last executing test programs: 4.171350077s ago: executing program 2 (id=4178): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 4.166504496s ago: executing program 0 (id=4180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x7, 0xff, 0x9, 0x7}}}]}, 0x30}}, 0x4000014) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x234, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1c8, 0x2a, [@fast_bss_trans={0x37, 0x69, {0x40, 0x2, "5006c277aa068f83b6895f2324a4bf15", "4ed7a53cb02ef5b1271fc30fbb2f250254eb2944639edb486025b607a84c2504", "e909e24c1c29479b80fb192d1b39a4922dbc54f959fa0169a91bb54f0c9eb486", [{0x4, 0x8, "5fbed7fe4c165382"}, {0x2, 0xb, "e1ae099d39a91b282350ee"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0xbd, @device_a, 0x9, @value=@broadcast, 0x8, 0x0, @device_a, 0x2}}, @tim={0x5, 0x7f, {0x8, 0xc8, 0x81, "c322879bc3f28ad09209ac65fc19a565573969e9967c237f8f4979903c7be362927ba8d80d47d8e6d0d215557b90a5013209bded21a28dff2b3fc69b2c6d55c79e7bc343c9ff4f955642bc5885ff7a4d49038f2151fa756750db957f396268060b83a269de4d29f467c2550ad957a25c5e796eec89d2f68658c5c924"}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x41, "8d64cf42f8490d5fe96e74f235a13e5579df09890dd53dc25fc2a016884039e25ad4015c9047a94015ae63cdb09741f487d47beeab475c66c796fcb2f20d2f7092"}, @perr={0x84, 0x5c, {0xe5, 0x6, [{{}, @device_b, 0x7, @void, 0x16}, {{}, @device_b, 0x5, @void, 0x15}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x16}, {{}, @device_a, 0x6, @void, 0xd}, {{0x0, 0x1}, @device_a, 0x8d9e, @value=@broadcast, 0x2}, {{}, @device_a, 0x80000001, @void, 0x3c}]}}, @cf={0x4, 0x6, {0x3, 0x7, 0xe06b, 0x9}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4b, 0x2a, [@mic={0x8c, 0x18, {0x45b, "4b8af0389d79", @long="a1dfb3fd8072733342d4717e5070d7c4"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x0, @device_a, 0x7, @value, 0xfffffffe, 0x6, @broadcast, 0x81}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x50, 0x8, 0x2}}]}]}, 0x234}}, 0x20000042) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000480)={0x490, 0xfffffffa, 0x7, 0x1}) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff17}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x8800) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = getuid() sendmsg$nl_generic(r0, &(0x7f0000001cc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000740)={0x152c, 0x1a, 0x100, 0x70bd26, 0x25dfdbff, {0x1e}, [@generic="fa1b46d43cc2049a903116af35a19e75ad5c4356b7cff0501508657e0db09691f47d89c85254e24174e65e20191afb8c2aa99a8a365020b49d6ade6c73b41153c89b2db279a7ba1600ec8137cefce2283ab8666e35e5cb63f73127958ff42517644a22ca025243e456f4a01292", @nested={0xf5, 0xb5, 0x0, 0x1, [@generic="d34037ec4119f0eadfef0da62fe6abfa886934a24a1369445622017dd16a77eeffa8b112aa25c3e8be8fa43859cd28a9007cda4e784408160d86cd7aded40b62ece4fc7f0d8f3138b51c1cbcb525651f3977f3e818ac1b8fe9db6326dbb376239128809b148e7fc72c6e8d4282b0c9b73ae07785eb5da8a51fe5373495851d5400a26286fd91bfc0ca0c44c2b59894779dd0e2eb0533fc0de27fa45b55acc7d864c8979487003038101aa50e4e5e9c64c3a3ad0f19aa311f2febddefec418ef7d4714f554a959cce7d4419bc9410cd71fd220a71ca25ec60ba7d1bb5b8a7a4826f0d757377f9a72a9ce761e397", @nested={0x4, 0x149}]}, @typed={0x7, 0x158, 0x0, 0x0, @str='*,\x00'}, @generic="71cd3103c4b294a1cc51ed7d1dc39ed07c89aa88bd966c968853d100031e7f13f56373ad5ee5862f06fabdb8", @typed={0x4, 0xa8}, @nested={0x11c, 0x124, 0x0, 0x1, [@generic="4ea2b446734bd6b8e646999d432f2cb109c311e9d55a7b7c9e2dc4f4a55bd9ff55e774331f255841016d138b414e95be", @typed={0x4, 0x61}, @nested={0x4, 0x118}, @generic="30998af2d88d69f2d17bba2075e1c59199dc74a13f3b631c729f5daa99ece696e5c82684b994e6aefe6e46df4e255a77f77cdd506b2039f717381f07a68fb9deba5237d5981e421712eda6036df39e30d4e76694d28e85f1c501ea12fb855d862ef6de4412cfde634ab4c9322f059af1a5ad2554ff5592f3d4803a685fb63e594eb7cc3d6eb4ecc080f8b74110f7f37b38fa7f85f8959313a52a59ae95786138ca145dee5ecb37f57372e1f36ec4bdf2c08284c4721c0ef3542fa43ee4b4faf217f99d3dafa8ed20cc4f8bf0c045adfe1b81b11191876c25a1611682834a9332"]}, @typed={0x15, 0x2c, 0x0, 0x0, @binary="0fc87392b8e1d47f0b58b3177d3ac63b7c"}, @generic="b6d5ebb5b131ec6a3b94932893a7bc1b1a59287e815043e68e022448416293af82b7c14f791a457d8fd1217c1c021d27261c1ae33fbd2e10eb93e7100f8bf37b204d0b3e2b144502864aeb0f8a822b9b9d30b3ca174225b61e1301ed8f714c2a38809d9e9bf6201afed97449c7bdedb3b661", @generic="e783477748c22f01731f23760ac75d19c1e0f4e57a6cf600f23a3c4ae32863b92823542972da8acbc4678ffd3ac4030a3a9c16b8c7c415a329c70cb4a71a5f93fc075c570f49b67aaaa36ce3b1df3b652260a80396499cbe68e61b5b7346bd9d55fa14ae56b144866f53b114b007801b05d5c4e169d1c339c73b4919fc1ab42b6e63500bd5d1800b84eac5f73147976e7672e11afead7d5033825ebe8d8dd1fc4acf309968469ceba490927696d5c6ab4544e9426701792fb696b3d4daf8c2bd8da686cc258fcefb049d2c00cda466e450dc8e82e4edbeda49cad57ebe52229bab73766fd32a1ba81474032907238445d2639a98e3a49ac9", @nested={0x10da, 0xc8, 0x0, 0x1, [@generic="07e56f5a12ee42a7479c0f23973ec6d16cd2c0b9abdfc38a43af02de9539c987849f59264938c8d35b8dfa3a50602c9047c8a3ae7132593a1d822b8a04f44d979c154df30c826ddadc920a65145d2e3762f100ee649ffea3c275a5b4bc9f8abf5f41f097538ba654cf4833c7b654970a0ba2d2e93f06f54b47a8c4acab75b46a3c42a19cd796b59a1451f18e260c62d214c9c7910390485de106259bc613b5579615f1c476ee713206abad5921873b90754767611d9cb52219e3", @typed={0x8, 0x5d, 0x0, 0x0, @uid=r2}, @typed={0x7, 0x2, 0x0, 0x0, @str='/\\\x00'}, @generic="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", @nested={0x4, 0x11}, @nested={0x4, 0x84}, @nested={0x4, 0x6d4}]}]}, 0x152c}}, 0x4880) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001e00)={r0, &(0x7f0000001d00)='syz0\x00', 0x10402, &(0x7f0000001d40)={@align=0x5, {0x0, 0x9, 0x3, 0x4}}, 0x1, &(0x7f0000001d80)={@_ha_fsid}, &(0x7f0000001dc0)=0x6}) r5 = openat$cgroup_subtree(r4, &(0x7f0000001e40), 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002000)={{r5, &(0x7f0000001ec0)='*,\x00', 0x234000, &(0x7f0000001f00)={@_ha_fsid={[0x7, 0x7785]}, {0x1, 0x2, 0x0, 0x72a7}}, 0x6, &(0x7f0000001f40), &(0x7f0000001f80)=0x1000}, {[0x19, 0x5, 0x6, 0x7]}, 0x5, 0x13, &(0x7f0000001fc0)=""/19}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) (async) r8 = accept$inet(r7, &(0x7f0000002080)={0x2, 0x0, @local}, &(0x7f00000020c0)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000002100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000002200)=0xe8) (async) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000002240), &(0x7f0000002280)=0x4) bind$inet6(r4, &(0x7f00000022c0)={0xa, 0x4e24, 0xfffffff9, @loopback, 0x200}, 0x1c) (async) sendmsg$nl_xfrm(r4, &(0x7f0000002680)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002340)=@newae={0x2fc, 0x1e, 0x800, 0x70bd2d, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, 0x4d3, 0xa, 0xe}, @in6=@private2, 0x81, 0x3503}, [@algo_aead={0xb9, 0x12, {{'echainiv(morus640-generic)\x00'}, 0x368, 0xc0, "fdf910180871273801704f670bf674d1649cb6705a6ec3c1f848ecf156f0f342ecf55be82718c6920f415d71beb9e22131f3c9465bafa6efd0ae842081697560fd0ee2096df33755d93eb25b1f7b5cb0aabb7212a1d2aafeac4892967ebbff06f653ab3b9aea4970684499f615"}}, @migrate={0x1cc, 0x11, [{@in6=@empty, @in6=@private1, @in=@local, @in=@multicast2, 0xff, 0x2, 0x0, 0x3503, 0xa, 0xa}, {@in=@empty, @in6=@mcast2, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x3, 0x0, 0x3507, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0xcd, 0x3, 0x0, 0x0, 0x43dd3cdc0ddb115, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@multicast1, 0x33, 0x3, 0x0, 0x3502, 0x2, 0xa}, {@in=@empty, @in=@remote, @in=@empty, @in=@rand_addr=0x64010102, 0x2b, 0x4, 0x0, 0x34ff, 0xa, 0x2}, {@in6=@loopback, @in=@loopback, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x3504, 0x1c3dfd7f8d3b32ca, 0x2}]}, @mark={0xc, 0x15, {0x35075a, 0x8}}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in6=@empty}}, @offload={0xc, 0x1c, {r9, 0x2}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002700)=@o_path={&(0x7f00000026c0)='./file0\x00', 0x0, 0x8, r4}, 0x18) (async) r10 = socket$inet6(0xa, 0x6, 0xa50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8983, &(0x7f0000002740)={0x7, 'veth0_to_team\x00', {0x2}, 0x9}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x85000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f6d45d4d1977b3df"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x101}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000002b80)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b40)={&(0x7f0000002940)={0x1c8, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xa5, 0x5b}}}}, [@NL80211_ATTR_IE={0xb2, 0x2a, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xb, 0x8, 0xffff, @broadcast, 0xe, @value=@device_b, 0x2eb, 0x3, 0x4, [{{0x1, 0x0, 0x1}, @device_a, 0x1}, {{}, @device_a, 0x7ff}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{}, @broadcast, 0xb7e6}]}}, @tim={0x5, 0x45, {0xd, 0xb5, 0xb, "cfb45c2e3356428d0f5d6b29f285d98c49ecb62cf6667c1ae93c0ed6cd2bf60d3b4965c1c15b51b9ad89e750ef9a9272fddab361f6048621ce6d8b0f2c5a2a13b540"}}, @supported_rates={0x1, 0x8, [{0x60, 0x1}, {0x9, 0x1}, {0x18, 0x1}, {0x9, 0x1}, {0x6}, {0x35}, {0x36}, {0x1, 0x1}]}, @random_vendor={0xdd, 0xa, "8a38f68e2312c65d0c30"}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0x4}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "75869dc97e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1d12c931e"}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fcccf76e22"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "ba08874a8fcee436994fbe9b7c5832f0"}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x2, 0x0, {0x8, 0x3ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x7f, 0x5}}, @NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x9}, {0x9}, {0x36}, {0xb}, {0x30}, {0x30}, {0x4, 0x1}, {0x1b}, {0x4, 0x1}, {0x5}, {0x12, 0x1}, {0x12, 0x1}, {0xc}, {0x4}, {0x12}, {0x18}, {0x6c, 0x1}, {0x48}, {0xb}, {0xc}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x5}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x40094) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c00), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000002e80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002c40)={0x1fc, r12, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}, {0x6}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x6f3}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc0}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xeb68}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xb6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x101}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002f00), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000003040)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003000)={&(0x7f0000002f40)={0x88, r13, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.984628716s ago: executing program 0 (id=4182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="19022bbd7000fedbdf2521000000f6ff04000000000000000000050020000000000009001f007068793100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 3.829471685s ago: executing program 0 (id=4186): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.686837946s ago: executing program 2 (id=4194): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f00000001c0)={{0x2, 0x2, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4c32ac5fb68dbcb8, {0x2, 0x0, @empty}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='6]', 0x2}], 0x1}, 0x400c000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000b0000002dbd7000fddbdf2508003f000500000008003f000000ff0f00003f0003000200000008003f00fdffffff0000000000000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000884}, 0x4004000) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x21, 0x0, &(0x7f00000005c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r10, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc084, 0x0, 0xfffffffffffffd33) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f00000001c0)='veth1_to_bridge\x00'}) 2.664664939s ago: executing program 1 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xb, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0xffff, 0x65, &(0x7f00000001c0)=""/101, 0x41000, 0x36, '\x00', 0x0, @fallback=0x11, r2, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xa, 0x4bfd, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 2.646169786s ago: executing program 2 (id=4202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 2.508994074s ago: executing program 1 (id=4205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x8c) r2 = socket$kcm(0x2, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r2, &(0x7f0000000040)='}-\x00', 0x2000, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x1]}, {0x4, 0x8, 0xf0, 0xfffffffffffffffa}}, 0x3, &(0x7f0000000380), &(0x7f00000001c0)=0x5719c9de}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94) 2.476069075s ago: executing program 2 (id=4206): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x884) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 2.455103138s ago: executing program 0 (id=4207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r2], 0x48}}, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000004020000000000000000009d04000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYRES64=r11, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=r7, @ANYRES8=r4, @ANYRESHEX=r3], 0x128}, 0x915054c1907c1387) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x4f, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r6], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="63138271460d8c65ab5cb7399269873c86e5e876b25cc056c81132e463673cd446750a01661280795da8d50da284446e459b5e1dc70ebac6d84a018e5ac273365ac052ed60878355ec56aacf65a5302d309bc6f955096a70804d6d6b69c4bc7454eddf3699b487fcb23982cb526ee83de41c6f2472bc37c99ba729e9372e25f402d7ff2977a05db1440e6deb3245"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000, @value=r15}, 0x28) vmsplice(r16, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 2.344552011s ago: executing program 4 (id=4208): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRESOCT=0x0, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 2.343603656s ago: executing program 2 (id=4209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0xc044) r1 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0xc044) (async) socket$kcm(0x2d, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) 2.189948978s ago: executing program 2 (id=4211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x80, 0x80}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000fdffffff00000000", @ANYRES32, @ANYBLOB="b000000000000000001263000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x400000008000f28, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getpeername$l2tp6(r1, &(0x7f0000000240), &(0x7f0000000a40)=0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r11, 0xc252d000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000800)={r0, &(0x7f00000006c0)='hfsc\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x6, 0x3]}, {0x0, 0xffff, 0x401, 0x8}}, 0x9, &(0x7f0000000740), &(0x7f00000007c0)=0x10000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xb6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x3, 0xa, 0x6, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x8, 0x64, &(0x7f00000004c0)=""/100, 0x41000, 0xc, '\x00', r8, 0x25, r10, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r11, 0xffffffffffffffff, r12, 0x1, r13], &(0x7f0000000880)=[{0x2, 0x4, 0x1, 0xa}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x2, 0x7, 0x8}, {0x5, 0x4, 0xa, 0x6}, {0x0, 0x3}, {0x2, 0x2, 0x9, 0x6}, {0x1, 0x5, 0xa, 0x3}, {0x0, 0x5, 0x2, 0x1}], 0x10, 0x81d}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r14) recvmmsg(r14, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340), 0x3}, 0x7}], 0x44, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c2cf6007061796c6f616400340002800800044000000000080005400000000008000340000000610800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a32000000001400000011000100000000000000000003000006"], 0x9c}}, 0x4) 2.093154085s ago: executing program 4 (id=4212): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r4, @ANYBLOB="00000000a8880000200012800b00010064727370616e000010001200"/40], 0x40}}, 0x0) 1.975519781s ago: executing program 3 (id=4213): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x1, 0x8}, 0x75}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x10}, 0x8) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x6, 0x6, 0x8, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x700, 0x6}}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000280)='#&+\x00', 0x448081, &(0x7f00000002c0)={@_ha_fsid={[0x2, 0x325]}, {0x3, 0xffff, 0xfffffffa, 0x100}}, 0x4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r3, r4, 0x0, 0x4, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x7, 0x0, 0x6, 0x20021, 0x1, 0xf606, '\x00', 0x0, r4, 0x3, 0x1, 0x3}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000540)={0x500, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x4d4, 0x111, 0x0, 0x1, {0x4d0, 0x5, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfd55}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x223}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x244, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x19d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb3ed93c2a040185e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd072}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000ac0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x400}, 0x0, 0x3, 0xe21f, 0x8, 0x1c, 'syz0\x00', "ea4fbbeaeb6ec774ade7267aa6cce2fd37f595117a06b8273cf0f7bb3be3dd43", "103cb191b0e0b989acb5a9da20e78c92c803f4dc25f992cac3bbeae89f5595fb", [{0x2, 0x1aa9, {0x2, 0x91}}, {0x4, 0xa, {0x3, 0x3}}, {0x6, 0x7, {0x3, 0x3}}, {0x4, 0x3, {0x2, 0x8}}, {0x4, 0x5, {0x2, 0x7ff}}, {0xe5d1, 0x40, {0x2, 0x2211a46c}}, {0xffff, 0xe3db, {0x2, 0x2}}, {0xfa8, 0xb81c, {0x3, 0x46d}}, {0x4, 0x8, {0x1, 0x7940}}, {0x101, 0x6, {0x2, 0x63767468}}, {0x4, 0xc, {0x3, 0x9}}, {0x9, 0x5, {0x2, 0x8}}, {0x3, 0x4, {0x1, 0x1}}, {0x1, 0x1ff, {0x2, 0x8}}, {0x3, 0x8, {0x1, 0x7}}, {0x0, 0x73, {0x0, 0x1ff}}, {0x81, 0x5, {0x0, 0x400}}, {0x7, 0x0, {0x3, 0x3}}, {0xb, 0x2, {0x3, 0x4}}, {0xaf98, 0x200, {0x1, 0x5}}, {0x8, 0xf, {0x1, 0x4340}}, {0x0, 0x8, {0x2, 0xd}}, {0x4, 0x6, {0x0, 0x2}}, {0x0, 0x3, {0x1, 0x10000000}}, {0xf, 0x40, {0x0, 0xc}}, {0xabe1, 0x0, {0x1, 0x12}}, {0x75, 0x8, {0x0, 0x8}}, {0x3, 0xd4, {0x0, 0x200}}, {0x8122, 0x64, {0x31c0f25e62963deb, 0x91}}, {0x7d79, 0x6, {0x2, 0x80}}, {0x6, 0x4, {0x1, 0xfff}}, {0x63, 0x6e80, {0x5, 0x7fffffff}}, {0x5, 0x1, {0x0, 0x2}}, {0x2, 0x5, {0x2, 0x7}}, {0x0, 0x8f86, {0x1, 0x5}}, {0x9, 0x8, {0x0, 0x3}}, {0xd, 0xf, {0x2, 0x6}}, {0x1, 0xc0, {0x2, 0x3}}, {0xc62, 0x4, {0x1, 0x7fff}}, {0x9, 0x6, {0x0, 0x82}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000e80)={0x0, 0x1, 0x73dd, 0x8000000000000000, 0xd, 0x6}) bind$vsock_stream(r4, &(0x7f0000000ec0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/196, 0xc4}, {&(0x7f0000001000)=""/115, 0x73}, {&(0x7f0000001080)=""/34, 0x22}, {&(0x7f00000010c0)=""/95, 0x5f}], 0x4, &(0x7f0000001180)=""/4096, 0x1000}, 0x40014022) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ef3451e6282d"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@ifindex=r3, 0x86d3c61704e64cbb, 0x0, 0x4, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002440)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)={@map=r10, r4, 0x35, 0x0, 0x0, @void, @value, @void, @void, r9}, 0x20) getsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000002480), &(0x7f00000024c0)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)=@deltaction={0xa4, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x156}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x20000081) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002680)={r10, 0x9, 0x3, 0x3a4}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000003000)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002740)={0x878, 0x0, 0x180, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "51490ae348541a156baed8d7b039973499956867f2d3a456615401553e124f0bb3ad22be0546e690185435c430b606acb9456113cd0ee075e3d446c04c4eba2eda943a006d09bb338054b4f02d3196af98f541060e0b7af0a8918bd57fcceaae500697657dbb900d873c0832991e9a68b2e956e96b4d05ac89678961e50b0bcf5dcb4960d3ddb24be52d632af684c48a993414772c2d7f426b41fbf2fd203d43cc9eadb77ade4bc788b56b2d0560671eed18e7ebda21a61827baeb28c7bdb0d3582c7969975472c75b0a6a20580499e1f545700d7767ade9398720abfc43189795d4ae75dd049d6f2a66f8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "1fcc121f309a85d8e5b361f9fa0fe6a274b93ae1ce0b087cce076ceff2ba212d7e9c21d5ab886832e869049e1788b72c17b49467be26497c19caeb222d923896aa40"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x258, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x87, 0x5, "04edd5c24cd455d936852d984f3a26783bf2366887019222132b4f0b6e2cc5efdf8fcbfe88accc9b0785ddceb02b88060501e453ad41613a121a27201be0d70271e783abcb3e1519f69aeaaf457d223ec2cb0eac285963e7451ba0f179b4cdd0615e35e922aca9a0b07d73cc9e8bcef05be788948b431976da8e2a0b00d1682e9a06f2"}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "e12ccf2f93748e4bf585c0839e45e42fc8513ae270e4747e82c4c3890e37745af9cd0331d764abc58d6ce697491aa42075a0ceb8df05005e6e6c4e5e818f73bdce60daa965ccf41e563c5cbbde744ecf1103e777adcdf0b100aa831e71740e3e16ab1e30cf0ca010ac6639730a939b72be922573353dd035a97d07a94de94b038aa422e2bed520d877b530cdb6f4adddd06622dec0489ddfe8db6ff0a7ad8f662cc3e4e01ca2a2f47dfef56481fbb0d3c89b6ed5f9aa864824cef673dddce612f8cd881915f0bea5e5a1be8c994a1e96c4a2579f3738436b40673081d4e2cc1a2d85a58f903c85fc7913ca51e0d2f31dc9475feecb1e068606"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '*'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+&*{-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd13}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!.