400][T23341] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4743'. [ 475.973064][T23347] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4743'. [ 476.003884][T23349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4745'. [ 476.029435][T23349] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4745'. [ 476.039452][T23349] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 476.068332][T23351] tipc: Enabled bearer , priority 11 [ 476.097701][T23355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4747'. [ 476.120107][T23355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4747'. [ 476.266012][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'. [ 476.317520][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'. [ 476.735951][T23365] infiniband sy‡1: set down [ 476.741203][T23365] infiniband sy‡1: added bond0 [ 476.759778][T23365] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 476.765577][T23365] infiniband sy‡1: Couldn't open port 1 [ 476.862056][T23365] RDS/IB: sy‡1: added [ 476.866136][T23365] smc: adding ib device sy‡1 with port count 1 [ 476.896995][T23365] smc: ib device sy‡1 port 1 has no pnetid [ 477.207169][ T7513] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.244648][ T33] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.278045][ T33] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.348125][ T33] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.703345][T23469] netlink: 'syz.3.4780': attribute type 1 has an invalid length. [ 477.940486][T23488] openvswitch: netlink: Missing key (keys=40, expected=100) [ 478.086958][T23491] syzkaller1: entered promiscuous mode [ 478.093407][T23491] syzkaller1: entered allmulticast mode [ 478.120032][T23491] syzkaller1: left promiscuous mode [ 478.127025][T23494] netlink: 'syz.0.4789': attribute type 4 has an invalid length. [ 478.141911][T23491] syzkaller1: left allmulticast mode [ 478.153624][T23494] netlink: 'syz.0.4789': attribute type 4 has an invalid length. [ 478.253202][T23501] netlink: 'syz.0.4789': attribute type 7 has an invalid length. [ 478.517602][T23309] IPVS: starting estimator thread 0... [ 478.586058][T23519] 8021q: adding VLAN 0 to HW filter on device bond9 [ 478.603381][T23515] tipc: Enabling of bearer rejected, failed to enable media [ 478.611741][T23517] IPVS: using max 32 ests per chain, 76800 per kthread [ 478.636339][T23525] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 478.946040][T23542] netlink: 'syz.3.4803': attribute type 13 has an invalid length. [ 478.964222][T23542] macvtap0: refused to change device tx_queue_len [ 479.343287][T23566] netlink: 'syz.1.4810': attribute type 29 has an invalid length. [ 479.352721][T23566] netlink: 'syz.1.4810': attribute type 29 has an invalid length. [ 479.394505][T23566] netlink: 'syz.1.4810': attribute type 29 has an invalid length. [ 479.411251][T23566] netlink: 'syz.1.4810': attribute type 29 has an invalid length. [ 479.423802][T23566] netlink: 'syz.1.4810': attribute type 29 has an invalid length. [ 479.544181][T23575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.579471][T23573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 480.162905][T23604] __nla_validate_parse: 22 callbacks suppressed [ 480.162926][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4819'. [ 480.214198][T23608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 480.271322][T23604] ipvlan2: entered allmulticast mode [ 480.381611][T23615] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4826'. [ 480.439473][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 480.617045][T23620] bond10: entered promiscuous mode [ 480.623055][T23620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.729573][T23620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.739756][T23620] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 480.759077][T23620] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 480.778869][T23620] bond10: (slave ip6gre2): making interface the new active one [ 480.787179][T23620] ip6gre2: entered promiscuous mode [ 480.796548][T23620] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 480.817379][T23633] netlink: 'syz.2.4832': attribute type 11 has an invalid length. [ 480.885555][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4833'. [ 481.346202][T23662] lo speed is unknown, defaulting to 1000 [ 481.443572][T23671] wireguard: wg2: Could not create IPv4 socket [ 481.472407][T23671] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4843'. [ 481.611072][T23682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4846'. [ 481.817945][T23691] xt_cgroup: path and classid specified [ 481.924830][T23696] C: renamed from lo [ 481.945095][T23696] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 482.209658][T23709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4855'. [ 482.252582][T23713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4856'. [ 482.802162][T23727] validate_nla: 4 callbacks suppressed [ 482.802181][T23727] netlink: 'syz.0.4861': attribute type 3 has an invalid length. [ 482.917819][T23729] : renamed from hsr0 [ 483.547143][T23756] netlink: 'syz.0.4869': attribute type 1 has an invalid length. [ 483.588808][T23756] netlink: 760 bytes leftover after parsing attributes in process `syz.0.4869'. [ 483.613464][T23756] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4869'. [ 484.074756][T23789] syzkaller0: entered promiscuous mode [ 484.086114][T23789] syzkaller0: entered allmulticast mode [ 484.263414][T23798] openvswitch: netlink: Key type 36 is out of range max 32 [ 484.263412][T23797] openvswitch: netlink: Key type 36 is out of range max 32 [ 484.304338][T23797] syzkaller1: entered promiscuous mode [ 484.309961][T23797] syzkaller1: entered allmulticast mode [ 484.597161][T23811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.668041][T23816] netlink: 'syz.4.4884': attribute type 10 has an invalid length. [ 484.798402][T23826] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 484.875479][T23828] gretap0: entered promiscuous mode [ 484.883636][T23830] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.890823][T23830] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.897632][T23828] gretap0: left promiscuous mode [ 485.230319][T23850] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 485.256521][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.266915][T23850] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 485.278581][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.302934][T23858] __nla_validate_parse: 9 callbacks suppressed [ 485.302951][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 485.369214][T23857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.373748][T23868] x_tables: duplicate underflow at hook 1 [ 485.403826][T23866] netlink: 'syz.4.4901': attribute type 1 has an invalid length. [ 485.523989][T23882] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 485.524040][T23879] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4898'. [ 485.576023][T23884] netlink: 'syz.3.4903': attribute type 1 has an invalid length. [ 485.588734][T23884] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4903'. [ 485.590312][T23871] syzkaller0: entered promiscuous mode [ 485.604846][T23884] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4903'. [ 485.605017][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4901'. [ 485.614824][T23884] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4903'. [ 485.636675][T23884] netlink: 'syz.3.4903': attribute type 10 has an invalid length. [ 485.648366][T23884] bridge_slave_1: left allmulticast mode [ 485.661131][T23884] bridge_slave_1: left promiscuous mode [ 485.670148][T23884] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.683869][T23884] bridge_slave_1: entered allmulticast mode [ 485.690595][T23884] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 485.702202][T23878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4903'. [ 485.931197][T23901] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4909'. [ 487.624116][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 487.683702][T23932] netlink: 'syz.3.4917': attribute type 1 has an invalid length. [ 487.842486][T23932] IPVS: length: 8 != 1152 [ 488.214226][T23964] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4926'. [ 488.226426][T23958] netlink: 'syz.4.4925': attribute type 8 has an invalid length. [ 489.042247][T24017] netlink: 'syz.2.4941': attribute type 8 has an invalid length. [ 489.460519][T24039] syzkaller0: entered promiscuous mode [ 489.466845][T24039] syzkaller0: entered allmulticast mode [ 489.852302][T24076] netlink: 'syz.3.4958': attribute type 1 has an invalid length. [ 489.914885][T24076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 489.966020][T24077] bond12: (slave geneve3): making interface the new active one [ 489.976135][T24077] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 490.011641][ T3541] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.031078][ T3541] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.065067][ T3541] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.095680][ T3541] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 490.505531][T24125] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 490.548578][T24118] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 490.748723][T24137] macvtap1: entered promiscuous mode [ 490.761830][T24137] macvtap1: entered allmulticast mode [ 490.767346][T24137] veth1_vlan: entered allmulticast mode [ 490.788423][T24135] syzkaller1: entered promiscuous mode [ 490.800757][T24135] syzkaller1: entered allmulticast mode [ 490.851715][T24135] __nla_validate_parse: 9 callbacks suppressed [ 490.851735][T24135] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4971'. [ 490.865367][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4975'. [ 490.906511][T24145] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4974'. [ 490.992350][T24151] netlink: 'syz.4.4979': attribute type 11 has an invalid length. [ 491.140526][T24159] bond9: Removing last ns target with arp_interval on [ 491.169520][T24164] netlink: 'syz.4.4983': attribute type 10 has an invalid length. [ 491.192531][T24166] netlink: 'syz.3.4984': attribute type 29 has an invalid length. [ 491.196382][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 491.200386][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4984'. [ 