last executing test programs: 55.300560834s ago: executing program 4 (id=6375): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket(0x2, 0x3, 0x1) getsockopt$MRT(r1, 0x0, 0xd0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x52cc1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 55.007224449s ago: executing program 4 (id=6381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan1\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x0) 54.819640404s ago: executing program 4 (id=6384): unshare(0x20000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) (async) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 54.704766547s ago: executing program 4 (id=6385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 54.449435994s ago: executing program 4 (id=6390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xec09, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.108561642s ago: executing program 4 (id=6393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x4, 0x6, 0xb7b3) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x5, 0x0, 0x2, 0x4, 0x80}}, @IFLA_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4042) 39.711192648s ago: executing program 32 (id=6393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x4, 0x6, 0xb7b3) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x5, 0x0, 0x2, 0x4, 0x80}}, @IFLA_ADDRESS={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4042) 2.706331726s ago: executing program 0 (id=7010): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$key(r3, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c081}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x3, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x7, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x12, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x4, 0x2, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x6, 0xb, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0x6e54, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x1, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) (async) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) getsockopt(r0, 0x9, 0x40000, &(0x7f0000000180)=""/74, &(0x7f0000000200)=0x4a) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x0, 0x3, 0x400, 0x0, 0x4400046, r11}) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r13, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="34200000680001002cbd7000fbdbdf2500000300100000000c00088005000700000000000c00088005000800200000000400040005bd6473034e60e0e3a2b994cbd467fa77de2a1f41eadf25d3aaa2652ee0ceabd87bea58cd69145b1924c63b3ebb349f7fe6f199e24dad9adec17aa9e976db293aca39ec9981ccc46402000022ccf039d83943accee55b2c3e4cb9394e3761500f012a83aa01392617cec0fee6ee1c6386b7"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x240000d0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.472741246s ago: executing program 0 (id=7014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) 2.326719234s ago: executing program 0 (id=7018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @empty}}) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0xda17, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffc, 0x0, 0x1000}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x27, 0x80000, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 1.911951372s ago: executing program 3 (id=7023): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@struct={0x4, 0x6, 0x0, 0x4, 0x0, 0x0, [{0x1, 0x5, 0x8}, {0xf, 0x5, 0x487aef13}, {0x4, 0x5, 0x7}, {0x2, 0x2, 0x9}, {0x4, 0x2, 0x7}, {0xf, 0x1, 0x7fffffff}]}]}}, 0x0, 0x6e, 0x0, 0x0, 0x2000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write(r5, &(0x7f0000000040)="09000000010000", 0x7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 1.555822753s ago: executing program 3 (id=7030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001080004"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900970000000000000008002600"/28], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.482249854s ago: executing program 1 (id=7031): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0xd) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 1.431097773s ago: executing program 3 (id=7033): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x100, 0x1, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x880) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000041000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040044) 1.36646554s ago: executing program 0 (id=7034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000000040f4df0000020000000000000000000000000000000000000000000000000000000000000000000000000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000080000000000000000000200000000"], 0xb8}}, 0x2c040010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000002000000000000000000a"], 0xb8}}, 0x10) 1.216254941s ago: executing program 0 (id=7036): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x7ff, 0x3, 0xfffffc01}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, 0x0, 0x76e6) 1.170639777s ago: executing program 0 (id=7037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000008180)=0x5, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0xfff0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=[{0xb8, 0x11, 0xfffffffb, "f08ed13b279c8e12b990a88357743926261168a48ce5ab82bf4a3793c981e761b8ab3e1f3500af41a214939bebdaf3023e3fede8874278dbc5a450e5fc4f57746ffc1a3a1e99cad768ba47c7f39da18f2e28522c818a00b0b5c7f3b56829b57437823b885df0dcc13b6fa6ba8696f2b46943454c224c177d8bc839ccd8323e4797862b1563072d513c24ce23f3f69ac144b89a10b47aeac56bd37ba735d28dab94556f99a781"}, {0x20, 0x113, 0x5, "1c84702e49003cc5b83aae"}, {0x30, 0x7, 0x3812, "979a0bf8167f0ae43ae4210585e612f58e535eba14f425c4fa8cda7f1185"}, {0x98, 0x3a, 0x2, "387822c6ac1165d3c19bfc1218d7cabc7f1b385f283e07846fa427d7daccac266834dc02938c49b65769c076c7c6510ad5a72d63e731a446d3c4e25c0cc5bec0b24e2872880fd8ce875f83465de33db418e3c533742dc6925990e0658163bf8a96caa30dc56811626631822d4de48c7e182b74e34aea1434d4a28b00afa925875fd0788fca3d5c"}, {0xf70, 0x3a, 0xa, "7206bdec30f12cabdc512c69395c56c68b491b22e2fb41055888b0c546380a958e6391f708eb90f258e5b9eedd04b49d220defd1cd97bad64b90a3fb01c57d070167f5827d417f867a567a4404282134813c970e0ab9be2fd762ba3e740940b9009c62699091d7f2a59ebcf01f380bc99dc39ca8c5c75090ac676f47e903a3a132a4c51004227bb4d5387851d350039170b6dfdc11cec9f2f9ea34ee561b569533ecd02957db0d1e0ace23051b29042ebe9be8f23719c6e3b5cfdb25f47bbb5884a2ff777f51e685a02db5b34b2ed185c2548899534a0dae2253cf7b9b9629a23fd84eda8b52038f7af2249a8f47009cdc81a8c4baf1fd42305926d1d9ce4ae2c8248b51aaf7273854af2d6badf9c863330a8ce90294f859fd1876fa8d2c52f188cf01b53397752bcbc35b2b6c7c0a984023b80090b06dc563bfbe0c3c7d92bca6c449faee5207e81f4ccc69b33b7499ca826e3a9e0d69f4c977aaf50e00388425ee21dca6a5c4b645566c9f79582a463fe6ae57f7e4ef920799c480eaac128bdb23a47021669f4defe8937771658f4c749891275b83d8bff9dfcaf08d5e72898cd81a923a8a7a432f667a96aa95ffabffd424494b1d871f83dd8fbe022d41dbf87b1a042b964204ea393f804dcb568804ab0a335481e573cf56841f73c1f597d6cd292fc6b7323e526926935ef7a3ee60ff8b9c02feda1268487a841ed6a4e3d9909a8c89ee652a09c2b2b6b23e50aea152bb55f4b7bc8f4ab7155eeedb46adf0b222b85de5dfe36e31ec19868edcfc16102ed22ec261b388739e3a0353e455bec9564d0df61f8a7c8ede06c02b904d03b1211ed50f282b4c512eedffd928e79f886e9f2bcab94645f5e1e45165c6c4ce411104d7e7ab1c3ef61bb3d783edb9a9d0deb74388d74877c087a2849f4a3499caf47107db3cebdd93e4943cef6d91b4691a0f68db0953167324cf18af92f3c624e7254cf8b951a5eaa5ee9fea4fff47613eb5da23102dbe3fcdaff60ef7df9f9524dfcb7c26ee6b5a812883f16d892cc9bb0f56cf35bbab48a857707753664eb5a93bfe90a92c2986587dafb48dd6db3128e3770f1ce4e08b4e95ad2204637fc283d1a64fd21bf9e5e7a6326e97d450a1ca3aa7da3d5dbdff6a608dbf600901794b76026b9301363dac88afaf301bd565eaba243152dba5ac0e2d8103f0c0d7678d103e0a394fe3a260b7d50a0d59728f02cb16fc487cda7abddbe6c83c5bf12b7170332423b65ebcf06e11a4564e93d0f7449b4c1277e09a228830e21b2edd62d16e67b04e3a0736cdc31f175bf0f9e2c5e3c30ec45c37aafd97cfb188381323a4b91cd2cfd3cbc06933cf5134b8e2e7008dcb11afffa712891e47ca308ee6f6b93699c9b517c683c0b85c099ad202440545466bc916d7fed1f38e123ee121bef117922f8f2e9a763836b6e200e03e6848e4c578d4d992a31c0213ae5f8cab007a7400ff2f9fc2704a51c3effefcdf99c7ae68e854bd543965357288f69c7f5bd41ebc8c4d0cb4421fde22825736d62ba9122d35aae66a5dd10a80529e911b6101ecb8ff44bb2420302c0326e6ca5071f417ffa4354312955912f625b9afab2ee4f782d38b9234efd8abb62d752d0e14e3cf56130791e74bd576fdeda16d5ec2a22507fcff9aeb7ed425db1437daf833afdf65873acac9e53d8defb0655fa11a019af2ec3a11ae6597fd70f89828c182c2cf83d61815c8aca4ba98961502f9f3ecd774772eedf5c3c661a13584da5fc4adfcbe71112dd84e254557a63e339df6b50c218256a7aabb930de2fca4f34b3ccd59f29c82a5a2bf4550e548d6c604268e95dc7fca7ac43892bced63aea7eee9b55497112ceedf90204160bbce9d910379922a8fd7bf17d661e826df1123663a6b2aeef147f9545c9a8f5575e9a5ec8066a7a3d761d36dc2da80bf0e297ac2444479fcd4e4244772b5de4e0789668dd3429a66d2c02f28fa3c8b808ef9095076698cd2c03049929e4f666b173677a65a8be63aea143dcf94d385262d0976d2497dc75759d8a547f9ac5628ccd40e418544eeea9fd61e6d299d1298fd09d8eea4e617963a69148b6b417ec5ad548a5332f3f6f4a78c77d2b81bb65fefe5a9d3f037872387ee0f87174bf643bd64613c313315ad0cab1963a612445cb396371562d9791be5df8e52a75263bf6b34b716eff5ea2cc26f4e660bf215a21901b8ae04b359a68b7e728c4e56d9861df2959da8204f1e4d29f371a0487c4afa8ed0e19749bffef4a5aebee8c9effb65c032e15751fd5a7d20e26f8c9250715655280d35642c2077b1f47689c5ee2f1f9bd47a3db845782b74a69591c479ce4c0469ff5482ab83bb8f15688e2fae14762a7965249425181fcce48bb17d71e8c24d0ca34f6cb81be4d07f9aa09f54d7c5bf24d8d43535c79c15fcc57825b07c0f96257f359d439320e2e9b4c63c933751adb506d39b69ea22cd9d036317f8ac3bda629e37014909fb3874c2a72f19a3005c446c76163e842321d98d5c3c270a7b975c94ec11989ce7d775fea03302f5c212385217fdcc6655f68df3e9a4c35b5793f639d8bf79c044d837fb0bc68aacb81cfbab9adb27d0d479743552aff80f0af8525a4ba4dfc0307a024297e5a023892d2bc797a46a42549c4f6a51f6acec9f580c6faeb1449adc22c2a1b5dd7799471d5a4e9cca40abeaf1752c0846b251dec689be30924f56a5195337b5d224349cea966c79e7ad3a5a7ba6ebc976568d259a91b3d04f8317601920412541d2e7d2673a8c0af70f907cb73d4275215e62003f82681c4d310aabc15c6f7b5674b8067523f8c2cf0415534f0be3f051bc22315bfd2b705f6d291b6b5f3c52c9830fe2b381bc291d3c341e390808962d5546ad772f8de93e6e985dc869d33ab265f3de89d8e2d8dbfc387306449f9bb3ccfffe9a01dc382f9307d06981f935686a70afe2e7282dceb3204dbbaaf017c126799261efece222ffafbfe3018b8148f3b5736c35848d6051eb6c49dea854dc4253b9c0438ea111bf4f21e3eef7bcb4b51821576efc6498dd070a2b89ce94cb7f919a00cc5e01f571cc295c7ec382e2ccd043736431de80b09d80998bf47f311d1ec26dcb2db639e5a1df09398fb5b972bb4e587be805cea900374388add475b2293cfa7570f136178741702ec70763507dfdd5b9bf2162c55c7e5256ed34f424c1bc6f75777a6d52bfa468b799129f66334daac122c095788df500f711b9c4b2455def56d129e23920049dd4a8a7ea041a06d25003c21f050aad5a8ee1f8ea2f748903090e7f1c6e1d1a5cba0adb2feb1eacb3a1d577a21ab6d46d6de5102d14a54b11811f2a76d8af59c17e521f306426d6d7ce650221a722d099715dc8a9536e4dd000219626fc39c2e2477fdc57d10466f2125a8b6e771546afd7d89c80100dac179147bcdd5922df422694951e7738ad95ab663a29c646469e92d1737af1d7c896ceafd6bd41e01882db22d92054a74bee3563d1207b3a3e2f738b8561a512145bc72a9a4a698623fae53e8b4c0ffa469749113b31e10279b69d370dbab52f448793ea5171b86a76d2890bc05828c1ab53dcee5e28a7ac3a4b538110682d8bcede5e927243acd8a616411c528bab85ad977c60c83872b6d842e04aca054c055a883b6c50f429b0cb09c909386ca335eaadfccbdd8432c16c253fab5c98511c7aaadf1134e5cb352234aac0af933df759cdcdab3d66aaf6e961c9147f7577119e0665b7a371ba04eb396cac102d9c31f826b3d9fc925e70400781e332a957cf9f67ce4b891f75487fc7a80c4006f0bfef933fbe166ffda6dd8a323d55bb980a9a9c828e893ad9852a4729131966306543fd1a5b0f28a9ae29f62a30fe1c740e678f7cd67491709d1d2c2730403b79c66982572cc3775173b2acc879090bdda9fa12f54b07acfe0b5ff77a1f19da8af9a2a8b8716a020e380302c6093dde77eb2e7780922744c987b574db093a82247ce449c764601c43e31c2fc4169205b5e88023076d96e0c0b4270609e7ad1b834ada14475cce1651a80221f7fefe5d2e5fa55f2477393043d72a24be514bc2cc9ec73bcc9fa6ad72c1361945638461d99ae6af9ef68d7687af93bd0a71ff848f7de4ee0927d7a87b675e7a1b64973fa22635013433f66baf78ccfa125c121ec70383403c46eda3d649b6ecacb93a55ac3cd070b26a35ee1f56685cdd526db9e26fe1680284b0305ca91e9ba5f2bc6dd57e36441fb0820c626c9071760787d021da007ae90845eca7b64cf404c3b0504925ddfaca130a1c9931b5d8405d9881438a3fa6793075cdf244a9f1c8ed9a0bb2528f71588f2face226bbdf24a0299285c3d963da52b3a37e08b729ff616ae09438d7ac7461aec9a267dd016e4f62a1fffb7fc934439f78e23a6ac43d17a1634ac7d16dfe99cd8781c77b8c2db856261ed9b3824e839fe1dc7d227ea5ceba784e9a7c26cd3ee2538519d8783697ef2fe786326310662f002c5ff17307d4764c8ae9051f5b5a1c00594771288353d13a748cd332cd12b7282c1c9e0ba66ef5643b41ae6252712bb9d9f87d60ac5b4d774c05099e1cf0d1e0e408b831715dc7e4cb80754620a6f66a3548e38b48b520599fcda4ea1e1c43e07ca2731254a9b0dea0c042cfc67228ba34277df50145caa10f38b91db9e08308c377bce8159518318cdd27c135026a4e531c8bd305e254cb71f550a9cc68b7d95a0c1de60f23bc9da1ed52563a4fe423419c34df593f9ce4a7febb2fd937d9003d5413a67a775a3f4bfa0d74153cef9d844131e5e457f22c5ced708adf699bdcc084c942956b97cd124d51331475c7696992f1fe87e051dff533e4448a2d5a2637a2499c8ec99ca41867a93ad0a647f0b45366fb5bb5effa9664fd4d7b2a706da95c68692681b0ff9a1aecf8a90742faff57405d5df231c103027c7a01f81e9e7a0f12c3c331bd261133b5a895a966588f78c5c2a270e25661af6f7f6ef74f71d293c2ffefdff5c280d4cfd91d1487f359499c856e67c777e223017f15b316fe04eb132aae3b9a77dde0a96c88eecea35e2bd3993a834ffaa06d452a46e533c7f872b831c6c2502949a83a6f5a4e751945eb7d94ed97f4de78a2673b5f803c8bda8e9139a2098fe50a84f88543e3547231f22d540413f99eca8ba186a58a0ae2e12d33fad27e62a47fec5ec91a0f157e027b64eee2befe1c91ebb12b86c819467120bbf15ff2c0e618ccdf58a538f7fd8d15a3b7ebf06b9c9f9731de7d6f1f2a2a1f18a313fd1939c268d2fce649b2f13424e896217da8ced94d9c3a7b49e81f7822d5e52c186a805b80284ab9e44ca4b85287495ab361a5ad4396c50ec5aa93b881eccd9619bc6c4067cfcbda8af8a8b843bc4652c11a6a4f54079cebd53cb40ff85543f464cc02b9908653f1416deff7824bc086fbb2e77de77fc55c59ceb2ab165d44f601681b7b16b466d03c50690fdcfd01e7e61beff7ee92588c9d2ff2bbb9fdd23d9d75949fba712eae873a70b25783927e6dab9f1ec3a2b166c7eb18eaeddb43e91c44857bf14cd689"}, {0x10, 0x101, 0xffffffff}, {0x60, 0x104, 0x7fffffff, "08129ef3c9676508d9edb086d64b90f049e8e725afc8cfad3c56c772e7483bb724c6d01bf4175096c9824840040c9da5af1f7b390d84791ebe0f650138ec681fbca85a01a59dd0230fba"}], 0x1180}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003540)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x3828}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 1.162270973s ago: executing program 1 (id=7038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x8, 0x5, 0x7}, 0x14) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.16015913s ago: executing program 2 (id=7039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8001, 'syz0\x00', @default, 0x1, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8001, 'syz0\x00', @default, 0x1, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) 1.099449899s ago: executing program 3 (id=7040): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="b9bbbbbbbbbbbbbbbbbbbbbb08"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r8) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x50, 0x29, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe0}, {0xb, 0xfff3}, {0x6, 0x6}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_HDR={0x5, 0x3, "fe"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x53}}}]}, 0x50}}, 0x4810) sendmmsg$unix(r8, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11b8e2e95f", 0x5}, {&(0x7f0000001c40)="b65ede783a15f51188f244407b54032c8de25afb0afe506046e064644f2466c938a010a17fcb02b152f6fafc6a07c80e1748758b76ab0c765cc835d6bc3143018f56accc7455f32a5ded552d125de404258cf9a07cb2bb9df4cfc7a4878fae90f0f2add904f5f9fd5e2f0943af860ab4f794d3e60998d45fb240e3618e98cb897c73aef2860f4a3854cf598c9d23c56ed4923b56dd2484bcd17db02fb475ae043f50d95d527a8151ce0d49dad5978796e94f56deeee4a613358d170e0c1574fe0be3b4", 0xc3}, {&(0x7f0000001d40)="be5173b5faac7a921e735f22e37b4c89c5b395256ef33d740561b860ac4d892da8c4f613ad50893212b37a34bd18", 0x2e}, {&(0x7f0000002f40)="edcb47e6a89a35448916ef8ebe79d0feb594b2acdb1d1ef934dbaf81338fc0195bea3a23d4957a5a35512ce1d891f82850b09da2702856be8e8493ee649b57aeb62b3d9c03cd312e3f0fe654c9825f8da087d346a7f65037783aec233b320c9b6ffeecb6e30e6cc7ece99e6c4e19f0f034de1a2a46de008038fbc586e4d78da4739e657cd5f78bf057564063d60f0ef831d1db86e539c39743d54c6e3c3c8d8b1f513da969dbcee48499cf22b08d527c8bc0232084916e8522d5334eb93683fe5e57e9c9ebb7ca0b17d805fd7e6c04543b1d1964e4e563", 0xd7}, {&(0x7f0000003040)="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", 0xdb3}], 0x5}}], 0x1, 0x20000800) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.096390026s ago: executing program 5 (id=7041): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="0424f979e2c8222be94ed6cc86e42ef22cc3e9a7400de39c9119bad24358977bce05d03837fc3da673830a15dfd295b08ca99d2abf97f2d9312d73a2d72b58ddcc04a7a0df93", 0x46}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500a108e7e247e7f00b9285ee346593a6ff9560f4cc8ac1a189b60ce2e166b6d7113bf475812689a2b0bd8cfe49b47a002d8c2fd47934731bb28560dcf131030c3079", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500f20300028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 839.440332ms ago: executing program 1 (id=7042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvfrom$x25(r3, &(0x7f0000000380)=""/172, 0xac, 0x10160, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x60, r9, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40000) 833.923755ms ago: executing program 5 (id=7043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa}, 0x1c) 763.95347ms ago: executing program 2 (id=7044): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getpeername$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040800) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) r7 = socket(0x18, 0xb6b2c7b518eb66a4, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) socket(0xa, 0x3, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r10, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r12, 