$)[,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\].\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{+/(#$--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "63bc4727eb06462cdb997e733e8ebc4ce7df7f6cd36cc36ec0a7931cde4ea0a048a4a3aaf6a86fe88064cc6932078faee6addf5ce6917c5ddf449f15837e5f65738644290cfbe7247b1c6ee4f4a8dbcb613e7c55725c32ec9763434f5cd867cc1c57c1c2de5ef9c3ea3cf5dd8df44b8d4ea4ccb84e012cb35e68939fd1719d66a52d3ff6df65f37d4e1fa8a91c8e93d045d3c07192259ba5c9b67c64095ede"}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "039a5d669b15df9f861e5d77381ad4af1ad6afc5f35ac4fd2a3800e3ea435a071ac4d7ce11c3b3b555d4a92b5a02bd4f4a5ccd851a2b4f34ac6c08cba970ac47f8ce63377325565f675c37ab085650acc95ed1c72da5be213aa52804f0fea7486159bfc5e6"}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']^[$:#\xa4*!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+(-\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa51}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'tunnel_key\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x878}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 1.878683693s ago: executing program 4 (id=4214): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="15e60a3cae10001b0000000100000000"], 0x10}], 0x2}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000500)={{r0, &(0x7f0000000040)='}!\x14\\,::%*(\x01\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x1, 0x7]}, {0x4, 0x100, 0xfff}}, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x3}, 0x3, &(0x7f0000000480)=[{0x3, 0x8, &(0x7f0000000200)='\x00', &(0x7f0000000240)="e57036e2880b1290a0d8bfbcdf607adde826acd4e9116e046feadcb854ee7bc57e00a7ac0207e350db0d82515523361661972c511ef33d9d1b771c1f2c6cb2d267fc70b9d3d6547668ba182da64bbc23272acebc12b37810d077fb64233916d28a318ec6e5c55c", 0x67, 0x8}, {0x1, 0x7fffffff, &(0x7f00000002c0)='(-}+,\x00', &(0x7f0000000300)="5e4e5db6392a887d6764dece14e5498491582221de8c71b215b10e55717108df487ad2e0e8405f7fc18c324ee0b4f4f24606182ffea5d3fe3edda1784ec728699c4a8d925944ff19d3a3cdc63a566bd0e663d8fb1594cfc1d39f3219edb267e71eba186d1532b5fdba728b214f83b1577914baa1d716fcb7d36181ff698f74063fbce0d8a96dd41f1755c75aa7c97a82a1f413d7bfec9132d66651109835f82727e97014d6cc82", 0xa7, 0x30}, {0x1, 0x1, &(0x7f00000003c0)='#$\x84}\x00', &(0x7f0000000400)="0b406ecfc3d11fbd183ae38e4d486d05060437dda029e3f76a2fa6e19367fc95f169d13c2155d4d953067b9450c6b47d5a6a3b714131d5ecb7053ad15fc03a819562b6a9b0b6c73745bdbaacf0202d5175fa18ff71a89f79", 0x58}]}) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000005c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x6}, 0x16, {0x2, 0x4e24, @private=0xa010100}, 'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.761639938s ago: executing program 3 (id=4215): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) (async) syz_emit_ethernet(0xa7, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x6d, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}, {"c6ad29fffa6369166d6cdfac9c10818150039937e482f87f4aebc3780622dfa976d798eea3727ce98e56a4d032561dfd4c2b1c15b2fbc6d6edfdb106e94c0f5fe41b1eaed80e8ad54ee4b902037acebefeae1f6680"}}}}}}}, 0x0) 1.707202061s ago: executing program 3 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f00000017c0)={0xc0, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000001b40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x40, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}}, 0x4) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400904}, 0xc, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x891) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001e00)=0x80000000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001e80)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4050080}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x1}, @fwd={0xe}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000600)=""/55, 0x52, 0x37, 0x1, 0xef8, 0x10000}, 0x28) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r9, 0xc0045878) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x9d, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000020e589000000000000bc0700000a8905000500000085000000c500000085000000b5000000186500000100001c879206381e0000000000bf0a00005bb3feff100000002d430000000000009500"], &(0x7f0000000480)='syzkaller\x00', 0xff, 0xba, &(0x7f00000004c0)=""/186, 0x41100, 0x21, '\x00', 0x0, @fallback=0x26, r8, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0x0, 0x7}, 0x10, r10, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x2, 0x1, 0x8, 0x7}, {0x2, 0x4, 0x1, 0xc}, {0x4, 0x3, 0x3, 0x3}, {0x0, 0x4, 0xe, 0x6}, {0x2, 0x2, 0x8, 0xb}, {0x2, 0x2, 0xf, 0xb}, {0x4, 0x3, 0x1, 0x6}, {0x5, 0x2, 0x1, 0x7}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x5, 0xc, 0x8}], 0x10, 0x8}, 0x94) 1.665000591s ago: executing program 4 (id=4217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb7f2965593497c186a80e0000000001e16c0ff6dab11dd800000700", "c3003d2a", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_MASTER={0x8, 0x3}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r2) 1.489077806s ago: executing program 3 (id=4218): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtclass={0x44, 0x28, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xd, 0x8}, {0x10, 0xa}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0xf0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.479363034s ago: executing program 1 (id=4219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x12c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4efb}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x83f}, {0x6, 0x11, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x9}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4c1762e1ff102fe7) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3b40}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_LINKMODE={0x5}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x68}}, 0x24000000) 1.448833895s ago: executing program 3 (id=4220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000200015"], 0x18}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x48) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) readv(r6, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e20, 0x816, @private1, 0xff}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}}, 0xffffffffffffffff, {[0xbe, 0x8185, 0x8, 0xc, 0xffff, 0xffff, 0xfffffffb]}}, 0x5c) 1.428711734s ago: executing program 1 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x27, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0x7fffff8}]}}}}}}, 0x42) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x29, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x3, 0x1, 0x4, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xe}, @alu={0x4, 0x0, 0x1, 0x5, 0x9, 0x2, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000640)='syzkaller\x00', 0x71, 0xe8, &(0x7f0000000900)=""/232, 0x41000, 0x15, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000000000052, 0x0, &(0x7f0000000a40)=[{0x2, 0x2, 0x9, 0x4}, {0x1, 0x5, 0x7, 0x4}, {0x4, 0x3, 0xc, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0x0, 0x6d, 0x65, &(0x7f0000000b40)="bd0a42f30cda9a46237588e50bbc35476220d8f560a7c6ad5d24de479fb6137f2ce5d26d38756a7bb544414e2796e550adc37e3fe8236ff7ae8c12bc41f4b2e00755d88f820e565ab0a9328db8afda124ce327aefd1d7130b94ba036264ef0a9591f7a804e7127d5dc0afcab85", &(0x7f0000000bc0)=""/101, 0x4, 0x0, 0x57, 0xa, &(0x7f0000000c40)="066a46f586136890ba6184f1bb7c169681ee61e90e427e71568f4c98db1ea216baa7d23d5881ffee0c1f1e511e37d347e1448c07a7a7231900c5dd509862f4a71560455d1cf8354b34e6ab345867500a1bde99abfc26b2", &(0x7f0000000cc0)="d88f01cae096144a6270", 0x1, 0x0, 0xffffff56}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00'}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012f6ff00140012800b000400028008000a0016a0f1bdf22c869e142d86b7bb8130fcb29bdf59ab19e3936cc7287bd14f4978d8677319fc84fc852a3c4ca356240632bf3a5c80d033cc8e3aa37a72ce0100161f2dded9da5b9c5768202b5d9bf0e4ff3a59ece313d2fe51468b5d283456fb6545d4c56a715b68299a1b8300081b3e43bb7ffa6848c19641a3cb549a2e1fc0a71120dcb35fcfe7d3a61496dcc2cca4232b1344", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 733.226463ms ago: executing program 4 (id=4222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x3, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000140)=""/150, &(0x7f0000000280)=0x96) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1409, 0x100, 0x50bd2e, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 720.454977ms ago: executing program 4 (id=4223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000001000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa04, 0x40800000000004, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private2, 0x0, 0x7, 0x1, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x9}, {0xfffffffffffffffe, 0x4}, 0x100009, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) read$nci(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r8], 0x134}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x6}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={r10, 0x3, 0x6, 0xa8a}, &(0x7f0000000400)=0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) sendmsg$inet(r1, &(0x7f0000003f80)={&(0x7f0000000600)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000003ec0)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000016c0)="dd327307499a02e3dc439bd9c9b19b3560ec73476026b279bfd8aa32277780c9eaa529363b3a", 0x26}, {&(0x7f0000001700)="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", 0xfd}, {&(0x7f0000001800)="ee58fe25ce777de075bef8e66c93aaad9ccfd739a8035391d977fa2ed447e6a51e3430e70823dc12d9d07825cbc93d5efefe687b88f15658c4b3255dbefda4bf2555c5ea590aeec368ed93c61e24d29e57194fd9e5d5d46b91573bdedc3d94627f4eaff3af6193115b7bde90591f16f7cd8b8ea57818a6bc6c1eacd0d505a31f40efb59539cf8f86df3cda000091be09de3dda5bee8f8ace", 0x98}, {&(0x7f00000018c0)="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", 0xfc}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="5ab4e09f5f99cff31bfe8703395449ff8dfa19382895180d6a3b67d89c198f1f78541dc5da4a5c48d995b3985f86bc745219", 0x32}, {&(0x7f0000003e40)="26536b91d12a00fea1696232970b7c82070e0b93c3c70f298fb1937c62aa6be3dcf0896616a175e265dfb55c2a117a50558b6d7f04270b4ffd51d366b5a29242d6d2be4901785b9b48dc82a2bfd3e1455947388eb75c3f01f69cd1f6c76855de03fd24ba7b52cd0cd4b5", 0x6a}], 0x8, &(0x7f0000003f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}], 0x18}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000005c0)) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) 508.691979ms ago: executing program 3 (id=4224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f000000f0c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f000000f400)={0x0, 0x0, &(0x7f000000f3c0)={&(0x7f000000f340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700082dbdf250d0000006393705911a373d201000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000084}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:qemu_device_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 345.695621ms ago: executing program 1 (id=4225): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000012c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 344.64296ms ago: executing program 0 (id=4226): socket(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa8d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x1, 0x8]}}) write$tun(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="000000f9ffffffffffffaaaaaaaaaaaa86dd689e33e001a40601ff"], 0x1de) 284.061382ms ago: executing program 1 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4, 0x4, 0x3, 0x0, r2}, 0x50) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7f) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (rerun: 32) 0s ago: executing program 0 (id=4228): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, r8, 0x7328190a296814f2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x3, 0x1, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1}, 0xb00, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}, @NL80211_ATTR_IE={0x50, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x0, 0x2, 0x0, {0x8, 0xd3d, 0x0, 0x282, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0x26, {0x1, 0x2, 0x6, "e407a5275ec15d04b498c329236d660af655328af3c42fdf273311be0a1e71bf7b0e7e"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x48}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x59}}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r9, @ANYBLOB="408052"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000000300)={0x2}) kernel console output (not intermixed with test programs): 7502][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.445601][T16105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.697972][T16224] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 451.741485][T16224] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 451.790951][ T29] audit: type=1107 audit(1777642692.018:7): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0T?^#"Vp,vHw^ QГ@VGTul9׆6JǵzYLJ"ӯr⠃v&ڼIH -*}ݡt [ 451.790951][ T29] n0GܳY!(;M΢5(ʰK ?hm91.H^:IP#EZt[swyQPIayf' [ 451.953484][T16231] __nla_validate_parse: 6 callbacks suppressed [ 451.953503][T16231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2867'. [ 452.308905][T16241] bond8: entered allmulticast mode [ 452.562325][T16250] bridge6: entered promiscuous mode [ 452.609279][T16250] bridge6: entered allmulticast mode [ 452.692622][T16254] netlink: 181392 bytes leftover after parsing attributes in process `syz.1.2871'. [ 452.711536][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.887209][T15825] veth0_vlan: entered promiscuous mode [ 452.915295][T16259] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 452.951131][T16259] netlink: 'syz.1.2874': attribute type 11 has an invalid length. [ 452.961401][T15825] veth1_vlan: entered promiscuous mode [ 452.985302][T16259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2874'. [ 453.060404][T16259] netlink: 'syz.1.2874': attribute type 10 has an invalid length. [ 453.075840][T15825] veth0_macvtap: entered promiscuous mode [ 453.083651][T16259] macvlan1: entered promiscuous mode [ 453.099293][T16259] macvlan1: entered allmulticast mode [ 453.113713][T16259] veth1_vlan: entered allmulticast mode [ 453.132451][T16259] team0: Port device macvlan1 added [ 453.178315][T15825] veth1_macvtap: entered promiscuous mode [ 453.194061][T16265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2876'. [ 453.232486][T16265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2876'. [ 453.293698][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.379764][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.462239][T16104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.496972][T16104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.540223][T16104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.589550][T16104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.673751][T16281] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.722546][T16285] can: request_module (can-proto-0) failed. [ 453.967990][T16106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.015241][T16106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.066337][T16296] netlink: 'syz.2.2884': attribute type 4 has an invalid length. [ 454.082027][T16298] sctp: [Deprecated]: syz.4.2885 (pid 16298) Use of int in max_burst socket option. [ 454.082027][T16298] Use struct sctp_assoc_value instead [ 454.099244][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 454.118618][T16298] netlink: 'syz.4.2885': attribute type 8 has an invalid length. [ 454.152217][T16104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.189477][T16104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.667805][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2892'. [ 454.949702][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2898'. [ 454.979299][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2898'. [ 455.216091][T16327] bond8: entered allmulticast mode [ 455.227261][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.255366][T16335] veth11: entered allmulticast mode [ 455.263993][T16335] bond8: (slave veth11): Enslaving as an active interface with an up link [ 455.518600][T16342] veth1_vlan: left allmulticast mode [ 455.591882][T16343] bond8 (unregistering): (slave veth11): Releasing backup interface [ 455.689640][T16343] bond8 (unregistering): Released all slaves [ 455.870905][T16291] xfrm0 speed is unknown, defaulting to 1000 [ 455.885216][T16104] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.903514][T16291] syz1: Port: 1 Link DOWN [ 455.905584][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2903'. [ 455.937053][T16104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.978857][T16104] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 456.028730][T16104] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 256 - 0 [ 456.085792][T16104] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.117241][T16104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.146619][T16104] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 456.185709][T16104] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0 [ 456.253868][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 456.271172][T16104] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.306085][T16371] can: request_module (can-proto-0) failed. [ 456.326317][T16104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.364881][T16368] xt_hashlimit: size too large, truncated to 1048576 [ 456.380163][T16104] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 456.426797][T16104] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0 [ 456.491471][T16104] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.561086][T16104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.617168][T16104] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 456.622602][ T29] audit: type=1800 audit(1777642696.848:8): pid=16386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2910" name="memory.events" dev="tmpfs" ino=43 res=0 errno=0 [ 456.653396][T16104] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0 [ 456.770589][T16398] ip6t_REJECT: ECHOREPLY is not supported [ 456.781509][ T29] audit: type=1804 audit(1777642696.898:9): pid=16386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2910" name="/newroot/5/memory.events" dev="tmpfs" ino=43 res=1 errno=0 [ 457.170501][T16414] __nla_validate_parse: 4 callbacks suppressed [ 457.170535][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2917'. [ 457.973537][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 458.152494][T16457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2930'. [ 458.283443][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 458.445235][T16467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2931'. [ 458.503380][T16467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2931'. [ 458.637887][T16477] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2933'. [ 458.647560][T16479] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2934'. [ 458.758605][T16477] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2933'. [ 461.716801][T16482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.971624][T16540] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 462.311704][T16569] netlink: 'syz.3.2951': attribute type 1 has an invalid length. [ 462.494914][T16569] 8021q: adding VLAN 0 to HW filter on device bond9 [ 462.615828][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.630183][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.645869][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.667333][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.678414][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.785280][ T5638] block nbd2: Receive control failed (result -32) [ 463.010108][T16590] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 463.445032][ T5627] .