last executing test programs: 10m5.364099474s ago: executing program 4 (id=735): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000000c0)={0x0, 0xe9}, &(0x7f0000000100)=0x8) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) (rerun: 64) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0xfffffff7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000200)=']\x00', 0x40, &(0x7f0000000280)={@_ha_fsid={[0x2, 0xffff]}, {0x6, 0x5, 0x9, 0x2}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x2}, {[0x3, 0x10, 0x9, 0x80]}, 0x232f, 0xe0, &(0x7f0000000340)=""/224}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x200, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x4a}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61d}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x953, 0x2, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4da}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x1893, 0xfffffffb]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x7, 0x0, 0x6, 0x5, 0x8000, 0xb, 0xfffff800, 0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc7f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x9, 0xa, 0x40, 0x100, 0x7fffffff]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x28d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb8a9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x164}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7d0}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8001}, 0x20000001) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x3, @private2, 0x1}]}, &(0x7f00000001c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40850}, 0x4000004) 9m51.844501136s ago: executing program 4 (id=877): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0xfffffffe}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x3, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x20008884) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000002c0)={r6, 0xffffffff}, &(0x7f0000000300)=0x8) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x5452, &(0x7f0000000800)) sendmsg$kcm(r10, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x200000c1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r6, 0x3}, &(0x7f0000000380)=0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000e6890000000000000a44fc937c6343102c0a23c314cc877a000000090a010200000000000000000000000009000200a497addf4c3dd8ff080003400000004008000a4000000000080005400000002c0900010073797a3100000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r15, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) 9m51.155024244s ago: executing program 4 (id=886): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 9m50.863799224s ago: executing program 4 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0xffffffffffffff8c, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080), 0x0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x7, "0441b613a3"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 9m50.717559174s ago: executing program 4 (id=891): syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff3e473aa1eeff88ca5b500028003a000000000000010000000002"], 0x0) 9m50.613935029s ago: executing program 4 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x1e, 0x805, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) unshare(0x2000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x27, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614000001000c67a7768e158e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d119000000000000000000000000000000000000000000020000fc"}, 0xff8f) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4001, @remote}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4001, @remote}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) (async) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) 