last executing test programs: 7.772904026s ago: executing program 2 (id=4374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4000050000000b0400000000000000000200000014000480100001800a00010072656469720000000900010073797a30000000000900020073797a3100000000140000001100010000000000000000000000000af1ce12a925dfdb1caa5ce5a8e854a2bf7920c988674bcfdb6274ad564c71370d1b9f11cdd8dad7b0de7f1d80c54e6830b33ef5b4ed865a0ac841d5ca2bd521341fa32e3f46c90a13b1a86518a0ace6477f3ccd110172e06fb67c6a5c36eb01de18ed7b6c6c6bee4637dca055ea77a54d348386d40b402ab32667c65e502060cc54e006fa55d52bdf4f"], 0x68}}, 0x40880) 7.575785454s ago: executing program 2 (id=4377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$netlink(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4000800}, 0x800) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000011401000000000000000000090002007379736977"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000480)='GPL\x00', 0xffff7fff, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000a00)={{r5}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x54}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) shutdown(r4, 0x1) 7.492869679s ago: executing program 2 (id=4380): r0 = socket(0x22, 0x2, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000800)) r2 = socket(0x8000000010, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xf, 0x10}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xf, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00ffffffd41064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00ffffffd41064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x2, &(0x7f0000000100)=@raw=[@exit, @generic={0xfd, 0xd, 0x8, 0xf719, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0x10, 0x0, &(0x7f00000003c0), 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x6, 0x85e}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r7, 0x1, r8, r9, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r10 = accept4(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000a80)={0x80}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000a80)={0x80}) sendmmsg$alg(r10, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r10, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 7.159636731s ago: executing program 2 (id=4383): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x1}, 0x10}, 0x94) 7.044427692s ago: executing program 2 (id=4387): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x4, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) socket(0x1e, 0x0, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 4.900453306s ago: executing program 0 (id=4410): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xc, 0xa4, 0x0, 0x5}, {0x0, 0xa, 0x6, 0x8}, {0x8, 0xc, 0xe, 0x4c7}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x10001}, &(0x7f00000000c0)=0x8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r1, 0x0, 0x1b, 0x0, &(0x7f0000000300)="f08451b5c858d79a9d397af8c04a2f3873a14f91aebf1bab931555", 0x0, 0x9, 0x0, 0x9, 0x0, &(0x7f0000000340)="5e4dc441cf7801c5cf", 0x0, 0x2, 0x0, 0x1}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x204, 0x0, 0x4, r3}, &(0x7f0000000040)=0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 4.897713799s ago: executing program 0 (id=4415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$isdn(0x22, 0x3, 0x24) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x14, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x4, 0x0, 0x3}, {0x0, 0x0, 0x5, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="031b", 0x2}], 0x1) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) shutdown(r3, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500005400000000fc06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0c0800ca90781000080a8100000000000fbc0402fe0662d4c3d9080a0000000900000401050c971307000000e935f628229351f6"], 0x0) 3.937461917s ago: executing program 0 (id=4430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0, 0x3e}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000e40)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet(r0, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0, 0x3e}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000e40)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) (async) 3.797627361s ago: executing program 0 (id=4434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x4041) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x11, 0x200c, 0x0, @value=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x1a, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x94) 3.633808891s ago: executing program 0 (id=4436): r0 = socket(0x23, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), 0x4) listen(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x6, 0x1, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000080)={0x1, 0xbc, 0x38e2}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'netpci0\x00', {'dvmrp1\x00'}, 0x7}) r4 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) accept4$tipc(r0, 0x0, 0x0, 0x0) socket(0x23, 0x80805, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), 0x4) (async) listen(r0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket(0x6, 0x1, 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000080)={0x1, 0xbc, 0x38e2}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'netpci0\x00', {'dvmrp1\x00'}, 0x7}) (async) socket$inet6(0xa, 0x1, 0x84) (async) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async) accept4$tipc(r0, 0x0, 0x0, 0x0) (async) 3.458565255s ago: executing program 0 (id=4438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="00993b", 0x3}], 0x1}, 0xc0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1c}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8e}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x647}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x88}}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x2, 0x7f, 0x77, @dev={0xfe, 0x80, '\x00', 0x44}, @private1, 0x8000, 0x700, 0x9, 0xf}}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x5, r8, 0x0, r4}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x9, 0xc, 0x800, 0x5, 0x5, 0x0, 0x9, 0xb2, 0x6, 0x910d, 0x8, 0x7, 0x0, 0x0, 0x6, [0x2, 0x6]}}) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r10, 0x800, 0x7, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 2.524535519s ago: executing program 3 (id=4443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x7) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r9, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) 2.252305288s ago: executing program 3 (id=4447): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x4000000) 2.097110893s ago: executing program 3 (id=4449): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000140)='%\x00', 0x2, &(0x7f0000000180)={@align=0xd79e, {0x3, 0xe5, 0xfff, 0x3}}, 0xffffff9b, &(0x7f00000001c0), &(0x7f0000000200)=0x3}, {[0x4, 0x0, 0x6, 0x10001]}, 0x7d, 0x74, &(0x7f0000000240)=""/116}) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x1000, 0xb4, &(0x7f00000009c0)="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", &(0x7f0000000380)=""/180, 0x6, 0x0, 0xe4, 0x3e, &(0x7f0000000440)="7a5284cb9c0b4321c9712b46393a6c9dc803c1ce2ebd2d427225df8010cbd982829401d1e036b8277949b1230a885d369ac9db70d22f346d3568fbd282a38545a67afc26fb5c0d0e877c2bd6b4723240c2dcd760a3a82a10dafd125e3a934a933fb8df07f8daeae1bc167198f7965d4f021d9dc86eeaea3fd1c398550e1ac27dcb9c08ce47c04e0cdd5497dc69a91de108294f77a4b4720eeba1b949fcf8463ce35a465d4a724acb2dc5b5392ecb502bf5eea388dbe34488f2bec29b8e3002ec5dcbc831322aed2fdeffaadb74117e704d0e39521d2943d392c9ed1f3c0b9fa0861387e5", &(0x7f0000000540)="519074e0bb1375cf5168bdb1c3ba2aa0c38558c8588faa6dc87293cb1843acc6437b922eeefd8e023cecfabe97bf0da131ed3c233aff466219a966782e39", 0x1}, 0x50) 1.896076703s ago: executing program 1 (id=4450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bind$packet(r3, &(0x7f0000000340)={0x11, 0x3, r4, 0x1, 0x7, 0x6, @remote}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x2d, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986f6ec76c08c95a2710ec7bc27a9c5686e0d65b8b5989cfb2ae5058b5ed1870f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.826795972s ago: executing program 3 (id=4452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0x13, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2], 0x2fc}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000007b113000000000178502000002000000850000007600000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.319418992s ago: executing program 4 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r3, 0x5e, "ebf68fb6c3f2827fc2f16ef9a1dfcdb688eebefee7ed365ad165761750b83542e176cde815f923ef9c887e925fdbc6af967f2d682bcfc5afec09b2b0a0ff04a6c0022bbbdce97414b1ea19dd49762613e30190e3f5ac0cb1c61cec162ec9"}, &(0x7f0000000340)=0x66) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000380)={r4, 0x6}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e24, 0x10000, @mcast1, 0x101}}, 0x2, 0x81}, 0x90) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'ip6erspan0\x00', @random="3ae7c2e33895"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000540)=',-+\x00', 0x400000, &(0x7f0000000580)={@_ha_fsid={[0x80000000]}, {0x7, 0x4, 0x5, 0x6}}, 0x34, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x9}, 0x3, &(0x7f0000000840)=[{0x3, 0x548, &(0x7f0000000640)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000680)="6de89f47f70b422da171e923a91a1cec0f219e346a2c14e4bfeffd3c1f6a195083bc21a7944a772c2950c757b7c778cecb04443b7d4108d1e574e3ee21249765", 0x40, 0x18}, {0x2, 0x0, &(0x7f00000006c0)='nl80211\x00', &(0x7f0000000700)="641558b0ca59", 0x6, 0x8}, {0x1, 0x3744, &(0x7f0000000740)=')#{{#}\x00', &(0x7f0000000780)="3ed01d62f3b948314aa6eda8a33357b8ba12bcc3831b38b8c0bf1b3db770e26a629d41dd18defa41090dd116d5baf20e7e5c3ef9544587b0312800d38b02ac0186a6d6a2ce20703ef84bf7ea9a6d38bbadebea0c5087f8ead80bb9fa6eac4cb32466f1a211b071e81e228da25a59273920fb2a8cd2229f9d2130731841c00d0d1915b16b00c93106d1", 0x89, 0x2a}]}) write$tun(r6, &(0x7f0000000940)={@void, @val={0x3, 0x3, 0x3, 0x5, 0x7, 0x2}, @x25={0x2, 0x83, 0x23, "84bff26dc70850ca5ddfa5dd79e9f592920e68646b747c85893cd6218dc7e835ea9035b9a21e2fecc3a372c00c21fce959fbeaa49cc66f62d015b179375262104e49ed128ddb874363f889b10551e7d5418d1d497e9af3f85f2d0d3a80f9b2d7435956abb418a8a919"}}, 0x76) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000009c0)={r4, 0x1}, 0x8) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000a00)={0x3b, @local, 0x4e21, 0x1, 'wlc\x00', 0x8, 0xb44, 0xf}, 0x2c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000a40)={0x0, 0x3, 0xe}, 0x8) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000a80)=0x7fffffff) ioctl$OCFS2_IOC_GROUP_ADD(r6, 0x40186f02, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x4}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000b40)={0x0, @l2tp={0x2, 0x0, @loopback, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @host}, @can, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)='bridge_slave_1\x00', 0x7, 0x9, 0x8}) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r1, 0x910, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2d}, @void, @val={0xc, 0x99, {0x28000, 0x1}}}}}, 0x28}}, 0x220400d0) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000cc0)={0x0, 0x10001, @status={[0x8, 0x3, 0xea47, 0xfffffffffffffffc, 0x69, 0x1]}, [0x3, 0x7, 0x9, 0x9, 0x3, 0xfffffffffffffff8, 0x8, 0x3, 0x9, 0x0, 0x6, 0x400, 0x1, 0x7, 0xc, 0x7, 0x4, 0xfffffffffffffffa, 0x2, 0x8000, 0x7c877e2c, 0x2, 0xffffffffffffffff, 0x7, 0x2, 0x7, 0xdd, 0x1, 0x3, 0xffffffffffffffff, 0x8, 0x7fff, 0x1000, 0x2, 0x5, 0x1, 0x2, 0x59f7, 0x1, 0x3, 0x5cc, 0x1, 0xff, 0x1, 0x57f0, 0x100, 0x6, 0x9, 0x5, 0x2, 0x7fffffff, 0xd, 0x800, 0x800, 0x77, 0x7fff, 0x4, 0xfffffffffffffff6, 0x1, 0xfffffffffffffffc, 0x0, 0x6, 0x200, 0x3]}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001700)=0x6, 0x4) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000001780)=0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfb, {0x66, 0x0, 0x1, r8, 0x4, 0x1, 0x8, 0x2, 0x0, 0xf, 0x2c73}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x30000880) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001880), 0x8) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f00000018c0)=r8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x400c884) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001a00)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001a40)=0x28) 1.193312046s ago: executing program 4 (id=4455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000c11}, 0x40d1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="2b9b1c8bb302eb258cae462500000000000000001c0012800b00ab0062726964676500006898343eeae9e3b1d711150999b4006f986fc302ae4aed35bf8af2e0be"], 0x3c}}, 0x0) 877.658199ms ago: executing program 1 (id=4456): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000040)='/{\x00', 0x400000, &(0x7f0000000100)={@align=0x2, {0x2, 0x0, 0x1, 0x2}}, 0xb, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x52}, {[0x5, 0x9, 0x1, 0x7fff]}, 0x6, 0x35, &(0x7f0000000300)=""/53}) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x108, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) (async) recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r4, 0x0, 0x0) 655.397768ms ago: executing program 1 (id=4457): socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40), 0x0, 0x0, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x140}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) close(0x4) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/time_for_children\x00') syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r7, &(0x7f0000003c80)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="4cc16ebb4a3ed745155ac999598526e9f9cb2267ed65b9554323b1a6de328c4bbfdcd3f3cb4d89051899d6951c9bc19e2d6b1b01d48648bab060559c3ffb83e2f6160e75acda9a72ac92a94e89087fbe10d4c6de672f91aab321be057e512112eaebc99bb270e45309c394d7d361e340268233d5fd449c791f8c1ac6a6fe6ebc943bedea9972ab9103283d5a", 0x8c}, {&(0x7f00000017c0)="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", 0x511}], 0x2, &(0x7f0000000800)}}], 0x1, 0x50) 602.228873ms ago: executing program 4 (id=4458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) (async) 549.532689ms ago: executing program 3 (id=4459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0008000000000100000010000000040001800800070001000000920df9c5ffb02fdb42af0a1767ddbb750e5f366734159fd48f4522b7829e2e1a880087d0c6b041c5d43c8816840e99d3b7c17cd59476603bc5b2706471687a6d949d5a9422cc21b665be1e57c5960e534006186022cc8cfe0d763a0e3d4420b9809b8f2220595664620be49c1a72909f7bb8da88bb76b4ec494349acf38428076f4e2ded5604969bc7"], 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5], 0x30, 0x40400d1}}], 0x1, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x400000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$inet6(r0, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x78}}, 0x0) 412.296375ms ago: executing program 1 (id=4460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0x80087601, 0xfffffffffffffffe) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000180)={'veth0_to_bond\x00', 0x3, 0x4}) 333.260042ms ago: executing program 4 (id=4461): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 331.606552ms ago: executing program 1 (id=4462): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1e, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) (async) sendmmsg$sock(r2, &(0x7f0000000280)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}], 0x1, 0x8845) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 164.077732ms ago: executing program 3 (id=4463): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x2d9, 0xc, 0x3}) close(0x4) 163.789937ms ago: executing program 2 (id=4464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0xfffffffffffffe84}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0xfffffffffffffe84}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}}, 0x14) (async) 163.420464ms ago: executing program 1 (id=4465): socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = gettid() r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x4000000000000c, 0x1], 0x0, 0x9, 0x2, 0x0, r2}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) 140.087637ms ago: executing program 4 (id=4466): syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x3}}, @l2tp={0x2, 0x0, @remote, 0x4}, @xdp={0x2c, 0x8, r1, 0x36}, 0x3, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='syzkaller0\x00', 0x6, 0x100000001, 0x9}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000180)='team0\x00', 0xc0240, &(0x7f00000001c0)={@_ha_fsid={[0x900000]}, {0x1, 0x4, 0x8, 0x2}}, 0x1fb3022a, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}, {[0xfffffff8, 0x5, 0xfffffffb, 0xffff8a4e]}, 0x8001, 0xcb, &(0x7f0000000280)=""/203}) recvfrom$llc(r2, &(0x7f0000000400)=""/231, 0xe7, 0x0, &(0x7f0000000500)={0x1a, 0x110, 0x6, 0x7, 0x3, 0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x4fc, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x4e0, 0x8, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x31ca}}, @WGPEER_A_ALLOWEDIPS={0x2b0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1200}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6b827ac7, @mcast1, 0x100}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x21}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa0eeb7751812cc30bd63b9f7af545d5ed35d4d2fe8e5daeb0af3b028b2fc95c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70e48f03aed51fd3d56c0b849b0e0b2c15c91dd8d5284d46e0ad820595a4edde"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x24048080}, 0x8000) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x4fc, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x4e0, 0x8, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x31ca}}, @WGPEER_A_ALLOWEDIPS={0x2b0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1200}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6b827ac7, @mcast1, 0x100}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x21}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa0eeb7751812cc30bd63b9f7af545d5ed35d4d2fe8e5daeb0af3b028b2fc95c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70e48f03aed51fd3d56c0b849b0e0b2c15c91dd8d5284d46e0ad820595a4edde"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x24048080}, 0x8000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x250, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb92c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8e1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x409}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x513}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x250, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb92c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8e1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x409}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x513}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r2) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf9c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x80) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf9c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x88040, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x88040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001080)={'veth1_to_bond\x00', 