`: (slave syz_tun): Releasing backup interface [ 463.484218][ T5627] syz_tun (unregistering): left allmulticast mode [ 463.552493][T16607] netlink: 'syz.0.2960': attribute type 1 has an invalid length. [ 463.585124][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 464.055480][T16625] sctp: [Deprecated]: syz.1.2966 (pid 16625) Use of int in maxseg socket option. [ 464.055480][T16625] Use struct sctp_assoc_value instead [ 464.286545][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2968'. [ 464.305327][T16575] xfrm0 speed is unknown, defaulting to 1000 [ 464.366626][T16632] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2968'. [ 464.386628][T16632] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2968'. [ 464.405539][T16632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2968'. [ 464.435134][T16640] xt_bpf: check failed: parse error [ 464.745127][ T5638] Bluetooth: hci3: command tx timeout [ 465.068089][T16654] syzkaller0: entered promiscuous mode [ 465.086013][T16654] syzkaller0: entered allmulticast mode [ 465.133402][T16662] netlink: 'syz.1.2976': attribute type 4 has an invalid length. [ 465.142322][T16662] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2976'. [ 465.160310][T16662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2976'. [ 466.824545][ T5638] Bluetooth: hci3: command tx timeout [ 467.761842][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 467.978441][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 468.012483][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 468.625665][T16717] __nla_validate_parse: 2 callbacks suppressed [ 468.625718][T16717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2990'. [ 468.691193][T16700] bond1 (unregistering): Released all slaves [ 468.905370][ T5638] Bluetooth: hci3: command tx timeout [ 469.088644][T16729] syzkaller0: entered promiscuous mode [ 469.097530][T16729] syzkaller0: entered allmulticast mode [ 469.273015][T16740] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 469.359171][T16743] bond11: (slave gretap1): making interface the new active one [ 469.369228][T16743] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 469.382516][T16740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'. [ 469.451965][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.476577][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.487891][T16743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2997'. [ 469.498988][T16575] bridge_slave_0: entered allmulticast mode [ 469.508911][T16575] bridge_slave_0: entered promiscuous mode [ 469.547863][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.562668][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.572166][T16575] bridge_slave_1: entered allmulticast mode [ 469.592282][T16575] bridge_slave_1: entered promiscuous mode [ 469.652445][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.673675][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.727788][T16575] team0: Port device team_slave_0 added [ 469.737432][T16575] team0: Port device team_slave_1 added [ 469.807823][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.815364][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.842549][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.857258][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.867762][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.895166][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.074174][T16575] hsr_slave_0: entered promiscuous mode [ 470.100474][T16575] hsr_slave_1: entered promiscuous mode [ 470.119335][T16575] debugfs: 'hsr0' already exists in 'hsr' [ 470.126974][T16575] Cannot create hsr debugfs directory [ 470.150673][T16754] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 470.790535][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 470.867508][T16788] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 470.887223][T16794] xt_ecn: cannot match TCP bits for non-tcp packets [ 470.986399][ T5638] Bluetooth: hci3: command tx timeout [ 471.002397][T16798] netlink: 'syz.0.3009': attribute type 1 has an invalid length. [ 471.155294][T16798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.199678][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 471.242277][T16804] bond1: (slave geneve2): making interface the new active one [ 471.255980][T16804] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 471.314197][T16807] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 471.459864][T16813] 8021q: adding VLAN 0 to HW filter on device bond9 [ 471.470340][T16813] bond8: (slave bond9): Enslaving as an active interface with an up link [ 471.633682][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 471.653971][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 471.669937][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 471.685166][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 471.699100][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 471.729350][T16575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.755934][T16575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.989001][T16575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.021098][T16575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.045072][T16835] netlink: 'syz.1.3017': attribute type 21 has an invalid length. [ 472.101927][T16839] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 472.160962][T16575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.173089][T16575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.362762][T16575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.375321][T16575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.413773][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.427306][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.480611][T16844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.492102][T16844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.518548][T16844] veth1_vlan: left promiscuous mode [ 472.522020][T16853] netlink: 'syz.0.3019': attribute type 1 has an invalid length. [ 472.526474][T16844] veth0_vlan: left promiscuous mode [ 472.539977][T16844] veth0_vlan: entered promiscuous mode [ 472.549281][T16844] veth1_vlan: entered promiscuous mode [ 472.563538][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.581394][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.592768][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.602569][T16844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.615174][T16844] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 472.819157][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 472.819464][ T6207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.825288][ T54] syz1: Port: 1 Link ACTIVE [ 472.845878][ T6207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.892890][ T6207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.907230][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 472.925585][ T6207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.312678][T16874] x_tables: duplicate underflow at hook 3 [ 473.375653][T16866] bridge8: entered promiscuous mode [ 473.381402][T16866] bridge8: entered allmulticast mode [ 473.535177][T16870] bridge8: entered promiscuous mode [ 473.551650][T16870] bridge8: entered allmulticast mode [ 473.854787][T16905] __nla_validate_parse: 29 callbacks suppressed [ 473.854807][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 474.058829][T16575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.113979][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.156135][T16575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.230337][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.241192][T16575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.281385][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.371642][T16916] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 474.432432][T16916] bond12 (unregistering): Released all slaves [ 474.471491][T16917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3034'. [ 474.488721][T16575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.529739][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.547258][T16927] veth1_to_team: Caught tx_queue_len zero misconfig [ 474.595605][T14631] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.757595][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 474.910473][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 474.978286][T16947] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 475.049481][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 475.129617][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 475.467141][T16575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.586515][T16575] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.646748][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.654863][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.768085][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.775346][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.814810][T16984] xt_hashlimit: size too large, truncated to 1048576 [ 475.977622][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 476.189930][T17000] netlink: 'syz.3.3057': attribute type 61 has an invalid length. [ 476.936049][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3062'. [ 476.990068][T17027] netlink: 'syz.0.3063': attribute type 1 has an invalid length. [ 477.020701][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 477.078563][T17016] bridge_slave_1: entered promiscuous mode [ 477.964029][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 478.268476][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 90 seconds [ 478.280388][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 90 seconds [ 478.293931][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 90 seconds [ 478.306026][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 90 seconds [ 479.946841][T16575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.430992][T17091] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:32767 [ 480.704820][T17084] syzkaller0: entered promiscuous mode [ 480.717715][T17084] syzkaller0: entered allmulticast mode [ 481.189757][T17114] __nla_validate_parse: 1 callbacks suppressed [ 481.189775][T17114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3079'. [ 481.379970][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3080'. [ 481.395131][T17119] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 483.532669][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 483.543037][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 483.587293][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 483.720646][T17124] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3081'. [ 483.732939][T17122] syzkaller0: entered promiscuous mode [ 483.753248][T17122] syzkaller0: entered allmulticast mode [ 484.009226][T17126] tap0: tun_chr_ioctl cmd 1074025676 [ 484.020996][T17126] tap0: owner set to 0 [ 484.031145][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 484.053297][T17128] netlink: 'syz.1.3084': attribute type 3 has an invalid length. [ 484.098835][T16575] veth0_vlan: entered promiscuous mode [ 484.169195][T16575] veth1_vlan: entered promiscuous mode [ 484.306605][T16575] veth0_macvtap: entered promiscuous mode [ 484.412080][T16575] veth1_macvtap: entered promiscuous mode [ 484.447052][T17134] syzkaller0: entered promiscuous mode [ 484.477558][T17134] syzkaller0: entered allmulticast mode [ 484.487329][T17108] infiniband syz2: set active [ 484.512216][ T5629] vxcan1 speed is unknown, defaulting to 1000 [ 484.521717][T17108] infiniband syz2: added vxcan1 [ 484.540336][T17108] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 484.561121][T17108] infiniband syz2: Couldn't open port 1 [ 484.588979][T17108] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 484.603089][T17145] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 484.608677][T17108] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 484.657537][T16575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.690887][T17108] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 484.718903][T16575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.749665][T16104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.803538][T16104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.868498][T16104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.892382][T17108] RDS/IB: syz2: added [ 484.905951][T17108] smc: adding ib device syz2 with port count 1 [ 484.926292][T17108] smc: ib device syz2 port 1 has no pnetid [ 484.947007][T16104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.978064][ T5719] vxcan1 speed is unknown, defaulting to 1000 [ 485.023721][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 485.211495][T16106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.259653][T16106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.437367][T14629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.468396][T14629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.818298][T17171] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 485.867875][T17173] rdma_op ffff8880546701f0 conn xmit_rdma 0000000000000000 [ 486.192130][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 486.493366][T17187] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 486.534819][T17187] netlink: 'syz.3.3097': attribute type 2 has an invalid length. [ 486.683761][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.710665][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.722658][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.740237][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.750927][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.042646][T17211] netlink: 'syz.4.3103': attribute type 1 has an invalid length. [ 487.470746][T17223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3106'. [ 487.482053][T17223] nbd: illegal input index -8454144 [ 487.492473][T17223] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3106'. [ 487.502980][T17223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3106'. [ 487.668538][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 488.272844][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 488.760131][T17245] netlink: 'syz.1.3111': attribute type 25 has an invalid length. [ 488.769906][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 488.824940][ T5638] Bluetooth: hci4: command tx timeout [ 488.939552][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 489.195434][T17249] netlink: 'syz.4.3112': attribute type 10 has an invalid length. [ 489.216363][T17249] team0: Port device dummy0 added [ 489.248316][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 489.259203][T17249] syzkaller1: entered promiscuous mode [ 489.265691][T17249] syzkaller1: entered allmulticast mode [ 489.281009][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3112'. [ 489.290386][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 489.546570][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3115'. [ 489.630206][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 489.640652][T17260] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3116'. [ 489.921332][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 489.943110][T17273] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3120'. [ 490.007616][T17275] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 490.015777][T17275] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 490.396556][T17108] vxcan1 speed is unknown, defaulting to 1000 [ 490.635327][T17196] xfrm0 speed is unknown, defaulting to 1000 [ 490.905230][ T5638] Bluetooth: hci4: command tx timeout [ 491.052527][T17220] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 491.250633][T17294] syzkaller0: entered promiscuous mode [ 491.264536][T17294] syzkaller0: entered allmulticast mode [ 492.986079][ T5638] Bluetooth: hci4: command tx timeout [ 493.236827][T17283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.347673][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3127'. [ 493.411849][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3127'. [ 493.902324][T17309] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 493.925302][T17309] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 494.252460][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 494.274000][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 494.361193][T17318] syzkaller0: entered promiscuous mode [ 494.374695][T17318] syzkaller0: entered allmulticast mode [ 494.593956][T17342] netlink: 'syz.1.3139': attribute type 13 has an invalid length. [ 495.064799][ T5638] Bluetooth: hci4: command tx timeout [ 497.179361][T17342] erspan0: refused to change device tx_queue_len [ 497.194679][T17342] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 497.421977][T17368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'. [ 497.459611][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.494195][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.517486][T17196] bridge_slave_0: entered allmulticast mode [ 497.527184][T17196] bridge_slave_0: entered promiscuous mode [ 497.558815][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.584064][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.602187][T17196] bridge_slave_1: entered allmulticast mode [ 497.620695][T17196] bridge_slave_1: entered