9m35.342025847s ago: executing program 32 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x1e, 0x805, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) unshare(0x2000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x27, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614000001000c67a7768e158e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d119000000000000000000000000000000000000000000020000fc"}, 0xff8f) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4001, @remote}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4001, @remote}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) (async) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) 5.049144403s ago: executing program 5 (id=5462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'virt_wifi0\x00'}) (async) ioctl(r2, 0x8b22, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r4, 0x0, 0x0, 0x41) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1, 0x803, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3.811287717s ago: executing program 5 (id=5471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='e', 0x1) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000240)={0x0, 0xea60}, 0x10) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000001500)={0xffffffffffffffff}) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000001540)=r6, 0x12) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000015c0)={'syzkaller0\x00', 0x5032}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000001600)={'syzkaller0\x00', 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x30, 0x24, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x1}, {0x5, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) 3.620102962s ago: executing program 0 (id=5472): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@tos={{0x28}, {0x3, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x110, 0x1000000, 0xffffffff, 0x110, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x4, 0x2, 0x0, 0x2, 0x4], 0x5, 0x1}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x310) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffd000000000ffffffd004000000000000002600fcff0000000a95"], &(0x7f0000000240)='syzkaller\x00', 0x6}, 0x94) 3.42951078s ago: executing program 3 (id=5474): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008094}, 0x8000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x30]}}, 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xf, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b40)=[{0x0, 0x2, 0x8, 0x6}, {0x3, 0x5, 0x4, 0xc}], 0x10, 0x10001}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@migrate={0xbc, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@local, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x810) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x50, r13, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.28959819s ago: executing program 2 (id=5475): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x1, 0xfffe, 0x200}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x318, 0x10, 0xb9, 0xa1}, &(0x7f0000000140)=0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r6, 0x0) pipe(&(0x7f00000002c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300)) 3.140074451s ago: executing program 5 (id=5476): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) 3.090027836s ago: executing program 0 (id=5477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) 2.911986663s ago: executing program 3 (id=5479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_bridge\x00', {0x3}, 