0x114, 0x1, 0x0, 0x500) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) 721.277027ms ago: executing program 1 (id=7045): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000011140100000000000000000008004a0001000000080003000400000000000300030000000800010903b0f6155af973de0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008880) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r2 = socket$isdn(0x22, 0x3, 0x11) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"4bcbd8d748c13a5593e0c490a27fd68b", 0x0, 0x0, {0x0, 0xa}, {0x3, 0x4}, 0x732, [0x7, 0x0, 0x5, 0x1, 0x3, 0x6, 0x1, 0x9, 0x4, 0x8000, 0x8, 0x0, 0x6, 0x47e9ea02, 0x4, 0x47a]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"029cd41927c028218b1a98180569d91e", r3, r4, {0xb}, {0x1, 0x7ff}, 0x3, [0xa, 0xff, 0x80000000, 0x1, 0x3, 0x6, 0xd8e7, 0x2, 0x6, 0x6, 0x8, 0x8000000000000001, 0x0, 0xfffffffffffffff9, 0x7dd7, 0x100000000]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"029cd41927c028218b1a98180569d91e", r3, r4, {0xb}, {0x1, 0x7ff}, 0x3, [0xa, 0xff, 0x80000000, 0x1, 0x3, 0x6, 0xd8e7, 0x2, 0x6, 0x6, 0x8, 0x8000000000000001, 0x0, 0xfffffffffffffff9, 0x7dd7, 0x100000000]}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0xb51b0000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x940, 0x30, 0xfffffffffffffbff, 0xe}, &(0x7f0000000040)=0x18) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300012422000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r10, 0x6}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r10, 0x6}, &(0x7f00000000c0)=0x8) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000140)={0x4}) 625.101107ms ago: executing program 1 (id=7046): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000001c0)=0x2, 0x4) 568.063949ms ago: executing program 5 (id=7047): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x6304b610, 0x0, 0x2, 0x8, 0x7cbd}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r4, 0x1000) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) sendmsg$sock(r2, &(0x7f0000000440)={&(0x7f0000000200)=@caif, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="b92255af39375e39d87c9d43737822", 0xf}, {&(0x7f00000002c0)="d4f3c82ea97aacbd27742dba43cf8e43de1593d170ceafb2074f275d887b45383091deaf9260a96a7e51dd8f9d", 0x2d}, {&(0x7f0000000300)="256a51738dc6e50ba97753d89eb7f5d2417e209018f1567f54540e84d28adcbd506d845c3ea4702e5647e8bb52193a256dbc0673ca80a5390a2475d32c3e8669bb78688ae25cdc4d0a7c770763b9b76986afa2f7bd2cc7a8d570e19aaed5b8b44252acef260c3b4ebb9307e4eca276eee27a1bcee2b5fe644ac7ea2a6c422c080f1c1e7e403ef8952f581f2e9b3db6ad0932425f2578215545fb0f5a9bd9ad7d7ffa79b4204d3935226f91b0fe835a3bcb99", 0xb2}], 0x3, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}], 0x30}, 0x40) 567.621826ms ago: executing program 2 (id=7048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff55, &(0x7f0000000140)={0x0}}, 0x20040000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001000"/28], 0x50) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000e3ffffff6331ce5db6ba62d46a00"}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2b}, 0x94) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020011}, 0x6004084) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 384.539539ms ago: executing program 2 (id=7049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES64, @ANYRES32=r2], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000116ebfa2a30efd0adb6e4b89a8bdf63f14", @ANYRES16=r6, @ANYBLOB="450402000000000000000a0000000c00018008000b0000000000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000480)={0x802, 0x9, 0x9}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000000006ef649e14892046d8f20f222d51500000000000000000000f2ff0000"], 0x28}}, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x20000001, @loopback, 0x5}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018004000000000000c0000000c00000005000000010000000000000604000000005f2e400061226dc99e8e53a322616e5c9aa07c2369e3c882fc95f5a15554117e99d2b7984508dc7ff519d3626b054d1227c85ccd0800007e545ea842d0d39cf68dd4f578cf1b5951cc9f906f3d531202b7e9be1e8a5adb6f084c62cf0787da5595970b9e24310107b1bad837f5e7ab2d77fc7d4b6f83f9f9b25af362a7e2c6d95f268e0a50edaff810767121c0fb3bd1b84b3db00cfbd234c38db41e2a4053e9d00328464f"], 0x0, 0x29}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x27d0656737d78c41) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "96ea7fa685ea93a1", "7f9f45785f813d61b730fe0f43a5f110", "f07706b7", "c084c11b53d52000"}, 0x28) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000440)=0x81, 0x4) writev(r9, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a", 0xffffffb0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 365.954642ms ago: executing program 5 (id=7050): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000deff00001b20000008009a00"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$TIPC_NL_SOCK_GET(r6, 0x0, 0x4040) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x881) syz_genetlink_get_family_id$nl80211(0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x7c, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x4, @device_a, 0x1, @value=@broadcast, 0x8, 0x5, @device_a, 0xfffffffa}}, @chsw_timing={0x68, 0x4, {0x3f, 0xdd}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x36}, [], [0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'dvmrp0\x00', {0x5}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 219.901448ms ago: executing program 1 (id=7051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d0000000f0002006e657464657673cf0900"/54], 0x3c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x6, 0x1, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) accept(r5, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000600)=0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES64=r7], &(0x7f0000000640)='syzkaller\x00', 0xe171, 0xce, &(0x7f0000000400)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r4, 0xa773a000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00'}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 177.688124ms ago: executing program 5 (id=7052): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7, 0x1, 0x8, 0xffff7fff, {{0x11, 0x4, 0x2, 0x10, 0x44, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x5, 0x12, "ce1da3dd04b4d9f873e47a38ce7e4da8"}, {0x0, 0xe, "534c5bebd7598959c47871e4"}]}]}}}}}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000380)={@multicast1, @multicast2, r4}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 160.549899ms ago: executing program 2 (id=7053): socket$nl_route(0x10, 0x3, 0x0) 158.799656ms ago: executing program 3 (id=7054): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) close(r2) r3 = socket(0x15, 0x80002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'erspan0\x00', @remote}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 4.127999ms ago: executing program 3 (id=7055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}, 0x1, 0x600000000000000}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 3.787903ms ago: executing program 5 (id=7056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x7, 0x1, '^\\\x00'}, @NFTA_COMPAT_NAME={0x7, 0x1, '-\'\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffb}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=7057): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000002e00090025bd700000dcdf250500000069000a"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): T24590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5223'. [ 552.262392][T24615] netlink: 'syz.4.5229': attribute type 1 has an invalid length. [ 552.335224][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 552.354826][T24620] team0: Device ip6gre3 is of different type [ 552.862627][T24656] netlink: 'syz.1.5243': attribute type 1 has an invalid length. [ 553.072817][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5245'. [ 553.114007][T24669] netlink: 'syz.3.5245': attribute type 12 has an invalid length. [ 553.924174][T24708] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 553.957421][T24708] bond10 (unregistering): Released all slaves [ 554.056872][T24715] pim6reg1: entered promiscuous mode [ 554.092457][T24715] pim6reg1: entered allmulticast mode [ 554.230857][T24726] tipc: New replicast peer: 255.255.255.255 [ 554.237825][T24726] tipc: Enabled bearer , priority 10 [ 554.421187][T24733] x_tables: duplicate entry at hook 1 [ 555.349332][ T6744] tipc: Node number set to 3194646620 [ 555.530176][T24812] __nla_validate_parse: 14 callbacks suppressed [ 555.530196][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5292'. [ 555.640289][T24820] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.5294'. [ 555.739138][T24821] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 555.796816][T24820] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 556.095351][T24838] bridge0: entered allmulticast mode [ 556.140774][T24841] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5303'. [ 556.198985][T24841] bond8 (unregistering): Released all slaves [ 556.257056][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5303'. [ 556.269432][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5303'. [ 556.450658][T24868] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 556.525021][T24872] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 556.651095][T24874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.667077][T24876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5312'. [ 556.681688][T24876] tipc: Invalid UDP bearer configuration [ 556.681747][T24876] tipc: Enabling of bearer rejected, failed to enable media [ 556.696516][T24883] netlink: 1212 bytes leftover after parsing attributes in process `syz.2.5313'. [ 556.717041][T24879] vlan2: entered promiscuous mode [ 556.723823][T24879] geneve1: entered promiscuous mode [ 556.734060][T24879] vlan2: entered allmulticast mode [ 556.804874][T24879] geneve1: entered allmulticast mode [ 556.927263][T24888] validate_nla: 5 callbacks suppressed [ 556.927285][T24888] netlink: 'syz.0.5312': attribute type 26 has an invalid length. [ 557.164374][T24895] netlink: 'syz.2.5317': attribute type 1 has an invalid length. [ 557.265591][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5318'. [ 557.395164][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5321'. [ 557.420070][T24904] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5321'. [ 557.774827][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888020fab800: rx timeout, send abort [ 557.785555][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888020fab800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.334166][T24958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.361908][T24953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.380504][T24970] openvswitch: netlink: Unknown nsh attribute 0 [ 558.528684][T24970] openvswitch: netlink: Unknown nsh attribute 0 [ 558.695201][T24985] veth1_macvtap: left promiscuous mode [ 559.341786][T25025] ip6tnl0: left promiscuous mode [ 559.359384][T25025] bridge0: left allmulticast mode [ 559.690304][T25025] veth0_to_bond: left allmulticast mode [ 560.167683][T25025] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 561.003124][T25101] __nla_validate_parse: 12 callbacks suppressed [ 561.003146][T25101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5367'. [ 561.244528][T25109] tipc: Enabling of bearer rejected, failed to enable media [ 561.585659][T25136] netlink: 'syz.3.5380': attribute type 64 has an invalid length. [ 561.598489][T25136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5380'. [ 561.788772][T25150] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5386'. [ 561.944006][T25154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5388'. [ 562.412890][T25183] netlink: 'syz.4.5396': attribute type 39 has an invalid length. [ 562.712310][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'. [ 562.759277][T25198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'. [ 562.785615][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'. [ 562.816721][T25198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'. [ 562.854593][T25206] netlink: 'syz.3.5403': attribute type 2 has an invalid length. [ 562.879363][T25206] netlink: 'syz.3.5403': attribute type 1 has an invalid length. [ 562.887179][T25206] netlink: 'syz.3.5403': attribute type 1 has an invalid length. [ 562.904535][T25206] netlink: 'syz.3.5403': attribute type 1 has an invalid length. [ 563.125342][T25221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5407'. [ 563.186666][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5409'. [ 564.062973][T25274] wlan0 speed is unknown, defaulting to 1000 [ 564.367151][T25274] vxcan1 speed is unknown, defaulting to 1000 [ 565.243501][T25335] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.120352][T25375] Unsupported ieee802154 address type: 0 [ 566.388426][T25393] __nla_validate_parse: 11 callbacks suppressed [ 566.388447][T25393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5459'. [ 566.477423][T25397] ipt_rpfilter: unknown options [ 566.488353][T25397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5460'. [ 566.504377][T25398] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 566.534034][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5463'. [ 566.954209][T25421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.963582][T25423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5470'. [ 566.986276][T25426] x_tables: unsorted entry at hook 2 [ 567.012311][T25423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.055168][T25427] sctp: [Deprecated]: syz.2.5472 (pid 25427) Use of int in maxseg socket option. [ 567.055168][T25427] Use struct sctp_assoc_value instead [ 567.213943][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5476'. [ 567.350421][T25441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.458393][T25450] tipc: Resetting bearer [ 567.915267][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'. [ 567.924838][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 567.964126][T25467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5485'. [ 568.201628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.232161][T25488] netlink: 'syz.0.5491': attribute type 11 has an invalid length. [ 568.289267][T25488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5491'. [ 568.307263][T25493] netlink: 'syz.3.5494': attribute type 2 has an invalid length. [ 568.332752][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5494'. [ 568.369702][T25493] netlink: 'syz.3.5494': attribute type 2 has an invalid length. [ 568.656472][T25515] xt_CONNSECMARK: invalid mode: 0 [ 568.773762][T25523] netlink: 'syz.4.5503': attribute type 33 has an invalid length. [ 568.906339][T25526] netlink: 'syz.3.5502': attribute type 7 has an invalid length. [ 568.920845][ T2123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.938743][ T2123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.947703][T25526] netlink: 'syz.3.5502': attribute type 8 has an invalid length. [ 568.966923][T25530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.977650][T25529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.351151][T25549] sctp: [Deprecated]: syz.2.5510 (pid 25549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.351151][T25549] Use struct sctp_sack_info instead [ 569.368184][T25549] netlink: 'syz.2.5510': attribute type 3 has an invalid length. [ 569.409270][T25551] netlink: 'syz.4.5511': attribute type 21 has an invalid length. [ 569.417207][T25551] netlink: 'syz.4.5511': attribute type 4 has an invalid length. [ 569.485325][T25551] netlink: 'syz.4.5511': attribute type 5 has an invalid length. [ 569.675602][T25564] netlink: 'syz.0.5515': attribute type 25 has an invalid length. [ 569.881357][T25583] IPVS: length: 239 != 24 [ 569.935728][T25582] openvswitch: netlink: Missing valid actions attribute. [ 569.966732][T25582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.998600][T25582] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 570.027157][T25582] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 570.058557][T25582] tipc: Resetting bearer [ 570.523241][T25627] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 571.061060][T25658] pim6reg: entered allmulticast mode [ 571.067787][T25658] pim6reg: left allmulticast mode [ 571.487411][T25677] __nla_validate_parse: 11 callbacks suppressed [ 571.487434][T25677] netlink: 808 bytes leftover after parsing attributes in process `syz.4.5546'. [ 571.567177][T25685] wlan0 speed is unknown, defaulting to 1000 [ 571.634631][T25692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5552'. [ 571.656009][T25692] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5552'. [ 571.733476][T25699] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 571.746036][T25699] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5554'. [ 572.297523][T25685] vxcan1 speed is unknown, defaulting to 1000 [ 572.365761][T25721] bond8: option miimon: invalid value (18446744073709551585) [ 572.388595][T25721] bond8: option miimon: allowed values 0 - 2147483647 [ 572.407466][T25721] bond8 (unregistering): Released all slaves [ 572.766412][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'. [ 572.790839][T25743] netlink: 'syz.3.5566': attribute type 11 has an invalid length. [ 573.103970][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 573.171480][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 573.191544][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'. [ 573.241702][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'. [ 573.422331][T25774] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5574'. [ 573.477142][T25774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.693633][T25790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.006350][T25805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 