0x10}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001080)={'veth1_to_bond\x00', 0x10}) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001100)={0x244, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}}}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc385}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x808a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff9565}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x803) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000001480)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000015c0)={r6, &(0x7f00000014c0)='\x00', 0x400000, &(0x7f0000001500)={@align=0x8b95, {0x9, 0x0, 0x4, 0x4}}, 0x9, &(0x7f0000001540), &(0x7f0000001580)=0x7}) bind$netlink(r8, &(0x7f0000001600)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x1b8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "da6a7ddce804dfb2a4d47e623497837cdb175959e554ccf5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8194d5649596448aca556248f9be71069f5de9512e7601bb"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e4e8266e84bfdf6534b85d704e96c74bd9c2a0911ffa4d2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13ff76754219faeff67af40d497e1b91cf193561b502e998"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x1b8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "da6a7ddce804dfb2a4d47e623497837cdb175959e554ccf5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8194d5649596448aca556248f9be71069f5de9512e7601bb"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e4e8266e84bfdf6534b85d704e96c74bd9c2a0911ffa4d2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13ff76754219faeff67af40d497e1b91cf193561b502e998"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000001d80)={&(0x7f0000001900)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001940)="6d3e263bfcfbb9ca09773a9f6afcae8d7bb7ba4d3a767572e686c95051", 0x1d}, {&(0x7f0000001980)="b50f868e5e2ae3fdae6bdab433efe00d8f4100934b42ee773b79624634c00e41b10d601d8dd1e99dc5e4a9da02fa2cf5d4099179e1fc22367cbd4e486a81d8956b6efc5acfe6106b6abee0dd7cc9eabd83459852515f4d956ba3c9f72794b3cc55969f5f8d6c3721d5406da89d895663d28c2f32ec59ae95db8b26d533c19aee6d5c17d3dad15d4901250f3067735c56eca88395e3a62b86f2a798507d6a6485844d654bf8270631067312f865476685f2605db8b00eecebbdc83f1faf904d5f43fb4a25e416136091f16107dc", 0xcd}, {&(0x7f0000001a80)="49363b94e0c12376dc662cbd3299c4096d7609a6f7fd55255469576557319d2c6cefa50f86f9f10c158f4f3f88d6706b2aa5c1cb4dde49971db1ede595efda4a36261b629daab68e8d54dd5f293946c2e3cf38f3e9261bced0b4b6", 0x5b}, {&(0x7f0000001b00)="3602236f43c8ad90cb0d6e5423266f98221d5e0b8ea4795872654f76ad44c25f8e221386ffcb740448c66d5456eb60461e06e783d83a65b409fe4a0dfdba1dac0ad65d3fb4a2800c793fad1dac16a2d291f21c05874aed0462e4f702959589d4687504cd724e65682f6a4f21531d4127daced30e40e2494d460bbe59eb8c3370557d48fcd5f1d17528c93c7a7817d2ed02995b40f8ea7124cacd3362c8f7578b2ce93e736f563aac76f63509a895868350710bc7cc66ace408383e33b4d7c72e9d7c9954d89a699e3973d504d5e05ad685a0a0d3713dfab660d3ef2a20d1a21d7add8809", 0xe4}, {&(0x7f0000001c00)="22c48fc7861601cb17acfe2941f11ca88fef291cf0717adb0136ec131f29d6d2124a2a937a6f01913602a44049aa3fc4665ad585a9f38d231e259dd41858c81beeca58eb19c7fe99d72d44329a145df55701f632480889da4154ad47e717237c532b4577ad53327a2ceebce3bd5d42736aa93e2456f8af11cfc766fcad", 0x7d}, {&(0x7f0000001c80)="0f3adfa1464b00176269d3e40028423476d39a2830ffcfe72ce55e146c61914297e3b2af87501320e73caa14e85b635d0897fe0aa92315a02851d5268a73e54420baa5595a38fc", 0x47}], 0x6, 0x0, 0x0, 0x20044010}, 0x40000) (async) sendmsg$tipc(r9, &(0x7f0000001d80)={&(0x7f0000001900)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001940)="6d3e263bfcfbb9ca09773a9f6afcae8d7bb7ba4d3a767572e686c95051", 0x1d}, {&(0x7f0000001980)="b50f868e5e2ae3fdae6bdab433efe00d8f4100934b42ee773b79624634c00e41b10d601d8dd1e99dc5e4a9da02fa2cf5d4099179e1fc22367cbd4e486a81d8956b6efc5acfe6106b6abee0dd7cc9eabd83459852515f4d956ba3c9f72794b3cc55969f5f8d6c3721d5406da89d895663d28c2f32ec59ae95db8b26d533c19aee6d5c17d3dad15d4901250f3067735c56eca88395e3a62b86f2a798507d6a6485844d654bf8270631067312f865476685f2605db8b00eecebbdc83f1faf904d5f43fb4a25e416136091f16107dc", 0xcd}, {&(0x7f0000001a80)="49363b94e0c12376dc662cbd3299c4096d7609a6f7fd55255469576557319d2c6cefa50f86f9f10c158f4f3f88d6706b2aa5c1cb4dde49971db1ede595efda4a36261b629daab68e8d54dd5f293946c2e3cf38f3e9261bced0b4b6", 0x5b}, {&(0x7f0000001b00)="3602236f43c8ad90cb0d6e5423266f98221d5e0b8ea4795872654f76ad44c25f8e221386ffcb740448c66d5456eb60461e06e783d83a65b409fe4a0dfdba1dac0ad65d3fb4a2800c793fad1dac16a2d291f21c05874aed0462e4f702959589d4687504cd724e65682f6a4f21531d4127daced30e40e2494d460bbe59eb8c3370557d48fcd5f1d17528c93c7a7817d2ed02995b40f8ea7124cacd3362c8f7578b2ce93e736f563aac76f63509a895868350710bc7cc66ace408383e33b4d7c72e9d7c9954d89a699e3973d504d5e05ad685a0a0d3713dfab660d3ef2a20d1a21d7add8809", 0xe4}, {&(0x7f0000001c00)="22c48fc7861601cb17acfe2941f11ca88fef291cf0717adb0136ec131f29d6d2124a2a937a6f01913602a44049aa3fc4665ad585a9f38d231e259dd41858c81beeca58eb19c7fe99d72d44329a145df55701f632480889da4154ad47e717237c532b4577ad53327a2ceebce3bd5d42736aa93e2456f8af11cfc766fcad", 0x7d}, {&(0x7f0000001c80)="0f3adfa1464b00176269d3e40028423476d39a2830ffcfe72ce55e146c61914297e3b2af87501320e73caa14e85b635d0897fe0aa92315a02851d5268a73e54420baa5595a38fc", 0x47}], 0x6, 0x0, 0x0, 0x20044010}, 0x40000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, 0x1406, 0x18244e77f82c9508, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000002100)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x1ac, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x32f220b4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff, @private1, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "052353e79889629a85a58a99de72125a233561c86bf44d6f20daca749a714ba5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x600000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2cbf75fc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3c3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x85}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4044884) connect$netlink(r9, &(0x7f0000002140)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000002180)={{0x1, @rand_addr=0x64010101, 0x4e20, 0x0, 'nq\x00', 0x6, 0x8, 0x50}, {@broadcast, 0x4e24, 0x4, 0x0, 0x6, 0x7}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000002180)={{0x1, @rand_addr=0x64010101, 0x4e20, 0x0, 'nq\x00', 0x6, 0x8, 0x50}, {@broadcast, 0x4e24, 0x4, 0x0, 0x6, 0x7}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000002200), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xac, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x1000) 0s ago: executing program 4 (id=4467): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x52, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0xb15, 0x70bd2a}, 0x14}}, 0x80) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.1.3003'. [ 344.711223][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 344.741066][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 344.752697][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 344.763188][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 344.828158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.850261][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.947817][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.969590][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.042387][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 345.050496][ C0] lec:lec_tx_timeout: lec0 [ 345.055216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 345.257500][ T1166] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 345.309134][T17094] tc_dump_action: action bad kind [ 345.330708][T17094] ipvlan2: entered allmulticast mode [ 345.358028][T17094] batadv_slave_1: entered allmulticast mode [ 345.667582][T17119] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 345.758739][T17119] bond10: entered promiscuous mode [ 345.820773][T17119] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.854061][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.864176][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.872379][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.876706][T17124] bond10: entered allmulticast mode [ 345.881690][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.897099][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.034243][T17119] bond10: (slave bridge10): making interface the new active one [ 346.053238][T17119] bridge10: entered promiscuous mode [ 346.069979][T17119] bridge10: entered allmulticast mode [ 346.083220][T17119] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 346.215428][T17129] lo speed is unknown, defaulting to 1000 [ 346.236698][ T5831] block nbd1: Receive control failed (result -32) [ 346.588682][T17129] chnl_net:caif_netlink_parms(): no params data found [ 346.700611][T17165] netlink: 'syz.2.3022': attribute type 5 has an invalid length. [ 346.708193][T17162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.758803][T17165] geneve2: entered promiscuous mode [ 346.764691][T17165] geneve2: entered allmulticast mode [ 346.836059][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 346.846248][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 346.870506][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.888019][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.898112][T17129] bridge_slave_0: entered allmulticast mode [ 346.907352][T17129] bridge_slave_0: entered promiscuous mode [ 346.916788][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 346.927692][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 346.946447][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.954277][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.961874][T17129] bridge_slave_1: entered allmulticast mode [ 346.974718][T17129] bridge_slave_1: entered promiscuous mode [ 347.004870][T17180] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 347.030000][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.054046][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.084701][T17180] team0: Port device bridge1 added [ 347.139680][T17182] netlink: 'syz.1.3028': attribute type 10 has an invalid length. [ 347.157420][T17182] team0: Device ªªªªª» failed to register rx_handler [ 347.188482][T17129] team0: Port device team_slave_0 added [ 347.204972][T17129] team0: Port device team_slave_1 added [ 347.272428][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.279443][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.349838][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.364066][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.371178][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.451051][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.667163][T17129] hsr_slave_0: entered promiscuous mode [ 347.678180][T17129] hsr_slave_1: entered promiscuous mode [ 347.717623][T17129] debugfs: 'hsr0' already exists in 'hsr' [ 347.725769][T17129] Cannot create hsr debugfs directory [ 347.980808][ T5831] Bluetooth: hci3: command tx timeout [ 348.074543][T17129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.176529][T17129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.245467][T17129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.320625][T17129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.385052][T17250] syzkaller1: entered promiscuous mode [ 348.390727][T17250] syzkaller1: entered allmulticast mode [ 348.830948][T17266] netlink: 'syz.3.3049': attribute type 1 has an invalid length. [ 349.009629][T17275] syzkaller0: entered promiscuous mode [ 349.015671][T17275] syzkaller0: entered allmulticast mode [ 349.133879][T17277] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.143142][T17277] __nla_validate_parse: 17 callbacks suppressed [ 349.143157][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'. [ 349.160167][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3054'. [ 350.052306][ T5831] Bluetooth: hci3: command tx timeout [ 350.072338][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 350.080384][ C0] lec:lec_tx_timeout: lec0 [ 350.085454][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 350.773147][T17221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.785808][T17129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.828773][T17129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.886560][T17129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.918981][T17129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.937528][T17281] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 350.964231][T17285] tap0: tun_chr_ioctl cmd 1074025676 [ 350.969704][T17285] tap0: owner set to 0 [ 350.975263][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3057'. [ 351.044869][T17281] bridge11: port 1(veth7) entered blocking state [ 351.051432][T17281] bridge11: port 1(veth7) entered disabled state [ 351.066180][T17281] veth7: entered allmulticast mode [ 351.085027][T17281] veth7: entered promiscuous mode [ 351.310573][T17308] netlink: 'syz.4.3062': attribute type 1 has an invalid length. [ 351.328027][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.350780][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 351.373416][T17308] 8021q: adding VLAN 0 to HW filter on device bond11 [ 351.382644][T17316] veth0_to_bond: left allmulticast mode [ 351.397758][T17316] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 351.448149][T17308] 8021q: adding VLAN 0 to HW filter on device bond12 [ 351.458401][T17308] bond11: (slave bond12): Enslaving as an active interface with a down link [ 351.496938][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.523576][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.530763][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.586973][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.594197][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.791447][T17338] tipc: Enabling of bearer rejected, media not registered [ 351.906439][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.967139][T17129] veth0_vlan: entered promiscuous mode [ 351.995538][T17129] veth1_vlan: entered promiscuous mode [ 352.030402][T17129] veth0_macvtap: entered promiscuous mode [ 352.044223][T17129] veth1_macvtap: entered promiscuous mode [ 352.073780][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.091905][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.125052][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.142536][ T5831] Bluetooth: hci3: command tx timeout [ 352.162875][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.190576][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.216255][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.233974][T17350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3074'. [ 352.368516][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.395532][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.427684][T17358] macvtap0: entered promiscuous mode [ 352.456737][T17358] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 352.465445][T17358] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3077'. [ 352.475869][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 352.494410][T17358] veth0_macvtap: left promiscuous mode [ 352.567664][T17358] macvtap0 (unregistering): left promiscuous mode [ 352.594488][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.612417][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.758133][T17372] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3081'. [ 352.837595][T17379] IPv6: sit1: Disabled Multicast RS [ 352.847247][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3081'. [ 352.858847][T17379] sit1: entered allmulticast mode [ 352.900667][T17372] tipc: Enabling of bearer rejected, failed to enable media [ 353.067011][T17389] netlink: 'syz.2.3085': attribute type 4 has an invalid length. [ 353.130395][T17389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3085'. [ 353.173242][T17389] .