0xd}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4044) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r3 = socket(0x10, 0x803, 0x0) sendto$inet6(r3, &(0x7f0000000480)="576e8419f6e5ba33b0b1a71ab602e50d2b2ef509a16397f929b456b9b37e4e7f06df1ee33a5b1f3de0649be287cefa7728ffd04e30cdfef2e12610eea49619fe5adfaed1cfa3d6a06c994f3d456543d3859ccd3a24e5411befb0dc9a5d779768681fc4833942d29d271bfe2d16e2367b4e09501f5ccdb83eb2a2229db11fb01c1d303e2eb7f58ce8dc39d6e8a481a695a2f606b09c5cd024", 0x98, 0x90, &(0x7f0000000540)={0xa, 0x4e24, 0x8200000e, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}, 0x1c) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.860238502s ago: executing program 2 (id=5480): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "96f3aeac97d461f1"}, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "344771470a1562b1"}, 0x6}}]}, 0x44}}, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000300)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x12000, &(0x7f0000003700)={0x77359400}) 2.546870942s ago: executing program 1 (id=5481): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000100094a529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000028000014001280090001007663616e000000000400028008001b00010000807c00348014003500000000000000000000000000000000001400350073797a6b616c6c6572310000000000001400350076657468305f746f5f626174616476001400350074756e6c300000000000000000000000140035006272696467655f736c6176655f30000014003500726f73653000000000000000000000001eda3ddf73c72ce328d0d74ea56a895fb7b1b98d452ca42b7e54f9c71c4acb0d9ecbd69a60df2f37874d0877fa7dbdaa99bdfaa5022ab4811d14e2aa985eb027"], 0xb8}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.439759203s ago: executing program 0 (id=5482): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000d0a0000000000000002000006"], 0x0, 0x96, 0x0, 0x8}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) 2.340929416s ago: executing program 3 (id=5483): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffea9, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}, 0x5, r7}) 2.320123031s ago: executing program 5 (id=5484): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x1f1, 0x10, &(0x7f0000000340), 0x19f}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000004f80)={0x3c, 0x41, 0x1, 0x8, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 2.187728665s ago: executing program 1 (id=5485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1318371559927769d3", 0x9}], 0x1}, 0x40) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x7224, @rand_addr=' \x01\x00', 0x3ff}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="11bda27d58f9db95a733d19d371daf4a066830898d53dd91bb5cb37690b0860160719bb18d02188c", 0x28}, {&(0x7f0000000300)="2ffc05efc3f47e049f12e470c8fc173d4b3f3e1f381916586a38b0829d5edcd7e1b91867964531831bf6b02aa27832c227cfaeaeb313936a", 0x38}, {&(0x7f0000000340)="0ceb32132f62d5c4a06a5961a56e2ac272cde9b1f81981ff2a93aba95a72abc25e466b0491bffe7dd67df29db9635d2ba88aa5cdb55c5d1b1652be667763f78295", 0x41}], 0x3}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x3ff, @mcast2, 0x2}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000440)="52835a48aca189c3171b4c08f6e8940fd83f1cbb37c9c57c07419dc573cb3f269aabccc55a34de6b379541f7c98fff8f38cc85fb4963f20c35098d9b9744b59f17ddbdf3ee7421fca4ba7ec0f41884e02fb2241895bc521b9342f6986f73c0abfed49b5ba7e53724ed5d24d95a7e5b830ce365e94bd068b82d3721b622c5bd4b245dfd865c4bac8b84bb2d40ab524981d4f4eb1e0ac12483def3", 0x9a}, {&(0x7f0000000500)="b42861629a7d31b327781590aebb5e9d9697a466b3d640e60372c69344aa3b2b52399d29c15ea373f194ceaa6dceab9b86ec0bb04d8321e6fbc56df7b26d5edd61fcde35dd54e755ee00b5f4cf19fab5ac5b9a16382544fd04b18e16b8d8d50ad269712c2ae4408735e6c8486be6d5a91e040e40d6b5ebe211763bcd5ce272b3bda3a50aa8d75d77af61f5da46e6dfabea7131d611b4b402d725f6", 