491.219807][T24168] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 491.232104][T24168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4985'. [ 491.293612][T24170] syzkaller0: entered promiscuous mode [ 491.299149][T24170] syzkaller0: entered allmulticast mode [ 491.313695][T24173] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 491.324377][T24173] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4987'. [ 491.333970][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'. [ 491.507994][T24182] syzkaller0: entered promiscuous mode [ 491.513650][T24182] syzkaller0: entered allmulticast mode [ 491.524556][T24182] net_ratelimit: 107 callbacks suppressed [ 491.524575][T24182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.727263][T24190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4994'. [ 491.736975][T24190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4994'. [ 491.955950][T24208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 492.068895][T24216] syzkaller1: entered promiscuous mode [ 492.094313][T24216] syzkaller1: entered allmulticast mode [ 492.157360][T24226] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 492.172154][T24226] FAULT_INJECTION: forcing a failure. [ 492.172154][T24226] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 492.193428][T24226] CPU: 1 UID: 0 PID: 24226 Comm: syz.4.5005 Not tainted syzkaller #0 PREEMPT(full) [ 492.193456][T24226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 492.193474][T24226] Call Trace: [ 492.193482][T24226] [ 492.193489][T24226] dump_stack_lvl+0xe8/0x150 [ 492.193519][T24226] should_fail_ex+0x412/0x560 [ 492.193551][T24226] _copy_from_iter+0x1d3/0x1670 [ 492.193574][T24226] ? rcu_is_watching+0x15/0xb0 [ 492.193604][T24226] ? __pfx__copy_from_iter+0x10/0x10 [ 492.193631][T24226] ? netlink_sendmsg+0x650/0xb40 [ 492.193651][T24226] ? skb_put+0x11b/0x210 [ 492.193675][T24226] netlink_sendmsg+0x6c0/0xb40 [ 492.193703][T24226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.193725][T24226] ? do_user_addr_fault+0xc6f/0x1340 [ 492.193746][T24226] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.193774][T24226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.193797][T24226] ____sys_sendmsg+0x972/0x9f0 [ 492.193828][T24226] ? irqentry_exit+0x59e/0x620 [ 492.193850][T24226] ? trace_irq_disable+0x3b/0x150 [ 492.193873][T24226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.193905][T24226] ? import_iovec+0x73/0xa0 [ 492.193928][T24226] ___sys_sendmsg+0x2a5/0x360 [ 492.193956][T24226] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.194013][T24226] ? __fget_files+0x2a/0x420 [ 492.194029][T24226] ? __fget_files+0x3a0/0x420 [ 492.194055][T24226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.194083][T24226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.194116][T24226] ? __pfx_ksys_write+0x10/0x10 [ 492.194147][T24226] do_syscall_64+0x14d/0xf80 [ 492.194169][T24226] ? trace_irq_disable+0x3b/0x150 [ 492.194184][T24226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.194202][T24226] ? clear_bhb_loop+0x40/0x90 [ 492.194224][T24226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.194246][T24226] RIP: 0033:0x7feb0199c819 [ 492.194264][T24226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.194279][T24226] RSP: 002b:00007feb028bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.194299][T24226] RAX: ffffffffffffffda RBX: 00007feb01c15fa0 RCX: 00007feb0199c819 [ 492.194312][T24226] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 492.194322][T24226] RBP: 00007feb028bf090 R08: 0000000000000000 R09: 0000000000000000 [ 492.194331][T24226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.194340][T24226] R13: 00007feb01c16038 R14: 00007feb01c15fa0 R15: 00007ffc11f4cf88 [ 492.194366][T24226] [ 492.628771][T24245] Bluetooth: MGMT ver 1.23 [ 492.766491][T24249] syzkaller0: entered promiscuous mode [ 492.774854][T24249] 0: reclassify loop, rule prio 0, protocol 800 [ 492.832980][T24256] netlink: 'syz.4.5014': attribute type 1 has an invalid length. [ 492.895802][T24259] netlink: 'syz.0.5015': attribute type 11 has an invalid length. [ 492.915049][T24251] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 492.926492][T24251] Cannot find set identified by id 65534 to match [ 492.970519][T24255] veth0: entered promiscuous mode [ 492.976223][T24257] veth0: left promiscuous mode [ 493.047040][T24259] bond10: Unable to set down delay as MII monitoring is disabled [ 493.087479][T24259] bond10 (unregistering): Released all slaves [ 493.137246][T24273] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 493.183715][T24278] vlan3: entered allmulticast mode [ 493.199282][T24278] bond0: entered allmulticast mode [ 493.208754][T24273] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 493.332249][T24283] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 493.355755][T24283] bond7 (unregistering): Released all slaves [ 493.452480][T24286] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 493.458502][T24286] syzkaller1: Refused to change device type [ 493.936513][T24320] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 493.958017][T24320] syzkaller1: entered promiscuous mode [ 493.982704][T24320] syzkaller1: entered allmulticast mode [ 494.223726][T24347] xt_nat: multiple ranges no longer supported [ 494.479674][T24370] bond10: option xmit_hash_policy: invalid value (64) [ 494.488707][T24370] bond10 (unregistering): Released all slaves [ 494.821920][T24401] lo speed is unknown, defaulting to 1000 [ 495.064741][T24408] xt_l2tp: v2 sid > 0xffff: 1114112 [ 495.386790][T24431] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 495.814852][T24454] bridge0: port 3(ipvlan2) entered blocking state [ 495.822519][T24454] bridge0: port 3(ipvlan2) entered disabled state [ 495.829553][T24454] ipvlan2: entered allmulticast mode [ 495.837566][T24454] bridge0: entered allmulticast mode [ 495.865732][T24454] ipvlan2: left allmulticast mode [ 495.943017][T24454] bridge0: left allmulticast mode [ 496.122127][T24454] __nla_validate_parse: 12 callbacks suppressed [ 496.122145][T24454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5075'. [ 496.149079][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 496.299358][T24481] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5082'. [ 496.404799][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5083'. [ 496.606611][T24510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5089'. [ 496.668754][T24512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5090'. [ 496.775238][T24513] vlan2: entered allmulticast mode [ 497.098396][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5093'. [ 497.180494][T24538] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.331051][T24543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5095'. [ 497.376885][T24543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5095'. [ 497.425659][T24550] x_tables: duplicate underflow at hook 1 [ 497.791302][T24556] bond6: option mode: unable to set because the bond device has slaves [ 497.832318][T24556] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 497.879450][T24561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5102'. [ 498.167637][T24586] : entered promiscuous mode [ 498.296921][T24598] validate_nla: 1 callbacks suppressed [ 498.296939][T24598] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 498.317369][T24598] netlink: 'syz.1.5110': attribute type 7 has an invalid length. [ 498.340979][T24598] netlink: 'syz.1.5110': attribute type 8 has an invalid length. [ 498.527409][T24619] netlink: 'syz.1.5117': attribute type 1 has an invalid length. [ 498.647731][T24633] netlink: 'syz.4.5119': attribute type 2 has an invalid length. [ 498.742944][T24627] bond7: (slave bridge3): making interface the new active one [ 498.762848][T24627] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 499.038825][T24664] netlink: 'syz.1.5130': attribute type 1 has an invalid length. [ 499.038860][T24654] lo speed is unknown, defaulting to 1000 [ 499.068192][ T49] bond0: (slave bond_slave_0): interface is now down [ 499.068906][T24669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.077094][T24663] netlink: 'syz.3.5127': attribute type 27 has an invalid length. [ 499.104072][ T49] bond0: (slave bond_slave_1): interface is now down [ 499.125466][ T49] bond0: now running without any active interface! [ 499.159158][T24674] netlink: 'syz.3.5127': attribute type 27 has an invalid length. [ 499.481737][T24694] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 500.285366][T24754] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 500.788576][T24782] netlink: 'syz.3.5160': attribute type 1 has an invalid length. [ 500.877058][T24782] bond13: entered promiscuous mode [ 500.922403][T24782] 8021q: adding VLAN 0 to HW filter on device bond13 [ 500.973116][T24784] ipvlan2: entered allmulticast mode [ 500.990762][T24784] bond13: entered allmulticast mode [ 501.022571][T24782] ipvlan3: entered allmulticast mode [ 501.134151][T24784] bond13: (slave bridge6): making interface the new active one [ 501.154602][T24799] __nla_validate_parse: 20 callbacks suppressed [ 501.154620][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'. [ 501.175581][T24784] bridge6: entered promiscuous mode [ 501.183194][T24784] bridge6: entered allmulticast mode [ 501.191156][T24784] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 501.214348][T24790] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 501.232107][T24799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5165'. [ 501.618902][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 503.772859][T24782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.942690][T24843] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 504.002152][T24845] netlink: 'syz.0.5175': attribute type 1 has an invalid length. [ 504.067835][T24845] 8021q: adding VLAN 0 to HW filter on device bond10 [ 504.104286][T24846] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 504.104574][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5175'. [ 504.478304][T24882] tunl0: entered promiscuous mode [ 504.521725][T24882] netlink: 'syz.0.5187': attribute type 3 has an invalid length. [ 504.550101][T24882] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5187'. [ 505.020329][T24932] xt_hashlimit: size too large, truncated to 1048576 [ 505.093656][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5201'. [ 