`: renamed from bond0 (while UP) [ 353.269977][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.291428][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.303967][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.328782][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.344575][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.498833][T17398] lo speed is unknown, defaulting to 1000 [ 353.656780][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.695605][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 353.922565][T17427] Bluetooth: MGMT ver 1.23 [ 353.949918][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.980998][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 354.155209][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.167228][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 354.212122][ T5834] Bluetooth: hci3: command tx timeout [ 354.332728][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.343162][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 354.399337][T17398] chnl_net:caif_netlink_parms(): no params data found [ 354.706563][T17480] syzkaller1: entered promiscuous mode [ 354.716016][T17480] syzkaller1: entered allmulticast mode [ 354.746546][T17480] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 354.760590][T17398] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.768314][T17398] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.780809][T17398] bridge_slave_0: entered allmulticast mode [ 354.790959][T17398] bridge_slave_0: entered promiscuous mode [ 354.835602][T17398] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.847884][T17398] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.860527][T17398] bridge_slave_1: entered allmulticast mode [ 354.869181][T17398] bridge_slave_1: entered promiscuous mode [ 354.904385][T17488] netlink: 'syz.2.3111': attribute type 1 has an invalid length. [ 354.973473][T17398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.050901][ T1166] tipc: Resetting bearer [ 355.092312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 355.100392][ C0] lec:lec_tx_timeout: lec0 [ 355.105448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 355.191813][ T1166] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 355.221301][T17501] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 355.222226][T17500] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 355.266929][ T1166] tipc: Disabling bearer [ 355.339768][ T1166] bond7 (unregistering): (slave geneve3): Releasing active interface [ 355.371459][ T1166] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 355.413290][ T5834] Bluetooth: hci0: command tx timeout [ 355.437864][ T1166] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 355.446603][ T1166] bridge1 (unregistering): left promiscuous mode [ 355.599076][ T1166] bond0 (unregistering): Released all slaves [ 355.610479][ T1166] bond1 (unregistering): Released all slaves [ 355.625571][ T1166] bond2 (unregistering): Released all slaves [ 355.640999][ T1166] bond3 (unregistering): Released all slaves [ 355.662290][ T1166] bond4 (unregistering): Released all slaves [ 355.687304][ T1166] bond5 (unregistering): Released all slaves [ 355.708056][ T1166] bond6 (unregistering): (slave batadv1): Releasing active interface [ 355.716502][ T1166] batadv1: left promiscuous mode [ 355.721751][ T1166] batadv1: left allmulticast mode [ 355.728927][ T1166] bond6 (unregistering): Released all slaves [ 355.749996][ T1166] bond7 (unregistering): Released all slaves [ 355.765342][ T1166] bond8 (unregistering): Released all slaves [ 355.787540][ T1166] bond9 (unregistering): Released all slaves [ 355.810854][T17398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.844904][T17398] team0: Port device team_slave_0 added [ 355.854709][T17398] team0: Port device team_slave_1 added [ 355.913817][T17501] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 356.106861][ T1166] tipc: Left network mode [ 356.124519][T17511] __nla_validate_parse: 5 callbacks suppressed [ 356.124540][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 356.150570][T17398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.168678][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.181254][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 356.201505][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3118'. [ 356.217554][T17398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.233580][T17398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.240555][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.282302][T17398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.339931][T17508] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 356.485051][T17398] hsr_slave_0: entered promiscuous mode [ 356.491843][T17398] hsr_slave_1: entered promiscuous mode [ 356.533638][T17398] debugfs: 'hsr0' already exists in 'hsr' [ 356.549656][T17398] Cannot create hsr debugfs directory [ 357.071299][ T1166] hsr_slave_0: left promiscuous mode [ 357.104908][ T1166] hsr_slave_1: left promiscuous mode [ 357.138852][ T1166] veth1_vlan: left allmulticast mode [ 357.161925][ T1166] veth1_macvtap: left promiscuous mode [ 357.184916][ T1166] veth0_macvtap: left promiscuous mode [ 357.205153][ T1166] veth1_vlan: left promiscuous mode [ 357.219416][ T1166] veth0_vlan: left promiscuous mode [ 357.496509][ T5834] Bluetooth: hci0: command tx timeout [ 357.574848][T17561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3129'. [ 358.116416][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3131'. [ 358.276498][T17576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3131'. [ 358.339446][T17583] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3133'. [ 358.547202][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3138'. [ 358.636066][T17602] syzkaller1: entered promiscuous mode [ 358.652085][T17602] syzkaller1: entered allmulticast mode [ 358.772812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.788805][ T7290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.812558][T17609] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 358.820360][T17609] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 359.058753][T17617] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.110538][ T1166] IPVS: stop unused estimator thread 0... [ 359.173761][ T7290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.327979][T17630] netlink: 'syz.4.3146': attribute type 3 has an invalid length. [ 359.345816][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3145'. [ 359.447474][T17633] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 359.572221][ T5834] Bluetooth: hci0: command tx timeout [ 359.619233][T17398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.676257][T17398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.749169][T17398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.801347][T17398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.823859][T17656] openvswitch: netlink: IP tunnel dst address not specified [ 359.875449][T17656] bond0: left promiscuous mode [ 359.880291][T17656] bond_slave_0: left promiscuous mode [ 359.893159][T17656] bond_slave_1: left promiscuous mode [ 359.898797][T17656] bond0: left allmulticast mode [ 359.922204][T17656] bond_slave_0: left allmulticast mode [ 359.954404][T17656] bond_slave_1: left allmulticast mode [ 359.979017][T17656] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 359.993270][T17656] bond3: left promiscuous mode [ 359.998641][T17656] bond3: left allmulticast mode [ 360.004954][T17656] geneve4: left promiscuous mode [ 360.010049][T17656] geneve4: left allmulticast mode [ 360.015458][T17656] bridge3: left promiscuous mode [ 360.020476][T17656] bridge3: left allmulticast mode [ 360.030715][T17656] bond7: left promiscuous mode [ 360.035985][T17656] bond7: left allmulticast mode [ 360.052828][T17656] gretap4: left promiscuous mode [ 360.057904][T17656] gretap4: left allmulticast mode [ 360.066539][T17656] ip6gre1: left promiscuous mode [ 360.071539][T17656] ip6gre1: left allmulticast mode [ 360.114465][T17660] bond1: option xmit_hash_policy: invalid value (64) [ 360.125063][T17660] bond1 (unregistering): Released all slaves [ 360.212684][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.487913][T17398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.539048][T17398] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.593982][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.601256][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.658283][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.665503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.931982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 360.940105][ C0] lec:lec_tx_timeout: lec0 [ 360.944811][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.166191][T17725] __nla_validate_parse: 6 callbacks suppressed [ 361.166212][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 361.255043][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.358369][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 361.375868][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 361.426976][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 361.508227][T17398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.566652][T17746] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 361.638862][T17398] veth0_vlan: entered promiscuous mode [ 361.654344][T17398] veth1_vlan: entered promiscuous mode [ 361.663400][ T5834] Bluetooth: hci0: command tx timeout [ 361.695569][T17398] veth0_macvtap: entered promiscuous mode [ 361.709245][T17398] veth1_macvtap: entered promiscuous mode [ 361.788567][T17398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.813784][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.828390][T17398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.851155][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.881079][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.911592][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.935765][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.293100][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.504125][T17795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3176'. [ 363.332798][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.372435][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.434435][T17738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.593940][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.601809][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.660514][T17822] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3182'. [ 364.680935][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.690324][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.729985][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 364.845203][T17832] syzkaller0: entered promiscuous mode [ 364.850959][T17832] syzkaller0: entered allmulticast mode [ 364.869298][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.413360][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.544723][T17852] team0: No ports can be present during mode change [ 365.620238][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.631220][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.645253][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.656395][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.672077][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.850925][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 365.955190][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3191'. [ 365.964539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 365.964568][ C0] lec:lec_tx_timeout: lec0 [ 365.973343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 366.137236][T17860] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 366.285426][T17869] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3193'. [ 366.316628][T17871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.335460][T17867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3192'. [ 366.381862][T17869] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 366.458101][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.472624][T17869] bridge_slave_1: left allmulticast mode [ 366.494367][T17869] bridge_slave_1: left promiscuous mode [ 366.500206][T17869] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.529529][T17869] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 366.726991][T17879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.841278][T17854] chnl_net:caif_netlink_parms(): no params data found [ 366.984762][T17854] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.993632][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.001567][T17854] bridge_slave_0: entered allmulticast mode [ 367.011492][T17854] bridge_slave_0: entered promiscuous mode [ 367.020816][T17854] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.028355][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.036062][T17854] bridge_slave_1: entered allmulticast mode [ 367.044677][T17854] bridge_slave_1: entered promiscuous mode [ 367.081768][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 367.097339][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.107534][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.121308][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.134310][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 367.143974][T17908] netlink: 'syz.1.3203': attribute type 15 has an invalid length. [ 367.178849][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 367.200882][ T572] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 367.205690][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 367.224811][T17908] netlink: 'syz.1.3203': attribute type 15 has an invalid length. [ 367.231662][ T572] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 367.244117][T17854] team0: Port device team_slave_0 added [ 367.249886][ T572] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 367.260653][ T572] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 367.283427][T17854] team0: Port device team_slave_1 added [ 367.331264][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.352724][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.437722][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.464668][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.473877][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.501405][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.510031][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.525187][T17922] netlink: 'syz.3.3208': attribute type 2 has an invalid length. [ 367.533172][T17922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3208'. [ 367.714935][T17854] hsr_slave_0: entered promiscuous mode [ 367.721895][T17854] hsr_slave_1: entered promiscuous mode [ 367.732644][ T5831] Bluetooth: hci2: command tx timeout [ 367.738236][T17854] debugfs: 'hsr0' already exists in 'hsr' [ 367.744856][T17854] Cannot create hsr debugfs directory [ 367.892795][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.959734][T17950] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3217'. [ 368.049364][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 368.221226][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.235564][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.246763][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.259762][T17854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 368.282900][T17961] bridge0: port 3(syz_tun) entered blocking state [ 368.295068][T17961] bridge0: port 3(syz_tun) entered disabled state [ 368.301921][T17961] syz_tun: entered allmulticast mode [ 368.317144][T17961] syz_tun: entered promiscuous mode [ 368.323450][T17961] bridge0: port 3(syz_tun) entered blocking state [ 368.330275][T17961] bridge0: port 3(syz_tun) entered forwarding state [ 368.353688][T17968] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3222'. [ 368.449428][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.472581][T17966] xt_NFQUEUE: number of total queues is 0 [ 368.476961][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.501764][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.516901][T17854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 368.534519][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.654646][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.673518][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.703527][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.733071][T17854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 368.856423][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.869437][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.879976][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.925610][T17854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 369.290854][T17854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.313951][T18015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.321250][T18015] IPv6: NLM_F_CREATE should be set when creating new route [ 369.334605][T17854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.347176][T17854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.357628][T18014] xt_hashlimit: size too large, truncated to 1048576 [ 369.374523][T17854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.572820][ T43] net_ratelimit: 2 callbacks suppressed [ 369.572848][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.609634][T17854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.719183][T17854] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.797367][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.804612][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.812502][ T5831] Bluetooth: hci2: command tx timeout [ 369.866001][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.873244][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.055712][T17854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.124460][T18055] netlink: 'syz.0.3246': attribute type 7 has an invalid length. [ 370.298441][T18066] ipt_REJECT: ECHOREPLY no longer supported. [ 370.567362][T17854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.971341][T17854] veth0_vlan: entered promiscuous mode [ 370.985896][T17854] veth1_vlan: entered promiscuous mode [ 370.992048][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 371.000113][ C0] lec:lec_tx_timeout: lec0 [ 371.005580][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.056678][T17854] veth0_macvtap: entered promiscuous mode [ 371.085266][T17854] veth1_macvtap: entered promiscuous mode [ 371.187558][T18091] xfrm1: entered promiscuous mode [ 371.195367][T18091] xfrm1: entered allmulticast mode [ 371.208378][T17854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.234121][T17854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.265575][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.312505][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.321273][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.367705][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.476184][T18100] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 371.573641][ T7269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.589849][T18105] pimreg: entered allmulticast mode [ 371.605021][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.629366][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.655318][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.746826][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.765181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.845607][T18113] __nla_validate_parse: 10 callbacks suppressed [ 371.845628][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3264'. [ 371.895776][ T5831] Bluetooth: hci2: command tx timeout [ 371.915630][T18115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3263'. [ 372.150685][T18121] syzkaller1: entered promiscuous mode [ 372.156581][T18121] syzkaller1: entered allmulticast mode [ 372.337751][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 372.380173][T18135] syz_tun: left allmulticast mode [ 372.390197][T18135] syz_tun: left promiscuous mode [ 372.431135][T18135] bridge0: port 3(syz_tun) entered disabled state [ 372.503601][T18135] bridge_slave_1: left allmulticast mode [ 372.542754][T18135] bridge_slave_1: left promiscuous mode [ 372.553052][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.561031][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.593167][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.602323][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.613753][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.621501][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.652338][T18135] bridge_slave_0: left allmulticast mode [ 372.675448][T18135] bridge_slave_0: left promiscuous mode [ 372.694227][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.706665][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.717356][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 372.880158][T18144] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 