0x9b}, {&(0x7f00000005c0)="2be5290824821a45246ff0dbe22456117192854bcdefea77a422933fb551994556a42dab182d4f658bc736538ed3fb867babed51d20c43", 0x37}, {&(0x7f0000000600)="8c5bb11d5a9795ca5a957b4487eec8c4c56d105674765bd4d01bd9b1483d07ac783f55219ce43efe4dcfa27aaf899352dc5e5ba18e3e78b6cc3eb5b43f2b398d679e09c616af1cd0384724a67f3f17a61f326fcc82079eb930f24c819a895bbbb03dd30dcaa5e8c1f4f025bc32eae2febedc7f855f49b290617cf28e607fcd191716d064a2822d8e20401cdc222357572c678653b7223236af4193349ff7cef2804f68c873ff927e0491afd19f1c21f073d175b9a3dad4106d2001d1b2327c2b2d0bbe11f099a445234e68b36b9c82bfc385ce246999f4aba174bb3372050e7b6a2276c16700370fb01f9d5149322346ab5757d19ea23b3e383d8358490b9d548db25acf70c1f946ea14ec7dd808b4a759f793475f526125caeace47ca83382cb6d2a31ae4100da08a6f33b66f3b2c7bce75e40f9f5dd857822efe549fc81f4fa4f8f29d9727adeb77783c89509bd31ec58c8c67ebf00a9a2bbc54070c688be80ed85fa7ed382a63767b16a97f21e5a6683cc18f3a0a513a0b75c51aa851f5a32241bb73f7ade567b8c2df8c0c9133f4922da67e200120c325c4a7cfb2620a5acaf3facafdf24e84704d6a5493436bc0864ef9d5961e9a196b1041fd54c0031cb5e1c9282602b8360c4b56de259a876b2be3008e2beb4e51a0be64a0d9b09a8770519b87fc3fa3c71413a0e617b28d4462326ae2a83daa5513bf5f7406351435bde724b4b31156f8e2de472b2fa7834cb6838ca1b64f6de4b71beafd328d0b8ccd4f571e7e8b378a2dee6ce88deef2290799f6f92b55a392eb585f1d2e145ebfbb84c67e55f60106029b5b4eba2a9055a232cbee2413d29b3d49847fe3c3165f7a76a9e6ff80ba6430a700dbf6d42c51551f2ed41d490dfb7f502d5ee786cd5ee6bd5d5e7479089f0aadf074a43ba3d2027de249b17064b1a56d761fb8451e9b939cf4bc2e3cd1580b4a6b260fc9092a8c3ac07cd29bab7e76bdcf04deeeff1cfe5a5bc37b7edf8f0a91cc74e836bec1f934672871d9921ab3ffdab65ef2b49f81fc47a31158796f91bc9a86c43008c7eef7a452aa2f765308a84740dde6a50d93cbfadde13abcaee6c391fe912825880633a0c78f8821c319e3affa5eacd2b05774947d3a5a95913220cf569ab54dce119c74c0b87336d8fee921deee9c6a5c4b7e5b5efa626454b189a9a850525b0a171355652091353a4386f3a559577f1d07fd023cb01e5abcaf29c75d88976a70570dbe093860a5844effeecb5f2e00e323f83912e52be9976bb3079c9a13029cd3cacdfcbb4dd18bcd09018f3dc38a48caf41b79705f5cdb29e2f6c7bb8b63e3271f03dfac38d7fd145f52788f9ab11702ece1adb5fdff22fa8c674e26c4956758bfea96cdccb9ea04cfab74c5dedae103b4a85fd656404adc938ce64792e746cc277a67a4311c9f34398c4de9ce8ad2bae9c1a145f9b3e6a173fdda8349a72c5b8da191fb7c5328bf28c0e6bf9544db69cf5bc7ca48be2e0f70c2d594e517fe935803bf6889ab354f97c1a806343cbe20ad2371ff5c3a4bec9fcf39917be0cd8fb560039ca4b8781311feafdd658718f13bc80876768a17188bb2234cdca435a1939fb88c1d0212d79927f9eb942438bfae2c3d9570ead373bbe87cba5157077c1af2656888bdd5efcad135b1f8d3be209a4822f3bd53d4262957bcb9cd182d7a96e33f8d42fa9925ae62da8ad1ebde5ad106025f679c08a4153b494cbbec073731c1fef7c2f97e7228eb4fd5f3237b25b51e5e10d66cc498f4444fb069b0dc5fe5fe59cf3a08e6b753b3442b652d7ae3c1e4a8a4768927e9a05f9b17f2f9170c7a65943df0782aa47077dbc98365a586b7501c10db0b5eb98b9da81d7e563e10d1f8cda05c62712de92621c8488599fadbfb1518e2f93df2ea1e85d80efb2bb5c400cea075b042f334e0ad20368874988a93423e58539f3ba4108fd803ed8e4b92035891973aa3fbc88510d01f8dfcaa3610d91321ae3532a7f0c1af386235d4336fe5b0cb49e9bd9499d61824aea386d879ecc8cddd6f5e997321870c03ead175ff69b428f7975a1aceb11439eb1f2a7dd2935de7ffa9c3ec0bea72f44143eb18db3f6305eceb0793e09a774d9f0f007044a629e05a643179c58662d88ff646f3b2daabe16139cd998381133ab17bd07a5f6eb82b1531c8ae1a6ed08f49559ae6a091e07b739e873b18ee36c80afb03ed281b913c1373b70bbf9ea05eeabd65704e1ee9cac6102d65006386f75f59f2b830ce24e1a73f05b9cf6db3af8f51c174439f4634812d767e37075463e1b614776645c7545c52b5f00f64f6c762e401391b8ebf928012c8fc8bcf241dde575ea75acda04fc54913be9d1af6e81d2054aef57963be57feccf34ff6f5ebf783e3f7a56f42eb1635898cce2b52f9f23d58e6