574.017463][T25807] tipc: Enabling of bearer rejected, failed to enable media [ 574.375946][T25832] validate_nla: 11 callbacks suppressed [ 574.375967][T25832] netlink: 'syz.4.5591': attribute type 1 has an invalid length. [ 574.431769][T25830] Can't find ip_set type bitmap:ip,mac [ 574.431934][T25836] Can't find ip_set type bitmap:ip,mac [ 574.533552][T25840] bond8: entered promiscuous mode [ 574.543552][T25840] bond8: entered allmulticast mode [ 574.681806][T25849] netlink: 'syz.4.5597': attribute type 11 has an invalid length. [ 574.706542][T25850] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 574.863754][T25856] x_tables: duplicate entry at hook 3 [ 575.499827][T25894] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 575.533513][T25894] netlink: 'syz.3.5610': attribute type 2 has an invalid length. [ 575.535039][T25891] xt_socket: unknown flags 0xe4 [ 575.562447][T25892] xt_socket: unknown flags 0xe4 [ 575.763967][T25912] netlink: 'syz.1.5617': attribute type 1 has an invalid length. [ 575.946630][T25920] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 576.409211][T25954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.529880][T25959] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.537122][T25959] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 576.655702][T25959] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 576.942527][T25987] __nla_validate_parse: 14 callbacks suppressed [ 576.942548][T25987] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5638'. [ 577.049336][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5639'. [ 577.344012][T26008] vlan0: entered promiscuous mode [ 577.355260][T26008] bridge0: entered promiscuous mode [ 577.451690][T26016] syzkaller1: entered promiscuous mode [ 577.457709][T26016] syzkaller1: entered allmulticast mode [ 577.466252][T26011] openvswitch: netlink: Message has 8 unknown bytes. [ 577.497356][T26011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.658202][ T6748] IPVS: starting estimator thread 0... [ 577.750252][T26023] IPVS: using max 24 ests per chain, 57600 per kthread [ 577.767435][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5651'. [ 577.809850][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 577.852798][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5649'. [ 577.904059][T26025] netlink: 'syz.1.5649': attribute type 1 has an invalid length. [ 578.082562][T26037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5653'. [ 578.365987][T26057] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 578.389386][T26057] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 578.414198][T26062] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5657'. [ 578.425444][T26062] netlink: 'syz.4.5657': attribute type 1 has an invalid length. [ 578.698922][T26074] netlink: 'syz.1.5665': attribute type 39 has an invalid length. [ 578.728644][T26082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5666'. [ 578.744443][T26074] syz_tun (unregistering): left promiscuous mode [ 578.777181][T26083] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5667'. [ 578.826405][T26089] openvswitch: netlink: Flow actions attr not present in new flow. [ 578.846342][T26083] syzkaller1: entered promiscuous mode [ 578.853463][T26072] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 578.854405][T26083] syzkaller1: entered allmulticast mode [ 579.070700][ T2123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.081760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.141162][T26101] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5674'. [ 579.150556][T26101] netlink: 'syz.3.5674': attribute type 2 has an invalid length. [ 579.392285][T26118] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 579.486130][T26119] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 579.612388][T26135] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003 [ 579.801371][T26146] bond0: entered promiscuous mode [ 579.806670][T26146] bond_slave_0: entered promiscuous mode [ 579.812812][T26146] bond_slave_1: entered promiscuous mode [ 579.821837][T26146] team0: entered promiscuous mode [ 579.827084][T26146] team_slave_0: entered promiscuous mode [ 579.833520][T26146] team_slave_1: entered promiscuous mode [ 579.841583][T26146] batadv0: entered promiscuous mode [ 579.851102][T26146] debugfs: 'hsr1' already exists in 'hsr' [ 579.857937][T26146] Cannot create hsr debugfs directory [ 579.865103][T26146] hsr1: entered allmulticast mode [ 579.879731][T26146] bond0: entered allmulticast mode [ 579.886463][T26146] bond_slave_0: entered allmulticast mode [ 579.895386][T26146] bond_slave_1: entered allmulticast mode [ 579.905572][T26146] team0: entered allmulticast mode [ 579.915723][T26146] team_slave_0: entered allmulticast mode [ 579.928328][T26146] team_slave_1: entered allmulticast mode [ 579.943172][T26146] batadv0: entered allmulticast mode [ 579.949869][T26146] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 579.991111][T26146] bond0: left promiscuous mode [ 579.999681][T26146] bond_slave_0: left promiscuous mode [ 580.007468][T26146] bond_slave_1: left promiscuous mode [ 580.013904][T26146] team0: left promiscuous mode [ 580.018998][T26146] team_slave_0: left promiscuous mode [ 580.028412][T26146] team_slave_1: left promiscuous mode [ 580.044405][T26146] batadv0: left promiscuous mode [ 580.049888][T26158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.059251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.115662][T26145] bond0: entered promiscuous mode [ 580.121602][T26145] bond_slave_0: entered promiscuous mode [ 580.127748][T26145] bond_slave_1: entered promiscuous mode [ 580.137473][T26145] team0: entered promiscuous mode [ 580.145809][T26145] team_slave_0: entered promiscuous mode [ 580.153183][T26145] team_slave_1: entered promiscuous mode [ 580.167100][T26145] batadv0: entered promiscuous mode [ 580.181008][T26145] debugfs: 'hsr1' already exists in 'hsr' [ 580.191563][T26145] Cannot create hsr debugfs directory [ 580.197954][T26145] hsr1: entered allmulticast mode [ 580.204038][T26145] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 580.213380][T26145] bond0: left promiscuous mode [ 580.225084][T26145] bond_slave_0: left promiscuous mode [ 580.231420][T26145] bond_slave_1: left promiscuous mode [ 580.237673][T26145] team0: left promiscuous mode [ 580.245923][T26145] team_slave_0: left promiscuous mode [ 580.255609][T26145] team_slave_1: left promiscuous mode [ 580.263278][T26145] batadv0: left promiscuous mode [ 580.367076][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.376702][T17562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.388807][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.398876][T26169] bond9: ARP target 1.0.0.0 is already present [ 580.406046][T26169] bond9: option arp_ip_target: invalid value (1) [ 580.415906][T26169] bond9 (unregistering): Released all slaves [ 580.991874][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.202378][T26207] netlink: 'syz.0.5700': attribute type 6 has an invalid length. [ 581.218368][T26216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.361945][T26228] netlink: 'syz.1.5708': attribute type 7 has an invalid length. [ 581.419647][T26230] syzkaller1: entered promiscuous mode [ 581.429160][T26230] syzkaller1: entered allmulticast mode [ 581.667821][T26246] batadv2: left allmulticast mode [ 581.674245][T26246] batadv2: left promiscuous mode [ 581.691208][T26246] bridge0: port 4(batadv2) entered disabled state [ 581.702822][T26246] team0: left allmulticast mode [ 581.707761][T26246] team_slave_0: left allmulticast mode [ 581.715584][T26246] team_slave_1: left allmulticast mode [ 581.722575][T26246] team0: left promiscuous mode [ 581.727562][T26246] team_slave_0: left promiscuous mode [ 581.734470][T26246] team_slave_1: left promiscuous mode [ 581.741829][T26246] bridge0: port 3(team0) entered disabled state [ 581.763745][T26246] bridge_slave_1: left allmulticast mode [ 581.771291][T26246] bridge_slave_1: left promiscuous mode [ 581.781159][T26246] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.797343][T26246] bridge_slave_0: left allmulticast mode [ 581.808552][T26246] bridge_slave_0: left promiscuous mode [ 581.825881][T26246] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.982614][T26254] !€ÿ: renamed from bond_slave_0 (while UP) [ 582.004158][T26243] wlan0 speed is unknown, defaulting to 1000 [ 582.095387][T26259] __nla_validate_parse: 8 callbacks suppressed [ 582.095408][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5721'. [ 582.284052][T26259] team1: entered promiscuous mode [ 582.289459][T26259] team1: entered allmulticast mode [ 582.302604][T26243] vxcan1 speed is unknown, defaulting to 1000 [ 582.463283][T26268] netlink: 'syz.4.5724': attribute type 1 has an invalid length. [ 582.494193][T26268] netlink: 'syz.4.5724': attribute type 3 has an invalid length. [ 582.517502][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 582.580509][T26268] netlink: 'syz.4.5724': attribute type 7 has an invalid length. [ 582.630456][T26268] netlink: 'syz.4.5724': attribute type 8 has an invalid length. [ 582.648902][T26268] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5724'. [ 582.684698][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5726'. [ 582.697516][T26268] NCSI netlink: No device for ifindex 131092 [ 582.767462][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5726'. [ 582.855695][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5728'. [ 583.005532][T26285] ip6t_srh: unknown srh match flags 4000 [ 583.092165][T26294] netlink: 'syz.2.5732': attribute type 2 has an invalid length. [ 583.113909][T26294] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5732'. [ 583.307499][T26297] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5733'. [ 583.368179][T26309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5732'. [ 583.962967][T26331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.133244][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'. [ 584.253211][T26342] net_ratelimit: 8 callbacks suppressed [ 584.253230][T26342] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 584.519273][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.638647][T26359] netlink: 'syz.4.5753': attribute type 10 has an invalid length. [ 584.697760][T26366] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 584.773660][T26369] netlink: 'syz.2.5754': attribute type 1 has an invalid length. [ 584.833846][T21446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.843382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.180721][T26402] netlink: 'syz.1.5765': attribute type 83 has an invalid length. [ 585.556207][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.910278][T26449] syzkaller1: entered promiscuous mode [ 585.915827][T26449] syzkaller1: entered allmulticast mode [ 585.941800][T26454] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 586.109588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.300014][T26469] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 586.590265][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.797770][T26486] netem: change failed [ 586.808094][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.820959][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.830697][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.838765][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.848725][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.854339][T26486] netem: change failed [ 587.005670][T26490] wlan0 speed is unknown, defaulting to 1000 [ 587.107584][T26504] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 587.116296][T26504] syzkaller1: linktype set to 820 [ 587.244631][T15403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.260843][T26509] SET target dimension over the limit! [ 587.290390][T26508] C: renamed from lo (while UP) [ 587.310265][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.320189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.324730][T26508] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 587.405720][T15403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.529324][T26518] netlink: 'syz.3.5800': attribute type 4 has an invalid length. [ 587.583952][T15403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.672658][T26490] vxcan1 speed is unknown, defaulting to 1000 [ 587.734208][T15403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.322721][T26553] __nla_validate_parse: 10 callbacks suppressed [ 588.322911][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5809'. [ 588.335632][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5809'. [ 588.380937][T15403] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 588.422798][T15403] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 588.646549][T15403] tipc: Disabling bearer [ 588.715334][T15403] dvmrp0 (unregistering): left allmulticast mode [ 588.905843][T15403] bond0 (unregistering): left promiscuous mode [ 588.912426][ T5848] Bluetooth: hci0: command tx timeout [ 588.918110][T15403] bond_slave_0: left promiscuous mode [ 588.924037][T15403] bond_slave_1: left promiscuous mode [ 588.933620][T15403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.944462][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.955826][T15403] bond0 (unregistering): Released all slaves [ 589.081471][T15403] bond1 (unregistering): Released all slaves [ 589.205327][T15403] bond2 (unregistering): Released all slaves [ 589.220579][T15403] bond3 (unregistering): Released all slaves [ 589.236561][T15403] bond4 (unregistering): Released all slaves [ 589.251558][T15403] bond5 (unregistering): Released all slaves [ 589.378572][T15403] bond6 (unregistering): Released all slaves [ 589.393975][T15403] bond7 (unregistering): Released all slaves [ 589.507434][T15403] bond8 (unregistering): Released all slaves [ 589.531331][T26549] netlink: 'syz.0.5807': attribute type 2 has an invalid length. [ 589.658963][T15403] 9: left promiscuous mode [ 589.725481][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5814'. [ 589.740439][T15403] : left promiscuous mode [ 589.850960][T26569] bond0: entered promiscuous mode [ 589.858074][T26569] bond0: left promiscuous mode [ 589.896089][T15403] tipc: Disabling bearer [ 589.902261][T15403] tipc: Left network mode [ 590.012997][T26586] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5819'. [ 590.034348][T26578] wlan0 speed is unknown, defaulting to 1000 [ 590.396530][T26601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5822'. [ 590.397121][T26490] chnl_net:caif_netlink_parms(): no params data found [ 590.479754][T26607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5823'. [ 590.813884][T26578] vxcan1 speed is unknown, defaulting to 1000 [ 590.959769][T26490] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.971959][T26490] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.979932][T26490] bridge_slave_0: entered allmulticast mode [ 590.988402][T26490] bridge_slave_0: entered promiscuous mode [ 590.996458][ T5848] Bluetooth: hci0: command tx timeout [ 591.063048][T26490] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.085382][T26490] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.094031][T26490] bridge_slave_1: entered allmulticast mode [ 591.102397][T26490] bridge_slave_1: entered promiscuous mode [ 591.282425][T26490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.311287][T26490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.476186][T26490] team0: Port device team_slave_0 added [ 591.502430][T26642] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5829'. [ 591.512725][T26490] team0: Port device team_slave_1 added [ 591.575601][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'. [ 592.080778][T26490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.088294][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.131228][T26490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.145876][T26667] sctp: [Deprecated]: syz.4.5838 (pid 26667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.145876][T26667] Use struct sctp_sack_info instead [ 592.172474][T15403] batadv0: left promiscuous mode [ 592.183327][T15403] hsr_slave_0: left promiscuous mode [ 592.190628][T15403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.201082][T15403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.747433][T15403] team0 (unregistering): Port device team_slave_1 removed [ 592.793909][T15403] team0 (unregistering): Port device team_slave_0 removed [ 593.079799][ T5848] Bluetooth: hci0: command tx timeout [ 593.145192][T26490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.153645][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.180236][T26490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.506191][T26490] hsr_slave_0: entered promiscuous mode [ 593.530936][T26490] hsr_slave_1: entered promiscuous mode [ 593.548212][T26490] debugfs: 'hsr0' already exists in 'hsr' [ 593.576143][T26490] Cannot create hsr debugfs directory [ 593.700087][T26706] netlink: 'syz.4.5851': attribute type 16 has an invalid length. [ 593.707997][T26706] netlink: 'syz.4.5851': attribute type 17 has an invalid length. [ 593.802487][T26706] bond0: left allmulticast mode [ 593.807440][T26706] !