promiscuous mode [ 497.655484][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 497.895872][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.912943][T17390] xt_cgroup: path and classid specified [ 497.937033][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.093921][T17397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.131564][T17196] team0: Port device team_slave_0 added [ 498.142872][T17196] team0: Port device team_slave_1 added [ 498.178575][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.186081][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.238521][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.273749][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.286524][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.403886][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.628364][T17425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3157'. [ 498.743203][T17196] hsr_slave_0: entered promiscuous mode [ 498.761662][T17196] hsr_slave_1: entered promiscuous mode [ 498.775042][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 498.785951][T17196] Cannot create hsr debugfs directory [ 498.978793][T17443] x_tables: duplicate entry at hook 3 [ 499.383112][T17461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3167'. [ 499.439746][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 499.626126][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.842045][T17196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.873286][T17196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.049484][T17472] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 500.095285][T17472] bond10 (unregistering): Released all slaves [ 500.394732][T17196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.420399][T17196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.509908][T17500] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 500.536416][T17500] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 500.583694][T17507] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 500.668602][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.848708][T17196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.900321][T17196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.108795][T17524] siw: device registration error -23 [ 501.178107][T16292] IPVS: starting estimator thread 0... [ 501.241423][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 501.294589][T17530] IPVS: using max 31 ests per chain, 74400 per kthread [ 501.304074][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 501.330147][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.621054][T17543] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3180'. [ 501.688483][T17196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.717578][T16292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.733252][T17196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.239250][T17565] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3184'. [ 502.250338][T17565] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3184'. [ 502.262710][T17565] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3184'. [ 502.285165][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 502.427123][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.912893][T17196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 502.945555][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.981633][T17196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.048607][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.066858][T17196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.141458][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.296778][T17196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.322463][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.369475][T17609] netlink: 'syz.0.3195': attribute type 12 has an invalid length. [ 503.432969][T17605] hsr_slave_1 (unregistering): left promiscuous mode [ 503.527317][T17609] bond3: (slave gre0): Device is not bonding slave [ 503.533978][T17609] bond3: option active_slave: invalid value (gre0) [ 503.543065][T17609] bond3 (unregistering): Released all slaves [ 503.884635][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.923159][T17632] veth1_macvtap: left promiscuous mode [ 503.988405][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.039662][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.047652][T16105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.129055][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.136279][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.147064][T17639] __nla_validate_parse: 4 callbacks suppressed [ 504.147082][T17639] netlink: 211088 bytes leftover after parsing attributes in process `syz.4.3201'. [ 504.211351][T17196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.688385][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.756354][T17196] veth0_vlan: entered promiscuous mode [ 504.770188][T17196] veth1_vlan: entered promiscuous mode [ 504.812513][T17196] veth0_macvtap: entered promiscuous mode [ 504.832000][T17196] veth1_macvtap: entered promiscuous mode [ 504.853325][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.871646][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.890116][T16106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.903639][T16106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.920859][T16106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.930348][T16106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.050283][T17596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.220819][T17662] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3205'. [ 506.236470][T17662] xt_hashlimit: size too large, truncated to 1048576 [ 506.402064][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.530063][T17663] bridge_slave_0 (unregistering): left allmulticast mode [ 506.579075][T17663] bridge_slave_0 (unregistering): left promiscuous mode [ 506.597368][T17673] nbd: couldn't find a device at index 0 [ 506.615421][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.796949][T16105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.816887][T16105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.987032][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3211'. [ 507.019905][T14629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.032954][T17686] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 507.049505][T14629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.124078][T17689] team0: Device gtp1 is of different type [ 507.169024][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'. [ 507.386791][T17692] vlan2: entered allmulticast mode [ 507.396876][T17692] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 507.497168][T17696] syzkaller0: entered allmulticast mode [ 508.004768][T17718] openvswitch: netlink: EtherType 50a is less than min 600 [ 508.079254][T17718] netlink: 'syz.0.3220': attribute type 58 has an invalid length. [ 508.141195][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.159402][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3220'. [ 508.169170][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.181160][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.197842][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.208272][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.357143][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 120 seconds [ 508.368044][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 120 seconds [ 508.381864][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 120 seconds [ 508.394205][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 120 seconds [ 508.565577][T17742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3223'. [ 508.830261][T17749] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3226'. [ 508.913680][T17748] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 508.968581][T17756] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 508.978368][T17748] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 509.010802][T17748] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 509.152008][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3228'. [ 509.222244][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 509.260718][ T6207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.325938][T17763] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3230'. [ 509.339494][T17765] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3230'. [ 509.578502][ T6207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.899230][ T6207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.936987][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 510.025468][T17792] syzkaller1: entered promiscuous mode [ 510.033805][T17792] syzkaller1: entered allmulticast mode [ 510.345096][ T5638] Bluetooth: hci1: command tx timeout [ 510.356942][T17720] xfrm0 speed is unknown, defaulting to 1000 [ 510.619770][T17814] netlink: 'syz.4.3241': attribute type 1 has an invalid length. [ 510.627093][T17813] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 510.852487][T17814] bond2: entered promiscuous mode [ 510.911894][T17814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.950896][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.988507][T17813] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 511.012884][T17813] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 511.714435][T17859] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3251'. [ 512.312767][ T6207] bond1 (unregistering): (slave vti0): Releasing backup interface [ 512.328631][ T6207] vti0 (unregistering): left promiscuous mode [ 512.381581][ T6207] erspan0 (unregistering): left promiscuous mode [ 512.421112][ T6207] gretap0 (unregistering): left promiscuous mode [ 512.428590][ T5638] Bluetooth: hci1: command tx timeout [ 512.922025][ T6207] bond0 (unregistering): Released all slaves [ 512.935640][ T6207] bond1 (unregistering): Released all slaves [ 512.956957][ T6207] bond2 (unregistering): Released all slaves [ 512.979959][ T6207] bond3 (unregistering): (slave veth3): Releasing active interface [ 512.991972][ T6207] bond3 (unregistering): Released all slaves [ 513.017858][ T6207] bond4 (unregistering): Released all slaves [ 513.040772][ T6207] bond5 (unregistering): Released all slaves [ 513.061010][ T6207] bond6 (unregistering): Released all slaves [ 513.090311][ T6207] bond7 (unregistering): Released all slaves [ 513.113310][ T6207] bond8 (unregistering): Released all slaves [ 513.132268][ T6207] bond9 (unregistering): Released all slaves [ 513.151071][ T6207] bond10 (unregistering): Released all slaves [ 513.181052][T16291] xfrm0 speed is unknown, defaulting to 1000 [ 513.187153][T16291] syz1: Port: 1 Link DOWN [ 513.198227][T17866] vlan3: entered allmulticast mode [ 513.203412][T17866] bond0: entered allmulticast mode [ 513.209439][T17866] bond_slave_0: entered allmulticast mode [ 513.219099][T17866] bond_slave_1: entered allmulticast mode [ 513.246075][T17720] vxcan1 speed is unknown, defaulting to 1000 [ 513.271401][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.291386][T16291] xfrm0 speed is unknown, defaulting to 1000 [ 513.496068][T16104] smc: removing ib device syz1 [ 513.675226][T16104] smbdirect: ib_dev[syz1] removed [ 514.271862][T17843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.504891][ T5638] Bluetooth: hci1: command tx timeout [ 514.858385][T17904] Bluetooth: MGMT ver 1.23 [ 515.830436][T17947] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3266'. [ 515.869277][T17720] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.899432][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.936466][T17720] bridge_slave_0: entered allmulticast mode [ 515.973295][T17720] bridge_slave_0: entered promiscuous mode [ 516.010878][T17720] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.051102][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.102419][T17720] bridge_slave_1: entered allmulticast mode [ 516.177645][T17720] bridge_slave_1: entered promiscuous mode [ 516.422982][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 516.465055][T17969] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3272'. [ 516.473262][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3270'. [ 516.478433][T17720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.574072][T17720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.585821][ T5638] Bluetooth: hci1: command tx timeout [ 516.952830][T17988] netlink: 'syz.2.3277': attribute type 7 has an invalid length. [ 516.995459][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 517.009468][T17988] netlink: 'syz.2.3277': attribute type 8 has an invalid length. [ 517.252795][T17720] team0: Port device team_slave_0 added [ 517.371518][T17720] team0: Port device team_slave_1 added [ 517.863751][T17979] syzkaller0: entered promiscuous mode [ 517.880222][T17979] syzkaller0: entered allmulticast mode [ 518.999488][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3284'. [ 521.677440][T17720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.684928][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.714153][T17720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.798777][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 521.833755][T17720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.844576][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.872093][T17720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.920658][T18050] netlink: 'syz.1.3286': attribute type 58 has an invalid length. [ 521.938258][T18050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3286'. [ 522.139623][T17720] hsr_slave_0: entered promiscuous mode [ 522.174601][T17720] hsr_slave_1: entered promiscuous mode [ 522.218253][T17720] debugfs: 'hsr0' already exists in 'hsr' [ 522.254728][T17720] Cannot create hsr debugfs directory [ 522.299981][ T6207] tipc: Disabling bearer [ 522.337232][ T6207] tipc: Left network mode [ 523.137255][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 523.165502][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3296'. [ 523.320363][T18097] x_tables: duplicate underflow at hook 1 [ 523.459812][T18101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3302'. [ 524.031292][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 524.054664][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3306'. [ 524.811314][T18147] macvtap1: entered promiscuous mode [ 524.845853][T18147] macvtap1: entered allmulticast mode [ 524.855763][T18147] veth1_vlan: entered allmulticast mode [ 525.215735][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.227331][T18169] netlink: 199100 bytes leftover after parsing attributes in process `syz.2.3317'. [ 525.268827][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.530183][T18164] macvlan2: entered allmulticast mode [ 525.563138][T18164] hsr0: entered allmulticast mode [ 525.568994][T18164] hsr_slave_0: entered allmulticast mode [ 525.584201][T18164] hsr_slave_1: entered allmulticast mode [ 525.595832][T18164] hsr0: entered promiscuous mode [ 525.603375][T18177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3315'. [ 526.786497][T18217] bridge0: entered allmulticast mode [ 526.893137][T17720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.971863][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.033550][T17720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.129149][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.299017][T17720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.349960][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.395538][T17720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 527.406991][T18242] openvswitch: netlink: Actions may not be safe on all matching packets [ 527.442467][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.569497][ T6207] hsr_slave_0: left promiscuous mode [ 527.577347][T18253] netlink: 'syz.1.3331': attribute type 3 has an invalid length. [ 527.614632][ T6207] hsr_slave_1: left promiscuous mode [ 527.681841][ T6207] veth1_vlan: left promiscuous mode [ 527.723768][ T6207] veth0_vlan: left promiscuous mode [ 527.920719][T18269] __nla_validate_parse: 1 callbacks suppressed [ 527.920734][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3335'. [ 528.878813][T18275] netlink: 'syz.4.3334': attribute type 11 has an invalid length. [ 528.920066][T18275] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3334'. [ 529.346360][T17720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.357177][T18307] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 529.407543][T18307] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3339'. [ 529.425594][T18309] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 529.429294][T18307] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3339'. [ 529.453058][T18307] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3339'. [ 529.488468][T18314] SET target dimension over the limit! [ 529.575218][T18309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.593223][T17720] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.893763][T18314] syzkaller0: entered promiscuous mode [ 529.914202][T18314] syzkaller0: entered allmulticast mode [ 529.968726][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.975977][T16106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.125706][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3347'. [ 533.210065][T18396] netlink: 184020 bytes leftover after parsing attributes in process `syz.1.3356'. [ 534.078316][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.086446][T16106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.098061][T18350] xfrm0: entered allmulticast mode [ 534.145432][ T6207] IPVS: stop unused estimator thread 0... [ 534.426924][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3357'. [ 534.436148][T18404] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3360'. [ 534.599030][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3357'. [ 534.678463][T18418] netlink: 'syz.2.3361': attribute type 1 has an invalid length. [ 534.792990][T18423] x_tables: duplicate underflow at hook 1 [ 534.896008][T18406] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 535.036910][T18434] xt_hashlimit: size too large, truncated to 1048576 [ 535.936132][T17720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.524114][T17720] veth0_vlan: entered promiscuous mode [ 536.586275][T17720] veth1_vlan: entered promiscuous mode [ 536.698539][T18494] syzkaller0: entered promiscuous mode [ 536.722465][T18494] syzkaller0: entered allmulticast mode [ 536.768498][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 536.795911][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 536.837243][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 536.861782][T17720] veth0_macvtap: entered promiscuous mode [ 536.897096][T18500] team0: No ports can be present during mode change [ 536.931151][T17720] veth1_macvtap: entered promiscuous mode [ 537.121021][T17720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.192991][T17720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.250295][ T6187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.297281][ T6187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.326225][ T6187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.350266][ T6187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.422142][T18526] xt_bpf: check failed: parse error [ 537.580892][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.602884][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.737460][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.774192][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.781557][T18537] netlink: 