372.892382][T18144] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 373.237641][T18162] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 373.250067][T18162] bond1 (unregistering): Released all slaves [ 373.299024][T18165] vlan2: entered allmulticast mode [ 373.533013][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.541204][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3278'. [ 373.732861][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.798675][T18140] chnl_net:caif_netlink_parms(): no params data found [ 373.846710][T18178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3280'. [ 373.983007][ T5834] Bluetooth: hci2: command tx timeout [ 374.083120][T18140] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.102672][T18140] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.121463][T18140] bridge_slave_0: entered allmulticast mode [ 374.153029][ T7269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.164462][T18140] bridge_slave_0: entered promiscuous mode [ 374.207524][T18140] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.216858][T18140] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.224691][T18140] bridge_slave_1: entered allmulticast mode [ 374.234694][T18140] bridge_slave_1: entered promiscuous mode [ 374.353927][T18140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.378086][T18140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.467016][T18140] team0: Port device team_slave_0 added [ 374.498947][T18140] team0: Port device team_slave_1 added [ 374.554369][T18204] vlan0: mtu greater than device maximum [ 374.614891][ T7270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.627215][T18140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.643209][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.681378][T18140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.703741][ T5834] Bluetooth: hci1: command tx timeout [ 374.721717][T18140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.729416][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.757433][T18140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.774213][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.847648][T18140] hsr_slave_0: entered promiscuous mode [ 374.861805][T18140] hsr_slave_1: entered promiscuous mode [ 374.880093][T18140] debugfs: 'hsr0' already exists in 'hsr' [ 374.898789][T18140] Cannot create hsr debugfs directory [ 374.919609][T18215] tipc: Failed to obtain node identity [ 374.925302][T18215] tipc: Enabling of bearer rejected, failed to enable media [ 375.147537][T18227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3296'. [ 375.160501][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 375.379601][T18140] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 375.508956][T18140] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 375.589898][T18140] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 375.677474][T18140] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 375.697847][T18248] syzkaller0: entered promiscuous mode [ 375.707670][T18248] syzkaller0: entered allmulticast mode [ 375.816046][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.965825][T18255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 376.012350][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.020451][ C0] lec:lec_tx_timeout: lec0 [ 376.027763][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.053494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.137622][T18258] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.155973][T18258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.206729][T18257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3305'. [ 376.284568][T18140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.316782][T18140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.377253][T18270] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 376.433001][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 376.478597][T18270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.501388][T18140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.519320][T18278] netlink: 'syz.2.3309': attribute type 11 has an invalid length. [ 376.573228][T18274] bond0: entered promiscuous mode [ 376.579070][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.592608][T18140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.779845][T18274] macvlan2: entered promiscuous mode [ 376.786700][ T5834] Bluetooth: hci1: command tx timeout [ 376.804801][T18274] macvlan2: entered allmulticast mode [ 376.831560][T18274] bond0: (slave macvlan2): Opening slave failed [ 376.852505][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.884355][T18297] __nla_validate_parse: 2 callbacks suppressed [ 376.884376][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 377.024431][T18299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3314'. [ 377.136697][T18140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.166205][T18301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.178165][T18308] openvswitch: netlink: IP tunnel dst address not specified [ 377.210069][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3314'. [ 377.240391][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'. [ 377.251462][T18140] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.274071][T18301] netlink: 'syz.0.3315': attribute type 33 has an invalid length. [ 377.299935][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.307176][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.383569][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.390749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.518849][T18140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.652778][ T7268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.746165][T18326] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3322'. [ 377.797180][T18327] netlink: 'syz.3.3322': attribute type 83 has an invalid length. [ 377.859827][T18332] xt_hashlimit: size too large, truncated to 1048576 [ 377.893444][ T7290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.145015][T18140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.210060][T18341] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 378.246397][T18341] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 378.304377][T18140] veth0_vlan: entered promiscuous mode [ 378.338185][T18140] veth1_vlan: entered promiscuous mode [ 378.397376][T18140] veth0_macvtap: entered promiscuous mode [ 378.437316][T18140] veth1_macvtap: entered promiscuous mode [ 378.575332][T18140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.617432][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.645243][T18140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.687381][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.709452][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.736063][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.775446][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.853051][ T5834] Bluetooth: hci1: command tx timeout [ 378.984833][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.022496][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.093244][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 379.104786][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 379.119832][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.149917][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.162266][T18379] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 379.171778][T18379] netlink: 'syz.3.3336': attribute type 2 has an invalid length. [ 379.223080][T18379] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 379.242498][T18379] netlink: 'syz.3.3336': attribute type 3 has an invalid length. [ 379.282523][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 379.475002][T18390] syzkaller0: entered promiscuous mode [ 379.480526][T18390] syzkaller0: entered allmulticast mode [ 379.518149][T18393] syzkaller0: entered promiscuous mode [ 379.524364][T18393] syzkaller0: entered allmulticast mode [ 379.560071][T18395] netlink: 'syz.2.3341': attribute type 33 has an invalid length. [ 379.654373][T18395] Cannot find map_set index 65533 as target [ 379.670979][T18393] block nbd3: NBD_DISCONNECT [ 379.824433][T18408] netlink: 'syz.4.3345': attribute type 11 has an invalid length. [ 379.833031][T18408] netlink: 'syz.4.3345': attribute type 11 has an invalid length. [ 379.840970][T18408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3345'. [ 379.972813][ T7287] net_ratelimit: 14 callbacks suppressed [ 379.972833][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.118667][T18420] pimreg3: entered allmulticast mode [ 380.335409][T18427] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3351'. [ 380.573490][T18433] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 380.604290][T18433] syzkaller1: linktype set to 823 [ 380.693870][ T7268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.932945][ T5834] Bluetooth: hci1: command tx timeout [ 381.013524][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.042138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.050217][ C0] lec:lec_tx_timeout: lec0 [ 381.055157][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.406000][T18448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.816411][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.891039][T18470] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 381.903385][T18470] __nla_validate_parse: 3 callbacks suppressed [ 381.903406][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 381.944603][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 382.056198][ T7291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.287336][ T7291] IPVS: starting estimator thread 0... [ 382.294073][T18481] IPVS: ip_vs_add_dest(): server weight less than zero [ 382.305042][T18483] IPVS: ip_vs_add_dest(): server weight less than zero [ 382.382429][T18482] IPVS: using max 29 ests per chain, 69600 per kthread [ 382.506445][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 382.652763][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'. [ 382.676290][T18504] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3375'. [ 382.750395][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 382.836809][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.844574][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.925469][T18520] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 382.957314][T18520] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3380'. [ 382.957556][T18521] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3380'. [ 382.987876][T18520] openvswitch: netlink: Flow key attr not present in new flow. [ 382.989704][T18504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.009197][T18504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.025282][T18521] openvswitch: netlink: Flow key attr not present in new flow. [ 383.179967][T18504] geneve2: left promiscuous mode [ 383.186028][T18504] geneve2: left allmulticast mode [ 383.197611][T18504] bond0: left promiscuous mode [ 383.206353][T18524] ieee802154 phy0 wpan0: encryption failed: -90 [ 383.249247][T18512] geneve2: entered allmulticast mode [ 383.316111][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.352276][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 383.381765][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.401398][T18530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.411234][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 383.442153][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.470063][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 383.500031][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.563696][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 383.596804][T18536] netlink: 'syz.1.3386': attribute type 4 has an invalid length. [ 383.614252][T18539] netlink: 'syz.0.3385': attribute type 20 has an invalid length. [ 383.642676][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 383.682270][T18542] sock: sock_set_timeout: `syz.4.3388' (pid 18542) tries to set negative timeout [ 383.716269][T18542] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3388'. [ 383.758278][T18539] netlink: 'syz.0.3385': attribute type 20 has an invalid length. [ 383.766702][ T1166] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.776841][ T1166] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.789804][T18545] xt_ecn: cannot match TCP bits for non-tcp packets [ 383.806272][ T1166] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.828474][ T1166] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.838491][T18545] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.706400][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051730000: rx timeout, send abort [ 385.206482][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a576c00: rx timeout, send abort [ 385.215883][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051730000: abort rx timeout. Force session deactivation [ 385.714804][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a576c00: abort rx timeout. Force session deactivation [ 385.797452][T18664] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.851713][T18664] bond1: (slave lo): Enslaving as an active interface with an up link [ 385.928386][T18664] net_ratelimit: 2 callbacks suppressed [ 385.928405][T18664] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 386.062006][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.070060][ C0] lec:lec_tx_timeout: lec0 [ 386.074989][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.283119][T18689] Can't find ip_set type hash:ip,port [ 386.636849][T18717] netlink: 'syz.4.3434': attribute type 11 has an invalid length. [ 386.817901][T18726] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 387.035621][T18735] netlink: 'syz.4.3442': attribute type 2 has an invalid length. [ 387.402477][T18750] netlink: 'syz.3.3447': attribute type 21 has an invalid length. [ 387.410612][T18750] __nla_validate_parse: 8 callbacks suppressed [ 387.410628][T18750] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3447'. [ 387.635284][T18757] bond2 (unregistering): Released all slaves [ 387.680894][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 387.761028][T18766] xt_hashlimit: overflow, try lower: 3/0 [ 387.788714][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 387.823143][T18771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.983303][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 388.249404][T18771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.310173][T18771] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 388.345727][T18771] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 388.604966][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3457'. [ 388.695580][T18790] openvswitch: netlink: Flow key attr not present in new flow. [ 388.847946][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3464'. [ 388.978249][T18815] netlink: 'syz.1.3466': attribute type 28 has an invalid length. [ 388.997671][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 389.044707][T18815] tunl0: entered allmulticast mode [ 389.452577][T18841] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 389.465158][T18841] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 389.508294][T18841] gretap1: entered promiscuous mode [ 389.524319][T18841] gretap1: entered allmulticast mode [ 389.631868][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'. [ 389.641871][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'. [ 389.823220][T18869] netlink: 'syz.0.3481': attribute type 5 has an invalid length. [ 390.706734][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3484'. [ 390.760743][T18893] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 391.082440][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 391.090576][ C0] lec:lec_tx_timeout: lec0 [ 391.095366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.784762][T18863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.016802][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3487'. [ 393.066866][T18914] syzkaller0: entered promiscuous mode [ 393.082821][T18914] syzkaller0: entered allmulticast mode [ 393.687722][T18939] vlan2: entered promiscuous mode [ 393.693589][T18939] bridge0: entered promiscuous mode [ 394.019182][T18964] netlink: 'syz.4.3504': attribute type 3 has an invalid length. [ 394.048826][T18964] netlink: 'syz.4.3504': attribute type 3 has an invalid length. [ 394.115023][T18964] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 394.190385][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 394.214166][T18974] bridge_slave_1: left allmulticast mode [ 394.238913][T18974] bridge_slave_1: left promiscuous mode [ 394.256204][T18974] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.307677][T18974] bridge_slave_0: left allmulticast mode [ 394.324123][T18974] bridge_slave_0: left promiscuous mode [ 394.327336][T18981] x_tables: duplicate underflow at hook 1 [ 394.345599][T18974] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.430663][T18975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3508'. [ 394.665928][T18993] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 394.864208][T19010] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 394.941794][T19015] netlink: 'syz.4.3519': attribute type 10 has an invalid length. [ 394.950139][T19015] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3519'. [ 395.206304][T19032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'. [ 395.217719][T19032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'. [ 395.236082][T19032] ip6gretap0: entered promiscuous mode [ 395.243748][T19032] syz_tun: entered promiscuous mode [ 395.249961][T19032] debugfs: 'hsr1' already exists in 'hsr' [ 395.258209][T19032] Cannot create hsr debugfs directory [ 395.375787][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 395.387722][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'. [ 395.868757][T19067] syzkaller0: entered promiscuous mode [ 395.874964][T19067] syzkaller0: entered allmulticast mode [ 395.951194][T19073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.102094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 396.110219][ C0] lec:lec_tx_timeout: lec0 [ 396.114933][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 398.364761][T19041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.493462][T19075] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 398.502799][T19075] netlink: 'syz.0.3538': attribute type 3 has an invalid length. [ 398.510569][T19075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3538'. [ 398.608947][T19083] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3542'. [ 398.627722][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'. [ 