€ÿ: left allmulticast mode [ 593.897897][T26706] net_ratelimit: 1 callbacks suppressed [ 593.897910][T26706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.493703][T26734] netlink: 'syz.4.5860': attribute type 4 has an invalid length. [ 594.511865][T26734] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5860'. [ 594.720708][T26743] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5864'. [ 594.721315][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'. [ 594.743281][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5865'. [ 594.781335][T26748] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5866'. [ 594.866470][T26751] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5866'. [ 595.038532][T26490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.060414][T26490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 595.084971][T26490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.111826][T26490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.149142][ T5848] Bluetooth: hci0: command tx timeout [ 595.374258][T26490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.422294][T26490] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.437897][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.445228][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.482740][T26783] wlan0 speed is unknown, defaulting to 1000 [ 595.483384][T26782] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 595.506652][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.513910][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.568084][T26782] tipc: Enabling of bearer rejected, failed to enable media [ 595.673502][T26787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5876'. [ 595.678139][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5877'. [ 595.696537][T26787] netlink: 'syz.3.5876': attribute type 4 has an invalid length. [ 595.702365][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5877'. [ 595.802118][T15403] IPVS: stop unused estimator thread 0... [ 595.844515][T26795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5878'. [ 595.924331][T26795] bridge9: port 1(veth11) entered blocking state [ 595.940623][T26795] bridge9: port 1(veth11) entered disabled state [ 595.968753][T26795] veth11: entered allmulticast mode [ 596.006121][T26795] veth11: entered promiscuous mode [ 596.063548][T26801] bridge9: port 2(veth0_to_bond) entered blocking state [ 596.092088][T26801] bridge9: port 2(veth0_to_bond) entered disabled state [ 596.099638][T26801] veth0_to_bond: entered allmulticast mode [ 596.119972][T26801] veth0_to_bond: entered promiscuous mode [ 596.198230][T26812] syzkaller0: entered promiscuous mode [ 596.218994][T26812] syzkaller0: entered allmulticast mode [ 596.254380][T26797] netlink: 'syz.4.5879': attribute type 1 has an invalid length. [ 598.083131][T26823] lo: entered promiscuous mode [ 598.088176][T26823] netlink: 'syz.1.5884': attribute type 2 has an invalid length. [ 598.097843][T26823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.129228][T26490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.358285][T26837] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.372806][T26490] veth0_vlan: entered promiscuous mode [ 598.388157][T26490] veth1_vlan: entered promiscuous mode [ 598.457424][T26490] veth0_macvtap: entered promiscuous mode [ 598.474265][T26490] veth1_macvtap: entered promiscuous mode [ 598.516149][T26490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.565632][T26490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.603863][ T2084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.620912][ T2084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.637160][ T2084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.653059][T26847] pim6reg1: entered promiscuous mode [ 598.660028][T26847] pim6reg1: entered allmulticast mode [ 598.669890][ T2084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.961483][T26864] netlink: 'syz.1.5900': attribute type 4 has an invalid length. [ 598.973444][T26861] netlink: 'syz.4.5899': attribute type 3 has an invalid length. [ 599.059920][T21444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.082867][T21444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.173414][T26876] C: renamed from team_slave_0 [ 599.192747][T26876] netlink: 'syz.1.5904': attribute type 1 has an invalid length. [ 599.203142][T26879] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 599.211796][T26876] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 599.231093][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.256540][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.362246][T26884] netlink: 'syz.3.5906': attribute type 22 has an invalid length. [ 599.646179][T26903] __nla_validate_parse: 14 callbacks suppressed [ 599.646200][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5914'. [ 599.672234][T26903] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 599.677060][T26901] netlink: 'syz.2.5912': attribute type 11 has an invalid length. [ 599.704741][T26901] netlink: 'syz.2.5912': attribute type 4 has an invalid length. [ 599.739127][T26901] netlink: 'syz.2.5912': attribute type 5 has an invalid length. [ 599.746943][T26901] netlink: 'syz.2.5912': attribute type 6 has an invalid length. [ 599.797181][T26901] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.5912'. [ 599.821939][T26916] xt_cgroup: xt_cgroup: no path or classid specified [ 599.884138][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5917'. [ 599.922793][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'. [ 599.933605][T26919] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 600.011321][T26928] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5919'. [ 600.254364][T26941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5925'. [ 600.371533][T26943] netlink: 'syz.4.5926': attribute type 26 has an invalid length. [ 600.388034][T26943] netlink: 'syz.4.5926': attribute type 26 has an invalid length. [ 600.427288][T26951] netlink: 'syz.0.5927': attribute type 1 has an invalid length. [ 600.468426][T26951] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 600.759419][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5932'. [ 601.583301][T27029] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5950'. [ 601.613159][ T5848] block nbd0: Receive control failed (result -32) [ 601.622922][T27029] block nbd0: reconnected socket [ 601.636476][T27031] netlink: 380 bytes leftover after parsing attributes in process `syz.1.5951'. [ 601.862304][ T50] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 601.877471][T27042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5953'. [ 602.157197][ T50] dvmrp6 (unregistering): left allmulticast mode [ 602.185738][ T50] bond3 (unregistering): (slave geneve3): Releasing active interface [ 602.619379][ T50] bond0 (unregistering): Released all slaves [ 602.639757][ T50] bond1 (unregistering): Released all slaves [ 602.780111][ T50] bond2 (unregistering): Released all slaves [ 602.794100][ T50] bond3 (unregistering): Released all slaves [ 602.809538][ T50] bond4 (unregistering): Released all slaves [ 602.941345][ T50] bond5 (unregistering): Released all slaves [ 603.071352][ T50] bond6 (unregistering): Released all slaves [ 603.191898][ T50] bond7 (unregistering): Released all slaves [ 603.205988][ T50] bond8 (unregistering): Released all slaves [ 603.221150][ T50] bond9 (unregistering): Released all slaves [ 603.343661][ T50] bond10 (unregistering): Released all slaves [ 603.359846][ T50] bond11 (unregistering): Released all slaves [ 603.392494][T27041] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 603.400971][T27041] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 603.411501][T27041] tipc: Resetting bearer [ 603.428941][T27046] tipc: Started in network mode [ 603.440057][T27046] tipc: Node identity 84e, cluster identity 4711 [ 603.450161][T27046] tipc: Node number set to 2126 [ 603.577386][ T50] tipc: Disabling bearer [ 603.607101][ T50] tipc: Left network mode [ 603.654414][ T50] IPVS: stopping backup sync thread 14258 ... [ 603.837443][T27066] €': renamed from dummy0 (while UP) [ 604.032480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.281561][T27092] validate_nla: 1 callbacks suppressed [ 604.281583][T27092] netlink: 'syz.0.5964': attribute type 1 has an invalid length. [ 604.799293][ T50] hsr_slave_0: left promiscuous mode [ 604.851781][ T50] hsr_slave_1: left promiscuous mode [ 605.271238][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.285247][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.294175][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.304100][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.324828][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.370728][T27137] netlink: 'syz.4.5978': attribute type 39 has an invalid length. [ 606.168411][T27124] wlan0 speed is unknown, defaulting to 1000 [ 606.242045][T27133] wlan0 speed is unknown, defaulting to 1000 [ 606.493984][T27154] netlink: 'syz.4.5982': attribute type 17 has an invalid length. [ 606.504229][T27154] __nla_validate_parse: 6 callbacks suppressed [ 606.504249][T27154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5982'. [ 606.545974][T27154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5982'. [ 606.595221][T27154] gretap0: entered promiscuous mode [ 606.620338][T27154] gretap0: left promiscuous mode [ 606.655373][ T50] IPVS: stop unused estimator thread 0... [ 606.701127][T27161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5985'. [ 606.711044][T27158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5984'. [ 606.766164][T27161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5985'. [ 606.796258][T27161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5985'. [ 606.819677][T27124] vxcan1 speed is unknown, defaulting to 1000 [ 606.935134][T27168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.976130][T27168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5987'. [ 607.343035][T27133] vxcan1 speed is unknown, defaulting to 1000 [ 607.391521][ T5848] Bluetooth: hci4: command tx timeout [ 607.741875][T27195] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5995'. [ 607.792612][T27195] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5995'. [ 608.252863][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 608.352226][T27214] bond11: Unable to set down delay as MII monitoring is disabled [ 608.376804][T27214] bond11 (unregistering): Released all slaves [ 608.567080][T27133] chnl_net:caif_netlink_parms(): no params data found [ 608.635932][T27222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.777980][T27222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.078144][T27133] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.111095][T27133] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.130463][T27133] bridge_slave_0: entered allmulticast mode [ 609.148988][T27133] bridge_slave_0: entered promiscuous mode [ 609.239785][T27133] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.247160][T27133] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.263492][T27133] bridge_slave_1: entered allmulticast mode [ 609.291692][T27133] bridge_slave_1: entered promiscuous mode [ 609.425399][T27133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.454658][T27133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.468352][T27263] netlink: 'syz.2.6011': attribute type 15 has an invalid length. [ 609.476940][ T5848] Bluetooth: hci4: command tx timeout [ 609.547737][T27133] team0: Port device team_slave_0 added [ 609.582102][T27133] team0: Port device team_slave_1 added [ 609.741699][T27133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.748887][T27133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.813643][T27133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.827652][T27133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.840247][T27133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.897030][T27133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.985095][T27285] syzkaller0: entered promiscuous mode [ 609.999297][T27285] syzkaller0: entered allmulticast mode [ 610.037595][T27133] hsr_slave_0: entered promiscuous mode [ 610.048973][T27133] hsr_slave_1: entered promiscuous mode [ 610.056080][T27133] debugfs: 'hsr0' already exists in 'hsr' [ 610.062327][T27133] Cannot create hsr debugfs directory [ 611.195487][T27133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.215435][T27133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.432733][T27133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.456060][T27133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.553000][ T5848] Bluetooth: hci4: command tx timeout [ 611.576736][T27133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.597917][T27133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.777281][T27133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.793376][T27133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.856813][T27351] __nla_validate_parse: 7 callbacks suppressed [ 611.856833][T27351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6033'. [ 612.178643][T27133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 612.221549][T27133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 612.293657][T27133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 612.333983][T27133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 612.404544][T27359] netlink: 'syz.2.6035': attribute type 6 has an invalid length. [ 612.608213][T27133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.660253][T27133] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.679648][T16563] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.686857][T16563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.727538][T16563] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.734811][T16563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.219945][T27399] netlink: 'syz.1.6044': attribute type 2 has an invalid length. [ 613.253841][T27133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.337319][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6045'. [ 613.410751][T27407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6046'. [ 613.428584][T27403] bond1: Invalid ad_actor_system MAC address. [ 613.434919][T27403] bond1: option ad_actor_system: invalid value (1) [ 613.444289][T27403] bond1 (unregistering): Released all slaves [ 613.629526][ T5848] Bluetooth: hci4: command tx timeout [ 613.663024][T27413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.674918][T27133] veth0_vlan: entered promiscuous mode [ 613.696621][T27133] veth1_vlan: entered promiscuous mode [ 613.703105][T27413] netlink: 'syz.4.6047': attribute type 2 has an invalid length. [ 613.855050][T27419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6049'. [ 613.895308][T27133] veth0_macvtap: entered promiscuous mode [ 613.933092][T27133] veth1_macvtap: entered promiscuous mode [ 613.995339][T27133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.034422][T27133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.099913][T22188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.187013][T22188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.234134][T22188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.277463][T22188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.355153][T16563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.363213][T16563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.386812][T26479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.395759][T26479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.578643][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5974'. [ 615.559232][T27299] Set syz1 is full, maxelem 65536 reached [ 617.321768][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.333556][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.342658][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.355974][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.365390][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.383853][T27480] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6066'. [ 617.426320][T27480] openvswitch: netlink: Message has 4 unknown bytes. [ 617.525522][T27486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6068'. [ 617.535222][T27486] netlink: 'syz.2.6068': attribute type 6 has an invalid length. [ 617.544117][T27486] netlink: 'syz.2.6068': attribute type 5 has an invalid length. [ 617.607228][T27476] wlan0 speed is unknown, defaulting to 1000 [ 617.660253][T27488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6069'. [ 617.759859][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'. [ 618.046155][T27476] vxcan1 speed is unknown, defaulting to 1000 [ 618.222681][T27524] IPVS: Unknown mcast interface: netpci0 [ 618.423057][T27476] chnl_net:caif_netlink_parms(): no params data found [ 618.552623][T27531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 618.562691][T27476] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.571869][T27476] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.579743][T27476] bridge_slave_0: entered allmulticast mode [ 618.587634][T27476] bridge_slave_0: entered promiscuous mode [ 618.597942][T27476] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.605639][T27476] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.613147][T27476] bridge_slave_1: entered allmulticast mode [ 618.621362][T27476] bridge_slave_1: entered promiscuous mode [ 618.663958][T27476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.683322][T27476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.726343][T27476] team0: Port device team_slave_0 added [ 618.736361][T27476] team0: Port device team_slave_1 added [ 618.771902][T27476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.778921][T27476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.805566][T27476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.833278][T27476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.860127][T27476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.914353][T27476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.187237][T27476] hsr_slave_0: entered promiscuous mode [ 619.212896][T27476] hsr_slave_1: entered promiscuous mode [ 619.228700][T27476] debugfs: 'hsr0' already exists in 'hsr' [ 619.246141][T27476] Cannot create hsr debugfs