505.212747][T24941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5202'. [ 505.241849][T24940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5202'. [ 505.491676][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5204'. [ 505.913641][T25005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5214'. [ 505.951922][T24993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5214'. [ 508.312168][T24949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.323277][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5205'. [ 508.535666][T25068] IPVS: set_ctl: invalid protocol: 10 0.0.0.7:0 [ 508.925836][T25105] xt_ecn: cannot match TCP bits for non-tcp packets [ 508.968208][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'. [ 509.006007][T25108] ip6t_srh: unknown srh match flags 5F28 [ 509.028927][T25114] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5231'. [ 509.038974][T25113] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5231'. [ 509.064516][T25116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5232'. [ 509.280387][T25125] syzkaller1: entered promiscuous mode [ 509.286812][T25125] syzkaller1: entered allmulticast mode [ 509.688840][T25146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5243'. [ 509.735338][T25152] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5244'. [ 509.746114][T25152] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5244'. [ 509.758350][T25152] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5244'. [ 509.769431][T25152] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5244'. [ 510.143738][T25175] xt_ecn: cannot match TCP bits for non-tcp packets [ 510.162089][T25182] xt_ecn: cannot match TCP bits for non-tcp packets [ 510.270323][T25191] geneve2: entered promiscuous mode [ 510.277445][T25191] geneve2: entered allmulticast mode [ 511.355983][T25233] xt_CT: No such helper "pptp" [ 511.373917][T25234] delete_channel: no stack [ 513.138121][T25176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.303215][T25261] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 513.314363][T25264] veth0: entered promiscuous mode [ 513.331156][T25263] veth0: left promiscuous mode [ 513.553231][T25283] __nla_validate_parse: 69 callbacks suppressed [ 513.553251][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5282'. [ 513.707979][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5286'. [ 513.774541][T25304] syzkaller1: entered promiscuous mode [ 513.793562][T25304] syzkaller1: entered allmulticast mode [ 514.140794][T25336] lo: Caught tx_queue_len zero misconfig [ 514.346917][T25355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 514.366329][T25358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 514.462867][T25369] x_tables: duplicate entry at hook 1 [ 514.522284][T25369] x_tables: duplicate entry at hook 1 [ 514.655077][T25388] syzkaller0: entered promiscuous mode [ 514.660852][T25388] syzkaller0: entered allmulticast mode [ 515.026404][T25415] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5318'. [ 515.233127][T25426] bond14 (unregistering): Released all slaves [ 515.307516][T25430] batadv_slave_1: entered promiscuous mode [ 515.429436][T25448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5328'. [ 515.459363][T25438] batadv_slave_1: left promiscuous mode [ 515.523811][T25450] bond14: option lp_interval: invalid value (0) [ 515.540351][T25450] bond14: option lp_interval: allowed values 1 - 2147483647 [ 515.573114][T25450] bond14 (unregistering): Released all slaves [ 516.207203][T25504] netlink: 'syz.0.5344': attribute type 83 has an invalid length. [ 517.091045][T25525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5349'. [ 517.354986][T25539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5355'. [ 517.453548][T25539] netlink: 'syz.3.5355': attribute type 1 has an invalid length. [ 518.397585][T25552] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 518.475242][T25552] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 518.583989][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5365'. [ 518.663863][T25570] netlink: 'syz.2.5366': attribute type 10 has an invalid length. [ 518.691643][T25571] netlink: 'syz.2.5366': attribute type 10 has an invalid length. [ 518.702464][T25571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5366'. [ 518.856742][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 518.889378][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 518.911904][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 518.944317][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 518.970270][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.006976][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.039189][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.054672][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.090885][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.130218][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.153923][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.185391][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5373'. [ 519.199565][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.213241][T25589] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 519.221016][T25589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5373'. [ 519.244678][T25605] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 519.257755][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.274183][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.294804][T25611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 519.323398][T25605] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 519.332520][T25605] bond9: option packets_per_slave: allowed values 0 - 65535 [ 519.342336][T25605] bond9 (unregistering): Released all slaves [ 519.350513][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 519.365354][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.376613][T25612] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 519.414551][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.455103][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.481998][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.511340][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.521597][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.545819][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.571141][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.590785][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.601934][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.627862][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.648602][T25588] tipc: Enabling of bearer rejected, failed to enable media [ 519.743397][T25632] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 519.751234][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'. [ 519.812172][T25634] bond0: (slave gre0): refused to change device type [ 519.821152][T25632] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 519.830277][T25632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5384'. [ 519.840414][T25642] netlink: 'syz.1.5385': attribute type 10 has an invalid length. [ 519.863880][T25637] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 519.874292][T25637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'. [ 520.037847][T25656] gre2: entered promiscuous mode [ 520.085632][T25660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5392'. [ 520.206227][T25663] netem: invalid attributes len -24 [ 520.212450][T25663] netem: change failed [ 520.437531][T25675] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 520.559651][T25683] netlink: 'syz.1.5400': attribute type 10 has an invalid length. [ 520.583048][T25683] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 520.643315][T25635] delete_channel: no stack [ 520.834525][T25694] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 521.814369][T25760] validate_nla: 1 callbacks suppressed [ 521.814388][T25760] netlink: 'syz.2.5417': attribute type 58 has an invalid length. [ 522.310733][T25796] netlink: 'syz.2.5423': attribute type 1 has an invalid length. [ 522.520928][T25796] bond7 (unregistering): Released all slaves [ 522.702457][T25820] netlink: 'syz.4.5429': attribute type 10 has an invalid length. [ 522.712036][T25821] netlink: 'syz.4.5429': attribute type 10 has an invalid length. [ 522.760722][T25820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.794421][T25820] batadv0: entered allmulticast mode [ 522.824427][T25820] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 522.846564][T25821] batadv0: entered promiscuous mode [ 522.895204][T25821] bond0: (slave batadv0): Releasing backup interface [ 522.919816][T25821] bridge0: port 1(batadv0) entered blocking state [ 522.928812][T25821] bridge0: port 1(batadv0) entered disabled state [ 522.985711][T25833] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 523.016613][T25833] bond14: entered promiscuous mode [ 523.042229][T25833] 8021q: adding VLAN 0 to HW filter on device bond14 [ 523.077862][ T7513] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.140897][T25840] bond14: (slave bridge10): making interface the new active one [ 523.151815][ T9902] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 523.161099][ T9902] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 523.174768][T25840] bridge10: entered promiscuous mode [ 523.201193][T25840] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 523.210624][ T7513] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.222595][ T7513] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.257294][T25833] bond14: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 523.272170][T25833] bond14: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 523.324959][ T7513] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.341169][T25842] netlink: 'syz.4.5437': attribute type 29 has an invalid length. [ 523.386337][T25865] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 523.411348][T25860] netlink: 'syz.4.5437': attribute type 29 has an invalid length. [ 523.451049][T25853] lo speed is unknown, defaulting to 1000 [ 523.579944][T25870] netlink: 'syz.1.5446': attribute type 29 has an invalid length. [ 523.663935][T25879] netlink: 'syz.1.5446': attribute type 29 has an invalid length. [ 523.840550][T25884] __nla_validate_parse: 16 callbacks suppressed [ 523.840571][T25884] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5449'. [ 