399.113165][T19119] netlink: 'syz.4.3548': attribute type 4 has an invalid length. [ 399.139515][T19116] netlink: 'syz.4.3548': attribute type 4 has an invalid length. [ 399.174583][T19121] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3547'. [ 399.812943][T19103] syz.2.3547 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 399.825474][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.2.3547 Not tainted syzkaller #0 PREEMPT(full) [ 399.825504][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.825522][T19103] Call Trace: [ 399.825531][T19103] [ 399.825539][T19103] dump_stack_lvl+0xe8/0x150 [ 399.825575][T19103] dump_header+0xd3/0x4c0 [ 399.825605][T19103] oom_kill_process+0x3ab/0x970 [ 399.825634][T19103] out_of_memory+0x106c/0x1410 [ 399.825655][T19103] ? percpu_ref_put+0x19/0x180 [ 399.825692][T19103] ? __pfx___mutex_lock+0x10/0x10 [ 399.825724][T19103] ? __pfx_out_of_memory+0x10/0x10 [ 399.825744][T19103] ? do_raw_spin_unlock+0xf5/0x210 [ 399.825780][T19103] try_charge_memcg+0xc53/0x1560 [ 399.825810][T19103] ? __lock_acquire+0x6b5/0x2cf0 [ 399.825852][T19103] ? __pfx_try_charge_memcg+0x10/0x10 [ 399.825874][T19103] ? xa_load+0x60/0x210 [ 399.825907][T19103] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 399.825938][T19103] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 399.825968][T19103] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 399.825998][T19103] __swap_cache_prepare_and_add+0x52a/0x700 [ 399.826053][T19103] swap_cache_alloc_folio+0xf1/0x240 [ 399.826090][T19103] swap_cluster_readahead+0x369/0x690 [ 399.826132][T19103] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 399.826181][T19103] ? get_vma_policy+0x27b/0x3c0 [ 399.826212][T19103] swapin_readahead+0x196/0xc50 [ 399.826260][T19103] ? __pfx_swapin_readahead+0x10/0x10 [ 399.826296][T19103] ? swap_table_get+0x1e/0x260 [ 399.826326][T19103] ? swap_table_get+0x1e/0x260 [ 399.826359][T19103] ? swap_table_get+0x1e/0x260 [ 399.826391][T19103] ? swap_table_get+0x216/0x260 [ 399.826424][T19103] ? swap_cache_get_folio+0x513/0x520 [ 399.826463][T19103] do_swap_page+0x56f/0x5a20 [ 399.826519][T19103] ? do_swap_page+0x127/0x5a20 [ 399.826549][T19103] ? __pfx_do_swap_page+0x10/0x10 [ 399.826577][T19103] ? __pte_offset_map+0x1ae/0x240 [ 399.826615][T19103] ? pte_offset_map_rw_nolock+0xea/0x160 [ 399.826653][T19103] handle_mm_fault+0x12d2/0x3310 [ 399.826709][T19103] ? handle_mm_fault+0xee/0x3310 [ 399.826751][T19103] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.826783][T19103] ? lock_vma_under_rcu+0x45a/0x500 [ 399.826836][T19103] do_user_addr_fault+0xa73/0x1340 [ 399.826873][T19103] ? rcu_is_watching+0x15/0xb0 [ 399.826905][T19103] ? trace_page_fault_user+0x84/0x210 [ 399.826937][T19103] exc_page_fault+0x6a/0xc0 [ 399.826972][T19103] asm_exc_page_fault+0x26/0x30 [ 399.827002][T19103] RIP: 0033:0x7fda705578c3 [ 399.827024][T19103] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 399.827043][T19103] RSP: 002b:00007ffce3c28060 EFLAGS: 00010246 [ 399.827064][T19103] RAX: 0000000000000000 RBX: 000055559167f500 RCX: 0000000000000000 [ 399.827078][T19103] RDX: 00007ffce3c280a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.827092][T19103] RBP: 00007fda70817da0 R08: 0000000000000000 R09: 0000000000000000 [ 399.827106][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000061971 [ 399.827119][T19103] R13: 00007fda7081627c R14: 0000000000061758 R15: 00007fda70816270 [ 399.827155][T19103] [ 399.827273][T19103] memory: usage 307200kB, limit 307200kB, failcnt 562 [ 400.165650][T19103] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 400.175029][T19103] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 400.191094][T19103] Memory cgroup stats for /syz2: [ 400.191383][T19103] cache 0 [ 400.206815][T19103] rss 0 [ 400.215323][T19103] rss_huge 0 [ 400.221978][T19103] shmem 0 [ 400.228320][T19103] mapped_file 0 [ 400.235803][T19103] dirty 0 [ 400.242894][T19103] writeback 0 [ 400.246544][T19103] workingset_refault_anon 6 [ 400.251125][T19103] workingset_refault_file 1 [ 400.276125][T19103] swap 217088 [ 400.279473][T19103] swapcached 237568 [ 400.283476][T19103] pgpgin 49557 [ 400.286971][T19103] pgpgout 49552 [ 400.290465][T19103] pgfault 122047 [ 400.310832][T19103] pgmajfault 4 [ 400.316724][T19103] inactive_anon 8192 [ 400.320652][T19103] active_anon 12288 [ 400.325816][T19103] inactive_file 0 [ 400.329931][T19103] active_file 0 [ 400.334796][T19103] unevictable 0 [ 400.338379][T19103] hierarchical_memory_limit 314572800 [ 400.347871][T19103] hierarchical_memsw_limit 9223372036854771712 [ 400.354718][T19103] total_cache 0 [ 400.358874][T19103] total_rss 0 [ 400.363120][T19103] total_rss_huge 0 [ 400.367000][T19103] total_shmem 0 [ 400.370557][T19103] total_mapped_file 0 [ 400.392486][T19103] total_dirty 0 [ 400.396033][T19103] total_writeback 0 [ 400.399877][T19103] total_workingset_refault_anon 6 [ 400.423703][T19103] total_workingset_refault_file 1 [ 400.433634][T19103] total_swap 217088 [ 400.437500][T19103] total_swapcached 237568 [ 400.441851][T19103] total_pgpgin 49557 [ 400.451227][T19103] total_pgpgout 49552 [ 400.456489][T19103] total_pgfault 122047 [ 400.460612][T19103] total_pgmajfault 4 [ 400.464992][T19103] total_inactive_anon 8192 [ 400.469496][T19103] total_active_anon 12288 [ 400.521321][T19103] total_inactive_file 0 [ 400.525972][T19103] total_active_file 0 [ 400.529997][T19103] total_unevictable 0 [ 400.545827][T19103] anon_cost 0 [ 400.552177][T19103] file_cost 0 [ 400.558713][T19103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3547,pid=19103,uid=0 [ 400.576647][T19135] syzkaller1: entered promiscuous mode [ 400.582357][T19135] syzkaller1: entered allmulticast mode [ 400.593750][T19103] Memory cgroup out of memory: Killed process 19103 (syz.2.3547) total-vm:106656kB, anon-rss:1240kB, file-rss:27224kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 401.767181][T19092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.908440][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'. [ 402.149531][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 402.172873][T19163] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 402.220162][T19166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.292031][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6180 ms [ 402.300129][ C0] lec:lec_tx_timeout: lec0 [ 402.306028][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.342360][T19173] gre1: entered promiscuous mode [ 402.347393][T19173] gre1: entered allmulticast mode [ 402.400888][T19175] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3569'. [ 402.641290][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 402.679645][T19188] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 402.691667][T19188] bond1: entered promiscuous mode [ 402.703925][T19188] bond1: entered allmulticast mode [ 402.710342][T19188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.740017][T19198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3574'. [ 402.987585][T19213] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 403.087197][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3582'. [ 403.434988][T19249] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 403.702371][T19272] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 403.752836][T19272] __nla_validate_parse: 1 callbacks suppressed [ 403.752856][T19272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3595'. [ 403.783941][T19277] netlink: 'syz.2.3595': attribute type 2 has an invalid length. [ 403.791795][T19277] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3595'. [ 403.843150][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 403.866149][ T7261] IPVS: starting estimator thread 0... [ 403.881830][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 403.893107][T19279] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 403.981353][T19282] syzkaller0: entered promiscuous mode [ 403.982354][T19280] IPVS: using max 27 ests per chain, 64800 per kthread [ 403.992345][T19282] syzkaller0: entered allmulticast mode [ 404.104346][T19290] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3600'. [ 404.191362][T19295] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3602'. [ 404.220955][T19295] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3602'. [ 404.575326][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3609'. [ 404.724626][T19328] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 404.797969][T19319] pim6reg: entered allmulticast mode [ 404.804740][T19324] pim6reg: left allmulticast mode [ 404.845009][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 405.291073][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 405.296247][T19358] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.493220][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout [ 406.046781][T19393] xt_HMARK: proto mask must be zero with L3 mode [ 406.087000][T19395] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.244085][T19402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.044684][T19457] tls_set_device_offload_rx: netdev not found [ 407.116740][T19462] tipc: Started in network mode [ 407.141907][T19462] tipc: Node identity 7f000001, cluster identity 4711 [ 407.171733][T19462] tipc: Enabling of bearer rejected, failed to enable media [ 407.389669][T19481] x_tables: unsorted underflow at hook 4 [ 408.051997][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 408.060119][ C0] lec:lec_tx_timeout: lec0 [ 408.072318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.846830][T19539] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.925056][T19543] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 409.613571][T19538] lec:lec_atm_close: lec0: Shut down! [ 409.856240][T19588] __nla_validate_parse: 10 callbacks suppressed [ 409.856256][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 409.893440][T19588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3689'. [ 411.601893][T19609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3694'. [ 412.518930][T19570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.050111][T19648] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 413.545169][T19670] x_tables: duplicate underflow at hook 1 [ 413.847056][T19683] netlink: 182564 bytes leftover after parsing attributes in process `syz.0.3716'. [ 413.882304][T19693] netlink: 'syz.3.3715': attribute type 1 has an invalid length. [ 413.903733][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3717'. [ 413.912961][T19692] netlink: 'syz.4.3717': attribute type 7 has an invalid length. [ 413.936572][T19692] netlink: 'syz.4.3717': attribute type 8 has an invalid length. [ 413.960687][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 414.021457][T19699] xt_hashlimit: size too large, truncated to 1048576 [ 414.689246][T19744] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 414.747647][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'. [ 414.808704][ T5834] block nbd2: Receive control failed (result -32) [ 414.931995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 414.940078][ C0] lec:lec_tx_timeout: lec0 [ 414.951744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 414.984987][T19766] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 414.997632][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 415.011525][T19762] gretap0: entered promiscuous mode [ 415.053574][T19762] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 415.079140][T19772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3737'. [ 415.092935][T19762] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 415.116308][T19766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.149998][T19772] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.157789][T19772] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.208333][T19775] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3739'. [ 415.485306][T19793] siw: device registration error -23 [ 415.742073][T19813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3746'. [ 415.872752][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 415.936039][T19825] SET target dimension over the limit! [ 415.949823][T19827] netlink: 'syz.2.3749': attribute type 8 has an invalid length. [ 415.969943][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 416.082843][T19827] bond0: entered promiscuous mode [ 416.091045][T19827] gretap0: entered promiscuous mode [ 416.110894][T19827] bond0: left promiscuous mode [ 416.139590][T19827] gretap0: left promiscuous mode [ 416.326980][T19842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.353670][T19842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.584410][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 416.677642][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 417.115812][T19890] netlink: 'syz.4.3769': attribute type 3 has an invalid length. [ 417.283927][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3772'. [ 417.594777][T19919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.774059][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'. [ 417.784373][T19924] netlink: 'syz.3.3780': attribute type 12 has an invalid length. [ 418.033798][T19942] syzkaller1: entered promiscuous mode [ 418.049764][T19942] syzkaller1: entered allmulticast mode [ 418.396290][T19910] lec:lec_atm_close: lec0: Shut down! [ 418.470468][T19956] syzkaller0: entered promiscuous mode [ 418.480467][T19956] syzkaller0: entered allmulticast mode [ 418.604464][T19965] x_tables: duplicate underflow at hook 1 [ 418.678532][T19970] team0: Device vxcan1 is of different type [ 419.413795][T20014] IPv6: sit2: Disabled Multicast RS [ 419.675904][T20032] openvswitch: netlink: Missing key (keys=40, expected=80) [ 420.119193][T20056] __nla_validate_parse: 137 callbacks suppressed [ 420.119218][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 420.224386][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 420.445558][ T5834] Bluetooth: hci1: link tx timeout [ 420.451597][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 420.461637][ T5834] Bluetooth: hci1: link tx timeout [ 420.467328][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.647910][T20082] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3825'. [ 420.876363][T20090] syzkaller0: entered promiscuous mode [ 420.885867][T20090] syzkaller0: entered allmulticast mode [ 421.012394][T20107] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3831'. [ 422.542464][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 422.638679][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 422.818372][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 422.828648][T20133] block nbd3: Unsupported socket: should be TCP or UNIX. [ 423.024834][T20146] validate_nla: 133 callbacks suppressed [ 423.024852][T20146] netlink: 'syz.2.3845': attribute type 1 has an invalid length. [ 423.080904][T20146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.174240][T20155] syzkaller0: entered promiscuous mode [ 423.182108][T20155] syzkaller0: entered allmulticast mode [ 423.227543][T20158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3849'. [ 423.301825][T20160] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 423.407720][T20165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 423.426280][T20167] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3852'. [ 423.439743][T20170] netlink: 'syz.2.3851': attribute type 10 has an invalid length. [ 423.453442][T20170] .`: (slave bridge0): Enslaving as an active interface with an up link [ 423.487283][T20167] syzkaller1: entered allmulticast mode [ 423.637046][T20177] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 423.654673][T20177] syzkaller0: entered promiscuous mode [ 423.660451][T20177] syzkaller0: entered allmulticast mode [ 423.672636][T20177] netlink: 'syz.1.3854': attribute type 5 has an invalid length. [ 423.811140][T20188] netlink: 'syz.0.3857': attribute type 2 has an invalid length. [ 423.837083][T20188] netlink: 'syz.0.3857': attribute type 2 has an invalid length. [ 423.865783][T20190] netlink: 'syz.3.3858': attribute type 2 has an invalid length. [ 423.892646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 423.900739][ C0] lec:lec_tx_timeout: lec0 [ 423.909383][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 424.034372][T20200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3860'. [ 424.117427][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 424.190560][T20206] netlink: get zone limit has 4 unknown bytes [ 424.466651][T20220] netlink: 'syz.2.3869': attribute type 2 has an invalid length. [ 424.622457][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 424.808834][T20241] syzkaller0: entered promiscuous mode [ 424.817390][T20241] syzkaller0: entered allmulticast mode [ 424.951628][T20248] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 425.191611][T20264] syzkaller0: entered promiscuous mode [ 425.205953][T20264] syzkaller0: entered allmulticast mode [ 425.316896][T20270] x_tables: unsorted entry at hook 1 [ 425.369468][T20273] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 425.566849][T20280] can: request_module (can-proto-5) failed. [ 425.586880][T20280] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 425.594894][T20280] __nla_validate_parse: 1 callbacks suppressed [ 425.594913][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'. [ 425.675572][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3889'. [ 425.684925][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3889'. [ 425.783455][T20292] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.800472][T20292] pim6reg: entered allmulticast mode [ 425.915914][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 425.968893][T20300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3895'. [ 426.154654][T20310] netlink: 'syz.3.3897': attribute type 1 has an invalid length. [ 426.218433][T20310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.264157][T20311] bond2: (slave veth5): Enslaving as an active interface with a down link [ 426.302873][T20310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3897'. [ 426.557835][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'. [ 426.568889][T20330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'. [ 426.580849][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'. [ 426.591856][T20330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'. [ 426.692533][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 426.836898][T20341] macvtap1: entered promiscuous mode [ 426.842339][T20341] vlan0: entered promiscuous mode [ 426.856537][T20341] macvtap1: entered allmulticast mode [ 426.864203][T20341] vlan0: entered allmulticast mode [ 426.869454][T20341] veth0_vlan: entered allmulticast mode [ 