db15918045f0805c4951860f25f4269a7e76e03e3f10220d3e1b8db86e8cb3c9355eb060f9d643eae6f77e962d01f2175570af4dd95fa6ef0f9aeccf551c2af3d5ac2fe7b64a2f02af767e3696b0918f16a698ffb5876225563d4e2b682c11b3baecb1b2c53be02a88a43fbc6da326a0e900f87d8318b3c38465aa22d0412cc4ec20de8aba859ba25a9591c3d9107383cf5ef4558e5e0471b5b0cc37d3be3ff01100092cc75f92b8fefbd3e12a7212a51de716d05b6bcdd61a4efa4d7aed317a0ba4363f7f01c22dccd8e75b6ce99c52562c6acbf03a9e65a4a84e7b5bee295674fb2a03c1f3333adf65627b8117fc4fc30d5b5cfc49e8ea792705f117ac48e3c545e5f22e09696a3aee61db6e8ac7eb291a6de520819591ec2154749d718729f20f0e1ae23bd8a81e0e3a1bb419c2c4a348805f952b7d33ab9530e1cc013562fc063bf83796f440c528bf9a72dbf4a4df9e790c5714e3a22437838121682591f8cace8f9610a231d76a763a4b93a9e34717d3b05c8827eb15fa9981ff59bb02df4c06e4688aab945efcb34932d0b2716b160139efecff6129bd6d21ba1f03265e7a3f558f5cf888f3c8eb7eb2a4399e5fc92c1f5e900dad26ce8b1c36c459b336fe63896ee3a7e6c5501704497edb5a959de049b2360c82cb6c36d219d15aea7040f630db1da09ec82b9fadd54ea6592598dcd142c6ac03a89315f2cd428c40ef0941dc8a73c81ff2cd8be6a72b23ae288d994244e3fa78ce30b5c4bf70c4e37ae8aceef7e87d2060103e32cbfb18e2f7925fd464f6f976c314f6583c08c7b83d0707d75d621fcd2aa1812765aff9dad13ff1522dc122c26b1822b1d7cbc2d0b9711ebffdd8712df3aa46a8764702a307d8080ea0b91ee04d6423e5c6fe5ddf42f877cc87a0730ee39491c683f27011728e9adf440f7abb2f4acc08655cc3881d9afeb7831eefafd8a7f404d14cae19ccf679f5ddf2814ec642f453abc357f38b117cf15a3ebb9652668af9bf5d6543b32f7be7a222a62c4b6f72e7467643c77a74279bcf4ed967175d3010e28d5529486596848ee08f564e9562726c143fb85a2fc5a430d57faafe7b744065e0e7aa2805da9d485749e26dec1b05d4d9a52e535fcd18430711c651b58c22ad5cc21b0fe4b49c29954d21c8ae8c9a21f4528ddd219620c79730d8db2590777038588ac698640421454d98f4309398d3ad92bf1fb7311f5c972b5db1ccf3903c9fb7ebea27563e4092695d4e481ee319fe71f4b315f3ea4978623cee8780d8fe89c20028c2570df805d41fa313765ec8b8546d18ae87d275384f3fe4eee43fe45a00a32697a755cb67c113e65b29156cf7dda7e39b8610057f2358b93c7c40e755a79f0b5ec1d87a812ad191ebe78a527b5f448fb913e4714eb70429ffb9a4b8f9e7aede7bad1788cfaf0225857fea30e5b3b3a488ba25e08668821f3a141416a6b39e81864e23353e83a5798a97ab05be931ea88b8f4980ef3e0f3285f16483af333bcb33a87f4f5089dd328887a5f30746325b06158fb9ca34164c685c62e8c84e7826b9f3d9e7749bd86cf1185dbafc7947930875ee77e9653f6680163bc4f65cbb4cb9f976035610f98d6691b200018332d496164e27bdb3c96e8d7aeadf32e0698712e958e043ee2550e4e0bce1c54100082f99b56f18d2fec0253adb0dc19325ac0900b59498fbba5706a0bc0ba62aba154556a42d3c94b5bd2d03a05d6e9be580eca926c9245f71bddd22433f4434e997832b4978ed900d6522b26a7cc28dd2d32a9858f3eb09e64ef5071e017c810449dc333036777e87aa19895136dfff80aa1e7d981862d52ec4138dbfd86e993eb0fe77a862f0d4d50b038357096a01474d2372316b271b8a7ea46c38dac777adaff3cf78ce28b8a13b63986a3349318f97f28aa46f492082abafdac9772780a8a7eb5e23af661e9953e0317d3ea2a7a14c6ea5bd46c1cbd32c8185eb146925af1a19d23c7e151c61af1a883e0ec31c9216893240e474df7b78fa279cde31bfbd8b1d33b1f0101cca4be15c50f5394f08986c34bafbbcb1c72e54be0e88a080b2dcde295c4cbff5ac874b97dc5bc29215e16b839637979ae3fddc101c9ecf634efb74d6f39e2b604ef93db520cc01455dacee90244e4c0c3421dc817a23d030a5805bfc0e91432beed53335ec79021fa79bf032fe98f78a65e2d32ff5481486e31b302e83173cbb8f6b41547415800da49d72d6f12a8cc165c1f38ed5d269af91006107e47f232b448937492531c17556295c0a57487e2bdd26bb4dc950e6fdd51852186b2ad8cb40bdc0c4f16f2ac6022ef50f9362320c9823eb8c363cd1c04f2ddbb726ad84d0fe581ee5099a47a5f1e3c399228d08f34fe937bf7c4655f678992c18ec0a188a2be4d55d0f642daae5777ff71a258be988bb633e174c6e80e3100e5aaba460fc1747458f8205e55bcc6cd6552cb35db9831318fd98dedff467abf8b9aa53ea61087078c6f04e7f39ea60e5ccb7368d51b132d9fa96e50e024d8c46a3003d204bcd595bb78e3bb6f5ddae801090a78cfe83f475ef4092a3bc34ecf194603b2dac4892e6748d64e3f907cfc456f8a777