523.988333][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5452'. [ 524.036355][T25896] ip6tnl1: entered allmulticast mode [ 524.054736][T25906] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5455'. [ 524.206908][T25911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5458'. [ 524.243092][T25914] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 524.305468][T25914] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 524.462229][T25925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5462'. [ 524.731006][T25939] netlink: 'syz.0.5468': attribute type 62 has an invalid length. [ 525.009282][T25953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.635109][T25981] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5482'. [ 525.659968][T25982] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5482'. [ 525.810967][T25990] bond15: entered allmulticast mode [ 525.879885][T25999] netlink: 808 bytes leftover after parsing attributes in process `syz.3.5487'. [ 525.910453][T26002] syzkaller0: entered promiscuous mode [ 525.916626][T26002] syzkaller0: entered allmulticast mode [ 526.075863][T26011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.186114][T26013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5491'. [ 526.348110][T26033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5494'. [ 526.527572][T26042] netlink: zone id is out of range [ 526.531229][T26037] netlink: set zone limit has 4 unknown bytes [ 526.549646][T26042] netlink: zone id is out of range [ 526.559917][T26042] netlink: zone id is out of range [ 526.565909][T26042] netlink: zone id is out of range [ 526.577589][T26042] netlink: zone id is out of range [ 526.588212][T26042] netlink: zone id is out of range [ 526.594742][T26042] netlink: zone id is out of range [ 526.614417][T26042] netlink: zone id is out of range [ 526.619707][T26042] netlink: zone id is out of range [ 526.906103][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.917861][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.926608][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.937229][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.947170][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.978735][T26049] bond8: Setting coupled_control to off (0) [ 527.300780][T26060] lo speed is unknown, defaulting to 1000 [ 527.419364][T26071] syzkaller0: create flow: hash 2909910752 index 1 [ 527.450671][ T3500] syzkaller0: tun_net_xmit 76 [ 527.455726][ T3500] syzkaller0: tun_net_xmit 48 [ 527.471734][T23308] syzkaller0: tun_net_xmit 76 [ 527.527236][T26069] syzkaller0: delete flow: hash 2909910752 index 1 [ 528.985097][ T5826] Bluetooth: hci1: command tx timeout [ 529.184776][T26082] bridge_slave_0 (unregistering): left allmulticast mode [ 529.204499][T26082] bridge_slave_0 (unregistering): left promiscuous mode [ 529.241565][T26082] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.285295][T26093] TCP: TCP_TX_DELAY enabled [ 529.361878][T26099] __nla_validate_parse: 1 callbacks suppressed [ 529.361895][T26099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5515'. [ 529.460201][T26105] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 529.515895][T26107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5516'. [ 529.529206][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5516'. [ 529.563358][T26110] validate_nla: 4 callbacks suppressed [ 529.563376][T26110] netlink: 'syz.1.5519': attribute type 1 has an invalid length. [ 529.582810][T26106] netlink: 'syz.0.5517': attribute type 29 has an invalid length. [ 529.592266][T26110] netlink: 'syz.1.5519': attribute type 3 has an invalid length. [ 529.600130][T26110] netlink: 'syz.1.5519': attribute type 7 has an invalid length. [ 529.608245][T26110] netlink: 'syz.1.5519': attribute type 8 has an invalid length. [ 529.655694][T26110] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5519'. [ 529.665697][T26110] NCSI netlink: No device for ifindex 131092 [ 529.901188][T26060] chnl_net:caif_netlink_parms(): no params data found [ 530.070052][T26060] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.078533][T26060] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.085922][T26060] bridge_slave_0: entered allmulticast mode [ 530.093989][T26060] bridge_slave_0: entered promiscuous mode [ 530.104964][T26060] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.112522][T26060] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.119872][T26060] bridge_slave_1: entered allmulticast mode [ 530.128070][T26060] bridge_slave_1: entered promiscuous mode [ 530.169536][T26060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.183232][T26060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.233351][T26060] team0: Port device team_slave_0 added [ 530.241453][T26060] team0: Port device team_slave_1 added [ 530.284905][T26060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.295304][T26060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.322461][T26060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.342174][T26060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.349144][T26060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.375594][T26060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.436438][T26060] hsr_slave_0: entered promiscuous mode [ 530.443503][T26060] hsr_slave_1: entered promiscuous mode [ 530.450817][T26060] debugfs: 'hsr0' already exists in 'hsr' [ 530.457149][T26060] Cannot create hsr debugfs directory [ 530.497221][T26146] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 530.515630][T26146] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 530.668246][T26153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5531'. [ 530.770444][T26157] bond0: Caught tx_queue_len zero misconfig [ 530.985148][T26060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.013470][T26060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.034516][T26060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.052542][T26060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.056202][ T5826] Bluetooth: hci1: command tx timeout [ 531.100981][T26060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.130482][T26060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.161221][T26166] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5537'. [ 531.173261][T26060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.187295][T26060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.202215][T26177] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 531.227566][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 531.231922][T26177] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 531.394644][T26060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.472708][T26060] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.485277][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.492455][ T9902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.555086][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.562272][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.679196][T26209] netlink: 'syz.0.5545': attribute type 83 has an invalid length. [ 531.797576][T26219] netlink: 'syz.4.5547': attribute type 3 has an invalid length. [ 531.962681][T26060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.026434][T26232] macvtap2: entered promiscuous mode [ 532.032928][T26232] macvtap2: entered allmulticast mode [ 532.067985][T26060] veth0_vlan: entered promiscuous mode [ 532.084299][T26060] veth1_vlan: entered promiscuous mode [ 532.143270][T26060] veth0_macvtap: entered promiscuous mode [ 532.177562][T26060] veth1_macvtap: entered promiscuous mode [ 532.226467][T26060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.290930][T26060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.314326][ T7513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.324274][ T7513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.336297][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.347438][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5554'. [ 532.348004][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.447822][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.466355][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.470580][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5555'. [ 532.494748][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5555'. [ 532.515646][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.531099][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.752479][T26266] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.760078][T26266] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.814092][T26272] netlink: 'syz.4.5560': attribute type 1 has an invalid length. [ 532.828035][T26272] netlink: 'syz.4.5560': attribute type 7 has an invalid length. [ 532.841848][T26272] netlink: 'syz.4.5560': attribute type 8 has an invalid length. [ 532.861834][T26272] NCSI netlink: No device for ifindex 65584 [ 532.875861][T26276] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 532.895969][T26276] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 532.911845][T26276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 533.109779][T26285] bond9: (slave gretap0): Device is not bonding slave [ 533.120743][T26285] bond9: option active_slave: invalid value (gretap0) [ 533.137100][T26285] bond9 (unregistering): Released all slaves [ 533.148868][ T5826] Bluetooth: hci1: command tx timeout [ 533.173791][T26294] net_ratelimit: 74 callbacks suppressed [ 533.173809][T26294] openvswitch: netlink: Key type 156 is out of range max 32 [ 533.830792][T26340] xt_TCPMSS: Only works on TCP SYN packets [ 534.006806][T26354] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 534.024920][T26356] ip6erspan0: entered allmulticast mode [ 534.247690][T26375] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 534.864232][T26417] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 534.875938][T26414] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 534.889935][T26417] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 535.216606][ T5826] Bluetooth: hci1: command tx timeout [ 535.266955][T26438] __nla_validate_parse: 76 callbacks suppressed [ 535.266975][T26438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5606'. [ 535.398357][T26457] macvtap1: entered promiscuous mode [ 535.420539][T26457] macvtap1: entered allmulticast mode [ 535.438646][T26457] veth1_vlan: entered allmulticast mode [ 