427.225648][T20321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.850540][T20362] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20003 [ 427.986693][T20367] tipc: Failed to remove unknown binding: 66,1,1/0:2313519034/2313519036 [ 428.012606][T20367] tipc: Failed to remove unknown binding: 66,1,1/0:2313519034/2313519036 [ 428.124035][T20373] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 428.740783][T20373] sch_fq: defrate 53322 ignored. [ 428.772071][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 428.893540][T20380] macvtap0: entered promiscuous mode [ 428.932429][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 428.940533][ C0] lec:lec_tx_timeout: lec0 [ 428.945376][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 428.956502][T20380] veth0_macvtap: left promiscuous mode [ 429.027479][T20392] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 429.043096][T20380] macvtap0 (unregistering): left promiscuous mode [ 429.472367][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.536144][ T1119] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.547533][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.556335][ T1119] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.595554][ T1119] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.632417][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.641060][ T1119] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.676754][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.698840][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.725242][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.747887][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.765939][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 429.789462][T20420] team0: Device ip6gre1 is of different type [ 429.836344][T20389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.922748][T20407] netlink: 'syz.2.3928': attribute type 15 has an invalid length. [ 430.274895][T20438] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.514484][T20449] SET target dimension over the limit! [ 430.711747][T20459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.820261][T20470] __nla_validate_parse: 139 callbacks suppressed [ 430.820283][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3950'. [ 430.838958][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3950'. [ 430.848527][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3950'. [ 431.114200][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3954'. [ 431.141496][T20483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.471757][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 431.482612][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 431.647820][T20517] bond6: entered promiscuous mode [ 431.658829][T20517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.686766][T20517] bond6: (slave bridge1): making interface the new active one [ 431.694870][T20517] bridge1: entered promiscuous mode [ 431.704183][T20517] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 431.746259][T20517] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.784586][T20517] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 431.825461][T20522] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3969'. [ 431.871320][T20527] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3971'. [ 431.883642][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 431.947229][T20532] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.986225][T20522] syzkaller1: entered promiscuous mode [ 431.996139][T20522] syzkaller1: entered allmulticast mode [ 432.408208][T20553] syzkaller0: entered allmulticast mode [ 432.422780][T20553] tipc: Started in network mode [ 432.427843][T20553] tipc: Node identity 26cd19837841, cluster identity 4711 [ 432.436602][T20553] tipc: Enabled bearer , priority 0 [ 432.473691][T20561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3981'. [ 432.483992][T20552] tipc: Disabling bearer [ 432.554499][T20565] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 432.921047][T20586] tipc: Invalid UDP bearer configuration [ 432.921108][T20586] tipc: Enabling of bearer rejected, failed to enable media [ 432.949493][T20586] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 432.957972][T20586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.989418][T20586] Cannot find set identified by id 3 to match [ 433.345456][ T13] tipc: Subscription rejected, illegal request [ 433.800189][T20627] tc_dump_action: action bad kind [ 433.952089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.960267][ C0] lec:lec_tx_timeout: lec0 [ 433.965483][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 434.103372][T20650] ip6gretap0 (unregistering): left promiscuous mode [ 434.126487][T20655] xt_HMARK: proto mask must be zero with L3 mode [ 434.145659][T20656] xt_HMARK: proto mask must be zero with L3 mode [ 434.390473][T20621] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 434.487170][T20671] validate_nla: 128 callbacks suppressed [ 434.487193][T20671] netlink: 'syz.0.4015': attribute type 16 has an invalid length. [ 434.511016][T20671] netlink: 'syz.0.4015': attribute type 17 has an invalid length. [ 434.563521][T20671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.675145][T20676] lo: entered promiscuous mode [ 434.680594][T20676] tunl0: entered promiscuous mode [ 434.697351][T20676] gre0: entered promiscuous mode [ 434.763183][T20676] gretap0: entered promiscuous mode [ 434.852779][T20676] erspan0: entered promiscuous mode [ 434.885823][T20676] ip_vti0: entered promiscuous mode [ 434.933709][T20676] ip6_vti0: entered promiscuous mode [ 434.964599][T20676] sit0: entered promiscuous mode [ 435.012055][T20676] ip6tnl0: entered promiscuous mode [ 435.078174][T20676] ip6gre0: entered promiscuous mode [ 435.116081][T20697] sctp: [Deprecated]: syz.0.4022 (pid 20697) Use of int in max_burst socket option deprecated. [ 435.116081][T20697] Use struct sctp_assoc_value instead [ 435.132744][T20676] ip6gretap0: entered promiscuous mode [ 435.173117][T20676] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.180841][T20676] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.274415][T20676] bond0: entered promiscuous mode [ 435.279579][T20676] bond_slave_0: entered promiscuous mode [ 435.295657][T20676] bond_slave_1: entered promiscuous mode [ 435.316477][T20676] team0: entered promiscuous mode [ 435.321544][T20676] team_slave_0: entered promiscuous mode [ 435.337896][T20676] team_slave_1: entered promiscuous mode [ 435.365293][T20676] nlmon0: entered promiscuous mode [ 435.374475][T20676] caif0: entered promiscuous mode [ 435.381002][T20676] batadv0: entered promiscuous mode [ 435.392509][T20676] vxcan0: entered promiscuous mode [ 435.399706][T20676] vxcan1: entered promiscuous mode [ 435.407752][T20676] veth0: entered promiscuous mode [ 435.454166][T20676] veth1: entered promiscuous mode [ 435.493064][T20676] wg0: entered promiscuous mode [ 435.518071][T20676] wg1: entered promiscuous mode [ 435.535316][T20676] wg2: entered promiscuous mode [ 435.547200][T20676] veth0_to_bridge: entered promiscuous mode [ 435.598574][T20676] veth1_to_bridge: entered promiscuous mode [ 435.656728][T20676] veth0_to_bond: entered promiscuous mode [ 435.701091][T20676] veth1_to_bond: entered promiscuous mode [ 435.732987][T20676] veth0_to_team: entered promiscuous mode [ 435.769042][T20676] veth1_to_team: entered promiscuous mode [ 435.824249][T20676] veth0_to_batadv: entered promiscuous mode [ 435.852209][T20676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.859686][T20676] batadv_slave_0: entered promiscuous mode [ 435.892651][T20676] veth1_to_batadv: entered promiscuous mode [ 435.904480][T20676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.919631][T20676] batadv_slave_1: entered promiscuous mode [ 435.933010][T20676] xfrm0: entered promiscuous mode [ 435.954701][T20676] veth0_to_hsr: entered promiscuous mode [ 436.025390][T20676] veth1_to_hsr: entered promiscuous mode [ 436.069784][T20676] hsr0: entered promiscuous mode [ 436.084220][T20676] veth1_virt_wifi: entered promiscuous mode [ 436.121046][T20676] veth0_virt_wifi: entered promiscuous mode [ 436.137649][T20676] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 436.186649][T20676] vlan0: entered promiscuous mode [ 436.192742][T20676] vlan1: entered promiscuous mode [ 436.200227][T20676] macvlan0: entered promiscuous mode [ 436.222372][T20676] macvlan1: entered promiscuous mode [ 436.233586][T20676] ipvlan0: entered promiscuous mode [ 436.239412][T20676] ipvlan1: entered promiscuous mode [ 436.252291][T20676] veth0_macvtap: entered promiscuous mode [ 436.265872][T20676] macsec0: entered promiscuous mode [ 436.285206][T20676] geneve0: entered promiscuous mode [ 436.303026][T20676] geneve1: entered promiscuous mode [ 436.325869][T20676] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 436.337615][T20676] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 436.351236][T20676] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 436.376968][T20676] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 436.404501][T20676] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 436.414510][T20676] ip6tnl1: entered promiscuous mode [ 436.422763][T20676] macsec1: entered promiscuous mode [ 436.430091][T20676] ip6gretap1: entered promiscuous mode [ 436.436994][T20676] ipip0: entered promiscuous mode [ 436.446669][T20676] erspan1: entered promiscuous mode [ 436.453595][T20676] veth2: entered promiscuous mode [ 436.458980][T20676] veth3: entered promiscuous mode [ 436.466565][T20676] pimreg3: entered promiscuous mode [ 436.475451][T20676] gretap1: entered promiscuous mode [ 436.483122][T20676] bond1: entered promiscuous mode [ 436.491123][T20676] sit1: entered promiscuous mode [ 436.496984][T20676] ip6gre1: entered promiscuous mode [ 436.503139][T20676] vxlan0: entered promiscuous mode [ 436.508609][T20676] gre1: entered promiscuous mode [ 436.547972][T20676] bond2: entered promiscuous mode [ 436.563267][T20676] veth4: entered promiscuous mode [ 436.572979][T20676] veth5: entered promiscuous mode [ 436.580242][T20676] ip6tnl2: entered promiscuous mode [ 436.586023][T20676] ip6gretap2: entered promiscuous mode [ 436.605852][T20692] netlink: 'syz.4.4020': attribute type 3 has an invalid length. [ 436.623722][T20692] netlink: 'syz.4.4020': attribute type 3 has an invalid length. [ 436.653935][ T1166] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.672650][ T1166] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.731859][ T1166] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.777208][ T1166] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.786734][T20720] siw: device registration error -23 [ 436.813026][T20723] __nla_validate_parse: 8 callbacks suppressed [ 436.813046][T20723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4025'. [ 436.859265][T20720] netlink: 'syz.3.4023': attribute type 1 has an invalid length. [ 436.881013][T20724] syzkaller0: entered promiscuous mode [ 436.897790][T20724] syzkaller0: entered allmulticast mode [ 437.157090][T20742] netlink: 'syz.3.4029': attribute type 5 has an invalid length. [ 437.170014][T20742] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4029'. [ 437.183945][T20745] Unknown options in mask b7f2 [ 437.313345][T20742] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 437.460952][T20763] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.551407][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'. [ 437.664104][T20774] tipc: Enabled bearer , priority 0 [ 437.696459][T20779] tipc: Disabling bearer [ 437.879696][T20788] bridge_slave_0 (unregistering): left promiscuous mode [ 437.893995][T20788] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.986073][T20793] bond0: (slave gre0): Error: Device type is different from other slaves [ 437.999814][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'. [ 438.009410][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'. [ 438.391269][T20816] netlink: zone id is out of range [ 438.397477][T20816] netlink: zone id is out of range [ 438.403202][T20816] netlink: zone id is out of range [ 438.408484][T20816] netlink: zone id is out of range [ 438.415758][T20816] netlink: zone id is out of range [ 438.421059][T20816] netlink: zone id is out of range [ 438.426515][T20816] netlink: zone id is out of range [ 438.431795][T20816] netlink: zone id is out of range [ 438.440323][T20816] netlink: zone id is out of range [ 438.466028][T20816] netlink: zone id is out of range [ 438.669820][T20826] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.682655][T20826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.689913][T20826] IPv6: NLM_F_CREATE should be set when creating new route [ 438.725904][T20828] netlink: 'syz.0.4058': attribute type 11 has an invalid length. [ 438.742422][T20828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4058'. [ 438.982320][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 438.990449][ C0] lec:lec_tx_timeout: lec0 [ 438.995532][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.425362][T20873] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 440.057056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.224296][T20889] netlink: 'syz.4.4074': attribute type 24 has an invalid length. [ 440.247958][T20892] syzkaller0: entered promiscuous mode [ 440.254716][T20892] syzkaller0: entered allmulticast mode [ 440.385341][T20902] bond0: (slave gre0): Error: Device type is different from other slaves [ 440.541635][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4082'. [ 440.751998][T20926] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4085'. [ 440.853783][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 440.950837][T20936] geneve2: entered promiscuous mode [ 440.985326][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 43773 - 0 [ 441.005857][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 43773 - 0 [ 441.032898][T20941] netlink: 'syz.3.4092': attribute type 64 has an invalid length. [ 441.057354][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 43773 - 0 [ 441.086707][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 43773 - 0 [ 441.117881][T20945] 8021q: VLANs not supported on ip6_vti0 [ 441.119295][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 441.468583][T20963] bond0: entered promiscuous mode [ 441.489221][T20963] bond_slave_0: entered promiscuous mode [ 441.515897][T20963] bond_slave_1: entered promiscuous mode [ 441.526961][T20963] bond0: left promiscuous mode [ 441.535560][T20963] bond_slave_0: left promiscuous mode [ 441.541388][T20963] bond_slave_1: left promiscuous mode [ 442.047353][T21002] xt_limit: Overflow, try lower: 604147548/4200216962 [ 442.055497][T21001] __nla_validate_parse: 6 callbacks suppressed [ 442.055518][T21001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4110'. [ 442.510025][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4119'. [ 442.581742][T21036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4121'. [ 442.753306][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 442.923867][T21058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4126'. [ 443.017149][T21055] siw: device registration error -23 [ 443.143967][T21068] netlink: 'syz.1.4128': attribute type 1 has an invalid length. [ 443.445253][T21091] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 443.553665][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4137'. [ 443.635399][T21098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4137'. [ 443.929784][T21116] syzkaller0: entered promiscuous mode [ 443.936521][T21116] syzkaller0: entered allmulticast mode [ 443.945710][T21116] tc action pedit offset must be on 32 bit boundaries [ 444.087530][T21127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4147'. [ 444.145303][T21131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4147'. [ 444.280843][T21102] lec:lec_atm_close: lec0: Shut down! [ 444.316413][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'. [ 444.619035][T21158] x_tables: duplicate underflow at hook 1 [ 444.723717][T21165] netlink: 'syz.4.4158': attribute type 1 has an invalid length. [ 444.773863][T21167] netlink: 'syz.2.4159': attribute type 11 has an invalid length. [ 444.794394][T21165] bond3: entered promiscuous mode [ 444.807152][T21165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.858850][T21173] bond3: (slave bridge2): making interface the new active one [ 444.868765][T21173] bridge2: entered promiscuous mode [ 444.877462][T21173] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 445.004187][T21187] netlink: 'syz.2.4163': attribute type 16 has an invalid length. [ 445.014587][T21187] netlink: 'syz.2.4163': attribute type 3 has an invalid length. [ 445.029737][T21187] net_ratelimit: 138 callbacks suppressed [ 445.029758][T21187] openvswitch: netlink: Tunnel attr 10 has unexpected len 7 expected 2 [ 445.045982][T21189] macvlan0: entered promiscuous mode [ 445.100947][T21196] ip6t_srh: unknown srh invflags 4000 [ 445.159880][T21200] syzkaller1: entered promiscuous mode [ 445.168038][T21200] syzkaller1: entered allmulticast mode [ 445.291102][T21207] veth1_macvtap: left promiscuous mode [ 447.889058][T21180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.196266][T21241] x_tables: duplicate underflow at hook 3 [ 448.306637][T21250] openvswitch: netlink: Flow actions attr not present in new flow. [ 448.325902][T21250] __nla_validate_parse: 10 callbacks suppressed [ 448.325923][T21250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4181'. [ 448.740011][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 449.154829][T21247] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4180'. [ 449.415681][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 449.425099][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 449.463386][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4187'. [ 449.491596][T21282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4187'. [ 449.510189][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4187'. [ 449.615458][T21287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4188'. [ 449.737921][T21295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4189'. [ 449.892310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 449.900594][ C0] lec:lec_tx_timeout: lec0 [ 449.906001][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.938657][T21309] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:21 [ 450.355732][T21329] FAULT_INJECTION: forcing a failure. [ 450.355732][T21329] name failslab, interval 1, probability 0, space 0, times 0 [ 450.403238][T21329] CPU: 0 UID: 0 PID: 21329 Comm: syz.2.4198 Not tainted syzkaller #0 PREEMPT(full) [ 450.403278][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.403291][T21329] Call Trace: [ 