directory [ 619.282096][T27559] netlink: 'syz.0.6084': attribute type 1 has an invalid length. [ 619.339406][T27559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6084'. [ 619.404197][ T5835] Bluetooth: hci1: command tx timeout [ 619.415426][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 619.683368][T27476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.705877][T27476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 619.721915][T27476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.731894][T27578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6091'. [ 619.754750][T27574] tipc: Enabled bearer , priority 0 [ 619.786536][T27580] syzkaller0: entered promiscuous mode [ 619.795036][T27580] syzkaller0: entered allmulticast mode [ 619.825608][T27567] tipc: Resetting bearer [ 619.883074][T27567] tipc: Disabling bearer [ 619.944297][T27476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.962294][T27476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 619.973790][T27476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.174701][T27476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.211712][T27476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 620.230430][T27476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.284252][T27605] netlink: 'syz.3.6098': attribute type 10 has an invalid length. [ 620.293938][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 620.356504][T27606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6095'. [ 620.374995][T27476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.403748][T27476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 620.416293][T27476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.437427][T27605] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode [ 620.448035][T27605] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 620.503418][T27600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'. [ 620.535135][ T3966] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.545226][T27614] s5ÿÿø: renamed from vlan1 (while UP) [ 620.596769][ T3966] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.615261][ T3966] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.681759][ T3966] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.883529][T27476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 620.919836][T27476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 620.946066][T27476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 620.977363][T27476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.210011][T27476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.266085][T27476] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.473326][ T5835] Bluetooth: hci1: command tx timeout [ 621.504762][T27666] netlink: 'syz.4.6112': attribute type 29 has an invalid length. [ 621.562268][T27670] netlink: 'syz.4.6112': attribute type 29 has an invalid length. [ 621.597644][ T3966] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.604922][ T3966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.641965][T27674] netlink: 'syz.0.6117': attribute type 2 has an invalid length. [ 621.692822][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.700245][ T3966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.433753][T27712] wireguard0: entered promiscuous mode [ 622.440000][T27712] wireguard0: entered allmulticast mode [ 622.462125][T27712] team0: Device wireguard0 is of different type [ 622.487469][T27721] __nla_validate_parse: 3 callbacks suppressed [ 622.487490][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.528301][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.545481][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.556334][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.581478][T27722] IPv6: sit1: Disabled Multicast RS [ 622.587703][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.638153][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 622.677411][T27476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.906089][T27735] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 622.942910][T27476] veth0_vlan: entered promiscuous mode [ 622.995216][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6136'. [ 623.012771][T27737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6135'. [ 623.035508][T27737] tipc: Started in network mode [ 623.042026][T27737] tipc: Node identity , cluster identity 4711 [ 623.058564][T27737] tipc: Failed to obtain node identity [ 623.065390][T27737] tipc: Enabling of bearer rejected, failed to enable media [ 623.094346][T27743] netlink: 'syz.0.6138': attribute type 12 has an invalid length. [ 623.127193][T27476] veth1_vlan: entered promiscuous mode [ 623.235181][T27476] veth0_macvtap: entered promiscuous mode [ 623.261268][T27476] veth1_macvtap: entered promiscuous mode [ 623.287012][T27750] erspan0: entered allmulticast mode [ 623.363121][T27476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.459280][T27754] bond0: (slave batadv0): Releasing backup interface [ 623.500092][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 623.549779][ T5835] Bluetooth: hci1: command tx timeout [ 623.612268][T27476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.677691][T15403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.713635][T15403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.742260][ T2084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.792332][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'. [ 623.812059][ T2084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.838144][T27780] dvmrp0: left allmulticast mode [ 624.117129][T27789] gretap1: entered promiscuous mode [ 624.124912][T27789] gretap1: entered allmulticast mode [ 624.143639][ T3966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.153790][ T3966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.290265][T27791] team0: Device ip6gre2 is of different type [ 624.370262][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.392437][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.975928][T27820] openvswitch: netlink: IP tunnel dst address not specified [ 625.060392][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.073611][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.084669][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.098973][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.116492][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.565784][T27826] wlan0 speed is unknown, defaulting to 1000 [ 625.629737][ T5848] Bluetooth: hci1: command tx timeout [ 625.703593][T27854] netlink: 'syz.1.6169': attribute type 4 has an invalid length. [ 625.816431][T27854] netlink: 'syz.1.6169': attribute type 4 has an invalid length. [ 625.918716][T27826] vxcan1 speed is unknown, defaulting to 1000 [ 625.992703][T27860] netlink: 'syz.2.6172': attribute type 26 has an invalid length. [ 626.024596][T27863] netlink: 'syz.4.6173': attribute type 6 has an invalid length. [ 626.038367][T27863] netlink: 'syz.4.6173': attribute type 6 has an invalid length. [ 626.070814][T27860] netlink: 'syz.2.6172': attribute type 26 has an invalid length. [ 626.837487][T27826] chnl_net:caif_netlink_parms(): no params data found [ 627.077983][T27896] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 627.156137][ T5848] Bluetooth: hci5: command tx timeout [ 627.254606][T27826] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.272474][T27826] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.291206][T27826] bridge_slave_0: entered allmulticast mode [ 627.302270][T27826] bridge_slave_0: entered promiscuous mode [ 627.321082][T27826] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.328383][T27826] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.343675][T27826] bridge_slave_1: entered allmulticast mode [ 627.362948][T27826] bridge_slave_1: entered promiscuous mode [ 627.410820][T27906] syzkaller0: entered promiscuous mode [ 627.421455][T27906] syzkaller0: entered allmulticast mode [ 627.674776][T27934] netlink: 'syz.0.6190': attribute type 32 has an invalid length. [ 627.711123][T27826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.776468][T27826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.936282][T27826] team0: Port device team_slave_0 added [ 627.955757][T27826] team0: Port device team_slave_1 added [ 628.073616][T27826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.093726][T27826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.124292][T27826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.177217][T27826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.203317][T27826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.231951][T27826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.366319][T27826] hsr_slave_0: entered promiscuous mode [ 628.373623][T27826] hsr_slave_1: entered promiscuous mode [ 628.382130][T27826] debugfs: 'hsr0' already exists in 'hsr' [ 628.387922][T27826] Cannot create hsr debugfs directory [ 628.838958][T27977] __nla_validate_parse: 14 callbacks suppressed [ 628.838981][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6200'. [ 629.232859][ T5848] Bluetooth: hci5: command tx timeout [ 629.490927][T27826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.504369][T27826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.568655][T27826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 629.583401][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'. [ 629.596594][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'. [ 629.711354][T27981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6201'. [ 629.720589][T27981] tipc: Invalid UDP bearer configuration [ 629.720650][T27981] tipc: Enabling of bearer rejected, failed to enable media [ 629.893191][T27826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.916167][T27826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.930835][T27826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 630.088195][T27826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.104083][T27826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.129588][T27826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 630.160148][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'. [ 630.235423][T28019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.312246][T27826] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 630.337412][T27826] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.354720][T27826] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.365707][T27826] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 630.451355][T28037] delete_channel: no stack [ 630.518437][T28036] delete_channel: no stack [ 630.727773][T27826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.748356][T28055] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6219'. [ 630.800198][T27826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.834186][T27826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.858447][ T6736] IPVS: starting estimator thread 0... [ 630.900685][T27826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.970078][T28066] IPVS: using max 26 ests per chain, 62400 per kthread [ 631.177532][T27826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.230994][T28090] netlink: 'syz.0.6228': attribute type 1 has an invalid length. [ 631.253528][T27826] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.275091][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.282364][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.309544][ T5848] Bluetooth: hci5: command tx timeout [ 631.354050][T28095] macsec1: entered promiscuous mode [ 631.553974][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.561215][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.613501][T28098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6230'. [ 631.629768][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6232'. [ 631.872444][T28113] netlink: 'syz.2.6236': attribute type 1 has an invalid length. [ 631.926326][T28113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.945466][T28125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6236'. [ 632.061138][T28113] bond1: (slave veth0_to_bond): making interface the new active one [ 632.076788][T28113] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 632.278959][T27826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.525952][T27826] veth0_vlan: entered promiscuous mode [ 632.562641][T27826] veth1_vlan: entered promiscuous mode [ 632.648972][T27826] veth0_macvtap: entered promiscuous mode [ 632.666354][T28160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6246'. [ 632.798785][T28167] netlink: 'syz.1.6247': attribute type 3 has an invalid length. [ 632.807693][T28167] netlink: 'syz.1.6247': attribute type 2 has an invalid length. [ 632.898668][T27826] veth1_macvtap: entered promiscuous mode [ 632.984312][T27826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.034748][T27826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.086642][ T3488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.111402][ T3488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.138957][ T3488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.198614][ T3488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.382627][T21445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.398340][ T5848] Bluetooth: hci5: command tx timeout [ 633.405517][T21445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.582670][T16566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.592486][T16566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.742651][T28208] bridge_slave_0: invalid flags given to default FDB implementation [ 633.958821][T28216] delete_channel: no stack [ 634.502881][T28241] x_tables: duplicate underflow at hook 1 [ 634.543792][T28236] __nla_validate_parse: 7 callbacks suppressed [ 634.543815][T28236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6269'. [ 634.560737][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'. [ 634.615290][T28247] netlink: 'syz.3.6272': attribute type 1 has an invalid length. [ 634.690680][T28247] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 634.825056][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557b0400: rx timeout, send abort [ 634.834549][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557b0400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 635.102535][T28269] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 635.131405][T28271] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 635.297789][T28283] team_slave_0: entered promiscuous mode [ 635.303595][T28283] team_slave_1: entered promiscuous mode [ 635.315240][T28286] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6285'. [ 635.331913][T28283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 635.416464][T28283] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 635.594227][T28301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6289'. [ 635.671153][T28308] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6292'. [ 635.677343][T28301] bond9: entered promiscuous mode [ 635.688496][T28301] bond9: entered allmulticast mode [ 635.696614][T28301] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.713191][T28298] macvlan4: entered promiscuous mode [ 635.718642][T28298] macvlan4: entered allmulticast mode [ 635.725985][T28298] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 635.763890][T28311] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6293'. [ 635.881345][T28314] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 635.914738][T28308] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.922106][T28308] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.066134][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6295'. [ 636.112905][T28326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.145622][T28326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.443852][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6299'. [ 636.480934][T28341] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 636.488775][T28340] openvswitch: netlink: Flow actions attr not present in new flow. [ 636.514262][T28341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6300'. [ 636.800224][T28362] netlink: 'syz.3.6308': attribute type 12 has an invalid length. [ 636.816790][T28362] netlink: 'syz.3.6308': attribute type 29 has an invalid length. [ 636.831570][T28362] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6308'. [ 637.021436][T28378] netlink: 'syz.3.6313': attribute type 7 has an invalid length. [ 637.030781][T28378] netlink: 'syz.3.6313': attribute type 8 has an invalid length. [ 637.074479][T28380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.153381][T28385] sctp: [Deprecated]: syz.4.6315 (pid 28385) Use of int in max_burst socket option. [ 637.153381][T28385] Use struct sctp_assoc_value instead [ 637.266050][T28380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.891569][T28443] xt_bpf: check failed: parse error [ 637.936786][T28423] netlink: 'syz.1.6326': attribute type 6 has an invalid length. [ 638.226431][T28464] x_tables: duplicate underflow at hook 4 [ 638.584086][T28488] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 638.813343][T28502] IPv6: sit1: Disabled Multicast RS [ 638.831115][T28502] sit1: entered allmulticast mode [ 639.132216][T28518] Bluetooth: MGMT ver 1.23 [ 639.805742][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.813903][T28543] __nla_validate_parse: 7 callbacks suppressed [ 639.813944][T28543] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6356'. [ 639.818325][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.842574][T28539] syzkaller0: entered promiscuous mode [ 639.848081][T28539] syzkaller0: entered allmulticast mode [ 639.858738][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.890519][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.902230][T28540] netlink: 