ad796c8d8493b9496aa427c9bb4fdfba9a2788745e0a985f3b83bc99b9fbd089097a3a90564aa1b2c6be325c8d41cfc605d5f7af0c84a84f67a7f396eb30cd000790544b7f9c6008697600a69e71843608189ca74295a13e190e73a00c224dc90e4fa3c556c0d012f554e5b23c674b45a92fb382a1f3c577e58e6a23d088352b9b36dbbf9ed437e5d551d1d6a3a68144253c69ede07cb9f40fcd51b6cca06d6f332898cd30a3ec2a9476e53f12d342d0be699d9b570c5bfa720bf0de389d1f3266d9039814a5220e3dc4089496bcc853579c928f29efd035179abac1009fbdeee77a211769402fbc69d2bcd7dd5d509c3885ce8c524b0325b89ea07087ccf7d611a924a303135cc831f57ba5b8f52408c5a6b722ae5195fea61693b8ee099cebeebb0309ee81dac805bbdeb8a84a3efc77dfad707dcf4dc15a61af655b2538592ce8a927a555992f3282d82219036c899073d1a8c0941c6dad06e8d798c9fe469cc90b2a7c15fe50cf196f7b858c46790d9786ecea878146691fb0f00a84e57623cfea014bf2dac24dfde1838efb61016b58f69fb00dfefde70447e16a05d98edc4928f5241d4e7a433da808dc79253d6e8c477ed6cbeb911c773a7f61a0db3520a7a05d189d6251720b3809cb42b6aa5e4aaf60a879d2ccf4b54300afbb48b1db13ffd1a7765d511927a9146ca5ffb9052ebfb09a6e258b88d6a8110491ba0a204c9ecc24302af88d64965a1bdbb658de8221eb93529295", 0x1000}, {&(0x7f0000001600)="475cef8375b9f87fb1b99460974c335c37b82b29e7b84816bb982a38d0a6b33cef494fd73c806c549cb110730af6475344c59753e5a1becf1db40a38933601472f1ac17a1902fd01553b79de8712d5d0a3267783996d253d6a3414753ad48cb32976551550f34828dd378b3a47049b7c3e31da4beb4b1a7ff685f441416a4093ccb35cfb6991bfa3763b10166874e7aae653ee3be1a679f06b8bc65b6789b6ddb52b2a42338c11519d3ea7dee0e5012a76e6ade58564d32a4250dd1447e0dd2e0892016e51e039094d34df5ea81ec58be6a630006dee4501e04e", 0xda}], 0x5, &(0x7f0000001780)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x1, 0x3, '\x00', [@ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x6d77}, @hao={0xc9, 0x10, @loopback}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x44f}}, @rthdr={{0x58, 0x29, 0x39, {0x89, 0x8, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @loopback]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001840)="10c24ff8a7e8b5352ca896b7db10bc6d648fc661d23110d26a88b1a7ff243ec940c0b91fafa7d077859da68ebeadc3627254702f2cec0fdd7af5b2455c74b5528d2fa0b9a5ad844d95a9b301d764693377d4f541244b1f2374c34263adcf20e68bdc6367630b587ec46f5cbe42af5135d8abb1a36c818a162b81f832634271a350cb13fd3b25bfed470096f135facc2308544ed475342aa06144c160bd03f402d9a9d7d8ba5b33dd45ad66a7f5eb80bfdcb6163a26fd9cdbaeabc773b9eedb1883c0291cd2bc3e17b5313bed775bc17c8120131aff933bd19da73c870e12ade56c67e141c2af638255859dbc", 0xec}, {&(0x7f0000001940)="d61eef111d2f1ffedbe39eda1b6202d62f1e3f2289faef21526f784b7490ab07a40c5c611b1cd713adc3903ff0d3b6c6154be7b1b1f524c4a685fd63f904eea7b483393f6ad9430767c3b9fa", 0x4c}, {&(0x7f00000019c0)="d7ab1aba6b2cc75724e0832e31a18eab4cf2d2f9833d6ab5208e43dcfdf7c66fb74fd535a313f62e84b25a760b717d6e4a3ae888ddb9a2dce9e0919a3f00e5ba33eaa2fde91cd880f6c4eab73522a8b858c19699f3f135c76007f2e37cd4220f45b76f23d3455a69766b0aa2d78d141aff5d94984c4d14cb729b512d574cfae427626555a782c6ec59046465887c9fe4310ea59411c75a799a1ffdb65cb2d4254146e0554b556bdda882b17bd6441a1080ffc6a6702f76a20e0ba01a108463072db9c463f0f26b90896bf94e7c50d03c170912bc3b12dd8088db54dd8e0659d60d8017ca4457f59c02", 0xe9}, {&(0x7f0000001ac0)="d40fe80ec4e3482d01e742ab8594004124d4fd293183c6cfc2e80b630d7f99caae58b3bc02e80df41aeb278f3dc683e5ba4cee29985cb522f12b261feb4c37da94", 0x41}], 0x4}}, {{&(0x7f0000001b80)={0xa, 0x4e21, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="feada81ca53f132c1508e85d71b99dfc91975e0be5f13752989eba14f5b1a6e453388c43bc8b6465", 0x28}, {&(0x7f0000001c00)="8dea2f4d05845c34008b39f700b0586d49370aadec9afb4b19ff0d17f91303500384865d97ebbe118781d9b8924dec1a67e21f94a891ada048499b2f29c089957d09c672dc94480e1359a89e7e2a8ba97f53b806c10670e3c60a70db9e16f0086c3716c0c2353eab549ac93bd90dcf1c983d0d90cb06621b53", 