'syz.4.3386': attribute type 4 has an invalid length. [ 537.912417][T18548] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 537.935168][T18548] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3388'. [ 537.985797][T18548] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 538.009318][T18548] netlink: 'syz.1.3388': attribute type 8 has an invalid length. [ 538.029500][T18548] netlink: 582 bytes leftover after parsing attributes in process `syz.1.3388'. [ 538.048826][T18548] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3388'. [ 538.060674][T18547] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 538.072025][T18547] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 538.109700][T18547] netlink: 'syz.1.3388': attribute type 8 has an invalid length. [ 538.426457][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 150 seconds [ 538.437362][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 150 seconds [ 538.448747][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 150 seconds [ 538.461159][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 150 seconds [ 538.597945][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.621308][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.633479][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.653306][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.662657][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.557596][T18588] bond3: Removing last ns target with arp_interval on [ 539.649681][T18595] syzkaller1: entered promiscuous mode [ 539.676552][T18595] syzkaller1: entered allmulticast mode [ 539.752855][T18604] netlink: 'syz.3.3398': attribute type 4 has an invalid length. [ 539.833407][T18604] netlink: 'syz.3.3398': attribute type 4 has an invalid length. [ 540.003674][T18618] xt_socket: unknown flags 0x50 [ 540.017795][T18604] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 540.066580][T18619] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 540.096801][T18616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.314952][T18628] __nla_validate_parse: 3 callbacks suppressed [ 540.314988][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 540.364047][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 540.440245][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 540.509402][T16105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.613895][T18644] ip6t_rpfilter: unknown options [ 540.641690][T18644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.745459][ T5640] Bluetooth: hci2: command tx timeout [ 540.929374][T16105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.000416][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 541.033422][T18652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3408'. [ 541.073253][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3411'. [ 541.457880][T16105] bond0: (slave netdevsim1): Releasing backup interface [ 541.467572][T18680] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3413'. [ 541.507326][T16105] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 541.553573][T18680] netlink: 'syz.0.3413': attribute type 9 has an invalid length. [ 541.596437][T18687] netlink: 'syz.2.3416': attribute type 3 has an invalid length. [ 541.611397][T16105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.619423][T18687] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 541.667022][T18687] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3416'. [ 541.859856][T16105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.976932][T18678] syzkaller1: entered promiscuous mode [ 541.987548][T18678] syzkaller1: entered allmulticast mode [ 542.340062][T18569] vxcan1 speed is unknown, defaulting to 1000 [ 542.827066][ T5640] Bluetooth: hci2: command tx timeout [ 543.040928][T16105] bridge_slave_1: left allmulticast mode [ 543.070625][T16105] bridge_slave_1: left promiscuous mode [ 543.100387][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.199320][T16105] x9: left promiscuous mode [ 543.216486][T16105] bridge0: port 1(1x9) entered disabled state [ 543.348184][T16105] bond9 (unregistering): (slave ip6erspan0): Releasing active interface [ 543.787540][T16105] bond11 (unregistering): (slave gretap1): Releasing active interface [ 544.261704][T16106] smc: removing ib device sy1 [ 544.279883][T16105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.289157][T16105] bond_slave_0: left allmulticast mode [ 544.308463][T16105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.327049][T16105] bond_slave_1: left allmulticast mode [ 544.335049][T16105] bond0 (unregistering): (slave team0): Releasing backup interface [ 544.347120][T16105] team0: left allmulticast mode [ 544.352385][T16105] team_slave_0: left allmulticast mode [ 544.360284][T16105] team_slave_1: left allmulticast mode [ 544.366853][T16105] vlan0: left allmulticast mode [ 544.371746][T16105] veth0_vlan: left allmulticast mode [ 544.380632][T16105] bond0 (unregistering): Released all slaves [ 544.394697][T16105] bond1 (unregistering): Released all slaves [ 544.413607][T16105] bond2 (unregistering): Released all slaves [ 544.434832][T16105] bond3 (unregistering): Released all slaves [ 544.467253][T16105] bond4 (unregistering): Released all slaves [ 544.486607][T16105] bond5 (unregistering): Released all slaves [ 544.511223][T16105] bond6 (unregistering): Released all slaves [ 544.536260][T16105] bond7 (unregistering): (slave bond8): Releasing backup interface [ 544.545353][T16105] bond7 (unregistering): Released all slaves [ 544.566247][T16105] bond8 (unregistering): Released all slaves [ 544.588803][T16105] bond9 (unregistering): Released all slaves [ 544.613046][T16105] bond10 (unregistering): Released all slaves [ 544.641593][T16105] bond11 (unregistering): Released all slaves [ 544.692505][T18744] syzkaller1: entered promiscuous mode [ 544.698360][T16106] smbdirect: ib_dev[sy1] removed [ 544.710753][T18744] syzkaller1: entered allmulticast mode [ 544.914374][ T5640] Bluetooth: hci2: command tx timeout [ 545.093792][T18699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.286030][T18772] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 546.438734][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 546.563929][T18569] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.571799][T18569] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.595591][T18569] bridge_slave_0: entered allmulticast mode [ 546.644183][T18569] bridge_slave_0: entered promiscuous mode [ 546.654058][T18569] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.663069][T18569] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.673219][T18569] bridge_slave_1: entered allmulticast mode [ 546.702483][T18569] bridge_slave_1: entered promiscuous mode [ 546.817351][T18569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.849827][T18569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.967916][T18569] team0: Port device team_slave_0 added [ 546.998491][ T5640] Bluetooth: hci2: command tx timeout [ 547.007101][T18569] team0: Port device team_slave_1 added [ 547.141808][T18569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.164364][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.200239][T18569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.282169][T18569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.305164][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.357047][T18569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.675170][T18569] hsr_slave_0: entered promiscuous mode [ 547.691379][T18569] hsr_slave_1: entered promiscuous mode [ 547.702931][T18569] debugfs: 'hsr0' already exists in 'hsr' [ 547.711176][T18569] Cannot create hsr debugfs directory [ 548.095064][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 548.438978][T16105] tipc: Left network mode [ 548.637772][T16105] IPVS: stopping backup sync thread 11159 ... [ 549.782668][T18569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.816382][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.828048][T18569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.843196][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.879264][T18569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.918825][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.975498][T18569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.986739][T18569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.265387][T18569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.331324][T18569] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.371563][T16105] hsr_slave_0: left promiscuous mode [ 550.386150][T16105] veth1_vlan: left allmulticast mode [ 550.620543][T16105] team0 (unregistering): Port device macvlan1 removed [ 550.692298][T16105] team0 (unregistering): Port device vlan0 removed [ 550.936607][T16105] team0 (unregistering): Port device team_slave_1 removed [ 550.971799][T16105] team0 (unregistering): Port device team_slave_0 removed [ 551.159161][T16105] smc: removing net device team0 with user defined pnetid SYZ2 [ 551.208520][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.218056][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.268979][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.277068][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.602983][T16105] IPVS: stop unused estimator thread 0... [ 552.124928][T18569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.220159][T18569] veth0_vlan: entered promiscuous mode [ 552.258109][T18569] veth1_vlan: entered promiscuous mode [ 552.357236][T18569] veth0_macvtap: entered promiscuous mode [ 552.373869][T18569] veth1_macvtap: entered promiscuous mode [ 552.412475][T18569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.437649][T18569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.453762][ T6207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.476271][ T6207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.495540][ T6207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.525266][ T6207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.638551][ T6207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.655705][ T6207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.735353][T16105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.743324][T16105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.976133][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 552.988852][T18923] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 553.747426][T18923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.044534][ T4994] udevd[4994]: worker [12726] /devices/virtual/block/nbd4 is taking a long time [ 562.748369][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.824524][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 568.507889][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 180 seconds [ 568.519894][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 180 seconds [ 568.530979][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 180 seconds [ 568.542756][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 180 seconds [ 570.846673][ T4994] udevd[4994]: worker [12726] /devices/virtual/block/nbd4 timeout; kill it [ 570.856238][ T4994] udevd[4994]: seq 17466 '/devices/virtual/block/nbd4' killed [ 573.007980][ T6200] : left promiscuous mode [ 573.015036][ T6200] bridge0: port 2() entered disabled state [ 573.028109][ T6200] bridge_slave_0: left promiscuous mode [ 573.034025][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.210845][ T6200] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 573.378077][ T6200] batman_adv: batadv0: Removing interface: gretap1 [ 573.468577][ T6200] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 573.476811][ T6200] bridge1 (unregistering): left promiscuous mode [ 573.730925][ T6200] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.744109][ T6200] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.756948][ T6200] .` (unregistering): Released all slaves [ 573.770366][ T6200] bond1 (unregistering): Released all slaves [ 573.789601][ T6200] bond2 (unregistering): Released all slaves [ 573.808696][ T6200] bond3 (unregistering): Released all slaves [ 573.829704][ T6200] bond0 (unregistering): Released all slaves [ 573.848325][ T6200] bond4 (unregistering): Released all slaves [ 573.866919][ T6200] bond5 (unregistering): Released all slaves [ 574.045547][ T6200] tipc: Disabling bearer [ 574.051041][ T6200] tipc: Disabling bearer [ 574.082966][ T6200] tipc: Left network mode [ 575.027411][ T6200] hsr_slave_0: left promiscuous mode [ 575.033563][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.042927][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.058857][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.068540][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.082396][ T6200] veth0_to_team: left promiscuous mode [ 575.088822][ T6200] veth0_macvtap: left promiscuous mode [ 575.339419][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 575.360110][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 575.458159][ T6200] smc: removing net device team0 with user defined pnetid SYZ2 [ 575.693455][ T6200] IPVS: stop unused estimator thread 0... [ 585.304434][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 598.597320][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 210 seconds [ 598.608472][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 210 seconds [ 598.619543][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 210 seconds [ 598.630692][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 210 seconds [ 601.020577][T18977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3428'. [ 601.032057][T18977] netlink: 'syz.0.3428': attribute type 1 has an invalid length. [ 601.119782][T18984] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 601.180564][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 601.195095][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 601.279042][T18993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3434'. [ 601.279085][T18992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3434'. [ 601.291157][T18997] netlink: 'syz.4.3436': attribute type 1 has an invalid length. [ 601.348227][T18997] bond3: entered promiscuous mode [ 601.353733][T18997] bond3: entered allmulticast mode [ 601.361771][T18997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.497036][T19004] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 601.509468][T19004] bond1 (unregistering): Released all slaves [ 601.787034][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3446'. [ 601.809868][T19024] netlink: 'syz.2.3442': attribute type 10 has an invalid length. [ 601.824584][T19021] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3446'. [ 601.836905][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.880020][T19024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.889149][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 601.907131][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.918853][T19024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.023773][T19021] syzkaller0: entered promiscuous mode [ 602.040322][T19021] syzkaller0: entered allmulticast mode [ 602.087161][T19031] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 604.616152][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 604.629053][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 604.771724][T19072] netlink: 'syz.3.3458': attribute type 12 has an invalid length. [ 604.911327][T19081] openvswitch: netlink: Key type 281 is out of range max 32 [ 605.008404][T19089] netem: change failed [ 605.287340][T19102] vcan0: tx address claim with dlc 0 [ 605.331862][T19110] xt_hashlimit: size too large, truncated to 1048576 [ 605.390797][T19095] syzkaller0: entered promiscuous mode [ 605.401516][T19095] syzkaller0: entered allmulticast mode [ 605.616820][T19124] xt_hashlimit: size too large, truncated to 1048576 [ 606.121204][T19131] __nla_validate_parse: 4 callbacks suppressed [ 606.121224][T19131] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3476'. [ 606.157341][T19134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3477'. [ 606.223780][T19137] atomic_op ffff88806822f198 conn xmit_atomic 0000000000000000 [ 606.413431][T19139] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3479'. [ 606.912242][T19147] netlink: 'syz.2.3480': attribute type 21 has an invalid length. [ 606.940262][T19147] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.948397][T19147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.955704][T19147] IPv6: NLM_F_CREATE should be set when creating new route [ 606.962997][T19147] IPv6: NLM_F_CREATE should be set when creating new route [ 606.970272][T19147] IPv6: NLM_F_CREATE should be set when creating new route [ 607.383953][T19142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.788570][T19175] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 609.016345][T19180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'. [ 609.048955][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 609.101652][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 609.303051][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 609.357564][T19209] xt_recent: Unsupported userspace flags (000000b1) [ 609.369025][T19212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.378696][T19209] netlink: 'syz.2.3495': attribute type 1 has an invalid length. [ 609.390840][T19210] netlink: 'syz.2.3495': attribute type 1 has an invalid length. [ 609.399064][T19209] netlink: 'syz.2.3495': attribute type 4 has an invalid length. [ 609.408996][T19210] netlink: 'syz.2.3495': attribute type 4 has an invalid length. [ 609.439202][T19209] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.3495'. [ 609.468128][T19210] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.3495'. [ 609.527093][T19221] netlink: 'syz.2.3495': attribute type 2 has an invalid length. [ 609.838272][T19234] bond2: option min_links: invalid value (18446744073709551614) [ 609.852670][T19234] bond2: option min_links: allowed values 0 - 2147483647 [ 609.885180][T19245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3503'. [ 609.896634][T19234] bond2 (unregistering): Released all slaves [ 610.032069][T19249] vxcan3: entered promiscuous mode [ 610.215544][T19269] netlink: 'syz.0.3509': attribute type 12 has an invalid length. [ 610.253423][ T6209] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.262581][T19269] netlink: 'syz.0.3509': attribute type 12 has an invalid length. [ 610.274049][ T6209] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.335430][ T6209] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.373515][T19273] netlink: 'syz.3.3511': attribute type 1 has an invalid length. [ 610.375468][ T6209] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.904814][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 611.418946][T19336] __nla_validate_parse: 10 callbacks suppressed [ 611.418967][T19336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3533'. [ 611.673159][T19349] bond4: entered promiscuous mode [ 611.678808][T19349] bond4: entered allmulticast mode [ 611.684619][T19349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.079881][T19364] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 612.096627][T19364] bond4 (unregistering): Released all slaves [ 612.266111][T19368] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3541'. [ 613.429537][T19382] syz.3.3545 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 613.443115][T19382] CPU: 1 UID: 0 PID: 19382 Comm: syz.3.3545 Not tainted syzkaller #0 PREEMPT(full) [ 