'syz.3.6353': attribute type 27 has an invalid length. [ 639.988529][T28547] vcan0: entered allmulticast mode [ 640.181113][T28553] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 640.394570][T28572] x_tables: duplicate underflow at hook 1 [ 640.502215][T28576] Bluetooth: MGMT ver 1.23 [ 640.508599][T28576] netlink: 'syz.3.6367': attribute type 25 has an invalid length. [ 640.519418][T28576] netlink: 'syz.3.6367': attribute type 6 has an invalid length. [ 640.527236][T28576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6367'. [ 640.561997][T28578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6368'. [ 640.604851][T28578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.640061][T28578] netlink: 'syz.1.6368': attribute type 2 has an invalid length. [ 640.721975][T28582] team0: Device ip6gre1 is of different type [ 640.741486][T28584] netlink: 'syz.4.6371': attribute type 2 has an invalid length. [ 641.013914][T28605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.115331][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 641.225995][T28610] bond1: entered promiscuous mode [ 641.254958][T28610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.315434][T28613] bond1: (slave bridge1): making interface the new active one [ 641.357055][T28613] bridge1: entered promiscuous mode [ 641.368574][T28613] bridge1: left promiscuous mode [ 641.627773][ T6736] IPVS: starting estimator thread 0... [ 641.730365][T28638] IPVS: using max 25 ests per chain, 60000 per kthread [ 641.810088][T28647] syzkaller0: entered promiscuous mode [ 641.815634][T28647] syzkaller0: entered allmulticast mode [ 641.855714][T28646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.364260][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.400831][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.439140][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.460401][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.532665][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.604123][T28655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6394'. [ 642.690534][T28650] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 642.733138][T28656] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 642.765226][T28652] wlan0 speed is unknown, defaulting to 1000 [ 642.773826][T28663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6396'. [ 642.819971][T28663] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 642.918097][T28666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6397'. [ 642.952346][T28663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 642.997565][T28663] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 643.020267][T28663] gretap1: entered promiscuous mode [ 643.025555][T28663] gretap1: entered allmulticast mode [ 643.222226][T28652] vxcan1 speed is unknown, defaulting to 1000 [ 643.284834][ T8655] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.327865][ T8655] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 643.380477][ T8655] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 643.480180][T28685] delete_channel: no stack [ 643.535018][ T8655] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.590207][ T8655] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 643.619829][ T8655] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 643.725763][ T8655] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.765660][ T8655] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 643.795441][ T8655] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 643.933387][ T8655] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.971314][ T8655] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 643.987475][ T8655] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.078501][T28712] validate_nla: 3 callbacks suppressed [ 644.078520][T28712] netlink: 'syz.2.6407': attribute type 126 has an invalid length. [ 644.368908][T28725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6413'. [ 644.381227][T28726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6413'. [ 644.497248][T28735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6412'. [ 644.589673][ T5835] Bluetooth: hci2: command tx timeout [ 644.627101][T28652] chnl_net:caif_netlink_parms(): no params data found [ 644.686017][ T8655] bridge_slave_1: left allmulticast mode [ 644.700022][ T8655] bridge_slave_1: left promiscuous mode [ 644.705984][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.878218][T28755] __nla_validate_parse: 1 callbacks suppressed [ 644.878237][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6422'. [ 645.033332][T28761] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6419'. [ 645.457619][ T8655] bond2 (unregistering): (slave geneve2): Releasing active interface [ 645.850865][ T8655] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 645.862110][ T8655] bond0 (unregistering): Released all slaves [ 645.985947][ T8655] bond1 (unregistering): (slave veth3): Releasing backup interface [ 645.996554][ T8655] bond1 (unregistering): Released all slaves [ 646.011467][ T8655] bond2 (unregistering): Released all slaves [ 646.026037][ T8655] bond3 (unregistering): Released all slaves [ 646.150604][ T8655] bond4 (unregistering): Released all slaves [ 646.165026][ T8655] bond5 (unregistering): Released all slaves [ 646.182876][ T8655] bond6 (unregistering): Released all slaves [ 646.200787][ T8655] bond7 (unregistering): Released all slaves [ 646.219890][ T8655] bond8 (unregistering): Released all slaves [ 646.346509][ T8655] bond9 (unregistering): Released all slaves [ 646.500726][T28763] netlink: 'syz.0.6423': attribute type 1 has an invalid length. [ 646.534087][T28763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6423'. [ 646.548721][T28765] netlink: 'syz.3.6424': attribute type 1 has an invalid length. [ 646.563653][T28763] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6423'. [ 646.673217][ T5835] Bluetooth: hci2: command tx timeout [ 646.681260][T28755] vcan0 (unregistering): left allmulticast mode [ 646.724144][ T8655] : left promiscuous mode [ 646.755222][T28765] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 646.759711][T28763] 8021q: VLANs not supported on ip6_vti0 [ 646.815265][T28774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6425'. [ 646.879891][ T8655] tipc: Disabling bearer [ 646.885469][ T8655] tipc: Left network mode [ 646.885608][T28773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6425'. [ 646.925490][ T8655] IPVS: stopping backup sync thread 22361 ... [ 647.023215][T28778] syzkaller0: entered promiscuous mode [ 647.028772][T28778] syzkaller0: entered allmulticast mode [ 647.232095][T28652] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.239787][T28652] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.251575][T28652] bridge_slave_0: entered allmulticast mode [ 647.264719][T28652] bridge_slave_0: entered promiscuous mode [ 647.312623][T28652] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.343250][T28652] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.355856][T28652] bridge_slave_1: entered allmulticast mode [ 647.364646][T28652] bridge_slave_1: entered promiscuous mode [ 647.424210][T28804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6435'. [ 647.434123][T28804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6435'. [ 647.498763][T28804] gretap0: entered promiscuous mode [ 647.523280][T28804] gretap0: left promiscuous mode [ 647.615152][T28652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.667448][T28652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.903169][T28823] mac80211_hwsim hwsim62 ÿ: renamed from wlan1 (while UP) [ 647.929750][T28827] tipc: Enabling not permitted [ 647.944581][T28827] tipc: Enabling of bearer rejected, failed to enable media [ 647.991783][T28652] team0: Port device team_slave_0 added [ 647.998856][T28827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6442'. [ 648.038801][T28652] team0: Port device team_slave_1 added [ 648.071065][T28823] netlink: 'syz.0.6441': attribute type 2 has an invalid length. [ 648.461377][ T8655] hsr_slave_0: left promiscuous mode [ 648.470791][ T8655] hsr_slave_1: left promiscuous mode [ 648.486754][T28852] nbd: must specify at least one socket [ 648.528977][ T8655] veth1_vlan: left promiscuous mode [ 648.541307][ T8655] veth0_vlan: left promiscuous mode [ 648.694476][ T8655] team0 (unregistering): Port device batadv1 removed [ 648.750476][ T5835] Bluetooth: hci2: command tx timeout [ 649.045638][ T8655] team0 (unregistering): Port device team_slave_1 removed [ 649.092183][ T8655] team0 (unregistering): Port device team_slave_0 removed [ 649.335879][T28652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.342949][T28652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.372251][T28652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.426507][T28652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.451131][T28652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.513310][T28652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.716275][T28652] hsr_slave_0: entered promiscuous mode [ 649.724513][T28652] hsr_slave_1: entered promiscuous mode [ 649.732177][T28652] debugfs: 'hsr0' already exists in 'hsr' [ 649.738093][T28652] Cannot create hsr debugfs directory [ 649.764707][ T8655] IPVS: stop unused estimator thread 0... [ 649.790731][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.132419][T22188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.143526][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.158493][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.322582][T28898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6461'. [ 650.374826][T28905] netlink: 'syz.3.6462': attribute type 39 has an invalid length. [ 650.407455][T28910] netlink: 'syz.1.6464': attribute type 1 has an invalid length. [ 650.423918][T28910] netlink: 'syz.1.6464': attribute type 2 has an invalid length. [ 650.434673][T28910] netlink: 'syz.1.6464': attribute type 1 has an invalid length. [ 650.452494][T28910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6464'. [ 650.687155][T28922] netlink: 'syz.2.6468': attribute type 2 has an invalid length. [ 650.786032][T28928] netlink: 'syz.1.6471': attribute type 2 has an invalid length. [ 650.829800][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.831415][ T5835] Bluetooth: hci2: command tx timeout [ 650.980210][T28652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 651.008409][T28652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 651.024976][T28652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 651.058006][T28652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 651.078406][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6476'. [ 651.110840][T28940] netlink: 'syz.2.6476': attribute type 1 has an invalid length. [ 651.129210][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6476'. [ 651.147643][T28940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6476'. [ 651.161808][T28940] netlink: 'syz.2.6476': attribute type 2 has an invalid length. [ 651.169933][T28940] netlink: 'syz.2.6476': attribute type 2 has an invalid length. [ 651.178043][T28940] netlink: 'syz.2.6476': attribute type 2 has an invalid length. [ 651.210479][T28945] xt_TCPMSS: Only works on TCP SYN packets [ 651.313170][T28652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.354138][T28652] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.384050][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.392384][T10941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.481042][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.488307][T10941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.503707][T28954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6478'. [ 651.871707][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.315223][T28652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.371478][T28977] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6483'. [ 652.427964][T28977] gretap0: entered promiscuous mode [ 652.876818][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6486'. [ 652.921927][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.995129][T28997] syzkaller0: entered promiscuous mode [ 653.009949][T28997] syzkaller0: entered allmulticast mode [ 653.158305][T29013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 653.215433][T28994] IPv6: NLM_F_CREATE should be specified when creating new route [ 653.240547][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.950340][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.968273][T29006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6486'. [ 654.991267][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.178185][T28652] veth0_vlan: entered promiscuous mode [ 655.261109][T28652] veth1_vlan: entered promiscuous mode [ 655.466714][T29039] tipc: Failed to remove unknown binding: 66,0,0/0:1362393930/1362393931 [ 655.485944][T29039] tipc: Failed to remove unknown binding: 66,0,0/0:1362393930/1362393931 [ 655.685432][T29046] validate_nla: 1 callbacks suppressed [ 655.685454][T29046] netlink: 'syz.2.6498': attribute type 1 has an invalid length. [ 655.742920][T29049] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6498'. [ 655.821789][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6498'. [ 655.850205][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6501'. [ 655.877330][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.890169][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.899574][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.936832][T29057] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6498'. [ 655.946151][T29057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6498'. [ 655.957954][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6501'. [ 655.998468][T29059] netlink: 'syz.1.6501': attribute type 1 has an invalid length. [ 656.014329][T29059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6501'. [ 656.037778][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.515903][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.688911][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 656.700525][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 656.708842][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 656.749454][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 656.763324][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 656.764763][T29098] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6513'. [ 656.856466][T29095] wlan0 speed is unknown, defaulting to 1000 [ 657.017969][ T12] bridge_slave_1: left allmulticast mode [ 657.028559][ T12] bridge_slave_1: left promiscuous mode [ 657.043665][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.072566][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.101761][ T12] bridge_slave_0: left allmulticast mode [ 657.117820][ T12] bridge_slave_0: left promiscuous mode [ 657.130453][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.156641][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.616296][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.628575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.643833][ T12] bond0 (unregistering): Released all slaves [ 657.666080][T29092] syzkaller1: entered promiscuous mode [ 657.673727][T29092] syzkaller1: entered allmulticast mode [ 657.681611][T29116] gre0: entered promiscuous mode [ 657.724156][T29095] vxcan1 speed is unknown, defaulting to 1000 [ 658.121517][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.173758][T29136] netlink: 'syz.1.6526': attribute type 10 has an invalid length. [ 658.192523][T29137] netlink: 'syz.1.6526': attribute type 10 has an invalid length. [ 658.222396][T29136] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6526'. [ 658.239173][T29137] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6526'. [ 658.315151][T29137] team0: entered promiscuous mode [ 658.329670][T29137] team_slave_0: entered promiscuous mode [ 658.354787][T29137] team_slave_1: entered promiscuous mode [ 658.365212][T29137] bridge0: port 3(team0) entered blocking state [ 658.385288][T29137] bridge0: port 3(team0) entered disabled state [ 658.403364][T29137] team0: entered allmulticast mode [ 658.415074][T29137] team_slave_0: entered allmulticast mode [ 658.428529][T29137] team_slave_1: entered allmulticast mode [ 658.484810][T29137] bridge0: port 3(team0) entered blocking state [ 658.491351][T29137] bridge0: port 3(team0) entered forwarding state [ 658.788350][T29157] netlink: 'syz.1.6532': attribute type 1 has an invalid length. [ 658.832315][ T5848] Bluetooth: hci2: command tx timeout [ 658.923217][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.054415][T29160] bond1: (slave ip6gretap1): making interface the new active one [ 659.065444][T29160] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 659.150100][ T12] hsr_slave_0: left promiscuous mode [ 659.161829][ T12] hsr_slave_1: left promiscuous mode [ 659.172030][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.191911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.250996][ T12] veth1_vlan: left promiscuous mode [ 659.256577][ T12] veth0_vlan: left promiscuous mode [ 659.650545][ T12] team0 (unregistering): Port device team_slave_1 removed [ 659.705097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 660.184704][T29177] net_ratelimit: 2 callbacks suppressed [ 660.184725][T29177] ipvlan0: mtu less than device minimum [ 660.196648][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.729532][T29095] chnl_net:caif_netlink_parms(): no params data found [ 660.758103][T29220] __nla_validate_parse: 6 callbacks suppressed [ 660.758126][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6548'. [ 660.909501][ T5848] Bluetooth: hci2: command