535.521361][T26469] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.5615'. [ 535.768541][T26482] validate_nla: 1 callbacks suppressed [ 535.768558][T26482] netlink: 'syz.2.5619': attribute type 2 has an invalid length. [ 535.786932][T26482] netlink: 'syz.2.5619': attribute type 2 has an invalid length. [ 535.796398][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5619'. [ 535.997728][T26506] xt_policy: output policy not valid in PREROUTING and INPUT [ 536.049350][T26508] netlink: 'syz.0.5625': attribute type 16 has an invalid length. [ 536.080922][T26508] netlink: 'syz.0.5625': attribute type 17 has an invalid length. [ 536.081924][T26513] netlink: 'syz.0.5625': attribute type 16 has an invalid length. [ 536.107519][T26508] tunl0: left promiscuous mode [ 536.192998][T26513] netlink: 'syz.0.5625': attribute type 17 has an invalid length. [ 536.197625][T26508] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.224379][T26508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.258672][T26513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.350625][T26527] sctp: [Deprecated]: syz.3.5631 (pid 26527) Use of int in maxseg socket option. [ 536.350625][T26527] Use struct sctp_assoc_value instead [ 536.594130][T26547] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.640580][T26546] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 536.665007][T26546] veth0: entered promiscuous mode [ 536.714714][T26546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 536.746783][T26546] veth0 (unregistering): left promiscuous mode [ 536.800334][T26556] syzkaller1: entered promiscuous mode [ 536.808808][T26556] syzkaller1: entered allmulticast mode [ 537.198431][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 537.210952][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 537.238008][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 537.248314][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 537.261832][T26602] netlink: 'syz.2.5649': attribute type 1 has an invalid length. [ 537.366615][T26603] macvlan2: entered promiscuous mode [ 537.372843][T26603] macvlan2: entered allmulticast mode [ 537.801154][T26639] xt_TCPMSS: Only works on TCP SYN packets [ 537.986922][T26655] netlink: 'syz.4.5665': attribute type 1 has an invalid length. [ 538.077820][T26655] 8021q: adding VLAN 0 to HW filter on device bond9 [ 538.134603][T26659] vlan4: entered promiscuous mode [ 538.165492][T26659] bond9: entered promiscuous mode [ 538.170751][T26659] vlan4: entered allmulticast mode [ 538.241603][T26659] bond9: entered allmulticast mode [ 538.292933][T26680] lo speed is unknown, defaulting to 1000 [ 538.298776][T26680] lo speed is unknown, defaulting to 1000 [ 538.338085][T26680] lo speed is unknown, defaulting to 1000 [ 538.395700][T26680] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 538.467219][T26680] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 538.501208][T26680] lo speed is unknown, defaulting to 1000 [ 538.512711][T26680] lo speed is unknown, defaulting to 1000 [ 538.520435][T26680] lo speed is unknown, defaulting to 1000 [ 538.538264][T26680] lo speed is unknown, defaulting to 1000 [ 538.587003][T26680] lo speed is unknown, defaulting to 1000 [ 538.610698][T26700] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 538.648057][T26680] lo speed is unknown, defaulting to 1000 [ 538.662519][T26680] lo speed is unknown, defaulting to 1000 [ 538.683302][T26680] lo speed is unknown, defaulting to 1000 [ 538.719745][T26680] lo speed is unknown, defaulting to 1000 [ 538.883183][T26714] tipc: Enabled bearer , priority 0 [ 538.921312][T26714] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 538.948985][T26714] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 539.368101][T26747] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 539.397111][T26747] bond3: (slave lo): Enslaving as an active interface with an up link [ 539.414131][T26747] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 539.460739][T23308] lo speed is unknown, defaulting to 1000 [ 539.471185][T23306] lo speed is unknown, defaulting to 1000 [ 539.477204][T23306] syz0: Port: 1 Link ACTIVE [ 539.680680][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5690'. [ 539.878836][T26773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5690'. [ 540.123539][T26740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 540.327191][T26809] netlink: 'syz.3.5701': attribute type 13 has an invalid length. [ 540.373361][T26809] erspan0: refused to change device tx_queue_len [ 540.407958][T26809] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 540.677202][T26836] tipc: Enabling of bearer rejected, already enabled [ 540.748429][T26840] __nla_validate_parse: 3 callbacks suppressed [ 540.748449][T26840] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5706'. [ 541.400053][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 541.411737][T26891] netlink: 'syz.1.5717': attribute type 18 has an invalid length. [ 541.419634][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 541.463438][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 541.501832][T26891] netlink: 'syz.1.5717': attribute type 18 has an invalid length. [ 541.532034][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 541.570638][T26906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5721'. [ 541.620982][T26902] netlink: 'syz.2.5719': attribute type 1 has an invalid length. [ 541.765013][T26903] bond1: (slave gretap1): making interface the new active one [ 541.780748][T26903] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 541.792104][T26920] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5726'. [ 541.984084][T26934] netlink: 'syz.1.5729': attribute type 1 has an invalid length. [ 542.005447][T26941] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 542.113311][T26941] 8021q: adding VLAN 0 to HW filter on device bond10 [ 542.197406][T26951] bond10: (slave geneve3): making interface the new active one [ 542.247729][T26951] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 542.506425][T26981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.625450][T26990] netlink: 'syz.0.5741': attribute type 5 has an invalid length. [ 542.689760][ T12] batadv1: left promiscuous mode [ 542.697923][ T12] bridge0: port 3(batadv1) entered disabled state [ 542.731021][ T12] bridge_slave_1: left promiscuous mode [ 542.743157][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.766767][ T12] bridge_slave_0: left promiscuous mode [ 542.778143][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.796819][ T12] bond4: left promiscuous mode [ 542.808560][ T12] bridge1: port 1(bond4) entered disabled state [ 542.990717][ T12] tipc: Disabling bearer [ 543.013590][ T12] bond3 (unregistering): (slave vti0): Releasing backup interface [ 543.481095][ T12] team0: Port device bond1 removed [ 543.493284][ T12] bond1 (unregistering): Released all slaves [ 543.509375][ T12] bond2 (unregistering): Released all slaves [ 543.545510][ T12] bond3 (unregistering): Released all slaves [ 543.563967][ T12] bond4 (unregistering): Released all slaves [ 543.598043][ T12] bond5 (unregistering): Released all slaves [ 543.633265][ T12] bond6 (unregistering): (slave lo): Releasing backup interface [ 543.645685][ T12] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 543.657760][ T12] bond6 (unregistering): Released all slaves [ 543.686684][ T12] bond0 (unregistering): Released all slaves [ 543.695577][ T33] smc: removing ib device sy‡1 [ 543.738155][T27002] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 543.757870][T27002] team0: Device macvlan3 is already an upper device of the team interface [ 543.917358][T27045] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 544.008108][T27048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5752'. [ 544.173557][T27062] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5756'. [ 544.344499][T27068] gre2: entered promiscuous mode [ 544.349513][T27068] gre2: entered allmulticast mode [ 544.427150][T27079] nbd: must specify a size in bytes for the device [ 544.800719][T27103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5766'. [ 544.822182][T27105] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.855540][T27103] netlink: 'syz.2.5766': attribute type 7 has an invalid length. [ 544.871859][T27103] netlink: 'syz.2.5766': attribute type 8 has an invalid length. [ 545.051090][T27124] syzkaller0: entered promiscuous mode [ 545.058801][T27124] syzkaller0: entered allmulticast mode [ 545.152336][T27132] netlink: 'syz.4.5773': attribute type 24 has an invalid length. [ 546.337496][ T12] tipc: Left network mode [ 546.908713][ T12] hsr_slave_0: left promiscuous mode [ 546.916491][ T12] hsr_slave_1: left promiscuous mode [ 547.032609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 547.058327][ T12] team0 (unregistering): Port device team_slave_0 removed [ 547.375778][ T12] IPVS: stop unused estimator thread 0... [ 547.802566][T27118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.969452][T27163] __nla_validate_parse: 2 callbacks suppressed [ 547.969473][T27163] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5781'. [ 548.206258][T27186] xt_hashlimit: max too large, truncated to 1048576 [ 548.227626][T27168] syzkaller0: entered promiscuous mode [ 548.237615][T27168] syzkaller0: entered allmulticast mode [ 548.255726][T27186] vlan2: entered promiscuous mode [ 548.260962][T27186] bridge0: entered promiscuous mode [ 548.298280][T27188] ip6tnl0: Caught tx_queue_len zero misconfig [ 548.360850][T27192] ip6t_REJECT: ECHOREPLY is not supported [ 548.721732][T27213] xt_bpf: check failed: parse error [ 549.464771][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5796'. [ 550.685323][T27249] netlink: 'syz.0.5799': attribute type 83 has an invalid length. [ 550.790628][T27258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5798'. [ 551.041302][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5806'. [ 551.174957][T27282] tipc: Started in network mode [ 551.179970][T27282] tipc: Node identity ce7dc8a26d8c, cluster identity 4711 [ 551.188265][T27282] tipc: Enabled bearer , priority 0 [ 551.258065][T27282] syzkaller0: entered promiscuous mode [ 551.264314][T27282] syzkaller0: entered allmulticast mode [ 551.270466][T27290] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5812'. [ 551.277342][T27282] tipc: Resetting bearer [ 551.516506][T27281] tipc: Resetting bearer [ 