613.443138][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.443147][T19382] Call Trace: [ 613.443152][T19382] [ 613.443158][T19382] dump_stack_lvl+0xe8/0x150 [ 613.443180][T19382] dump_header+0xd3/0x4c0 [ 613.443210][T19382] oom_kill_process+0x3ab/0x970 [ 613.443234][T19382] out_of_memory+0x106c/0x1410 [ 613.443250][T19382] ? try_charge_memcg+0xbb9/0x1570 [ 613.443272][T19382] ? __pfx___mutex_lock+0x10/0x10 [ 613.443296][T19382] ? __pfx_out_of_memory+0x10/0x10 [ 613.443312][T19382] ? do_raw_spin_unlock+0xf5/0x210 [ 613.443341][T19382] try_charge_memcg+0xc77/0x1570 [ 613.443377][T19382] ? __pfx_try_charge_memcg+0x10/0x10 [ 613.443394][T19382] ? percpu_ref_tryget+0x15/0x180 [ 613.443431][T19382] ? charge_memcg+0x23/0x2b0 [ 613.443453][T19382] charge_memcg+0x1a2/0x2b0 [ 613.443475][T19382] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 613.443493][T19382] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 613.443513][T19382] __swap_cache_prepare_and_add+0xdc/0x700 [ 613.443534][T19382] ? page_rmappable_folio+0x9a/0x170 [ 613.443560][T19382] swap_cache_alloc_folio+0xf1/0x240 [ 613.443578][T19382] swap_cluster_readahead+0x355/0x670 [ 613.443599][T19382] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 613.443626][T19382] ? get_vma_policy+0x27b/0x3c0 [ 613.443669][T19382] swapin_readahead+0x196/0xc50 [ 613.443689][T19382] ? swap_table_get+0x1e/0x260 [ 613.443708][T19382] ? __pfx_swapin_readahead+0x10/0x10 [ 613.443725][T19382] ? swap_table_get+0x1e/0x260 [ 613.443739][T19382] ? swap_table_get+0x1e/0x260 [ 613.443751][T19382] ? swap_table_get+0x1e/0x260 [ 613.443766][T19382] ? swap_table_get+0x216/0x260 [ 613.443782][T19382] ? swap_cache_get_folio+0x2e4/0x2f0 [ 613.443802][T19382] do_swap_page+0x555/0x5120 [ 613.443824][T19382] ? __pte_offset_map+0x29/0x240 [ 613.443841][T19382] ? __pte_offset_map+0x29/0x240 [ 613.443864][T19382] ? do_swap_page+0x128/0x5120 [ 613.443879][T19382] ? __pfx_do_swap_page+0x10/0x10 [ 613.443892][T19382] ? __pte_offset_map+0x1ae/0x240 [ 613.443911][T19382] ? pte_offset_map_rw_nolock+0xea/0x160 [ 613.443931][T19382] handle_mm_fault+0x12d2/0x3170 [ 613.443959][T19382] ? handle_mm_fault+0xee/0x3170 [ 613.443980][T19382] ? __pfx_handle_mm_fault+0x10/0x10 [ 613.443994][T19382] ? lock_vma_under_rcu+0x45a/0x500 [ 613.444032][T19382] do_user_addr_fault+0xa73/0x1340 [ 613.444054][T19382] ? rcu_is_watching+0x15/0xb0 [ 613.444079][T19382] ? trace_page_fault_user+0x84/0x1e0 [ 613.444096][T19382] exc_page_fault+0x6a/0xc0 [ 613.444114][T19382] asm_exc_page_fault+0x26/0x30 [ 613.444127][T19382] RIP: 0033:0x7fe1fe157ef4 [ 613.444141][T19382] Code: ff ff ff f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca <64> 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae 67 29 00 00 [ 613.444153][T19382] RSP: 002b:00007ffd01aa94b0 EFLAGS: 00010246 [ 613.444167][T19382] RAX: 00000000fffffffa RBX: 00007fe1fe415fa0 RCX: 0000000000000000 [ 613.444177][T19382] RDX: 00007ffd01aa94f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.444186][T19382] RBP: 00007fe1fe417da0 R08: 0000000000000000 R09: 0000000000000000 [ 613.444194][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000095ccb [ 613.444202][T19382] R13: 00007fe1fe41609c R14: 00000000000959fc R15: 00007fe1fe416090 [ 613.444229][T19382] [ 613.789606][T19382] memory: usage 303820kB, limit 307200kB, failcnt 724 [ 613.796716][T19382] memory+swap: usage 302180kB, limit 9007199254740988kB, failcnt 0 [ 613.805009][T19382] kmem: usage 299532kB, limit 9007199254740988kB, failcnt 0 [ 613.813971][T19382] Memory cgroup stats for /syz3: [ 613.814574][T19382] cache 0 [ 613.822490][T19382] rss 0 [ 613.825930][T19382] rss_huge 0 [ 613.829138][T19382] shmem 0 [ 613.832097][T19382] mapped_file 0 [ 613.836204][T19382] dirty 0 [ 613.839154][T19382] writeback 0 [ 613.842457][T19382] workingset_refault_anon 13 [ 613.847691][T19382] workingset_refault_file 1 [ 613.852526][T19382] swap 184320 [ 613.856238][T19382] swapcached 258048 [ 613.860244][T19382] pgpgin 46578 [ 613.863631][T19382] pgpgout 46573 [ 613.867568][T19382] pgfault 107604 [ 613.871309][T19382] pgmajfault 13 [ 613.875237][T19382] inactive_anon 4096 [ 613.879134][T19382] active_anon 16384 [ 613.883145][T19382] inactive_file 0 [ 613.887985][T19382] active_file 0 [ 613.891470][T19382] unevictable 0 [ 613.896089][T19382] hierarchical_memory_limit 314572800 [ 613.901471][T19382] hierarchical_memsw_limit 9223372036854771712 [ 613.908191][T19382] total_cache 0 [ 613.911659][T19382] total_rss 0 [ 613.915343][T19382] total_rss_huge 0 [ 613.919244][T19382] total_shmem 0 [ 613.922762][T19382] total_mapped_file 0 [ 613.927278][T19382] total_dirty 0 [ 613.930938][T19382] total_writeback 0 [ 613.935167][T19382] total_workingset_refault_anon 13 [ 613.940282][T19382] total_workingset_refault_file 1 [ 613.949482][T19382] total_swap 184320 [ 613.953731][T19382] total_swapcached 258048 [ 613.958505][T19382] total_pgpgin 46578 [ 613.962612][T19382] total_pgpgout 46573 [ 613.967021][T19382] total_pgfault 107604 [ 613.971094][T19382] total_pgmajfault 13 [ 613.975665][T19382] total_inactive_anon 4096 [ 613.980090][T19382] total_active_anon 16384 [ 613.985076][T19382] total_inactive_file 0 [ 613.989444][T19382] total_active_file 0 [ 613.993424][T19382] total_unevictable 0 [ 613.998865][T19382] anon_cost 0 [ 614.002367][T19382] file_cost 0 [ 614.006077][T19382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3545,pid=19382,uid=0 [ 614.023034][T19382] Memory cgroup out of memory: Killed process 19382 (syz.3.3545) total-vm:102292kB, anon-rss:1244kB, file-rss:23304kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 614.355958][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 614.560839][T19343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.779189][T19397] tipc: Enabling of bearer rejected, failed to enable media [ 614.834862][T19399] validate_nla: 8 callbacks suppressed [ 614.834880][T19399] netlink: 'syz.2.3550': attribute type 1 has an invalid length. [ 615.003151][T19408] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 615.091156][T19408] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 615.151664][T19408] bond2: (slave ip6gre1): making interface the new active one [ 615.187448][T19408] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 615.210212][T19415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3549'. [ 615.681578][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 615.782425][T19433] netlink: 'syz.2.3555': attribute type 5 has an invalid length. [ 615.814339][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 615.932123][T19444] syzkaller0: entered promiscuous mode [ 615.961660][T19444] syzkaller0: entered allmulticast mode [ 616.323098][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 616.461605][T19448] vxcan1 speed is unknown, defaulting to 1000 [ 616.597131][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 616.605163][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'. [ 616.715696][T19470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3566'. [ 616.801599][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3568'. [ 617.042856][T19486] bond5 (unregistering): Released all slaves [ 617.256281][T19501] syzkaller0: entered promiscuous mode [ 617.262967][T19501] syzkaller0: entered allmulticast mode [ 617.329891][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 617.565640][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 617.617097][T19512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 617.654685][T19512] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 617.663824][T19512] gretap1: entered promiscuous mode [ 617.670481][T19512] gretap1: entered allmulticast mode [ 617.749034][T19515] netlink: 'syz.1.3580': attribute type 11 has an invalid length. [ 617.780436][T19515] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.3580'. [ 618.154965][T19533] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3586'. [ 618.166574][T19533] netlink: 'syz.0.3586': attribute type 2 has an invalid length. [ 618.188338][T19530] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.320894][T19530] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.413521][T19530] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.497746][T19530] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.725764][ T6209] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.740246][ T6209] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.761682][T19556] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3594'. [ 618.823279][ T6209] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.852751][T16105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.959165][T19560] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 618.961585][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 618.979367][T19560] netlink: 'syz.1.3595': attribute type 4 has an invalid length. [ 619.523674][T19597] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 619.556551][T16105] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.560018][T19597] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 619.579184][T19597] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 619.852274][T19611] veth1_macvtap: left promiscuous mode [ 619.907120][T19611] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 620.101647][T19623] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 620.513215][T19642] netlink: 'syz.1.3615': attribute type 5 has an invalid length. [ 620.872871][T19658] vlan0: entered promiscuous mode [ 620.894896][T19658] geneve1: entered promiscuous mode [ 620.910629][T19658] vlan0: entered allmulticast mode [ 620.931230][T19658] geneve1: entered allmulticast mode [ 621.199876][T19677] netlink: 'syz.3.3626': attribute type 3 has an invalid length. [ 621.237577][T19677] netlink: 'syz.3.3626': attribute type 2 has an invalid length. [ 621.470206][T19695] netlink: 'syz.0.3633': attribute type 1 has an invalid length. [ 621.621402][T19695] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.639445][T19700] __nla_validate_parse: 79 callbacks suppressed [ 621.639461][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'. [ 621.644055][T19705] bond5: option mode: unable to set because the bond device is up [ 621.656677][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'. [ 621.785848][T19712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3637'. [ 622.015609][T19726] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 622.164722][T16291] IPVS: starting estimator thread 0... [ 622.268381][T19735] IPVS: using max 32 ests per chain, 76800 per kthread [ 622.583548][T19748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3650'. [ 622.628745][T19756] bond1: Unable to set up delay as MII monitoring is disabled [ 622.638901][T19756] bond1 (unregistering): Released all slaves [ 622.994931][T19769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3654'. [ 623.012146][T19768] netlink: 'syz.0.3654': attribute type 3 has an invalid length. [ 623.201003][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 623.230394][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 623.316698][ T6207] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.342870][ T6207] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.373948][ T6207] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.629651][T19802] netlink: 'syz.4.3663': attribute type 30 has an invalid length. [ 623.881039][T19812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.943652][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3669'. [ 623.960221][T19817] vlan4: entered allmulticast mode [ 623.972753][T19827] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3668'. [ 624.158726][T19827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.183803][T19827] bond_slave_0: left allmulticast mode [ 624.238307][T19827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.256435][T19827] bond_slave_1: left allmulticast mode [ 624.278153][T19827] bond0 (unregistering): Released all slaves [ 624.520894][T19846] netlink: 1704 bytes leftover after parsing attributes in process `syz.1.3676'. [ 624.542966][T19846] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 625.047361][T19846] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.055100][T19846] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.481993][T19846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.528114][T19846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.025543][T19867] tc_dump_action: action bad kind [ 626.038270][ T6207] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.078676][ T6207] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.104733][T14631] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.145922][T14631] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.178225][T14631] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.223131][T14631] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.278390][T19882] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 626.370676][T19887] syzkaller0: entered promiscuous mode [ 626.410257][T19887] syzkaller0: entered allmulticast mode [ 626.531882][T19902] netlink: 'syz.1.3691': attribute type 1 has an invalid length. [ 626.767336][T19911] __nla_validate_parse: 2 callbacks suppressed [ 626.767354][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 626.968221][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3696'. [ 627.008315][T19922] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3696'. [ 627.057507][T19922] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3696'. [ 627.075917][T19922] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3696'. [ 627.197605][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 627.394374][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3704'. [ 627.589886][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3707'. [ 627.722039][T19965] xt_hashlimit: size too large, truncated to 1048576 [ 627.773686][T19966] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3705'. [ 627.791638][T19970] bridge_slave_0 (unregistering): left allmulticast mode [ 627.820079][T19970] bridge_slave_0 (unregistering): left promiscuous mode [ 627.839219][T19970] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.849623][T19972] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 627.939343][T19968] bridge3: entered promiscuous mode [ 627.958256][T19968] bridge3: entered allmulticast mode [ 627.992161][T19970] syzkaller0: entered promiscuous mode [ 628.038476][T19970] syzkaller0: entered allmulticast mode [ 628.055962][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3708'. [ 628.418268][T19987] netlink: 'syz.4.3714': attribute type 64 has an invalid length. [ 628.439590][T19987] netlink: 'syz.4.3714': attribute type 4 has an invalid length. [ 628.455201][T19987] netlink: 'syz.4.3714': attribute type 7 has an invalid length. [ 628.475147][T19987] netlink: 'syz.4.3714': attribute type 4 has an invalid length. [ 628.666492][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 240 seconds [ 628.677415][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 240 seconds [ 628.688534][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 240 seconds [ 628.699627][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 240 seconds [ 628.831449][T19999] bridge_slave_1: left allmulticast mode [ 628.840504][T19999] bridge_slave_1: left promiscuous mode [ 628.846675][T19999] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.867191][T19999] bridge_slave_0: left allmulticast mode [ 628.875801][T19999] bridge_slave_0: left promiscuous mode [ 628.885449][T19999] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.258749][T20045] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.266581][T20045] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.680151][T20045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.720623][T20045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.121432][T20058] C: renamed from lo (while UP) [ 631.150860][T20058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 631.270001][ T6207] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.303839][ T6207] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.347277][ T6207] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.401294][ T6207] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.462556][T20076] geneve2: entered promiscuous mode [ 631.474370][T20076] geneve2: entered allmulticast mode [ 631.553052][T14629] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 631.585928][T14629] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 631.608842][T14629] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 631.630936][T14629] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 631.860597][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.995613][T20110] __nla_validate_parse: 5 callbacks suppressed [ 631.995630][T20110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3747'. [ 632.367109][T20128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3751'. [ 632.395599][T20126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3752'. [ 632.409422][T20130] netlink: 'syz.2.3750': attribute type 1 has an invalid length. [ 632.566930][T20130] bond3: entered promiscuous mode [ 632.572298][T20130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 632.598208][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'. [ 632.636268][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'. [ 632.668987][T20138] bond3: (slave bridge0): making interface the new active one [ 632.712228][T20138] bridge0: entered promiscuous mode [ 632.737715][T20138] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 632.799500][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3753'. [ 632.833470][T20141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3753'. [ 632.878129][T20141] veth1_to_bridge: entered allmulticast mode [ 632.902199][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3753'. [ 632.911738][T20150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3755'. [ 632.946909][T20141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3753'. [ 633.149213][T20160] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 633.170261][T20139] syzkaller0: entered promiscuous mode [ 633.191297][T20139] syzkaller0: entered allmulticast mode [ 633.263067][T20160] xt_HMARK: proto mask must be zero with L3 mode [ 633.596709][ T54] IPVS: starting estimator thread 0... [ 633.602440][T20185] IPVS: ip_vs_edit_dest(): server weight less than zero [ 633.694339][T20186] IPVS: using max 27 ests per chain, 64800 per kthread [ 635.868877][T20160] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 636.342664][T20226] team0: Device gtp0 is of different type [ 636.822928][T20246] veth1_macvtap: entered allmulticast mode [ 637.018371][T20252] veth1_macvtap (unregistering): left allmulticast mode [ 637.405708][T20263] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 637.506557][T20263] bond4: entered promiscuous mode [ 637.523963][T20275] __nla_validate_parse: 6 callbacks suppressed [ 637.523982][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3786'. [ 637.537510][T20263] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.631744][T20266] bond4: entered promiscuous mode [ 637.638324][T20266] bond4: entered allmulticast mode [ 637.645105][T20266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.671487][T20287] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 637.673493][T16104] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 637.709375][T20263] bond4: (slave bridge4): making interface the new active one [ 637.717469][T20263] bridge4: entered promiscuous mode [ 637.725575][T20263] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 