tx timeout [ 661.014450][T29095] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.031016][T29095] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.038526][T29095] bridge_slave_0: entered allmulticast mode [ 661.061791][T29095] bridge_slave_0: entered promiscuous mode [ 661.083744][T29095] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.109294][T29095] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.130676][T29095] bridge_slave_1: entered allmulticast mode [ 661.155829][T29095] bridge_slave_1: entered promiscuous mode [ 661.177623][T29239] netlink: 'syz.1.6552': attribute type 8 has an invalid length. [ 661.286665][T29095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.312613][T29095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.405893][T29095] team0: Port device team_slave_0 added [ 661.425348][T29095] team0: Port device team_slave_1 added [ 661.588579][T29095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.613846][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.712843][T29095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.836333][T29253] syzkaller0: entered promiscuous mode [ 661.843216][T29253] syzkaller0: entered allmulticast mode [ 661.857925][T29095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.867928][T29095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.946545][T29095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.991386][ T5848] Bluetooth: hci2: command tx timeout [ 664.076519][T29095] hsr_slave_0: entered promiscuous mode [ 664.086129][T29095] hsr_slave_1: entered promiscuous mode [ 664.093010][T29095] debugfs: 'hsr0' already exists in 'hsr' [ 664.101170][T29095] Cannot create hsr debugfs directory [ 664.230868][T29285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6561'. [ 664.429594][T29293] º: renamed from veth1_vlan (while UP) [ 664.617837][T29297] netlink: 'syz.0.6567': attribute type 1 has an invalid length. [ 664.702486][T29095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.737340][T29095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 664.793096][T29095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 664.843560][T29095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 665.014203][T29326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6575'. [ 665.052580][T29095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.072463][ T5848] Bluetooth: hci2: command tx timeout [ 665.110968][T29095] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.134447][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.141741][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.158138][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.165395][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.225368][T29095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.613332][T29095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.672601][T29348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6582'. [ 665.685051][T29348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6582'. [ 665.702017][T29348] netlink: 'syz.3.6582': attribute type 21 has an invalid length. [ 665.720924][T29348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6582'. [ 665.791014][T29351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.063652][T29363] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6587'. [ 666.079300][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6587'. [ 666.096144][T29366] tipc: Started in network mode [ 666.103532][T29366] tipc: Node identity ee3999af6a0a, cluster identity 4711 [ 666.130999][T29366] tipc: Enabled bearer , priority 0 [ 666.208349][T29369] veth3: entered allmulticast mode [ 666.217885][T29366] syzkaller0: entered promiscuous mode [ 666.229328][T29366] syzkaller0: entered allmulticast mode [ 666.236291][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6589'. [ 666.300373][T29366] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 666.362925][T29366] tipc: Resetting bearer [ 666.386278][T29365] tipc: Resetting bearer [ 666.408903][T29378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6591'. [ 666.424880][T29365] tipc: Disabling bearer [ 666.464673][T29095] veth0_vlan: entered promiscuous mode [ 666.486269][T29095] veth1_vlan: entered promiscuous mode [ 666.565713][T29095] veth0_macvtap: entered promiscuous mode [ 666.587784][T29095] veth1_macvtap: entered promiscuous mode [ 666.633260][T29382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6593'. [ 666.645007][T29095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.673635][T29095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.691366][T29384] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6594'. [ 666.701213][T29386] netlink: 'syz.1.6593': attribute type 17 has an invalid length. [ 666.701238][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6593'. [ 666.701269][T29386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6593'. [ 666.812790][ T5990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.842246][ T5990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.901625][ T5990] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.930007][ T5990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.182659][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.214828][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.302976][T29410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 667.380458][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.397413][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.472637][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.873977][T17561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.975406][T29445] netlink: 'syz.1.6609': attribute type 21 has an invalid length. [ 668.002914][T29448] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 668.009922][T29448] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 668.027268][T29445] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6609'. [ 668.120583][T29453] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 668.311180][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 668.390648][T29460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.510519][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.142874][T29507] openvswitch: netlink: IP tunnel dst address not specified [ 669.310603][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.322033][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.331804][ T6736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.694871][T29517] netlink: 'syz.2.6632': attribute type 23 has an invalid length. [ 670.018313][T29539] xt_hashlimit: invalid interval [ 670.024087][T29542] tap0: tun_chr_ioctl cmd 2148553947 [ 670.299966][T29555] netlink: 'syz.2.6641': attribute type 5 has an invalid length. [ 670.476109][T29561] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 670.517044][T29568] netlink: 'syz.5.6646': attribute type 11 has an invalid length. [ 670.688098][T29573] netlink: 'syz.2.6650': attribute type 3 has an invalid length. [ 670.873011][T29585] net_ratelimit: 6 callbacks suppressed [ 670.873032][T29585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.893848][T29584] syzkaller1: entered promiscuous mode [ 670.899841][T29584] syzkaller1: entered allmulticast mode [ 670.916024][T29587] netlink: 'syz.1.6654': attribute type 8 has an invalid length. [ 671.174607][T29597] __nla_validate_parse: 16 callbacks suppressed [ 671.174630][T29597] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6658'. [ 671.193290][T29595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6658'. [ 671.232256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.249760][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6660'. [ 671.268158][T29603] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6661'. [ 671.279375][T29600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6660'. [ 671.319608][T29606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6663'. [ 671.337289][T29608] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6664'. [ 671.396942][T29608] bond2 (unregistering): Released all slaves [ 671.456001][T29606] netlink: 'syz.2.6663': attribute type 4 has an invalid length. [ 671.493748][T29616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6665'. [ 671.514955][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6664'. [ 671.551682][T29618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6664'. [ 671.632775][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.997399][T29640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 672.110504][T29649] gtp0: entered promiscuous mode [ 672.115536][T29649] gtp0: entered allmulticast mode [ 672.193647][T29652] netlink: 'syz.0.6678': attribute type 4 has an invalid length. [ 672.227779][T29654] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 672.343217][T29663] team0: left allmulticast mode [ 672.348316][T29663] team_slave_0: left allmulticast mode [ 672.355320][T29663] team_slave_1: left allmulticast mode [ 672.379430][T29663] bridge0: port 3(team0) entered disabled state [ 672.424779][T29669] netlink: 'syz.5.6684': attribute type 11 has an invalid length. [ 672.441420][T29663] bridge_slave_0: left allmulticast mode [ 672.450903][T29669] openvswitch: netlink: Missing key (keys=40, expected=80) [ 672.458867][T29663] bridge_slave_0: left promiscuous mode [ 672.488240][T29663] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.498216][T29672] netlink: 'syz.0.6685': attribute type 24 has an invalid length. [ 672.540072][T29663] bridge_slave_1: left allmulticast mode [ 672.559181][T29663] bridge_slave_1: left promiscuous mode [ 672.565191][T29663] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.598902][T29663] bond0: (slave bond_slave_0): Releasing backup interface [ 672.633153][T29663] bond0: (slave bond_slave_1): Releasing backup interface [ 672.663831][T29663] team_slave_0: left promiscuous mode [ 672.671931][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.706086][T29663] team0: Port device team_slave_0 removed [ 672.722466][T29663] team_slave_1: left promiscuous mode [ 672.747351][T29663] team0: Port device team_slave_1 removed [ 672.762898][T29663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.771348][T29663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.781835][T29663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 672.830033][T29664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.201906][T29704] netlink: 'syz.2.6695': attribute type 1 has an invalid length. [ 673.228668][T29704] netlink: 'syz.2.6695': attribute type 2 has an invalid length. [ 673.570195][T29728] x_tables: duplicate entry at hook 1 [ 673.632137][T17561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.684129][T29738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.801840][T29749] tipc: Enabling of bearer rejected, failed to enable media [ 674.164597][T29766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.467574][T29785] netlink: 'syz.2.6715': attribute type 1 has an invalid length. [ 674.977472][T29815] bond2: entered promiscuous mode [ 674.983725][T29815] bond2: entered allmulticast mode [ 674.990372][T29815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.016599][T29823] syzkaller0: entered promiscuous mode [ 675.022578][T29823] syzkaller0: entered allmulticast mode [ 675.282192][T29838] netlink: 'syz.5.6730': attribute type 3 has an invalid length. [ 675.297785][T29838] netlink: 'syz.5.6730': attribute type 11 has an invalid length. [ 675.330202][T29838] netlink: 'syz.5.6730': attribute type 11 has an invalid length. [ 675.605378][T29851] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.613422][T29851] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.836706][T29851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.861998][T29851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.176059][T29864] syzkaller0: entered promiscuous mode [ 676.227400][T29864] syzkaller0: entered allmulticast mode [ 676.267504][ T75] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.321935][T29879] __nla_validate_parse: 13 callbacks suppressed [ 676.321956][T29879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'. [ 676.371639][ T75] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.397698][ T75] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.469194][ T75] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.601899][T29898] netlink: 'syz.3.6744': attribute type 1 has an invalid length. [ 676.624023][T29900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6743'. [ 676.670682][T17561] net_ratelimit: 9 callbacks suppressed [ 676.670703][T17561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.832140][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.878657][T29914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6747'. [ 676.904203][T29920] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 676.954176][T29925] netlink: 'syz.0.6751': attribute type 1 has an invalid length. [ 676.985295][T29928] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6752'. [ 677.037955][T29925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.054794][T29931] macvlan6: entered promiscuous mode [ 677.062735][T29931] macvlan6: entered allmulticast mode [ 677.068528][T29931] bond3: entered allmulticast mode [ 677.102936][T29931] bond3: entered promiscuous mode [ 677.108817][T29931] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 677.118597][T29931] team0: Port device macvlan6 added [ 677.266673][T29936] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 677.328051][T29948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6756'. [ 677.630296][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.660976][T29963] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 677.788623][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 677.873040][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.031115][T29983] tipc: Enabling of bearer rejected, failed to enable media [ 678.059831][T29979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6766'. [ 678.134939][T29986] xt_socket: unknown flags 0x50 [ 678.177730][T29987] tipc: Enabled bearer , priority 0 [ 678.193279][T29987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6767'. [ 678.239543][T29987] syzkaller0: entered promiscuous mode [ 678.245094][T29987] syzkaller0: entered allmulticast mode [ 678.314592][T29991] syzkaller0: entered promiscuous mode [ 678.323219][T29991] syzkaller0: entered allmulticast mode [ 678.336906][T29991] 0: reclassify loop, rule prio 0, protocol 800 [ 678.348377][T29991] syzkaller0: left promiscuous mode [ 678.357294][T29991] syzkaller0: left allmulticast mode [ 678.415017][T30000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 678.538928][T30008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6774'. [ 678.847514][T29981] tipc: Resetting bearer [ 678.898534][T29981] tipc: Disabling bearer [ 678.911585][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.951884][T30022] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6781'. [ 678.964687][T30022] 8021q: VLANs not supported on gre0 [ 679.075147][T30026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.084558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.134349][T30026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.263271][T30042] netlink: 'syz.2.6786': attribute type 9 has an invalid length. [ 679.400673][T30046] ip6gretap2: entered promiscuous mode [ 679.412227][T30046] ip6gretap2: entered allmulticast mode [ 679.523386][T30054] wlan0 speed is unknown, defaulting to 1000 [ 679.686280][T30067] netlink: 'syz.5.6795': attribute type 1 has an invalid length. [ 679.735208][T30067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.788170][T30073] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 679.861200][T30073] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 679.946882][T30054] vxcan1 speed is unknown, defaulting to 1000 [ 680.045983][T30085] x_tables: duplicate underflow at hook 1 [ 680.433126][T30101] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 680.441534][T30101] netlink: 'syz.3.6805': attribute type 10 has an invalid length. [ 680.472826][T30101] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 681.164957][T30133] tipc: Enabling of bearer rejected, failed to enable media [ 681.376030][T30151] netlink: 'syz.2.6818': attribute type 25 has an invalid length. [ 681.406801][T30151] __nla_validate_parse: 5 callbacks suppressed [ 681.406823][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 681.518750][T16563] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.529253][T30151] netlink: 'syz.2.6818': attribute type 25 has an invalid length. [ 681.543671][T16563] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.579250][T16563] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.586734][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 681.607953][T30156] tipc: Enabling of bearer rejected, failed to enable media [ 681.622472][T16563] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.862025][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 681.876577][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6821'. [ 681.896702][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 681.995463][T30169] nbd: must specify at least one socket [ 682.002482][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6824'. [ 682.033252][ T6746] net_ratelimit: 10 callbacks suppressed [ 682.033271][ T6746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.048792][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'. [ 682.067617][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6821'. [ 682.117358][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 682.266868][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6826'. [ 682.696781][T30205] xt_cluster: node mask cannot exceed total number of nodes [ 682.873135][T30215] netlink: Conntrack attr has 4 unknown bytes [ 682.919425][T30207] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 682.953393][T30221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 683.308612][T30241] syzkaller0: entered promiscuous mode [ 683.317475][T30241] syzkaller0: entered allmulticast mode [ 683.328170][T30241] netlink: 'syz.2.6844': attribute type 3 has an invalid length. [ 683.336686][T30241] netlink: 'syz.2.6844': attribute type 1 has an invalid length. [ 684.140179][T30280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.698820][T30312] tipc: Started in network mode [ 684.704814][T30312] tipc: Node identity 6644808d6ee8, cluster identity 4711 [ 684.713351][T30312] tipc: Enabled bearer , priority 0 [ 684.731646][T30314] x_tables: duplicate underflow at hook 3 [ 684.820271][T30307] tipc: Disabling bearer [ 685.022563][T30328] nftables ruleset with unbound chain [ 685.065328][T30328] bond3: entered promiscuous mode [ 685.070999][T30328] bond3: entered allmulticast mode [ 685.078367][T30328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.100934][T30333] hsr_slave_0: left promiscuous mode [ 685.107380][T30333] hsr_slave_1: left promiscuous mode [ 685.786274][T30370] openvswitch: netlink: Missing valid actions attribute. [ 685.810849][T30370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.991200][T30375] netem: invalid attributes len -24 [ 686.012984][T30375] netem: change failed [ 686.227707][T30392] netlink: 'syz.2.6895': attribute type 8 has an invalid length. [ 686.245424][T30394] netlink: 'syz.2.6895': attribute type 8 has an invalid length. [ 686.292925][T30396] netlink: 'syz.0.6894': attribute type 3 has an invalid length. [ 686.517622][T30411] syzkaller0: entered promiscuous mode [ 686.525753][T30411] syzkaller0: entered allmulticast mode [ 686.542276][ T13] syzkaller0: tun_net_xmit 70 [ 686.548361][T30411] syzkaller0: tun_net_xmit 14 [ 686.712839][T30423] netlink: 'syz.5.6905': attribute type 29 has an invalid length. [ 686.722053][T30423] netlink: 'syz.5.6905': attribute type 29 has an invalid length. [ 686.734485][T30423] __nla_validate_parse: 19 callbacks suppressed [ 686.734507][T30423] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6905'. [ 686.767773][T30423] unsupported nla_type 58 [ 687.064841][T30451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6912'. [ 688.054343][T30507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6925'. [ 688.244198][T30513] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.252104][T30513] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.315584][T30529] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6925'. [ 688.418936][T30513] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 688.445285][T30514] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 688.469729][T30534] IPv6: NLM_F_CREATE should be specified when creating new route [ 688.501024][T30528] netlink: 'syz.1.6932': attribute type 1 has an invalid length. [ 688.542121][T30528] netlink: 'syz.1.6932': attribute type 1 has an invalid length. [ 688.630683][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6935'. [ 688.946615][T30557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6941'. [ 689.043367][T30562] netlink: 'syz.2.6944': attribute type 24 has an invalid length. [ 689.089952][T30566] netlink: 'syz.2.6944': attribute type 24 has an invalid length. [ 689.297702][T30576] netem: change failed [ 689.311773][T30575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6947'. [ 689.328703][T30576] netlink: 'syz.2.6946': attribute type 11 has an invalid length. [ 689.337604][T30576] netlink: 173856 bytes leftover after parsing attributes in process `syz.2.6946'. [ 689.474725][T30584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6950'. [ 689.655927][T30595] wlan0 speed is unknown, defaulting to 1000 [ 689.740478][T30606] netlink: 'syz.3.6958': attribute type 62 has an invalid length. [ 689.788051][T30606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6958'. [ 689.811427][T30606] NCSI netlink: No device for ifindex 0 [ 690.138564][T30621] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 690.344960][T30628] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.383394][T30628] bridge0: entered allmulticast mode [ 690.417828][T30595] vxcan1 speed is unknown, defaulting to 1000 [ 690.626636][T30646] netlink: 'syz.0.6968': attribute type 11 has an invalid length. [ 690.769144][T30655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 690.838648][T30655] bond2: (slave gretap1): making interface the new active one [ 690.850647][T30655] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 690.900272][T30653] syzkaller0: entered promiscuous mode [ 690.916111][T30653] syzkaller0: entered allmulticast mode [ 691.605016][T30686] validate_nla: 6 callbacks suppressed [ 691.605037][T30686] netlink: 'syz.5.6981': attribute type 83 has an invalid length. [ 691.667982][T30689] netlink: 'syz.2.6982': attribute type 1 has an invalid length. [ 691.801245][T30689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 691.855839][T30699] __nla_validate_parse: 6 callbacks suppressed [ 691.855857][T30699] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6984'. [ 691.874463][T30690] bond3: (slave geneve2): making interface the new active one [ 691.886107][T30694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6983'. [ 691.923431][T30690] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 692.151627][T30716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6991'. [ 692.222701][T30718] x_tables: duplicate underflow at hook 1 [ 692.334293][T30731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6987'. [ 692.489894][T30740] wireguard0: entered promiscuous mode [ 692.495618][T30740] wireguard0: entered allmulticast mode [ 692.507676][T30740] team0: Device wireguard0 is of different type [ 692.532747][T30746] openvswitch: netlink: Message has 4 unknown bytes. [ 692.581914][T30746] syzkaller0: entered promiscuous mode [ 692.587684][T30746] syzkaller0: entered allmulticast mode [ 692.599532][T30746] 0: reclassify loop, rule prio 0, protocol 800 [ 692.881079][T30756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7001'. [ 692.923198][T30754] tipc: Failed to remove unknown binding: 66,1,1/0:2380285062/2380285064 [ 692.966480][T30759] syzkaller1: entered promiscuous mode [ 692.976949][T30759] syzkaller1: entered allmulticast mode [ 693.109862][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7004'. [ 693.124614][T30761] netlink: 'syz.0.7003': attribute type 39 has an invalid length. [ 693.227975][T30777] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7006'. [ 693.541999][T30782] netlink: 'syz.2.7009': attribute type 2 has an invalid length. [ 693.551175][T30790] netlink: 'syz.5.7011': attribute type 1 has an invalid length. [ 693.558960][T30790] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7011'. [ 693.572528][T30790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7011'. [ 693.650147][T30794] sctp: [Deprecated]: syz.1.7013 (pid 30794) Use of int in max_burst socket option. [ 693.650147][T30794] Use struct sctp_assoc_value instead [ 693.725210][T30794] sctp: [Deprecated]: syz.1.7013 (pid 30794) Use of int in maxseg socket option. [ 693.725210][T30794] Use struct sctp_assoc_value instead [ 693.826470][T30805] pim6reg: entered allmulticast mode [ 693.844803][T30806] pim6reg: left allmulticast mode [ 693.861273][T30809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7015'. [ 694.007868][T30816] tunl0: entered promiscuous mode [ 694.051219][T30816] netlink: 'syz.0.7018': attribute type 3 has an invalid length. [ 694.337455][T30839] sctp: [Deprecated]: syz.1.7025 (pid 30839) Use of int in max_burst socket option. [ 694.337455][T30839] Use struct sctp_assoc_value instead [ 694.451796][T30836] 8021q: VLANs not supported on ip_vti0 [ 694.475493][T30846] bridge0: port 1(syz_tun) entered blocking state [ 694.519437][T30846] bridge0: port 1(syz_tun) entered disabled state [ 694.526349][T30846] syz_tun: entered allmulticast mode [ 694.556479][T30846] syz_tun: entered promiscuous mode [ 694.564551][T30846] bridge0: port 1(syz_tun) entered blocking state [ 694.571175][T30846] bridge0: port 1(syz_tun) entered forwarding state [ 694.737950][T30865] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 694.750944][T30857] team0: Device gtp0 is up. Set it down before adding it as a team port [ 695.090144][T30889] netlink: 'syz.5.7041': attribute type 1 has an invalid length. [ 695.146266][T30889] bond5: entered promiscuous mode [ 695.164552][T30889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.208502][T30889] bond5: (slave bridge3): making interface the new active one [ 695.220968][T30889] bridge3: entered promiscuous mode [ 695.231056][T30889] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 695.448288][T30903] tipc: Enabling of bearer rejected, failed to enable media [ 695.875390][T30921] netlink: 'syz.5.7050': attribute type 7 has an invalid length. [ 695.886358][T30921] xt_ipcomp: unknown flags 1D [ 696.202718][T26490] ------------[ cut here ]------------ [ 696.208893][T26490] refcount_t: underflow; use-after-free. [ 696.216054][T26490] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz-executor/26490 [ 696.226908][T26490] Modules linked in: [ 696.231835][T26490] CPU: 0 UID: 0 PID: 26490 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 696.242665][T26490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.254036][T26490] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 696.262665][T26490] Code: 04 8b fe 0a 67 48 0f b9 3a eb 4a e8 a8 fd 32 fd 48 8d 3d 01 8b fe 0a 67 48 0f b9 3a eb 37 e8 95 fd 32 fd 48 8d 3d fe 8a fe 0a <67> 48 0f b9 3a eb 24 e8 82 fd 32 fd 48 8d 3d fb 8a fe 0a 67 48 0f [ 696.283734][T26490] RSP: 0018:ffffc900038f77f8 EFLAGS: 00010293 [ 696.290312][T26490] RAX: ffffffff848dfa2b RBX: 0000000000000003 RCX: ffff8880240ddb80 [ 696.298362][T26490] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c8530 [ 696.306869][T26490] RBP: 0000000000000000 R08: ffff8880240ddb80 R09: 0000000000000005 [ 696.316302][T26490] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88801e750c00 [ 696.325016][T26490] R13: ffff88805fd26460 R14: ffff88805fd26478 R15: dffffc0000000000 [ 696.333419][T26490] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 696.342947][T26490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.351411][T26490] CR2: 0000555558603588 CR3: 0000000083194000 CR4: 00000000003526f0 [ 696.360936][T26490] Call Trace: [ 696.364282][T26490] [ 696.367264][T26490] klist_dec_and_del+0x3c7/0x3d0 [ 696.373168][T26490] klist_remove+0x1bd/0x340 [ 696.377726][T26490] ? __pfx_klist_children_put+0x10/0x10 [ 696.383958][T26490] ? __pfx_klist_remove+0x10/0x10 [ 696.389102][T26490] ? kobject_move+0x5a6/0x6e0 [ 696.393936][T26490] ? __pfx_kobject_move+0x10/0x10 [ 696.399054][T26490] ? do_raw_spin_unlock+0x122/0x240 [ 696.404483][T26490] ? get_device_parent+0x366/0x3a0 [ 696.410380][T26490] device_move+0x193/0x730 [ 696.414869][T26490] hci_conn_del_sysfs+0xb8/0x1a0 [ 696.420071][T26490] hci_conn_del+0xc36/0x1240 [ 696.424729][T26490] hci_conn_hash_flush+0x191/0x260 [ 696.430362][T26490] hci_dev_close_sync+0x821/0x1100 [ 696.435539][T26490] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 696.441939][T26490] ? up_write+0x1ac/0x410 [ 696.446675][T26490] ? rcu_is_watching+0x15/0xb0 [ 696.451587][T26490] hci_unregister_dev+0x21a/0x5b0 [ 696.457564][T26490] vhci_release+0x152/0x1a0 [ 696.463033][T26490] ? __pfx_vhci_release+0x10/0x10 [ 696.468132][T26490] __fput+0x44c/0xa70 [ 696.472782][T26490] task_work_run+0x1d4/0x260 [ 696.477429][T26490] ? __pfx_task_work_run+0x10/0x10 [ 696.482677][T26490] ? kmem_cache_free+0x197/0x620 [ 696.487777][T26490] ? do_exit+0x68f/0x22f0 [ 696.492281][T26490] do_exit+0x694/0x22f0 [ 696.496527][T26490] ? __pfx_do_exit+0x10/0x10 [ 696.501934][T26490] ? do_raw_spin_lock+0x121/0x290 [ 696.507036][T26490] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.512561][T26490] do_group_exit+0x21c/0x2d0 [ 696.517391][T26490] __x64_sys_exit_group+0x3f/0x40 [ 696.522489][T26490] x64_sys_call+0x2210/0x2210 [ 696.527214][T26490] do_syscall_64+0xec/0xf80 [ 696.532491][T26490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.538732][T26490] ? trace_irq_disable+0x37/0x100 [ 696.543980][T26490] ? clear_bhb_loop+0x60/0xb0 [ 696.548729][T26490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.554803][T26490] RIP: 0033:0x7f39ec58f749 [ 696.560890][T26490] Code: Unable to access opcode bytes at 0x7f39ec58f71f. [ 696.567976][T26490] RSP: 002b:00007fff5852c9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 696.577715][T26490] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f39ec58f749 [ 696.585956][T26490] RDX: 00007f39ec59163a RSI: 0000000000000000 RDI: 0000000000000007 [ 696.595147][T26490] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007 [ 696.603280][T26490] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007f39ec7b5ca0 [ 696.611414][T26490] R13: 00007fff5852d56c R14: 0000000000000000 R15: 00007f39ec7b7e60 [ 696.620460][T26490] [ 696.623591][T26490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 696.630921][T26490] CPU: 0 UID: 0 PID: 26490 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 696.640595][T26490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.650687][T26490] Call Trace: [ 696.654021][T26490] [ 696.656960][T26490] vpanic+0x1e0/0x670 [ 696.661061][T26490] panic+0xb9/0xc0 [ 696.664842][T26490] ? __pfx_panic+0x10/0x10 [ 696.669311][T26490] __warn+0x317/0x4b0 [ 696.673317][T26490] ? refcount_warn_saturate+0xb2/0x110 [ 696.678865][T26490] ? refcount_warn_saturate+0xb2/0x110 [ 696.684375][T26490] __report_bug+0x288/0x500 [ 696.688984][T26490] ? __pfx_stack_trace_save+0x10/0x10 [ 696.694415][T26490] ? refcount_warn_saturate+0xb2/0x110 [ 696.699975][T26490] ? __pfx___report_bug+0x10/0x10 [ 696.705067][T26490] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 696.711328][T26490] ? __lock_acquire+0x146f/0x2cf0 [ 696.716412][T26490] report_bug_entry+0x19a/0x290 [ 696.721293][T26490] ? refcount_warn_saturate+0xb2/0x110 [ 696.726784][T26490] ? refcount_warn_saturate+0xb7/0x110 [ 696.732267][T26490] handle_bug+0xca/0x200 [ 696.736563][T26490] exc_invalid_op+0x1a/0x50 [ 696.741097][T26490] asm_exc_invalid_op+0x1a/0x20 [ 696.745973][T26490] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 696.752225][T26490] Code: 04 8b fe 0a 67 48 0f b9 3a eb 4a e8 a8 fd 32 fd 48 8d 3d 01 8b fe 0a 67 48 0f b9 3a eb 37 e8 95 fd 32 fd 48 8d 3d fe 8a fe 0a <67> 48 0f b9 3a eb 24 e8 82 fd 32 fd 48 8d 3d fb 8a fe 0a 67 48 0f [ 696.771961][T26490] RSP: 0018:ffffc900038f77f8 EFLAGS: 00010293 [ 696.778068][T26490] RAX: ffffffff848dfa2b RBX: 0000000000000003 RCX: ffff8880240ddb80 [ 696.786069][T26490] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c8530 [ 696.794159][T26490] RBP: 0000000000000000 R08: ffff8880240ddb80 R09: 0000000000000005 [ 696.802150][T26490] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88801e750c00 [ 696.810495][T26490] R13: ffff88805fd26460 R14: ffff88805fd26478 R15: dffffc0000000000 [ 696.818618][T26490] ? refcount_warn_saturate+0xab/0x110 [ 696.824135][T26490] ? refcount_warn_saturate+0xab/0x110 [ 696.829642][T26490] klist_dec_and_del+0x3c7/0x3d0 [ 696.834629][T26490] klist_remove+0x1bd/0x340 [ 696.839175][T26490] ? __pfx_klist_children_put+0x10/0x10 [ 696.844766][T26490] ? __pfx_klist_remove+0x10/0x10 [ 696.849818][T26490] ? kobject_move+0x5a6/0x6e0 [ 696.854525][T26490] ? __pfx_kobject_move+0x10/0x10 [ 696.859565][T26490] ? do_raw_spin_unlock+0x122/0x240 [ 696.864976][T26490] ? get_device_parent+0x366/0x3a0 [ 696.870152][T26490] device_move+0x193/0x730 [ 696.874651][T26490] hci_conn_del_sysfs+0xb8/0x1a0 [ 696.879629][T26490] hci_conn_del+0xc36/0x1240 [ 696.884308][T26490] hci_conn_hash_flush+0x191/0x260 [ 696.889572][T26490] hci_dev_close_sync+0x821/0x1100 [ 696.894809][T26490] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 696.900390][T26490] ? up_write+0x1ac/0x410 [ 696.904762][T26490] ? rcu_is_watching+0x15/0xb0 [ 696.909565][T26490] hci_unregister_dev+0x21a/0x5b0 [ 696.914620][T26490] vhci_release+0x152/0x1a0 [ 696.919164][T26490] ? __pfx_vhci_release+0x10/0x10 [ 696.924231][T26490] __fput+0x44c/0xa70 [ 696.928252][T26490] task_work_run+0x1d4/0x260 [ 696.932975][T26490] ? __pfx_task_work_run+0x10/0x10 [ 696.938157][T26490] ? kmem_cache_free+0x197/0x620 [ 696.943210][T26490] ? do_exit+0x68f/0x22f0 [ 696.947659][T26490] do_exit+0x694/0x22f0 [ 696.951850][T26490] ? __pfx_do_exit+0x10/0x10 [ 696.956462][T26490] ? do_raw_spin_lock+0x121/0x290 [ 696.961524][T26490] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.966763][T26490] do_group_exit+0x21c/0x2d0 [ 696.971405][T26490] __x64_sys_exit_group+0x3f/0x40 [ 696.976491][T26490] x64_sys_call+0x2210/0x2210 [ 696.981213][T26490] do_syscall_64+0xec/0xf80 [ 696.985761][T26490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.991855][T26490] ? trace_irq_disable+0x37/0x100 [ 696.996910][T26490] ? clear_bhb_loop+0x60/0xb0 [ 697.001618][T26490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.007617][T26490] RIP: 0033:0x7f39ec58f749 [ 697.012047][T26490] Code: Unable to access opcode bytes at 0x7f39ec58f71f. [ 697.019078][T26490] RSP: 002b:00007fff5852c9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 697.027512][T26490] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f39ec58f749 [ 697.035513][T26490] RDX: 00007f39ec59163a RSI: 0000000000000000 RDI: 0000000000000007 [ 697.043507][T26490] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007 [ 697.051498][T26490] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007f39ec7b5ca0 [ 697.059494][T26490] R13: 00007fff5852d56c R14: 0000000000000000 R15: 00007f39ec7b7e60 [ 697.067524][T26490] [ 697.071203][T26490] Kernel Offset: disabled [ 697.075541][T26490] Rebooting in 86400 seconds..