553.312923][T27281] tipc: Disabling bearer [ 553.339191][T27297] syzkaller0: entered promiscuous mode [ 553.345123][T27297] syzkaller0: entered allmulticast mode [ 553.357992][T27304] netlink: 'syz.4.5816': attribute type 29 has an invalid length. [ 554.984821][T27341] netlink: 'syz.4.5826': attribute type 4 has an invalid length. [ 555.192772][T23308] tipc: Node number set to 2750531746 [ 555.597663][T27364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5834'. [ 555.707870][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.722259][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.733872][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.742507][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.750317][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.047552][T27387] netlink: 'syz.0.5841': attribute type 3 has an invalid length. [ 556.059606][T27367] lo speed is unknown, defaulting to 1000 [ 556.136219][T27387] netlink: 'syz.0.5841': attribute type 2 has an invalid length. [ 556.162667][T27387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5841'. [ 556.417038][T27414] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5846'. [ 556.671892][T27427] netlink: 'syz.0.5851': attribute type 4 has an invalid length. [ 556.745395][T27367] lo speed is unknown, defaulting to 1000 [ 556.818116][T27437] netlink: 'syz.0.5854': attribute type 3 has an invalid length. [ 556.920201][T27439] syzkaller1: entered promiscuous mode [ 556.925948][T27439] syzkaller1: entered allmulticast mode [ 557.096043][T27367] chnl_net:caif_netlink_parms(): no params data found [ 557.131194][T27449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5857'. [ 557.259809][T27367] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.268003][T27367] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.276437][T27367] bridge_slave_0: entered allmulticast mode [ 557.284681][T27367] bridge_slave_0: entered promiscuous mode [ 557.294281][T27367] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.301837][T27367] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.309248][T27367] bridge_slave_1: entered allmulticast mode [ 557.317897][T27367] bridge_slave_1: entered promiscuous mode [ 557.394777][T27367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.420437][T27367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.508974][T27367] team0: Port device team_slave_0 added [ 557.538874][T27367] team0: Port device team_slave_1 added [ 557.623609][T27367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.640816][T27367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.670120][T27367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.687689][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5864'. [ 557.704736][T27472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.713662][T27476] netlink: 'syz.1.5865': attribute type 1 has an invalid length. [ 557.728848][T27472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.749278][T27367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.756854][T27367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.784727][T27367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.810880][T27476] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 557.855698][ T5835] Bluetooth: hci5: command tx timeout [ 557.910450][T27367] hsr_slave_0: entered promiscuous mode [ 557.919663][T27367] hsr_slave_1: entered promiscuous mode [ 557.928289][T27367] debugfs: 'hsr0' already exists in 'hsr' [ 557.950941][T27367] Cannot create hsr debugfs directory [ 558.009251][T27485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.055100][T27486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5868'. [ 558.266356][T27500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5872'. [ 558.290173][T27500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5872'. [ 558.347224][T27505] netlink: 'syz.4.5873': attribute type 1 has an invalid length. [ 558.392668][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 558.397218][T27507] pim6reg: entered allmulticast mode [ 558.504945][T27367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.532734][T27367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 558.554168][T27367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 558.570897][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5878'. [ 558.632933][T27523] vlan5: entered allmulticast mode [ 558.638255][T27523] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 558.833018][T27367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.844986][T27367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 558.855828][T27367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.051111][T27367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.057002][T27547] sctp: [Deprecated]: syz.2.5882 (pid 27547) Use of int in max_burst socket option deprecated. [ 559.057002][T27547] Use struct sctp_assoc_value instead [ 559.065595][T27367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 559.088651][T27367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.168143][T27367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.188809][T27367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 559.226299][T27367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.336097][T27560] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 559.484559][T27558] xt_CT: No such helper "syz1" [ 559.535165][ T5835] block nbd5: Receive control failed (result -107) [ 559.551324][T27565] netlink: 'syz.0.5888': attribute type 11 has an invalid length. [ 559.572076][T27564] nbd5: detected capacity change from 0 to 127 [ 559.599651][T27369] block nbd5: Dead connection, failed to find a fallback [ 559.650686][T27369] block nbd5: shutting down sockets [ 559.667097][T27369] blk_print_req_error: 286 callbacks suppressed [ 559.667116][T27369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.687869][T27367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.708682][T27369] buffer_io_error: 286 callbacks suppressed [ 559.708699][T27369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 559.735859][T27367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.746145][T27367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.755594][T27369] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.766747][T27369] Buffer I/O error on dev nbd5, logical block 1, async page read [ 559.779637][T27367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.788717][T27367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.796798][T27369] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.813244][T27369] Buffer I/O error on dev nbd5, logical block 2, async page read [ 559.826051][T27367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.847019][T27369] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.864962][T27369] Buffer I/O error on dev nbd5, logical block 3, async page read [ 559.874147][T27369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.885115][T27369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 559.893245][T27367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 559.932944][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 559.939914][T27369] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.968723][T27367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.981311][T27369] Buffer I/O error on dev nbd5, logical block 1, async page read [ 559.993736][T27369] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.003689][T27369] Buffer I/O error on dev nbd5, logical block 2, async page read [ 560.011774][T27369] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.021344][T27369] Buffer I/O error on dev nbd5, logical block 3, async page read [ 560.029919][T27369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.040401][T27369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 560.048414][T27369] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.058097][T27369] Buffer I/O error on dev nbd5, logical block 1, async page read [ 560.066756][T27369] ldm_validate_partition_table(): Disk read failed. [ 560.074388][T27369] Dev nbd5: unable to read RDB block 0 [ 560.082402][T27369] nbd5: unable to read partition table [ 560.098505][T27369] ldm_validate_partition_table(): Disk read failed. [ 560.106092][T27369] Dev nbd5: unable to read RDB block 0 [ 560.112631][T27369] nbd5: unable to read partition table [ 560.314106][T27367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.335235][T27612] netlink: 'syz.1.5898': attribute type 1 has an invalid length. [ 560.356029][T27367] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.387950][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.395247][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.433520][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.440768][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.478916][T27620] netlink: 'syz.4.5900': attribute type 11 has an invalid length. [ 560.563606][T27611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.847321][T27638] netlink: 'syz.0.5906': attribute type 1 has an invalid length. [ 560.857329][T27638] __nla_validate_parse: 8 callbacks suppressed [ 560.857347][T27638] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5906'. [ 560.874091][T27638] netlink: 'syz.0.5906': attribute type 1 has an invalid length. [ 560.882948][T27638] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5906'. [ 560.892684][T27638] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5906'. [ 560.914535][T27642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 560.957078][T27367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.104638][T27367] veth0_vlan: entered promiscuous mode [ 561.157962][T27367] veth1_vlan: entered promiscuous mode [ 561.217152][T27367] veth0_macvtap: entered promiscuous mode [ 561.245447][T27367] veth1_macvtap: entered promiscuous mode [ 561.289430][T27367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.318235][T27367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.361341][T27404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.370444][T27404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.380247][T27404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.395227][T27404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.528174][T27678] validate_nla: 1 callbacks suppressed [ 561.528192][T27678] netlink: 'syz.0.5916': attribute type 8 has an invalid length. [ 561.540694][T27673] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5918'. [ 