637.833748][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 637.843194][T20294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3790'. [ 637.861357][T20294] syzkaller1: entered promiscuous mode [ 637.868691][T20294] syzkaller1: entered allmulticast mode [ 637.894007][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 638.400579][T20280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.420252][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'. [ 638.438924][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'. [ 638.876469][T20338] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3802'. [ 639.103086][T20346] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 639.151880][T20350] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 639.223702][T20350] bond5 (unregistering): Released all slaves [ 639.376893][T20369] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3812'. [ 639.485179][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3815'. [ 639.660611][T20384] syzkaller0: entered promiscuous mode [ 639.677957][T20384] syzkaller0: entered allmulticast mode [ 639.777049][T20394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3819'. [ 640.053605][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.087903][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.131544][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.188278][T20397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.279282][T20410] netlink: 'syz.2.3826': attribute type 6 has an invalid length. [ 640.390595][T20418] bond3: (slave bridge0): Releasing backup interface [ 640.404328][T20418] bridge0 (unregistering): left promiscuous mode [ 640.521813][T20420] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 640.580676][T20420] bond0: (slave lo): Enslaving as an active interface with an up link [ 640.608088][T20420] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 640.802986][T20441] syzkaller0: entered promiscuous mode [ 640.816518][T20441] syzkaller0: entered allmulticast mode [ 640.935753][T20441] tipc: Started in network mode [ 640.949894][T20441] tipc: Node identity 221b5b7f0598, cluster identity 4711 [ 640.976541][T20441] tipc: Enabled bearer , priority 0 [ 640.992078][T20441] netlink: 'syz.3.3835': attribute type 2 has an invalid length. [ 641.048164][T20440] tipc: Resetting bearer [ 641.139894][T20440] tipc: Disabling bearer [ 641.445827][T20482] sctp: [Deprecated]: syz.0.3849 (pid 20482) Use of int in max_burst socket option deprecated. [ 641.445827][T20482] Use struct sctp_assoc_value instead [ 641.520637][T20494] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 641.529535][T20495] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 641.755591][T20509] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 642.100573][T20525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.133136][ T29] audit: type=1804 audit(1777642882.358:10): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3861" name="/newroot/190/cgroup.controllers" dev="tmpfs" ino=998 res=1 errno=0 [ 642.156584][ T29] audit: type=1800 audit(1777642882.388:11): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3861" name="cgroup.controllers" dev="tmpfs" ino=998 res=0 errno=0 [ 642.180524][T20529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.185495][T20527] sctp: [Deprecated]: syz.2.3862 (pid 20527) Use of int in maxseg socket option. [ 642.185495][T20527] Use struct sctp_assoc_value instead [ 642.236305][T20527] tipc: Started in network mode [ 642.267108][T20527] tipc: Node identity fa07fde0ee11, cluster identity 4711 [ 642.281692][T20527] tipc: Enabled bearer , priority 0 [ 642.282892][T20535] xt_l2tp: missing protocol rule (udp|l2tpip) [ 642.360329][T20536] ipvlan2: entered promiscuous mode [ 642.380231][T20527] syzkaller0: MTU too low for tipc bearer [ 642.404397][T20527] tipc: Disabling bearer [ 642.483965][T20544] IPv6: NLM_F_REPLACE set, but no existing node found! [ 642.578469][T20552] __nla_validate_parse: 9 callbacks suppressed [ 642.578487][T20552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3871'. [ 642.646316][T20555] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3872'. [ 642.720357][T20558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3874'. [ 642.827477][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 642.839715][T20564] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 642.850312][T20565] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3877'. [ 642.862632][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3878'. [ 642.880482][T20569] sctp: [Deprecated]: syz.2.3876 (pid 20569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.880482][T20569] Use struct sctp_sack_info instead [ 642.903738][T20564] team1: entered promiscuous mode [ 642.922399][T20564] team1: entered allmulticast mode [ 643.072040][T20581] netlink: 'syz.2.3882': attribute type 3 has an invalid length. [ 643.449592][T20602] sch_tbf: peakrate 8 is lower than or equals to rate 3693873665762585755 ! [ 643.483896][T20604] sch_tbf: peakrate 8 is lower than or equals to rate 3693873665762585755 ! [ 643.513264][T20606] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3889'. [ 643.542799][T20602] syzkaller0: entered promiscuous mode [ 643.562978][T20602] syzkaller0: entered allmulticast mode [ 643.590221][T20608] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3890'. [ 643.717020][T20618] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3892'. [ 643.810677][T20621] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 643.844132][T20622] netlink: 'syz.3.3895': attribute type 39 has an invalid length. [ 643.866151][T20621] netlink: 'syz.3.3895': attribute type 39 has an invalid length. [ 643.879829][T20622] hsr_slave_0: left promiscuous mode [ 643.889633][T20622] hsr_slave_1: left promiscuous mode [ 643.904947][T20629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3895'. [ 644.347213][T20661] nft_compat: unsupported protocol 0 [ 644.805909][T20683] syzkaller0: entered promiscuous mode [ 644.816186][T20683] syzkaller0: entered allmulticast mode [ 645.354964][T20721] tunl0: entered promiscuous mode [ 645.377041][T20721] netlink: 'syz.4.3922': attribute type 3 has an invalid length. [ 645.401010][T20723] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 646.751873][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 648.106105][T20742] 0: renamed from hsr0 (while UP) [ 648.124005][T20742] 0: entered allmulticast mode [ 648.137696][T20742] hsr_slave_0: entered allmulticast mode [ 648.143486][T20742] hsr_slave_1: entered allmulticast mode [ 648.151066][T20742] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 648.281129][T20747] __nla_validate_parse: 10 callbacks suppressed [ 648.281148][T20747] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3930'. [ 648.524485][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3934'. [ 648.728818][T20762] hsr_slave_1 (unregistering): left promiscuous mode [ 648.740835][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'. [ 648.853467][T20778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3937'. [ 648.979530][T20791] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3940'. [ 649.006416][T20795] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3942'. [ 649.026003][T20778] bond6 (unregistering): Released all slaves [ 649.049631][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 649.059608][T20799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.071262][T20791] vlan0: entered promiscuous mode [ 649.073376][T20800] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3942'. [ 649.083157][T20795] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3942'. [ 649.304836][T20808] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3945'. [ 649.352525][T20804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 650.131569][T20852] netlink: 'syz.3.3957': attribute type 7 has an invalid length. [ 650.164694][T20855] netlink: 'syz.1.3959': attribute type 4 has an invalid length. [ 650.164760][T20856] netlink: 'syz.1.3959': attribute type 4 has an invalid length. [ 650.217142][T20852] netlink: 'syz.3.3957': attribute type 7 has an invalid length. [ 650.217475][T16104] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 650.251046][T16104] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.267325][T16104] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.284873][T20853] syzkaller0: entered promiscuous mode [ 650.300688][T20853] syzkaller0: entered allmulticast mode [ 650.314125][T16104] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.672289][T20871] rdma_rxe: rxe_newlink: failed to add wg1 [ 650.968201][T20892] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 651.306922][T20912] lo: entered allmulticast mode [ 651.324882][T20912] tunl0: entered allmulticast mode [ 651.337800][T20912] gre0: entered allmulticast mode [ 651.363525][T20912] gretap0: entered allmulticast mode [ 651.386050][T20912] erspan0: entered allmulticast mode [ 651.421064][T20912] ip_vti0: entered allmulticast mode [ 651.444855][T20914] netlink: 'syz.1.3975': attribute type 15 has an invalid length. [ 651.463662][T20912] ip6_vti0: entered allmulticast mode [ 651.476882][T20912] sit0: entered allmulticast mode [ 651.488980][T20912] ip6tnl0: entered allmulticast mode [ 651.501196][T20912] ip6gre0: entered allmulticast mode [ 651.518201][T20912] syz_tun: entered allmulticast mode [ 651.530208][T20912] ip6gretap0: entered allmulticast mode [ 651.543583][T20912] bridge0: entered allmulticast mode [ 651.552654][T20912] vcan0: entered allmulticast mode [ 651.558368][T20912] bond0: entered allmulticast mode [ 651.563655][T20912] bond_slave_0: entered allmulticast mode [ 651.583968][T20912] bond_slave_1: entered allmulticast mode [ 651.605411][T20912] team0: entered allmulticast mode [ 651.619351][T20912] team_slave_0: entered allmulticast mode [ 651.634485][T20912] team_slave_1: entered allmulticast mode [ 651.654421][T20912] dummy0: entered allmulticast mode [ 651.662836][T20912] nlmon0: entered allmulticast mode [ 651.686757][T20912] batadv0: entered allmulticast mode [ 651.692737][T20912] veth0: entered allmulticast mode [ 651.710780][T20912] veth1: entered allmulticast mode [ 651.720287][T20912] wg0: entered allmulticast mode [ 651.732904][T20912] wg1: entered allmulticast mode [ 651.748963][T20912] wg2: entered allmulticast mode [ 651.754492][T20912] veth1_to_bridge: entered allmulticast mode [ 651.775242][T20912] veth0_to_bond: entered allmulticast mode [ 651.781613][T20912] veth1_to_bond: entered allmulticast mode [ 651.789572][T20912] veth0_to_team: entered allmulticast mode [ 651.798801][T20912] veth1_to_team: entered allmulticast mode [ 651.805418][T20912] veth0_to_batadv: entered allmulticast mode [ 651.811772][T20912] batadv_slave_0: entered allmulticast mode [ 651.818637][T20912] veth1_to_batadv: entered allmulticast mode [ 651.825269][T20912] batadv_slave_1: entered allmulticast mode [ 651.831482][T20912] xfrm0: entered allmulticast mode [ 651.837368][T20912] veth0_to_hsr: entered allmulticast mode [ 651.843424][T20912] hsr_slave_0: entered allmulticast mode [ 651.850146][T20912] veth1_to_hsr: entered allmulticast mode [ 651.856517][T20912] hsr_slave_1: entered allmulticast mode [ 651.862516][T20912] hsr0: entered allmulticast mode [ 651.868268][T20912] veth1_virt_wifi: entered allmulticast mode [ 651.875150][T20912] veth0_virt_wifi: entered allmulticast mode [ 651.881463][T20912] veth1_vlan: entered allmulticast mode [ 651.889182][T20912] veth0_vlan: entered allmulticast mode [ 651.895363][T20912] vlan0: entered allmulticast mode [ 651.900869][T20912] vlan1: entered allmulticast mode [ 651.907135][T20912] macvlan0: entered allmulticast mode [ 651.912890][T20912] macvlan1: entered allmulticast mode [ 651.918986][T20912] ipvlan0: entered allmulticast mode [ 651.925012][T20912] ipvlan1: entered allmulticast mode [ 651.930638][T20912] veth1_macvtap: entered allmulticast mode [ 651.937472][T20912] veth0_macvtap: entered allmulticast mode [ 651.943620][T20912] macvtap0: entered allmulticast mode [ 651.949842][T20912] macsec0: entered allmulticast mode [ 651.955703][T20912] geneve0: entered allmulticast mode [ 651.961341][T20912] geneve1: entered allmulticast mode [ 651.967631][T20912] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 651.975669][T20912] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 651.983739][T20912] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 651.991941][T20912] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 652.000179][T20912] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 652.008009][T20912] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 652.015920][T20912] mac80211_hwsim hwsim47 wlan2: entered allmulticast mode [ 652.023423][T20912] vxlan0: entered allmulticast mode [ 652.029593][T20912] bridge1: entered allmulticast mode [ 652.036075][T20912] gretap1: entered allmulticast mode [ 652.052369][T20912] ipvlan2: left promiscuous mode [ 652.061219][T20912] ipvlan2: entered allmulticast mode [ 652.072961][T20912] bond1: entered allmulticast mode [ 652.079243][T20912] bond2: entered allmulticast mode [ 652.090475][T20912] gretap2: entered allmulticast mode [ 652.952042][T20977] bridge0: port 1(batadv1) entered blocking state [ 652.975958][T20977] bridge0: port 1(batadv1) entered disabled state [ 652.988013][T20977] batadv1: entered allmulticast mode [ 653.011800][T20977] batadv1: entered promiscuous mode [ 653.083526][T20985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 653.090853][T20985] IPv6: NLM_F_CREATE should be set when creating new route [ 653.169041][T20992] netlink: 'syz.4.3998': attribute type 6 has an invalid length. [ 653.290489][T21000] __nla_validate_parse: 23 callbacks suppressed [ 653.290506][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4004'. [ 653.333383][T20998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4003'. [ 653.434948][ T6209] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 653.445383][ T6209] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 653.580509][T21014] netlink: 'syz.0.4008': attribute type 6 has an invalid length. [ 653.604345][T21014] netlink: 'syz.0.4008': attribute type 1 has an invalid length. [ 653.616673][T21021] netlink: 'syz.2.4009': attribute type 10 has an invalid length. [ 653.682026][T21014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 653.701431][T21021] team0: Port device dummy0 added [ 653.781659][T21030] syzkaller0: entered promiscuous mode [ 653.793341][T21030] syzkaller0: entered allmulticast mode [ 653.857543][T21033] syzkaller1: entered promiscuous mode [ 653.867894][T21033] syzkaller1: entered allmulticast mode [ 653.904449][T21035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4014'. [ 653.927973][T21036] xt_l2tp: invalid flags combination: 8 [ 654.126570][T21032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.148583][T21033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.218062][T21060] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4019'. [ 654.548114][T21070] vxcan1 speed is unknown, defaulting to 1000 [ 654.670133][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4024'. [ 654.837889][T21093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.976852][T21097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4031'. [ 655.144578][ T5640] Bluetooth: hci2: command 0x0405 tx timeout [ 655.171753][T21112] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 655.204379][T21112] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4034'. [ 655.220062][T21112] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4034'. [ 655.240797][T21112] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 655.252819][T21112] netlink: 618 bytes leftover after parsing attributes in process `syz.2.4034'. [ 655.297672][T21099] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4032'. [ 655.974137][T21143] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 655.978809][T21145] xt_NFQUEUE: number of total queues is 0 [ 656.306025][T21149] syzkaller1: entered promiscuous mode [ 656.315278][T21149] syzkaller1: entered allmulticast mode [ 656.451462][T21162] netlink: 'syz.2.4049': attribute type 13 has an invalid length. [ 656.937908][T21190] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 656.962987][T21190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.966941][T21198] netlink: 'syz.2.4060': attribute type 4 has an invalid length. [ 657.273195][T21214] ip6erspan0: entered allmulticast mode [ 657.303367][T21219] netlink: 'syz.0.4064': attribute type 20 has an invalid length. [ 657.326400][T21219] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.450186][T21225] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 657.463753][T21227] netlink: 'syz.4.4065': attribute type 33 has an invalid length. [ 657.575626][T21227] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 657.612331][T21227] bond5 (unregistering): Released all slaves [ 657.851795][T21247] vlan2: entered allmulticast mode [ 657.893670][T21247] bond0: entered allmulticast mode [ 657.915554][T21247] bond_slave_0: entered allmulticast mode [ 657.933235][T21252] netlink: 'syz.2.4073': attribute type 2 has an invalid length. [ 657.943122][T21247] bond_slave_1: entered allmulticast mode [ 657.954391][T21252] netlink: 'syz.2.4073': attribute type 2 has an invalid length. [ 658.250452][T21274] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 658.389236][T21278] __nla_validate_parse: 6 callbacks suppressed [ 658.389254][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4081'. [ 658.459235][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4085'. [ 658.474477][T21286] openvswitch: netlink: Unknown nsh attribute 0 [ 658.501124][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4086'. [ 658.521684][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4086'. [ 658.678398][T21299] ip6tnl0: Caught tx_queue_len zero misconfig [ 658.737763][T21303] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 658.746177][ T1706] block nbd4: Possible stuck request ffff888026d8e000: control (read@0,1024B). Runtime 270 seconds [ 658.757536][ T1706] block nbd4: Possible stuck request ffff888026d8e1c0: control (read@1024,1024B). Runtime 270 seconds [ 658.768684][ T1706] block nbd4: Possible stuck request ffff888026d8e380: control (read@2048,1024B). Runtime 270 seconds [ 658.779918][ T1706] block nbd4: Possible stuck request ffff888026d8e540: control (read@3072,1024B). Runtime 270 seconds [ 658.828081][T21303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.870279][T21311] bond1: (slave geneve3): making interface the new active one [ 658.880024][T21311] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 658.925338][T16105] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 658.961669][T16105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.009627][T16105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.041344][T21320] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 659.052549][T16105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.155229][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4095'. [ 659.176757][T21327] bond5: (slave geneve2): making interface the new active one [ 659.200895][T21327] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 659.210553][T16105] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.230148][T21320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.249786][T16105] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.279114][T16105] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.297879][T21340] block nbd5: server does not support multiple connections per device. [ 659.312638][T16105] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 659.327604][T21340] block nbd5: shutting down sockets [ 659.429576][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 659.687652][T21374] tipc: Started in network mode [ 659.697639][T21374] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 659.723234][T21374] tipc: Enabling of bearer rejected, failed to enable media [ 659.828821][T21383] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4109'. [ 659.920867][T21391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4112'. [ 659.959664][T21387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.091155][T21398] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4116'. [ 660.240937][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 660.268710][T21408] bond3: entered promiscuous mode [ 660.627786][T21430] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 660.773846][T21430] bond6 (unregistering): Released all slaves [ 662.734971][T21580] IPVS: set_ctl: invalid protocol: 54 255.255.255.255:20004 [ 663.305860][T21617] netlink: 'syz.4.4174': attribute type 1 has an invalid length. [ 663.890015][ T29] audit: type=1107 audit(1777642904.118:12): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+ /J쿢sX:_m.g{ [ 663.890015][ T29] @>]}5m%߁.WF% iy|5KbK%P`7s|y3+ˮ8n< DW cZˣZ [ 663.890015][ T29] RQJDT~H(NlqG9{:.ZT}+?