450.403298][T21329] [ 450.403308][T21329] dump_stack_lvl+0xe8/0x150 [ 450.403346][T21329] should_fail_ex+0x412/0x560 [ 450.403378][T21329] should_failslab+0xa8/0x100 [ 450.403408][T21329] __kmalloc_cache_noprof+0x88/0x660 [ 450.403433][T21329] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 450.403463][T21329] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 450.403494][T21329] tcp_sendmsg_locked+0x4bb2/0x5490 [ 450.403521][T21329] ? aa_file_perm+0x192/0x15e0 [ 450.403551][T21329] ? tcp_sendmsg_locked+0x2d1/0x5490 [ 450.403573][T21329] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 450.403603][T21329] ? __lock_acquire+0x6b5/0x2cf0 [ 450.403640][T21329] ? __lock_acquire+0x6b5/0x2cf0 [ 450.403704][T21329] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 450.403735][T21329] ? tcp_sendmsg+0x21/0x50 [ 450.403761][T21329] ? __local_bh_enable_ip+0xd0/0x130 [ 450.403790][T21329] ? __pfx_inet_sendmsg+0x10/0x10 [ 450.403814][T21329] tcp_sendmsg+0x2f/0x50 [ 450.403837][T21329] __sys_sendto+0x5de/0x710 [ 450.403873][T21329] ? __pfx___sys_sendto+0x10/0x10 [ 450.403901][T21329] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 450.403939][T21329] ? __fget_files+0x3a0/0x420 [ 450.403982][T21329] ? ksys_write+0x242/0x270 [ 450.404008][T21329] ? __pfx_ksys_write+0x10/0x10 [ 450.404037][T21329] __x64_sys_sendto+0xde/0x100 [ 450.404073][T21329] do_syscall_64+0x14d/0xf80 [ 450.404092][T21329] ? trace_irq_disable+0x3b/0x150 [ 450.404123][T21329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.404145][T21329] ? clear_bhb_loop+0x40/0x90 [ 450.404171][T21329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.404192][T21329] RIP: 0033:0x7fda7059c799 [ 450.404213][T21329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.404232][T21329] RSP: 002b:00007fda71459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 450.404262][T21329] RAX: ffffffffffffffda RBX: 00007fda70816090 RCX: 00007fda7059c799 [ 450.404277][T21329] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 450.404291][T21329] RBP: 00007fda71459090 R08: 0000000000000000 R09: 0000000000000000 [ 450.404304][T21329] R10: 0000000024040005 R11: 0000000000000246 R12: 0000000000000001 [ 450.404318][T21329] R13: 00007fda70816128 R14: 00007fda70816090 R15: 00007ffce3c27f68 [ 450.404353][T21329] [ 450.768851][T21346] netlink: 'syz.1.4203': attribute type 10 has an invalid length. [ 450.812052][T21346] batman_adv: batadv0: Adding interface: netdevsim0 [ 450.818697][T21346] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.861850][T21346] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 451.341391][T21333] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 451.349196][T21333] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 451.753736][T21406] Bluetooth: MGMT ver 1.23 [ 452.332552][T21429] erspan0: entered promiscuous mode [ 452.339484][T21429] erspan0: entered allmulticast mode [ 453.047585][T21449] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 453.686173][T21362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.813249][ T5831] Bluetooth: hci2: command 0x0401 tx timeout [ 453.819449][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 453.910287][T21460] netlink: 'syz.0.4231': attribute type 4 has an invalid length. [ 454.016932][T21468] sctp: [Deprecated]: syz.4.4233 (pid 21468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.016932][T21468] Use struct sctp_sack_info instead [ 454.170538][T21489] __nla_validate_parse: 3 callbacks suppressed [ 454.170558][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4237'. [ 454.212207][T21462] nbd3: detected capacity change from 0 to 63 [ 454.224058][ T5834] block nbd3: Receive control failed (result -104) [ 454.232532][ T5831] block nbd3: Receive control failed (result -32) [ 454.393912][T21501] netlink: 'syz.2.4239': attribute type 1 has an invalid length. [ 454.543056][T21510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4242'. [ 454.661855][T21516] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4245'. [ 454.699808][T21521] netlink: 'syz.0.4247': attribute type 9 has an invalid length. [ 454.810228][T21528] x_tables: duplicate underflow at hook 1 [ 454.942200][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 454.950405][ C0] lec:lec_tx_timeout: lec0 [ 454.954637][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4252'. [ 454.958451][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.015022][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4252'. [ 455.027745][T21542] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 455.037322][T21542] openvswitch: netlink: Message has 4 unknown bytes. [ 455.118136][T21545] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 455.281384][T21552] IPv6: sit2: Disabled Multicast RS [ 455.288210][T21552] sit2: entered allmulticast mode [ 455.553941][T21522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.864547][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 455.876940][T21585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4270'. [ 455.887868][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 456.167718][T21590] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 456.194313][T21591] lo speed is unknown, defaulting to 1000 [ 456.206575][T21594] netlink: 'syz.2.4274': attribute type 2 has an invalid length. [ 456.223298][T21594] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4274'. [ 456.251620][T21591] lo speed is unknown, defaulting to 1000 [ 456.295429][T21591] lo speed is unknown, defaulting to 1000 [ 456.396558][T21608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4276'. [ 456.830165][T21627] netlink: 'syz.2.4280': attribute type 3 has an invalid length. [ 456.886098][T21591] infiniband syz0: set active [ 456.893263][T21591] infiniband syz0: added lo [ 456.903894][ T43] lo speed is unknown, defaulting to 1000 [ 457.025700][T21636] netlink: 'syz.2.4282': attribute type 9 has an invalid length. [ 457.047234][T21636] .`: (slave bridge0): Releasing backup interface [ 457.062995][T21591] RDS/IB: syz0: added [ 457.068412][T21591] smc: adding ib device syz0 with port count 1 [ 457.088313][T21636] bridge_slave_1: left allmulticast mode [ 457.107909][T21591] smc: ib device syz0 port 1 has no pnetid [ 457.115523][T21636] bridge_slave_1: left promiscuous mode [ 457.125885][T21636] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.140209][T21636] .`: (slave bond_slave_0): Releasing backup interface [ 457.153572][T21638] x_tables: duplicate underflow at hook 2 [ 457.193646][T21636] .`: (slave bond_slave_1): Releasing backup interface [ 457.230935][T21636] team0: Port device team_slave_0 removed [ 457.240240][T21636] team0: Port device team_slave_1 removed [ 457.248953][T21636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.259870][T21636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.279840][T20716] lo speed is unknown, defaulting to 1000 [ 457.289049][T21591] lo speed is unknown, defaulting to 1000 [ 457.492623][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 457.745840][T21665] syzkaller0: entered promiscuous mode [ 457.761551][T21665] syzkaller0: entered allmulticast mode [ 457.824428][T21665] x_tables: duplicate entry at hook 3 [ 457.844382][T21665] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 457.884414][T21591] lo speed is unknown, defaulting to 1000 [ 458.075055][T21675] netlink: 'syz.3.4298': attribute type 10 has an invalid length. [ 458.121644][T21676] hsr_slave_0 (unregistering): left promiscuous mode [ 458.214923][T21591] lo speed is unknown, defaulting to 1000 [ 458.918616][T21591] lo speed is unknown, defaulting to 1000 [ 458.918799][T21705] tipc: Started in network mode [ 458.937323][T21705] tipc: Node identity ac14140f, cluster identity 4711 [ 458.947092][T21705] tipc: New replicast peer: 255.255.255.255 [ 458.956001][T21705] tipc: Enabled bearer , priority 10 [ 458.962911][T21708] netlink: 'syz.1.4308': attribute type 1 has an invalid length. [ 458.976302][T21708] netlink: 'syz.1.4308': attribute type 1 has an invalid length. [ 458.992323][T21708] netlink: 'syz.1.4308': attribute type 8 has an invalid length. [ 459.137079][T21715] xt_hashlimit: size too large, truncated to 1048576 [ 459.610217][T21591] lo speed is unknown, defaulting to 1000 [ 459.982275][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 459.990389][ C0] lec:lec_tx_timeout: lec0 [ 459.995885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.082410][ T7270] tipc: Node number set to 2886997007 [ 460.161881][T21748] __nla_validate_parse: 8 callbacks suppressed [ 460.201313][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4318'. [ 460.407696][T21760] Bluetooth: MGMT ver 1.23 [ 460.446133][T21591] lo speed is unknown, defaulting to 1000 [ 460.961576][T21591] lo speed is unknown, defaulting to 1000 [ 461.497159][T21800] netlink: 'syz.4.4330': attribute type 2 has an invalid length. [ 461.528335][T21591] lo speed is unknown, defaulting to 1000 [ 461.788259][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 461.825248][T21809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4333'. [ 461.845018][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 462.122568][T21818] tunl0: left allmulticast mode [ 462.408440][T21818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.425200][T21818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.486811][T21818] macvlan0: left promiscuous mode [ 462.507348][T21828] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4338'. [ 462.519575][T21828] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 462.567118][T21818] bond1: left promiscuous mode [ 462.574364][T21818] bond1: left allmulticast mode [ 462.593746][T21818] geneve2: left promiscuous mode [ 462.612118][ T572] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.621130][ T572] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 43773 - 0 [ 462.639773][ T572] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.650828][ T572] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 43773 - 0 [ 462.669686][ T572] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.679492][ T572] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 43773 - 0 [ 462.689302][ T572] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.699479][ T572] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 43773 - 0 [ 462.765121][T21832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4339'. [ 462.788142][T21832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4339'. [ 462.825143][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 462.906310][ T5831] block nbd4: Receive control failed (result -107) [ 462.943264][T21839] nbd4: detected capacity change from 0 to 127 [ 462.961164][T21732] block nbd4: Dead connection, failed to find a fallback [ 462.969682][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 462.987755][T21732] block nbd4: shutting down sockets [ 462.997011][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 463.009253][T21732] blk_print_req_error: 138 callbacks suppressed [ 463.009271][T21732] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.026078][T21732] buffer_io_error: 138 callbacks suppressed [ 463.026099][T21732] Buffer I/O error on dev nbd4, logical block 0, async page read [ 463.049444][T21732] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.060055][T21732] Buffer I/O error on dev nbd4, logical block 1, async page read [ 463.068177][T21732] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.098544][T21732] Buffer I/O error on dev nbd4, logical block 2, async page read [ 463.107587][T21732] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.118017][T21732] Buffer I/O error on dev nbd4, logical block 3, async page read [ 463.136709][T21732] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.158176][T21732] Buffer I/O error on dev nbd4, logical block 0, async page read [ 463.178848][T21732] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.189854][T21732] Buffer I/O error on dev nbd4, logical block 1, async page read [ 463.197548][T21845] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 463.201319][T21732] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.238168][T21732] Buffer I/O error on dev nbd4, logical block 2, async page read [ 463.246952][T21732] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.271642][T21732] Buffer I/O error on dev nbd4, logical block 3, async page read [ 463.280431][T21732] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.293305][T21732] Buffer I/O error on dev nbd4, logical block 0, async page read [ 463.301487][T21732] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.314160][T21732] Buffer I/O error on dev nbd4, logical block 1, async page read [ 463.323477][T21732] ldm_validate_partition_table(): Disk read failed. [ 463.331194][T21732] Dev nbd4: unable to read RDB block 0 [ 463.346043][T21732] nbd4: unable to read partition table [ 463.360134][T21849] netlink: 'syz.0.4345': attribute type 1 has an invalid length. [ 463.371457][T21732] ldm_validate_partition_table(): Disk read failed. [ 463.381191][T21732] Dev nbd4: unable to read RDB block 0 [ 463.387867][T21732] nbd4: unable to read partition table [ 463.399007][T21849] syzkaller0: entered promiscuous mode [ 463.404936][T21849] syzkaller0: entered allmulticast mode [ 463.802753][T21864] veth0_to_team: entered promiscuous mode [ 463.814718][T21864] veth0_to_team: left promiscuous mode [ 464.108474][T21877] openvswitch: netlink: IP tunnel dst address not specified [ 464.217582][T21888] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 464.280580][T21890] netlink: 'syz.1.4359': attribute type 3 has an invalid length. [ 464.666049][T21904] syzkaller0: entered promiscuous mode [ 464.675136][T21904] syzkaller0: entered allmulticast mode [ 464.886532][T21917] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.002266][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 465.010354][ C0] lec:lec_tx_timeout: lec0 [ 465.015561][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.170962][T21939] netlink: 'syz.3.4370': attribute type 6 has an invalid length. [ 465.209905][T21933] lo speed is unknown, defaulting to 1000 [ 465.401644][T21952] __nla_validate_parse: 9 callbacks suppressed [ 465.401664][T21952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4380'. [ 465.421053][T21950] x_tables: unsorted entry at hook 2 [ 465.447194][T21954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4380'. [ 465.600824][T21954] netlink: 'syz.2.4380': attribute type 12 has an invalid length. [ 465.889000][T21977] netlink: 'syz.2.4387': attribute type 1 has an invalid length. [ 465.897890][T21979] netlink: 'syz.2.4387': attribute type 1 has an invalid length. [ 466.061476][T21979] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 466.069314][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4385'. [ 466.208889][T21977] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 466.231054][T21990] netlink: 'syz.3.4390': attribute type 1 has an invalid length. [ 466.369094][T21999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4392'. [ 466.555516][T21990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.655594][T22013] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4395'. [ 466.775124][T22018] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 466.844055][T22022] set_match_v0_checkentry: 1 callbacks suppressed [ 466.844076][T22022] Cannot find set identified by id 0 to match [ 466.860738][T22022] netlink: 'syz.1.4398': attribute type 1 has an invalid length. [ 466.872606][T22022] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4398'. [ 466.881764][T22022] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4398'. [ 466.927492][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4399'. [ 466.958335][T22028] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4399'. [ 466.981747][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 467.070574][T22032] netlink: 'syz.1.4400': attribute type 8 has an invalid length. [ 467.092420][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 467.308341][T22041] pim6reg527: entered allmulticast mode [ 467.349013][T22043] xt_nfacct: accounting object `syz1' does not exist [ 467.440688][T22045] vlan2: entered allmulticast mode [ 467.448252][T22045] bridge2: entered allmulticast mode [ 467.520202][T22051] erspan0: left allmulticast mode [ 468.239722][T22085] netlink: 'syz.1.4417': attribute type 1 has an invalid length. [ 468.292938][T22085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.311545][T22086] bond3: entered allmulticast mode [ 468.340441][T22086] bond3: (slave ip6gretap0): making interface the new active one [ 468.348450][T22086] ip6gretap0: entered allmulticast mode [ 468.356052][T22086] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 468.448815][T22095] netlink: 'syz.1.4420': attribute type 32 has an invalid length. [ 468.769301][T22112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.802955][T22112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.879220][T22112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.091651][T22129] tc_dump_action: action bad kind [ 469.506404][T22154] lo: left promiscuous mode [ 469.522934][T22154] tunl0: left promiscuous mode [ 469.527901][T22154] gre0: left promiscuous mode [ 469.558935][T22154] gretap0: left promiscuous mode [ 469.568077][T22154] erspan0: left promiscuous mode [ 469.576313][T22154] ip_vti0: left promiscuous mode [ 469.581599][T22154] ip6_vti0: left promiscuous mode [ 469.594194][T22154] sit0: left promiscuous mode [ 469.599053][T22154] ip6tnl0: left promiscuous mode [ 469.606092][T22154] ip6gre0: left promiscuous mode [ 469.612684][T22161] ipt_REJECT: TCP_RESET invalid for non-tcp [ 469.619642][T22154] ip6gretap0: left promiscuous mode [ 469.625327][T22154] bond0: left promiscuous mode [ 469.630759][T22154] team0: left promiscuous mode [ 469.637094][T22154] nlmon0: left promiscuous mode [ 469.648134][T22154] caif0: left promiscuous mode [ 469.656118][T22154] batadv0: left promiscuous mode [ 469.661355][T22154] vxcan0: left promiscuous mode [ 469.667167][T22154] vxcan1: left promiscuous mode [ 469.676139][T22154] veth0: left promiscuous mode [ 469.681286][T22154] veth1: left promiscuous mode [ 469.688463][T22154] wg0: left promiscuous mode [ 469.693862][T22154] wg1: left promiscuous mode [ 469.698704][T22154] wg2: left promiscuous mode [ 469.706143][T22154] veth0_to_bridge: left promiscuous mode [ 469.712392][T22154] veth1_to_bridge: left promiscuous mode [ 469.718533][T22154] veth0_to_bond: left promiscuous mode [ 469.735371][T22154] bond_slave_0: left promiscuous mode [ 469.741038][T22154] veth1_to_bond: left promiscuous mode [ 469.749072][T22154] bond_slave_1: left promiscuous mode [ 469.755685][T22154] veth0_to_team: left promiscuous mode [ 469.761538][T22154] team_slave_0: left promiscuous mode [ 469.768172][T22154] veth1_to_team: left promiscuous mode [ 469.774915][T22154] team_slave_1: left promiscuous mode [ 469.780578][T22154] veth0_to_batadv: left promiscuous mode [ 469.787151][T22154] batadv_slave_0: left promiscuous mode [ 469.794001][T22154] veth1_to_batadv: left promiscuous mode [ 469.800044][T22154] batadv_slave_1: left promiscuous mode [ 469.806399][T22154] xfrm0: left promiscuous mode [ 469.811548][T22154] veth0_to_hsr: left promiscuous mode [ 469.820859][T22154] veth1_to_hsr: left promiscuous mode [ 469.826808][T22154] hsr0: left promiscuous mode [ 469.831780][T22154] veth1_virt_wifi: left promiscuous mode [ 469.838772][T22154] veth0_virt_wifi: left promiscuous mode [ 469.845894][T22154] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 469.854208][T22154] veth0_macvtap: left promiscuous mode [ 469.859947][T22154] macsec0: left promiscuous mode [ 469.865910][T22154] geneve0: left promiscuous mode [ 469.871183][T22154] geneve1: left promiscuous mode [ 469.878071][T22154] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 469.885671][T22154] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 469.894300][T22154] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 469.901634][T22154] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 469.910269][T22154] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 469.918927][T22154] ip6tnl1: left promiscuous mode [ 469.926740][T22154] macsec1: left promiscuous mode [ 469.932555][T22154] ip6gretap1: left promiscuous mode [ 469.938168][T22154] ipip0: left promiscuous mode [ 469.943579][T22154] erspan1: left promiscuous mode [ 469.948923][T22154] veth2: left promiscuous mode [ 469.954186][T22154] veth3: left promiscuous mode [ 469.959364][T22154] pimreg3: left promiscuous mode [ 469.999886][T22154] gretap1: left promiscuous mode [ 470.009958][T22154] bond1: left promiscuous mode [ 470.022393][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.030726][ C0] lec:lec_tx_timeout: lec0 [ 470.036183][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.044880][T22154] sit1: left promiscuous mode [ 470.050135][T22154] vlan2: left promiscuous mode [ 470.057556][T22154] bridge0: left promiscuous mode [ 470.063975][T22154] ip6gre1: left promiscuous mode [ 470.069284][T22154] vxlan0: left promiscuous mode [ 470.074582][T22154] gre1: left promiscuous mode [ 470.079640][T22154] bond2: left promiscuous mode [ 470.085787][T22154] veth4: left promiscuous mode [ 470.090918][T22154] veth5: left promiscuous mode [ 470.096795][T22154] ip6tnl2: left promiscuous mode [ 470.102276][T22154] ip6gretap2: left promiscuous mode [ 470.410388][T22168] xt_nat: multiple ranges no longer supported [ 470.553888][T22173] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 470.666102][T22177] __nla_validate_parse: 8 callbacks suppressed [ 470.666123][T22177] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4446'. [ 471.292613][T22199] nbd: nbd3 already in use [ 471.783708][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4455'. [ 471.793669][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 471.803505][T22208] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.810720][T22208] bridge0: port 2(bridge_slave_1) entered listening state [ 471.818192][T22208] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.825408][T22208] bridge0: port 1(bridge_slave_0) entered listening state [ 471.881297][T22208] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 471.938944][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4455'. [ 471.953385][T22209] bridge0: entered allmulticast mode [ 472.400014][T22230] Can't find ip_set type [ 472.414793][T22225] Can't find ip_set type [ 472.589386][T22240] ¾x9ÿ: renamed from bridge_slave_0 [ 472.649312][T22243] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4461'. [ 472.816700][T22252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4464'. [ 472.884590][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 472.893205][T22257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4464'. [ 472.924779][T22258] syzkaller0: create flow: hash 3743769594 index 1 [ 472.951727][ T5831] [ 472.954115][ T5831] ====================================================== [ 472.961155][ T5831] WARNING: possible circular locking dependency detected [ 472.968208][ T5831] syzkaller #0 Not tainted [ 472.972648][ T5831] ------------------------------------------------------ [ 472.979684][ T5831] kworker/u9:3/5831 is trying to acquire lock: [ 472.985855][ T5831] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 472.996510][ T5831] [ 472.996510][ T5831] but task is already holding lock: [ 473.003894][ T5831] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 473.014190][ T5831] [ 473.014190][ T5831] which lock already depends on the new lock. [ 473.014190][ T5831] [ 473.024610][ T5831] [ 473.024610][ T5831] the existing dependency chain (in reverse order) is: [ 473.033651][ T5831] [ 473.033651][ T5831] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 473.041781][ T5831] down_write+0x96/0x200 [ 473.046577][ T5831] kernfs_add_one+0x41/0x5c0 [ 473.051712][ T5831] kernfs_create_dir_ns+0xde/0x130 [ 473.057455][ T5831] internal_create_group+0x425/0x1180 [ 473.063458][ T5831] cpuhp_invoke_callback+0x445/0x860 [ 473.069316][ T5831] cpuhp_issue_call+0x430/0x7a0 [ 473.074817][ T5831] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 473.081429][ T5831] __cpuhp_setup_state+0x3f/0x60 [ 473.086913][ T5831] do_one_initcall+0x250/0x8d0 [ 473.092220][ T5831] do_initcall_level+0x104/0x190 [ 473.097805][ T5831] do_initcalls+0x59/0xa0 [ 473.102691][ T5831] kernel_init_freeable+0x2a6/0x3e0 [ 473.108436][ T5831] kernel_init+0x1d/0x1d0 [ 473.113304][ T5831] ret_from_fork+0x51e/0xb90 [ 473.118437][ T5831] ret_from_fork_asm+0x1a/0x30 [ 473.123755][ T5831] [ 473.123755][ T5831] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 473.131612][ T5831] [ 473.131612][ T5831] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 473.139465][ T5831] cpus_read_lock+0x42/0x160 [ 473.144606][ T5831] static_key_disable+0x12/0x20 [ 473.150012][ T5831] __inet_hash_connect+0x2430/0x2440 [ 473.155842][ T5831] tcp_v4_connect+0xd5f/0x19b0 [ 473.161160][ T5831] __inet_stream_connect+0x25a/0xdd0 [ 473.166996][ T5831] inet_stream_connect+0x66/0xa0 [ 473.172485][ T5831] __sys_connect+0x312/0x450 [ 473.177626][ T5831] __x64_sys_connect+0x7a/0x90 [ 473.182937][ T5831] do_syscall_64+0x14d/0xf80 [ 473.188074][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.194521][ T5831] [ 473.194521][ T5831] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 473.202208][ T5831] lock_sock_nested+0x48/0x100 [ 473.207524][ T5831] inet_shutdown+0x6a/0x390 [ 473.212562][ T5831] nbd_mark_nsock_dead+0x2e9/0x560 [ 473.218211][ T5831] recv_work+0x1c7f/0x1d90 [ 473.223160][ T5831] process_scheduled_works+0xb02/0x1830 [ 473.229245][ T5831] worker_thread+0xa50/0xfc0 [ 473.234377][ T5831] kthread+0x388/0x470 [ 473.238977][ T5831] ret_from_fork+0x51e/0xb90 [ 473.244108][ T5831] ret_from_fork_asm+0x1a/0x30 [ 473.249515][ T5831] [ 473.249515][ T5831] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 473.257185][ T5831] __mutex_lock+0x19f/0x1300 [ 473.262320][ T5831] nbd_queue_rq+0x37b/0x1100 [ 473.267462][ T5831] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 473.273546][ T5831] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 473.280411][ T5831] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.286923][ T5831] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.292580][ T5831] blk_mq_dispatch_list+0xd16/0xe10 [ 473.298329][ T5831] blk_mq_flush_plug_list+0x48d/0x570 [ 473.304238][ T5831] __blk_flush_plug+0x3ed/0x4d0 [ 473.309623][ T5831] __submit_bio+0x28d/0x580 [ 473.314656][ T5831] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 473.320826][ T5831] block_read_full_folio+0x599/0x830 [ 473.326670][ T5831] filemap_read_folio+0x137/0x3b0 [ 473.332235][ T5831] do_read_cache_folio+0x358/0x590 [ 473.337885][ T5831] read_part_sector+0xb6/0x2b0 [ 473.343184][ T5831] adfspart_check_ICS+0xa5/0xa40 [ 473.348830][ T5831] bdev_disk_changed+0x7ba/0x1550 [ 473.354837][ T5831] blkdev_get_whole+0x380/0x510 [ 473.360237][ T5831] bdev_open+0x31e/0xd30 [ 473.365028][ T5831] blkdev_open+0x470/0x610 [ 473.369994][ T5831] do_dentry_open+0x785/0x14e0 [ 473.375314][ T5831] vfs_open+0x3b/0x340 [ 473.379946][ T5831] path_openat+0x2e08/0x3860 [ 473.385073][ T5831] do_file_open+0x23e/0x4a0 [ 473.390145][ T5831] do_sys_openat2+0x113/0x200 [ 473.395372][ T5831] __x64_sys_openat+0x138/0x170 [ 473.400769][ T5831] do_syscall_64+0x14d/0xf80 [ 473.405904][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.412331][ T5831] [ 473.412331][ T5831] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 473.419563][ T5831] __mutex_lock+0x19f/0x1300 [ 473.424691][ T5831] nbd_queue_rq+0xc6/0x1100 [ 473.429739][ T5831] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 473.435818][ T5831] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 473.443151][ T5831] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.449673][ T5831] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.455330][ T5831] blk_mq_dispatch_list+0xd16/0xe10 [ 473.461079][ T5831] blk_mq_flush_plug_list+0x48d/0x570 [ 473.466991][ T5831] __blk_flush_plug+0x3ed/0x4d0 [ 473.472379][ T5831] __submit_bio+0x28d/0x580 [ 473.477424][ T5831] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 473.483610][ T5831] block_read_full_folio+0x599/0x830 [ 473.489443][ T5831] filemap_read_folio+0x137/0x3b0 [ 473.495023][ T5831] do_read_cache_folio+0x358/0x590 [ 473.500689][ T5831] read_part_sector+0xb6/0x2b0 [ 473.505990][ T5831] adfspart_check_ICS+0xa5/0xa40 [ 473.511466][ T5831] bdev_disk_changed+0x7ba/0x1550 [ 473.517032][ T5831] blkdev_get_whole+0x380/0x510 [ 473.522413][ T5831] bdev_open+0x31e/0xd30 [ 473.527181][ T5831] blkdev_open+0x470/0x610 [ 473.532145][ T5831] do_dentry_open+0x785/0x14e0 [ 473.537560][ T5831] vfs_open+0x3b/0x340 [ 473.542175][ T5831] path_openat+0x2e08/0x3860 [ 473.547575][ T5831] do_file_open+0x23e/0x4a0 [ 473.552640][ T5831] do_sys_openat2+0x113/0x200 [ 473.557859][ T5831] __x64_sys_openat+0x138/0x170 [ 473.563248][ T5831] do_syscall_64+0x14d/0xf80 [ 473.568462][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.574908][ T5831] [ 473.574908][ T5831] -> #4 (set->srcu){.+.+}-{0:0}: [ 473.582052][ T5831] __synchronize_srcu+0xca/0x3e0 [ 473.587526][ T5831] elevator_switch+0x1e8/0x7a0 [ 473.592826][ T5831] elevator_change+0x2cc/0x450 [ 473.598131][ T5831] elevator_set_default+0x36c/0x430 [ 473.603869][ T5831] blk_register_queue+0x366/0x430 [ 473.609434][ T5831] __add_disk+0x677/0xd50 [ 473.614308][ T5831] add_disk_fwnode+0xfb/0x480 [ 473.619530][ T5831] nbd_dev_add+0x72c/0xb50 [ 473.624500][ T5831] nbd_init+0x168/0x1f0 [ 473.629203][ T5831] do_one_initcall+0x250/0x8d0 [ 473.634510][ T5831] do_initcall_level+0x104/0x190 [ 473.639994][ T5831] do_initcalls+0x59/0xa0 [ 473.644912][ T5831] kernel_init_freeable+0x2a6/0x3e0 [ 473.650654][ T5831] kernel_init+0x1d/0x1d0 [ 473.655534][ T5831] ret_from_fork+0x51e/0xb90 [ 473.660671][ T5831] ret_from_fork_asm+0x1a/0x30 [ 473.665984][ T5831] [ 473.665984][ T5831] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 473.673826][ T5831] __mutex_lock+0x19f/0x1300 [ 473.678956][ T5831] elevator_change+0x1b3/0x450 [ 473.684266][ T5831] elevator_set_none+0xb5/0x140 [ 473.689657][ T5831] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 473.696024][ T5831] nbd_start_device+0x17f/0xb10 [ 473.701505][ T5831] nbd_genl_connect+0x165b/0x1cf0 [ 473.707072][ T5831] genl_family_rcv_msg_doit+0x22a/0x330 [ 473.713158][ T5831] genl_rcv_msg+0x61c/0x7a0 [ 473.718196][ T5831] netlink_rcv_skb+0x232/0x4b0 [ 473.723498][ T5831] genl_rcv+0x28/0x40 [ 473.728014][ T5831] netlink_unicast+0x80f/0x9b0 [ 473.733337][ T5831] netlink_sendmsg+0x813/0xb40 [ 473.738641][ T5831] ____sys_sendmsg+0x972/0x9f0 [ 473.743944][ T5831] ___sys_sendmsg+0x2a5/0x360 [ 473.749153][ T5831] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.754628][ T5831] do_syscall_64+0x14d/0xf80 [ 473.759841][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.766266][ T5831] [ 473.766266][ T5831] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 473.774889][ T5831] blk_alloc_queue+0x546/0x680 [ 473.780208][ T5831] __blk_mq_alloc_disk+0x197/0x390 [ 473.785856][ T5831] nbd_dev_add+0x499/0xb50 [ 473.790823][ T5831] nbd_init+0x168/0x1f0 [ 473.795521][ T5831] do_one_initcall+0x250/0x8d0 [ 473.800914][ T5831] do_initcall_level+0x104/0x190 [ 473.806981][ T5831] do_initcalls+0x59/0xa0 [ 473.811876][ T5831] kernel_init_freeable+0x2a6/0x3e0 [ 473.817621][ T5831] kernel_init+0x1d/0x1d0 [ 473.822490][ T5831] ret_from_fork+0x51e/0xb90 [ 473.827624][ T5831] ret_from_fork_asm+0x1a/0x30 [ 473.832942][ T5831] [ 473.832942][ T5831] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 473.840180][ T5831] fs_reclaim_acquire+0x71/0x100 [ 473.845664][ T5831] kmem_cache_alloc_noprof+0x40/0x650 [ 473.851604][ T5831] __kernfs_iattrs+0xdf/0x340 [ 473.856823][ T5831] kernfs_iop_setattr+0xea/0x3f0 [ 473.862301][ T5831] notify_change+0xc1a/0xf40 [ 473.867441][ T5831] do_truncate+0x1c2/0x250 [ 473.872392][ T5831] path_openat+0x2f89/0x3860 [ 473.877516][ T5831] do_file_open+0x23e/0x4a0 [ 473.882557][ T5831] do_sys_openat2+0x113/0x200 [ 473.887779][ T5831] __x64_sys_openat+0x138/0x170 [ 473.893180][ T5831] do_syscall_64+0x14d/0xf80 [ 473.898408][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.904852][ T5831] [ 473.904852][ T5831] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 473.913619][ T5831] __lock_acquire+0x15a5/0x2cf0 [ 473.919106][ T5831] lock_acquire+0xf0/0x2e0 [ 473.924080][ T5831] down_write+0x96/0x200 [ 473.928871][ T5831] kernfs_unlink_sibling+0x71/0x180 [ 473.934611][ T5831] __kernfs_remove+0x3e7/0x660 [ 473.940127][ T5831] kernfs_remove_by_name_ns+0xaf/0x130 [ 473.946138][ T5831] sysfs_unmerge_group+0xd4/0x140 [ 473.951745][ T5831] dpm_sysfs_remove+0x76/0xd0 [ 473.956976][ T5831] device_del+0x250/0x8f0 [ 473.961871][ T5831] device_unregister+0x21/0xf0 [ 473.967181][ T5831] hci_conn_del+0xc36/0x1230 [ 473.972318][ T5831] hci_abort_conn_sync+0xdd0/0x1190 [ 473.978057][ T5831] hci_cmd_sync_work+0x213/0x400 [ 473.983556][ T5831] process_scheduled_works+0xb02/0x1830 [ 473.989655][ T5831] worker_thread+0xa50/0xfc0 [ 473.994796][ T5831] kthread+0x388/0x470 [ 473.999496][ T5831] ret_from_fork+0x51e/0xb90 [ 474.004627][ T5831] ret_from_fork_asm+0x1a/0x30 [ 474.009940][ T5831] [ 474.009940][ T5831] other info that might help us debug this: [ 474.009940][ T5831] [ 474.020190][ T5831] Chain exists of: [ 474.020190][ T5831] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 474.020190][ T5831] [ 474.034641][ T5831] Possible unsafe locking scenario: [ 474.034641][ T5831] [ 474.042109][ T5831] CPU0 CPU1 [ 474.047520][ T5831] ---- ---- [ 474.052901][ T5831] lock(&root->kernfs_rwsem); [ 474.057681][ T5831] lock(cpuhp_state_mutex); [ 474.064828][ T5831] lock(&root->kernfs_rwsem); [ 474.072126][ T5831] lock(&root->kernfs_iattr_rwsem); [ 474.077428][ T5831] [ 474.077428][ T5831] *** DEADLOCK *** [ 474.077428][ T5831] [ 474.085582][ T5831] 5 locks held by kworker/u9:3/5831: [ 474.090882][ T5831] #0: ffff88802130e148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 474.101729][ T5831] #1: ffffc90003e47c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 474.114306][ T5831] #2: ffff888080508ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 474.124200][ T5831] #3: ffff8880805080c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 474.133984][ T5831] #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 474.144722][ T5831] [ 474.144722][ T5831] stack backtrace: [ 474.150625][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 474.150646][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.150659][ T5831] Workqueue: hci3 hci_cmd_sync_work [ 474.150689][ T5831] Call Trace: [ 474.150696][ T5831] [ 474.150704][ T5831] dump_stack_lvl+0xe8/0x150 [ 474.150734][ T5831] print_circular_bug+0x2e1/0x300 [ 474.150762][ T5831] check_noncircular+0x12e/0x150 [ 474.150790][ T5831] __lock_acquire+0x15a5/0x2cf0 [ 474.150815][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 474.150841][ T5831] lock_acquire+0xf0/0x2e0 [ 474.150861][ T5831] ? kernfs_unlink_sibling+0x71/0x180 [ 474.150882][ T5831] down_write+0x96/0x200 [ 474.150900][ T5831] ? kernfs_unlink_sibling+0x71/0x180 [ 474.150916][ T5831] ? __pfx_down_write+0x10/0x10 [ 474.150933][ T5831] ? kernfs_root+0x1c/0x230 [ 474.150957][ T5831] ? kernfs_root+0x1c/0x230 [ 474.150979][ T5831] ? kernfs_root+0x1c/0x230 [ 474.151002][ T5831] ? kernfs_root+0x1ea/0x230 [ 474.151026][ T5831] kernfs_unlink_sibling+0x71/0x180 [ 474.151044][ T5831] __kernfs_remove+0x3e7/0x660 [ 474.151061][ T5831] kernfs_remove_by_name_ns+0xaf/0x130 [ 474.151079][ T5831] sysfs_unmerge_group+0xd4/0x140 [ 474.151124][ T5831] dpm_sysfs_remove+0x76/0xd0 [ 474.151146][ T5831] device_del+0x250/0x8f0 [ 474.151163][ T5831] ? klist_iter_exit+0xc1/0x100 [ 474.151182][ T5831] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 474.151205][ T5831] ? __pfx_device_del+0x10/0x10 [ 474.151228][ T5831] device_unregister+0x21/0xf0 [ 474.151246][ T5831] hci_conn_del+0xc36/0x1230 [ 474.151270][ T5831] ? hci_abort_conn_sync+0xa7b/0x1190 [ 474.151291][ T5831] hci_abort_conn_sync+0xdd0/0x1190 [ 474.151316][ T5831] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 474.151339][ T5831] ? abort_conn_sync+0x26/0x210 [ 474.151366][ T5831] ? abort_conn_sync+0x26/0x210 [ 474.151390][ T5831] ? abort_conn_sync+0x19c/0x210 [ 474.151413][ T5831] ? __pfx_abort_conn_sync+0x10/0x10 [ 474.151439][ T5831] hci_cmd_sync_work+0x213/0x400 [ 474.151468][ T5831] ? process_scheduled_works+0xa25/0x1830 [ 474.151491][ T5831] process_scheduled_works+0xb02/0x1830 [ 474.151525][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.151549][ T5831] ? assign_work+0x3d5/0x5e0 [ 474.151573][ T5831] worker_thread+0xa50/0xfc0 [ 474.151607][ T5831] kthread+0x388/0x470 [ 474.151623][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 474.151644][ T5831] ? __pfx_kthread+0x10/0x10 [ 474.151660][ T5831] ret_from_fork+0x51e/0xb90 [ 474.151683][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 474.151704][ T5831] ? __switch_to+0xc7d/0x1450 [ 474.151784][ T5831] ? __pfx_kthread+0x10/0x10 [ 474.151800][ T5831] ret_from_fork_asm+0x1a/0x30 [ 474.151833][ T5831] [ 474.636617][T22247] syzkaller0: delete flow: hash 3743769594 index 1 [ 475.051990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 475.060039][ C0] lec:lec_tx_timeout: lec0 [ 475.064757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 477.972177][ T5831] Bluetooth: hci0: command 0x0c20 tx timeout [ 480.072460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 480.080651][ C0] lec:lec_tx_timeout: lec0 [ 480.085225][ C0] lec:lec_start_xmit: lec0:No lecd attached