561.599596][T27673] sctp: [Deprecated]: syz.1.5918 (pid 27673) Use of int in maxseg socket option. [ 561.599596][T27673] Use struct sctp_assoc_value instead [ 561.605649][T27404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.636196][T27404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.689722][T27404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.704933][T27404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.741978][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5919'. [ 561.816054][T27689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5827'. [ 562.014894][ T5826] Bluetooth: hci5: command 0x041b tx timeout [ 562.281073][T27727] syzkaller0: entered promiscuous mode [ 562.302360][T27727] syzkaller0: entered allmulticast mode [ 562.419960][T27731] netlink: 'syz.2.5932': attribute type 1 has an invalid length. [ 562.613508][T27743] lo speed is unknown, defaulting to 1000 [ 562.662405][T27747] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5939'. [ 562.676741][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'. [ 562.692405][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'. [ 562.924872][T27760] netlink: 'syz.0.5942': attribute type 11 has an invalid length. [ 562.964494][T27760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.060980][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.281156][T27775] netlink: 'syz.4.5947': attribute type 5 has an invalid length. [ 563.380534][T27778] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 563.507356][T27743] lo speed is unknown, defaulting to 1000 [ 563.659432][T27796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.758095][T27802] siw: device registration error -23 [ 564.029635][T27809] netlink: 'syz.3.5957': attribute type 5 has an invalid length. [ 564.085761][T27808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.099829][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 564.121323][T27808] [ 564.123701][T27808] ====================================================== [ 564.130801][T27808] WARNING: possible circular locking dependency detected [ 564.137846][T27808] syzkaller #0 Not tainted [ 564.142262][T27808] ------------------------------------------------------ [ 564.149270][T27808] syz.3.5957/27808 is trying to acquire lock: [ 564.155322][T27808] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 564.165850][T27808] [ 564.165850][T27808] but task is already holding lock: [ 564.173211][T27808] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 564.183564][T27808] [ 564.183564][T27808] which lock already depends on the new lock. [ 564.183564][T27808] [ 564.193961][T27808] [ 564.193961][T27808] the existing dependency chain (in reverse order) is: [ 564.202980][T27808] [ 564.202980][T27808] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 564.211061][T27808] down_write+0x96/0x200 [ 564.215837][T27808] kernfs_add_one+0x41/0x5c0 [ 564.220948][T27808] kernfs_create_dir_ns+0xde/0x130 [ 564.226575][T27808] internal_create_group+0x425/0x1180 [ 564.232483][T27808] cpuhp_invoke_callback+0x445/0x860 [ 564.238291][T27808] cpuhp_issue_call+0x430/0x7a0 [ 564.243655][T27808] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 564.250238][T27808] __cpuhp_setup_state+0x3f/0x60 [ 564.255690][T27808] do_one_initcall+0x250/0x8d0 [ 564.260965][T27808] do_initcall_level+0x104/0x190 [ 564.266423][T27808] do_initcalls+0x59/0xa0 [ 564.271267][T27808] kernel_init_freeable+0x2a6/0x3e0 [ 564.276992][T27808] kernel_init+0x1d/0x1d0 [ 564.281837][T27808] ret_from_fork+0x51e/0xb90 [ 564.286945][T27808] ret_from_fork_asm+0x1a/0x30 [ 564.292230][T27808] [ 564.292230][T27808] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 564.300042][T27808] [ 564.300042][T27808] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 564.307765][T27808] cpus_read_lock+0x42/0x160 [ 564.312870][T27808] static_key_disable+0x12/0x20 [ 564.318234][T27808] __inet_hash_connect+0x2430/0x2440 [ 564.324032][T27808] tcp_v4_connect+0xd5f/0x19b0 [ 564.329323][T27808] __inet_stream_connect+0x25a/0xdd0 [ 564.335132][T27808] inet_stream_connect+0x66/0xa0 [ 564.340585][T27808] __sys_connect+0x312/0x450 [ 564.345680][T27808] __x64_sys_connect+0x7a/0x90 [ 564.351037][T27808] do_syscall_64+0x14d/0xf80 [ 564.356143][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.362544][T27808] [ 564.362544][T27808] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 564.370197][T27808] lock_sock_nested+0x48/0x100 [ 564.375479][T27808] inet_shutdown+0x6a/0x390 [ 564.380605][T27808] nbd_mark_nsock_dead+0x2e9/0x560 [ 564.386250][T27808] recv_work+0x1c7f/0x1d90 [ 564.391198][T27808] process_scheduled_works+0xb6e/0x18c0 [ 564.397307][T27808] worker_thread+0xa53/0xfc0 [ 564.402422][T27808] kthread+0x388/0x470 [ 564.406999][T27808] ret_from_fork+0x51e/0xb90 [ 564.412102][T27808] ret_from_fork_asm+0x1a/0x30 [ 564.417386][T27808] [ 564.417386][T27808] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 564.425024][T27808] __mutex_lock+0x19f/0x1300 [ 564.430239][T27808] nbd_queue_rq+0x37b/0x1100 [ 564.435369][T27808] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 564.441449][T27808] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 564.448316][T27808] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 564.454817][T27808] blk_mq_run_hw_queue+0x348/0x4f0 [ 564.460443][T27808] blk_mq_dispatch_list+0xd16/0xe10 [ 564.466242][T27808] blk_mq_flush_plug_list+0x48d/0x570 [ 564.472212][T27808] __blk_flush_plug+0x3ed/0x4d0 [ 564.477577][T27808] __submit_bio+0x28d/0x580 [ 564.482590][T27808] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 564.489076][T27808] block_read_full_folio+0x599/0x830 [ 564.494870][T27808] filemap_read_folio+0x137/0x3b0 [ 564.500405][T27808] do_read_cache_folio+0x358/0x590 [ 564.506029][T27808] read_part_sector+0xb6/0x2b0 [ 564.511300][T27808] adfspart_check_ICS+0xa5/0xa40 [ 564.516920][T27808] bdev_disk_changed+0x7ba/0x1550 [ 564.522454][T27808] blkdev_get_whole+0x380/0x510 [ 564.527819][T27808] bdev_open+0x31e/0xd30 [ 564.532572][T27808] blkdev_open+0x470/0x610 [ 564.537501][T27808] do_dentry_open+0x785/0x14e0 [ 564.542779][T27808] vfs_open+0x3b/0x340 [ 564.547359][T27808] path_openat+0x2e08/0x3860 [ 564.552455][T27808] do_file_open+0x23e/0x4a0 [ 564.557468][T27808] do_sys_openat2+0x113/0x200 [ 564.562657][T27808] __x64_sys_openat+0x138/0x170 [ 564.568019][T27808] do_syscall_64+0x14d/0xf80 [ 564.573122][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.579530][T27808] [ 564.579530][T27808] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 564.586731][T27808] __mutex_lock+0x19f/0x1300 [ 564.591840][T27808] nbd_queue_rq+0xc6/0x1100 [ 564.596851][T27808] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 564.602910][T27808] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 564.609747][T27808] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 564.616324][T27808] blk_mq_run_hw_queue+0x348/0x4f0 [ 564.621943][T27808] blk_mq_dispatch_list+0xd16/0xe10 [ 564.627649][T27808] blk_mq_flush_plug_list+0x48d/0x570 [ 564.633528][T27808] __blk_flush_plug+0x3ed/0x4d0 [ 564.638888][T27808] __submit_bio+0x28d/0x580 [ 564.643909][T27808] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 564.650054][T27808] block_read_full_folio+0x599/0x830 [ 564.655853][T27808] filemap_read_folio+0x137/0x3b0 [ 564.661386][T27808] do_read_cache_folio+0x358/0x590 [ 564.667011][T27808] read_part_sector+0xb6/0x2b0 [ 564.672372][T27808] adfspart_check_ICS+0xa5/0xa40 [ 564.677825][T27808] bdev_disk_changed+0x7ba/0x1550 [ 564.683360][T27808] blkdev_get_whole+0x380/0x510 [ 564.688726][T27808] bdev_open+0x31e/0xd30 [ 564.693562][T27808] blkdev_open+0x470/0x610 [ 564.698486][T27808] do_dentry_open+0x785/0x14e0 [ 564.703762][T27808] vfs_open+0x3b/0x340 [ 564.708341][T27808] path_openat+0x2e08/0x3860 [ 564.713440][T27808] do_file_open+0x23e/0x4a0 [ 564.718449][T27808] do_sys_openat2+0x113/0x200 [ 564.723639][T27808] __x64_sys_openat+0x138/0x170 [ 564.729002][T27808] do_syscall_64+0x14d/0xf80 [ 564.734107][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.740509][T27808] [ 564.740509][T27808] -> #4 (set->srcu){.+.+}-{0:0}: [ 564.747623][T27808] __synchronize_srcu+0xca/0x300 [ 564.753077][T27808] elevator_switch+0x1e8/0x7a0 [ 564.758351][T27808] elevator_change+0x2cc/0x450 [ 564.763710][T27808] elevator_set_default+0x36c/0x430 [ 564.769416][T27808] blk_register_queue+0x366/0x430 [ 564.774952][T27808] __add_disk+0x677/0xd50 [ 564.779798][T27808] add_disk_fwnode+0xfb/0x480 [ 564.784988][T27808] nbd_dev_add+0x72c/0xb50 [ 564.789914][T27808] nbd_init+0x168/0x1f0 [ 564.794584][T27808] do_one_initcall+0x250/0x8d0 [ 564.799859][T27808] do_initcall_level+0x104/0x190 [ 564.805306][T27808] do_initcalls+0x59/0xa0 [ 564.810180][T27808] kernel_init_freeable+0x2a6/0x3e0 [ 564.815890][T27808] kernel_init+0x1d/0x1d0 [ 564.820729][T27808] ret_from_fork+0x51e/0xb90 [ 564.825831][T27808] ret_from_fork_asm+0x1a/0x30 [ 564.831111][T27808] [ 564.831111][T27808] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 564.838923][T27808] __mutex_lock+0x19f/0x1300 [ 564.844114][T27808] elevator_change+0x1b3/0x450 [ 564.849393][T27808] elevator_set_none+0xb5/0x140 [ 564.854761][T27808] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 564.861081][T27808] nbd_start_device+0x17f/0xb10 [ 564.866464][T27808] nbd_genl_connect+0x165b/0x1cf0 [ 564.871996][T27808] genl_family_rcv_msg_doit+0x22a/0x330 [ 564.878053][T27808] genl_rcv_msg+0x61c/0x7a0 [ 564.883068][T27808] netlink_rcv_skb+0x232/0x4b0 [ 564.888340][T27808] genl_rcv+0x28/0x40 [ 564.892832][T27808] netlink_unicast+0x80f/0x9b0 [ 564.898274][T27808] netlink_sendmsg+0x813/0xb40 [ 564.903544][T27808] ____sys_sendmsg+0x972/0x9f0 [ 564.908820][T27808] ___sys_sendmsg+0x2a5/0x360 [ 564.914004][T27808] __x64_sys_sendmsg+0x1bd/0x2a0 [ 564.919449][T27808] do_syscall_64+0x14d/0xf80 [ 564.924640][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.931042][T27808] [ 564.931042][T27808] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 564.939724][T27808] blk_alloc_queue+0x546/0x680 [ 564.945089][T27808] __blk_mq_alloc_disk+0x197/0x390 [ 564.950897][T27808] nbd_dev_add+0x499/0xb50 [ 564.955919][T27808] nbd_init+0x168/0x1f0 [ 564.960587][T27808] do_one_initcall+0x250/0x8d0 [ 564.965865][T27808] do_initcall_level+0x104/0x190 [ 564.971329][T27808] do_initcalls+0x59/0xa0 [ 564.976171][T27808] kernel_init_freeable+0x2a6/0x3e0 [ 564.981882][T27808] kernel_init+0x1d/0x1d0 [ 564.986722][T27808] ret_from_fork+0x51e/0xb90 [ 564.991846][T27808] ret_from_fork_asm+0x1a/0x30 [ 564.997124][T27808] [ 564.997124][T27808] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 565.004328][T27808] fs_reclaim_acquire+0x71/0x100 [ 565.009800][T27808] kmem_cache_alloc_noprof+0x40/0x650 [ 565.015687][T27808] __kernfs_iattrs+0xdf/0x340 [ 565.020876][T27808] kernfs_iop_setattr+0xea/0x3f0 [ 565.026415][T27808] notify_change+0xc1a/0xf40 [ 565.031516][T27808] do_truncate+0x1c2/0x250 [ 565.036442][T27808] path_openat+0x2f89/0x3860 [ 565.041541][T27808] do_file_open+0x23e/0x4a0 [ 565.046557][T27808] do_sys_openat2+0x113/0x200 [ 565.051760][T27808] __x64_sys_openat+0x138/0x170 [ 565.057127][T27808] do_syscall_64+0x14d/0xf80 [ 565.062236][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.068636][T27808] [ 565.068636][T27808] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 565.077144][T27808] __lock_acquire+0x15a5/0x2cf0 [ 565.082517][T27808] lock_acquire+0xf0/0x2e0 [ 565.087446][T27808] down_write+0x96/0x200 [ 565.092197][T27808] kernfs_unlink_sibling+0x71/0x180 [ 565.097902][T27808] __kernfs_remove+0x3e7/0x660 [ 565.103176][T27808] kernfs_remove_by_name_ns+0xaf/0x130 [ 565.109146][T27808] sysfs_remove_group+0xfc/0x2e0 [ 565.114597][T27808] sysfs_remove_groups+0x54/0xb0 [ 565.120143][T27808] net_rx_queue_update_kobjects+0x68d/0x740 [ 565.126550][T27808] netdev_unregister_kobject+0x113/0x450 [ 565.132698][T27808] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 565.139713][T27808] unregister_netdevice_queue+0x31f/0x360 [ 565.145950][T27808] nsim_destroy+0x20b/0x780 [ 565.151068][T27808] __nsim_dev_port_del+0x14d/0x1b0 [ 565.156807][T27808] nsim_dev_reload_destroy+0x288/0x490 [ 565.162793][T27808] nsim_dev_reload_down+0x8a/0xc0 [ 565.168374][T27808] devlink_reload+0x1d1/0x8d0 [ 565.173595][T27808] devlink_nl_reload_doit+0x9d4/0xc80 [ 565.179493][T27808] genl_family_rcv_msg_doit+0x22a/0x330 [ 565.185557][T27808] genl_rcv_msg+0x61c/0x7a0 [ 565.190575][T27808] netlink_rcv_skb+0x232/0x4b0 [ 565.195850][T27808] genl_rcv+0x28/0x40 [ 565.200345][T27808] netlink_unicast+0x80f/0x9b0 [ 565.205617][T27808] netlink_sendmsg+0x813/0xb40 [ 565.210888][T27808] ____sys_sendmsg+0x972/0x9f0 [ 565.216180][T27808] ___sys_sendmsg+0x2a5/0x360 [ 565.221396][T27808] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.226869][T27808] do_syscall_64+0x14d/0xf80 [ 565.231988][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.238412][T27808] [ 565.238412][T27808] other info that might help us debug this: [ 565.238412][T27808] [ 565.248653][T27808] Chain exists of: [ 565.248653][T27808] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 565.248653][T27808] [ 565.263099][T27808] Possible unsafe locking scenario: [ 565.263099][T27808] [ 565.270548][T27808] CPU0 CPU1 [ 565.275904][T27808] ---- ---- [ 565.281274][T27808] lock(&root->kernfs_rwsem); [ 565.286061][T27808] lock(cpuhp_state_mutex); [ 565.293176][T27808] lock(&root->kernfs_rwsem); [ 565.300465][T27808] lock(&root->kernfs_iattr_rwsem); [ 565.305740][T27808] [ 565.305740][T27808] *** DEADLOCK *** [ 565.305740][T27808] [ 565.313874][T27808] 5 locks held by syz.3.5957/27808: [ 565.319063][T27808] #0: ffffffff8fc3ee70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 565.327266][T27808] #1: ffff88802ab75130 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x249/0x3c0 [ 565.337644][T27808] #2: ffff88802ab71250 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x258/0x3c0 [ 565.348875][T27808] #3: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 [ 565.357834][T27808] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 565.368539][T27808] [ 565.368539][T27808] stack backtrace: [ 565.374436][T27808] CPU: 1 UID: 0 PID: 27808 Comm: syz.3.5957 Not tainted syzkaller #0 PREEMPT(full) [ 565.374459][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 565.374470][T27808] Call Trace: [ 565.374478][T27808] [ 565.374486][T27808] dump_stack_lvl+0xe8/0x150 [ 565.374512][T27808] print_circular_bug+0x2e1/0x300 [ 565.374537][T27808] check_noncircular+0x12e/0x150 [ 565.374562][T27808] __lock_acquire+0x15a5/0x2cf0 [ 565.374583][T27808] ? __lock_acquire+0x6b5/0x2cf0 [ 565.374606][T27808] lock_acquire+0xf0/0x2e0 [ 565.374624][T27808] ? kernfs_unlink_sibling+0x71/0x180 [ 565.374644][T27808] down_write+0x96/0x200 [ 565.374659][T27808] ? kernfs_unlink_sibling+0x71/0x180 [ 565.374675][T27808] ? __pfx_down_write+0x10/0x10 [ 565.374687][T27808] ? kernfs_root+0x1c/0x230 [ 565.374708][T27808] ? kernfs_root+0x1c/0x230 [ 565.374727][T27808] ? kernfs_root+0x1c/0x230 [ 565.374748][T27808] ? kernfs_root+0x1ea/0x230 [ 565.374768][T27808] kernfs_unlink_sibling+0x71/0x180 [ 565.374786][T27808] __kernfs_remove+0x3e7/0x660 [ 565.374802][T27808] kernfs_remove_by_name_ns+0xaf/0x130 [ 565.374819][T27808] sysfs_remove_group+0xfc/0x2e0 [ 565.374842][T27808] sysfs_remove_groups+0x54/0xb0 [ 565.374864][T27808] net_rx_queue_update_kobjects+0x68d/0x740 [ 565.374891][T27808] netdev_unregister_kobject+0x113/0x450 [ 565.374915][T27808] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 565.374943][T27808] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 565.374967][T27808] ? call_rcu+0x644/0x890 [ 565.374992][T27808] unregister_netdevice_queue+0x31f/0x360 [ 565.375015][T27808] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 565.375040][T27808] nsim_destroy+0x20b/0x780 [ 565.375060][T27808] __nsim_dev_port_del+0x14d/0x1b0 [ 565.375082][T27808] nsim_dev_reload_destroy+0x288/0x490 [ 565.375105][T27808] nsim_dev_reload_down+0x8a/0xc0 [ 565.375129][T27808] devlink_reload+0x1d1/0x8d0 [ 565.375153][T27808] ? __pfx_devlink_reload+0x10/0x10 [ 565.375172][T27808] ? apparmor_capable+0x126/0x170 [ 565.375191][T27808] ? bpf_lsm_capable+0x9/0x20 [ 565.375212][T27808] ? security_capable+0x7e/0x2c0 [ 565.375236][T27808] devlink_nl_reload_doit+0x9d4/0xc80 [ 565.375259][T27808] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 565.375281][T27808] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 565.375306][T27808] genl_family_rcv_msg_doit+0x22a/0x330 [ 565.375327][T27808] ? __asan_memcpy+0x40/0x70 [ 565.375342][T27808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.375371][T27808] ? bpf_lsm_capable+0x9/0x20 [ 565.375392][T27808] ? security_capable+0x7e/0x2c0 [ 565.375414][T27808] genl_rcv_msg+0x61c/0x7a0 [ 565.375436][T27808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.375455][T27808] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 565.375474][T27808] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 565.375494][T27808] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 565.375514][T27808] ? __lock_acquire+0x6b5/0x2cf0 [ 565.375536][T27808] netlink_rcv_skb+0x232/0x4b0 [ 565.375552][T27808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.375573][T27808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.375594][T27808] ? down_read+0x272/0x2e0 [ 565.375606][T27808] ? genl_rcv+0xd/0x40 [ 565.375625][T27808] genl_rcv+0x28/0x40 [ 565.375644][T27808] netlink_unicast+0x80f/0x9b0 [ 565.375661][T27808] ? __pfx_netlink_unicast+0x10/0x10 [ 565.375676][T27808] ? netlink_sendmsg+0x650/0xb40 [ 565.375692][T27808] ? skb_put+0x11b/0x210 [ 565.375711][T27808] netlink_sendmsg+0x813/0xb40 [ 565.375731][T27808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.375749][T27808] ? aa_sock_msg_perm+0xf1/0x1b0 [ 565.375771][T27808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.375789][T27808] ____sys_sendmsg+0x972/0x9f0 [ 565.375809][T27808] ? futex_unqueue+0x211/0x240 [ 565.375829][T27808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.375851][T27808] ? import_iovec+0x73/0xa0 [ 565.375870][T27808] ___sys_sendmsg+0x2a5/0x360 [ 565.375891][T27808] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.375914][T27808] ? futex_wait+0x29a/0x380 [ 565.375943][T27808] ? __fget_files+0x2a/0x420 [ 565.375956][T27808] ? __fget_files+0x3a0/0x420 [ 565.375972][T27808] __x64_sys_sendmsg+0x1bd/0x2a0 [ 565.375993][T27808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.376015][T27808] ? rcu_is_watching+0x15/0xb0 [ 565.376039][T27808] do_syscall_64+0x14d/0xf80 [ 565.376060][T27808] ? trace_irq_disable+0x3b/0x150 [ 565.376073][T27808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.376089][T27808] ? clear_bhb_loop+0x40/0x90 [ 565.376106][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.376122][T27808] RIP: 0033:0x7f07b319c819 [ 565.376138][T27808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.376153][T27808] RSP: 002b:00007f07b40fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.376171][T27808] RAX: ffffffffffffffda RBX: 00007f07b3415fa0 RCX: 00007f07b319c819 [ 565.376183][T27808] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000004 [ 565.376194][T27808] RBP: 00007f07b3232c91 R08: 0000000000000000 R09: 0000000000000000 [ 565.376204][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.376214][T27808] R13: 00007f07b3416038 R14: 00007f07b3415fa0 R15: 00007ffd7cbd1728 [ 565.376231][T27808] [ 565.379385][T27810] base_sock_release(ffff88805ad0ae00) sk=ffff888058714000 [ 565.909137][T27809] geneve2: entered promiscuous mode [ 565.914437][T27809] geneve2: entered allmulticast mode [ 565.920946][T27812] tc_dump_action: action bad kind [ 565.955757][T27405] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 565.965228][T27405] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 565.977644][T27808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.181485][ T5826] Bluetooth: hci5: command 0x041b tx timeout [ 567.515516][T27808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.526030][T27808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 567.575486][T27808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.585865][T27808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 567.642327][T27406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 567.650441][T27406] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.662478][T27406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 567.670581][T27406] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.682638][T27406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 567.690821][T27406] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 567.703152][ T64] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 567.711980][ T64] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 568.251756][ T5826] Bluetooth: hci5: command 0x041b tx timeout