쭓Gzn6^Y=O~͏j6"]Pruz$' [ 665.371995][T21561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.725152][T21646] __nla_validate_parse: 11 callbacks suppressed [ 665.725169][T21646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4182'. [ 665.793352][T21650] netlink: 'syz.3.4184': attribute type 62 has an invalid length. [ 665.826230][T21654] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 665.932995][T21659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4188'. [ 666.375971][T21674] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4192'. [ 666.418315][T21674] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4192'. [ 666.657547][T21686] netlink: 'syz.2.4194': attribute type 11 has an invalid length. [ 666.962465][T21705] netlink: 'syz.1.4200': attribute type 1 has an invalid length. [ 667.203227][T21717] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 667.234602][T21717] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4204'. [ 667.259142][T21717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4204'. [ 667.300394][T21725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4208'. [ 667.345480][T21725] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 667.365583][T21725] gretap3: entered promiscuous mode [ 667.371771][T21725] gretap3: entered allmulticast mode [ 667.475405][T21736] : renamed from bond0 [ 667.842543][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4214'. [ 668.014519][T21759] nbd3: detected capacity change from 63 to 0 [ 668.026209][T21759] block nbd3: reconnected socket [ 668.031434][T21759] block nbd3: reconnected socket [ 668.046621][ T5640] block nbd3: Receive control failed (result -32) [ 668.063666][ T5638] block nbd3: Receive control failed (result -32) [ 668.177020][T14631] bridge_slave_1: left allmulticast mode [ 668.202798][T14631] bridge_slave_1: left promiscuous mode [ 668.225293][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.251583][T14631] bridge_slave_0: left allmulticast mode [ 668.257827][T14631] bridge_slave_0: left promiscuous mode [ 668.263637][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.353924][T21775] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.380524][T21775] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 668.439048][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 668.448322][T21778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4221'. [ 668.467499][T14631] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 668.476206][T14631] ip6gre1 (unregistering): left promiscuous mode [ 668.698457][T14631] bond3 (unregistering): (slave bridge2): Releasing active interface [ 668.799726][T14631] bond5 (unregistering): (slave bridge4): Releasing active interface [ 668.909735][T14631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.932639][T14631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.946125][T14631] bond0 (unregistering): Released all slaves [ 668.959132][T14631] bond1 (unregistering): Released all slaves [ 668.974851][T14631] bond2 (unregistering): Released all slaves [ 668.993361][T14631] bond3 (unregistering): Released all slaves [ 669.010378][T14631] bond4 (unregistering): Released all slaves [ 669.023833][T14631] bond5 (unregistering): Released all slaves [ 669.043305][T14631] bond6 (unregistering): Released all slaves [ 669.060414][T14631] bond7 (unregistering): Released all slaves [ 669.390800][T14631] tipc: Left network mode [ 669.666703][T21806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.971729][T14631] [ 669.974085][T14631] ====================================================== [ 669.981077][T14631] WARNING: possible circular locking dependency detected [ 669.988078][T14631] syzkaller #0 Not tainted [ 669.992468][T14631] ------------------------------------------------------ [ 669.999463][T14631] kworker/u8:4/14631 is trying to acquire lock: [ 670.005682][T14631] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 670.016211][T14631] [ 670.016211][T14631] but task is already holding lock: [ 670.023571][T14631] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 670.033146][T14631] [ 670.033146][T14631] which lock already depends on the new lock. [ 670.033146][T14631] [ 670.043529][T14631] [ 670.043529][T14631] the existing dependency chain (in reverse order) is: [ 670.052524][T14631] [ 670.052524][T14631] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 670.060501][T14631] down_write+0x96/0x200 [ 670.065257][T14631] kernfs_add_one+0x41/0x5c0 [ 670.070361][T14631] kernfs_create_dir_ns+0xde/0x130 [ 670.075982][T14631] internal_create_group+0x425/0x1180 [ 670.081861][T14631] cpuhp_invoke_callback+0x445/0x860 [ 670.087650][T14631] cpuhp_issue_call+0x430/0x7a0 [ 670.093005][T14631] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 670.099576][T14631] __cpuhp_setup_state+0x3f/0x60 [ 670.105018][T14631] do_one_initcall+0x250/0x870 [ 670.110285][T14631] do_initcall_level+0x104/0x190 [ 670.115741][T14631] do_initcalls+0x59/0xa0 [ 670.120578][T14631] kernel_init_freeable+0x2a6/0x3e0 [ 670.126286][T14631] kernel_init+0x1d/0x1d0 [ 670.131128][T14631] ret_from_fork+0x514/0xb70 [ 670.136222][T14631] ret_from_fork_asm+0x1a/0x30 [ 670.141489][T14631] [ 670.141489][T14631] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 670.149289][T14631] [ 670.149289][T14631] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 670.156999][T14631] cpus_read_lock+0x42/0x160 [ 670.162094][T14631] static_key_slow_inc+0x12/0x30 [ 670.167535][T14631] nbd_genl_reconfigure+0x132f/0x1ea0 [ 670.173413][T14631] genl_family_rcv_msg_doit+0x22a/0x330 [ 670.179466][T14631] genl_rcv_msg+0x61c/0x7a0 [ 670.184479][T14631] netlink_rcv_skb+0x232/0x4b0 [ 670.189746][T14631] genl_rcv+0x28/0x40 [ 670.194235][T14631] netlink_unicast+0x75c/0x8e0 [ 670.199503][T14631] netlink_sendmsg+0x813/0xb40 [ 670.204775][T14631] ____sys_sendmsg+0x972/0x9f0 [ 670.210051][T14631] ___sys_sendmsg+0x2a5/0x360 [ 670.215235][T14631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.220679][T14631] do_syscall_64+0x15f/0xf80 [ 670.225773][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.232212][T14631] [ 670.232212][T14631] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 670.239841][T14631] __mutex_lock+0x1a3/0x1550 [ 670.244944][T14631] nbd_queue_rq+0x37b/0x1100 [ 670.250048][T14631] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 670.256121][T14631] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 670.262976][T14631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 670.269484][T14631] blk_mq_run_hw_queue+0x348/0x4f0 [ 670.275108][T14631] blk_mq_dispatch_list+0xd16/0xe10 [ 670.280815][T14631] blk_mq_flush_plug_list+0x48d/0x570 [ 670.286696][T14631] __blk_flush_plug+0x3ed/0x4d0 [ 670.292058][T14631] __submit_bio+0x28d/0x580 [ 670.297070][T14631] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 670.303210][T14631] block_read_full_folio+0x599/0x830 [ 670.308999][T14631] filemap_read_folio+0x137/0x3b0 [ 670.314535][T14631] do_read_cache_folio+0x358/0x590 [ 670.320158][T14631] read_part_sector+0xb6/0x2b0 [ 670.325431][T14631] adfspart_check_ICS+0xb1/0x960 [ 670.330875][T14631] bdev_disk_changed+0x817/0x1770 [ 670.336404][T14631] blkdev_get_whole+0x380/0x510 [ 670.341762][T14631] bdev_open+0x31e/0xd30 [ 670.346509][T14631] blkdev_open+0x470/0x610 [ 670.351431][T14631] do_dentry_open+0x785/0x14e0 [ 670.356698][T14631] vfs_open+0x3b/0x340 [ 670.361271][T14631] path_openat+0x2e08/0x3860 [ 670.366368][T14631] do_file_open+0x23e/0x4a0 [ 670.371379][T14631] do_sys_openat2+0x113/0x200 [ 670.376556][T14631] __x64_sys_openat+0x138/0x170 [ 670.381911][T14631] do_syscall_64+0x15f/0xf80 [ 670.387008][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.393405][T14631] [ 670.393405][T14631] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 670.400601][T14631] __mutex_lock+0x1a3/0x1550 [ 670.405701][T14631] nbd_queue_rq+0xc6/0x1100 [ 670.410795][T14631] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 670.416850][T14631] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 670.423687][T14631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 670.430175][T14631] blk_mq_run_hw_queue+0x348/0x4f0 [ 670.435795][T14631] blk_mq_dispatch_list+0xd16/0xe10 [ 670.441503][T14631] blk_mq_flush_plug_list+0x48d/0x570 [ 670.447384][T14631] __blk_flush_plug+0x3ed/0x4d0 [ 670.452744][T14631] __submit_bio+0x28d/0x580 [ 670.457756][T14631] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 670.463897][T14631] block_read_full_folio+0x599/0x830 [ 670.469689][T14631] filemap_read_folio+0x137/0x3b0 [ 670.475228][T14631] do_read_cache_folio+0x358/0x590 [ 670.480850][T14631] read_part_sector+0xb6/0x2b0 [ 670.486122][T14631] adfspart_check_ICS+0xb1/0x960 [ 670.491679][T14631] bdev_disk_changed+0x817/0x1770 [ 670.497229][T14631] blkdev_get_whole+0x380/0x510 [ 670.502602][T14631] bdev_open+0x31e/0xd30 [ 670.507353][T14631] blkdev_open+0x470/0x610 [ 670.512280][T14631] do_dentry_open+0x785/0x14e0 [ 670.517559][T14631] vfs_open+0x3b/0x340 [ 670.522146][T14631] path_openat+0x2e08/0x3860 [ 670.527248][T14631] do_file_open+0x23e/0x4a0 [ 670.532261][T14631] do_sys_openat2+0x113/0x200 [ 670.537447][T14631] __x64_sys_openat+0x138/0x170 [ 670.542808][T14631] do_syscall_64+0x15f/0xf80 [ 670.547911][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.554317][T14631] [ 670.554317][T14631] -> #4 (set->srcu){.+.+}-{0:0}: [ 670.561435][T14631] __synchronize_srcu+0xca/0x300 [ 670.566886][T14631] elevator_switch+0x1e8/0x7a0 [ 670.572172][T14631] elevator_change+0x2cc/0x450 [ 670.577448][T14631] elevator_set_default+0x36c/0x430 [ 670.583155][T14631] blk_register_queue+0x3e9/0x4e0 [ 670.588689][T14631] __add_disk+0x677/0xd50 [ 670.593523][T14631] add_disk_fwnode+0xfb/0x480 [ 670.598705][T14631] nbd_dev_add+0x72c/0xb50 [ 670.603710][T14631] nbd_init+0x168/0x1f0 [ 670.608367][T14631] do_one_initcall+0x250/0x870 [ 670.613636][T14631] do_initcall_level+0x104/0x190 [ 670.619086][T14631] do_initcalls+0x59/0xa0 [ 670.623925][T14631] kernel_init_freeable+0x2a6/0x3e0 [ 670.629631][T14631] kernel_init+0x1d/0x1d0 [ 670.634472][T14631] ret_from_fork+0x514/0xb70 [ 670.639681][T14631] ret_from_fork_asm+0x1a/0x30 [ 670.644963][T14631] [ 670.644963][T14631] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 670.652772][T14631] __mutex_lock+0x1a3/0x1550 [ 670.657880][T14631] elevator_change+0x1b3/0x450 [ 670.663160][T14631] elevator_set_none+0xb5/0x140 [ 670.668525][T14631] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 670.674841][T14631] nbd_start_device+0x17f/0xb10 [ 670.680206][T14631] nbd_genl_connect+0x165b/0x1cf0 [ 670.685740][T14631] genl_family_rcv_msg_doit+0x22a/0x330 [ 670.691804][T14631] genl_rcv_msg+0x61c/0x7a0 [ 670.696828][T14631] netlink_rcv_skb+0x232/0x4b0 [ 670.702111][T14631] genl_rcv+0x28/0x40 [ 670.706618][T14631] netlink_unicast+0x75c/0x8e0 [ 670.711894][T14631] netlink_sendmsg+0x813/0xb40 [ 670.717170][T14631] ____sys_sendmsg+0x972/0x9f0 [ 670.722450][T14631] ___sys_sendmsg+0x2a5/0x360 [ 670.727638][T14631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.733091][T14631] do_syscall_64+0x15f/0xf80 [ 670.738198][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.744598][T14631] [ 670.744598][T14631] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 670.753205][T14631] blk_alloc_queue+0x546/0x680 [ 670.758480][T14631] __blk_mq_alloc_disk+0x197/0x390 [ 670.764111][T14631] nbd_dev_add+0x499/0xb50 [ 670.769030][T14631] nbd_init+0x168/0x1f0 [ 670.773689][T14631] do_one_initcall+0x250/0x870 [ 670.778960][T14631] do_initcall_level+0x104/0x190 [ 670.784409][T14631] do_initcalls+0x59/0xa0 [ 670.789243][T14631] kernel_init_freeable+0x2a6/0x3e0 [ 670.794948][T14631] kernel_init+0x1d/0x1d0 [ 670.799787][T14631] ret_from_fork+0x514/0xb70 [ 670.804881][T14631] ret_from_fork_asm+0x1a/0x30 [ 670.810154][T14631] [ 670.810154][T14631] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 670.817352][T14631] fs_reclaim_acquire+0x71/0x100 [ 670.822801][T14631] kmem_cache_alloc_noprof+0x40/0x650 [ 670.828681][T14631] __kernfs_iattrs+0xdf/0x320 [ 670.833865][T14631] kernfs_iop_setattr+0xea/0x3f0 [ 670.839306][T14631] notify_change+0xc1a/0xf40 [ 670.844399][T14631] do_truncate+0x1c2/0x250 [ 670.849326][T14631] path_openat+0x2f89/0x3860 [ 670.854424][T14631] do_file_open+0x23e/0x4a0 [ 670.859434][T14631] do_sys_openat2+0x113/0x200 [ 670.864617][T14631] __x64_sys_openat+0x138/0x170 [ 670.869980][T14631] do_syscall_64+0x15f/0xf80 [ 670.875077][T14631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.881477][T14631] [ 670.881477][T14631] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 670.889981][T14631] __lock_acquire+0x15a5/0x2cf0 [ 670.895337][T14631] lock_acquire+0x106/0x350 [ 670.900343][T14631] down_write+0x96/0x200 [ 670.905093][T14631] kernfs_unlink_sibling+0x71/0x180 [ 670.910803][T14631] kernfs_rename_ns+0x4a6/0x830 [ 670.916171][T14631] sysfs_rename_link_ns+0x16e/0x1b0 [ 670.921877][T14631] device_rename+0x110/0x210 [ 670.926978][T14631] __dev_change_net_namespace+0x15d3/0x20a0 [ 670.933381][T14631] cfg802154_switch_netns+0xbf/0x3d0 [ 670.939174][T14631] cfg802154_pernet_exit+0x75/0xe0 [ 670.944796][T14631] ops_undo_list+0x49f/0x940 [ 670.949894][T14631] cleanup_net+0x56b/0x800 [ 670.954816][T14631] process_scheduled_works+0xb5d/0x1860 [ 670.960866][T14631] worker_thread+0xa53/0xfc0 [ 670.965961][T14631] kthread+0x388/0x470 [ 670.970538][T14631] ret_from_fork+0x514/0xb70 [ 670.975637][T14631] ret_from_fork_asm+0x1a/0x30 [ 670.980906][T14631] [ 670.980906][T14631] other info that might help us debug this: [ 670.980906][T14631] [ 670.991111][T14631] Chain exists of: [ 670.991111][T14631] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 670.991111][T14631] [ 671.005518][T14631] Possible unsafe locking scenario: [ 671.005518][T14631] [ 671.012951][T14631] CPU0 CPU1 [ 671.018301][T14631] ---- ---- [ 671.023649][T14631] lock(&root->kernfs_rwsem); [ 671.028401][T14631] lock(cpuhp_state_mutex); [ 671.035493][T14631] lock(&root->kernfs_rwsem); [ 671.042760][T14631] lock(&root->kernfs_iattr_rwsem); [ 671.048030][T14631] [ 671.048030][T14631] *** DEADLOCK *** [ 671.048030][T14631] [ 671.056153][T14631] 5 locks held by kworker/u8:4/14631: [ 671.061504][T14631] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 671.072369][T14631] #1: ffffc9001be67c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 671.082881][T14631] #2: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 671.092175][T14631] #3: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 671.101740][T14631] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 671.111734][T14631] [ 671.111734][T14631] stack backtrace: [ 671.117614][T14631] CPU: 0 UID: 0 PID: 14631 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 671.117631][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.117641][T14631] Workqueue: netns cleanup_net [ 671.117657][T14631] Call Trace: [ 671.117664][T14631] [ 671.117671][T14631] dump_stack_lvl+0xe8/0x150 [ 671.117687][T14631] print_circular_bug+0x2e1/0x300 [ 671.117707][T14631] check_noncircular+0x12e/0x150 [ 671.117727][T14631] __lock_acquire+0x15a5/0x2cf0 [ 671.117744][T14631] ? __lock_acquire+0x6b5/0x2cf0 [ 671.117760][T14631] ? __lock_acquire+0x6b5/0x2cf0 [ 671.117776][T14631] ? kernfs_unlink_sibling+0x71/0x180 [ 671.117795][T14631] lock_acquire+0x106/0x350 [ 671.117808][T14631] ? kernfs_unlink_sibling+0x71/0x180 [ 671.117832][T14631] down_write+0x96/0x200 [ 671.117851][T14631] ? kernfs_unlink_sibling+0x71/0x180 [ 671.117871][T14631] ? __pfx_down_write+0x10/0x10 [ 671.117888][T14631] ? kernfs_root+0x1c/0x230 [ 671.117903][T14631] ? kernfs_root+0x1c/0x230 [ 671.117918][T14631] ? kernfs_root+0x1c/0x230 [ 671.117934][T14631] ? kernfs_root+0x1ea/0x230 [ 671.117950][T14631] kernfs_unlink_sibling+0x71/0x180 [ 671.117971][T14631] kernfs_rename_ns+0x4a6/0x830 [ 671.117993][T14631] sysfs_rename_link_ns+0x16e/0x1b0 [ 671.118012][T14631] device_rename+0x110/0x210 [ 671.118029][T14631] __dev_change_net_namespace+0x15d3/0x20a0 [ 671.118057][T14631] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 671.118082][T14631] ? __lock_acquire+0x6b5/0x2cf0 [ 671.118100][T14631] ? __mutex_trylock_common+0x158/0x260 [ 671.118119][T14631] ? __pfx___mutex_trylock_common+0x10/0x10 [ 671.118137][T14631] ? rcu_is_watching+0x15/0xb0 [ 671.118154][T14631] ? trace_contention_end+0x3d/0x140 [ 671.118171][T14631] ? __mutex_lock+0x319/0x1550 [ 671.118190][T14631] ? do_raw_spin_unlock+0xf5/0x210 [ 671.118209][T14631] ? _raw_spin_unlock+0x28/0x50 [ 671.118223][T14631] ? __pfx___mutex_lock+0x10/0x10 [ 671.118242][T14631] ? __pfx_netdev_run_todo+0x10/0x10 [ 671.118262][T14631] cfg802154_switch_netns+0xbf/0x3d0 [ 671.118284][T14631] cfg802154_pernet_exit+0x75/0xe0 [ 671.118306][T14631] ops_undo_list+0x49f/0x940 [ 671.118323][T14631] ? __pfx_ops_undo_list+0x10/0x10 [ 671.118338][T14631] ? idr_destroy+0x218/0x290 [ 671.118351][T14631] ? do_raw_spin_unlock+0xf5/0x210 [ 671.118371][T14631] cleanup_net+0x56b/0x800 [ 671.118387][T14631] ? __pfx_cleanup_net+0x10/0x10 [ 671.118404][T14631] ? process_scheduled_works+0xa70/0x1860 [ 671.118417][T14631] ? process_scheduled_works+0xa70/0x1860 [ 671.118431][T14631] process_scheduled_works+0xb5d/0x1860 [ 671.118455][T14631] ? __pfx_process_scheduled_works+0x10/0x10 [ 671.118471][T14631] ? assign_work+0x3d5/0x5e0 [ 671.118495][T14631] worker_thread+0xa53/0xfc0 [ 671.118520][T14631] kthread+0x388/0x470 [ 671.118538][T14631] ? __pfx_worker_thread+0x10/0x10 [ 671.118551][T14631] ? __pfx_kthread+0x10/0x10 [ 671.118568][T14631] ret_from_fork+0x514/0xb70 [ 671.118583][T14631] ? __pfx_ret_from_fork+0x10/0x10 [ 671.118597][T14631] ? __switch_to+0xc79/0x1410 [ 671.118623][T14631] ? __pfx_kthread+0x10/0x10 [ 671.118640][T14631] ret_from_fork_asm+0x1a/0x30 [ 671.118662][T14631] [ 671.453224][T14631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.465069][T14631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.472534][T14631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.481261][T14631] veth0_macvtap: left promiscuous mode [ 671.487484][T14631] veth1_vlan: left allmulticast mode [ 671.492907][T14631] veth1_vlan: left promiscuous mode [ 671.498160][T14631] veth0_vlan: left promiscuous mode [ 671.574030][T14631] team0 (unregistering): Port device macvlan1 removed [ 671.603893][T14631] team0 (unregistering): Port device team_slave_1 removed [ 671.878342][T14631] IPVS: stop unused estimator thread 0... [ 671.935210][T21788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512