0x79}], 0x2, &(0x7f0000001cc0)=[@tclass={{0x14, 0x29, 0x43, 0x7fff}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5c, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x73, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x78}}, {{&(0x7f0000001d40)={0xa, 0x4e24, 0xba9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001d80)="cb678fce982803904d8c9a08ad86ec9e0422f93e71bcc43a0c81d068da182978146fe785543760aa3ff46c2cc8e1a0eb3e8b3de350dede7575bc4ebe4858d1ae9eabc3f0dc19f22e775b27162ce7613abe83f3a76ee81417b1a38c424ddbd14aaed1552e36bcfdf733d194fa14ee3bbc7f3fa416d31e1a", 0x77}, {&(0x7f0000001e00)="154d225ac59b69caa1f357b76d6f75842a000188ac9e00f1ae476ba7f2f5eb93f5fd45d0801053bceb97452b60175d6403490dd09c9f3d611a6fbaf92fdb033487693b96f469429f2ba36134e4ec80502192b2201b2e33e3f3a195bbd7bb5ae566a5b1cef52a2261012f03c4b262ca57829275373e9ac3b64d7393fede62425b966324358accd5b3210475e46ffd6d33aa05e97fefb186b37654b2e15605789037209daec81072014c2bc1378b862318e5dde773e2d7d0c82bea6d612b7b966783aaf34bc75a37", 0xc7}, {&(0x7f0000001f00)="3f0500cfa09bdb390b80326687a62ea00dbab589a4bc62280567f37f4555402c32698abca41116e1b2cb13fa485c7a71d476d0290d3bb9f26ccd8b384e179eb0fcc4556c6547812a42d301aaefa257e4afe31cd26707fdb8ea30d5b1235d26afd2a59ff2a544013f354f7e6dab4e08049753425a2b61b406ce942e348bfc73a1f194b2c129ef4eef4b5b2a9cfbef3f73edfd630dad0ae69f9c7993f8c27bf106fa3e5956e6e58fe6f969d5b7319245c73973a05179ba60eeca8cf800cf0261a10e5d39b77011772ea131c555d337cf7493160f5441", 0xd5}, {&(0x7f0000002000)="a5406db894a84a6a86fc0bc5ca0f3564fab74cc60b744b4c", 0x18}, {&(0x7f0000002040)="78782b2123cd05e7c7e82c52170c", 0xe}, {&(0x7f0000002080)="9071b06457311920a42f22817af81c3fdda2d4a8e8e8f8fdcd1775c7c9114b03153ec510aff105f7a23f93b1e9f6a3973e7479f1f9db44276a30e1cea934200f1e7a6882d30cb9cac38bfaef8eda39ca29b406ca821482a055b29233fea211942e8e1d29a04c6b943517049598e7bd509632874f1b079a2d3e007d3ec1944a752bbf5bc8f40a50ae73301347bf0c615c883e3d714911f694679ce2962b5a6cd991d80ae728481793e9", 0xa9}], 0x6, &(0x7f00000021c0)}}], 0x5, 0x4011) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="f257a8ea09000000000000000806", 0xe, 0x400c085, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.063564608s ago: executing program 2 (id=5486): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xd, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0xd, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) 1.950595305s ago: executing program 0 (id=5487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000002400)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r2) 1.83582791s ago: executing program 5 (id=5488): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x81) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='+\'[+(\x00', 0x2040, &(0x7f0000000140)={@align=0x7fffffffffffffff, {0xb5f, 0x1000, 0x6, 0xde}}, 0xffff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffd}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8020}, 0x8000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x6, 0x3}, &(0x7f0000000400)=0x8) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000680)={{&(0x7f0000000440)=[{0xb, 0x1, 0x0, {0x4, 0xb29d}, 0x2, 0xeb09, 0x8001}, {0x10d6, 0x4, 0x1, {0x7, 0x5}, 0x1, 0x75347282, 0x101}, {0x4, 0x5, 0x4, {0xa, 0xfff}, 0x10000, 0x3, 0x8}], 0x3, 0x40, 0x9}, {&(0x7f0000000500)=[{0x6, 0x32}, {0x100000000, 0x40}], 0x2, 0x10, 0x7, 0x355}, {&(0x7f0000000540)=[0x8001, 0xffffffffffffffff, 0x1000, 0x5, 0x10000, 0x3], 0x6, 0x8, 0x6, 0x8}, {&(0x7f0000000580)=[{0x7, 0x1, 0x6, 0x2}, {0x6, 0x40, 0xee15500, 0x8, 0x2}, {0xeb, 0x0, 0x10000, 0xa24, 0xc}, {0x0, 0x9, 0x4, 0x9, 0x10001}], 0x4, 0x28, 0x5, 0xfffffffffffffff7}, {&(0x7f0000000640)=[0x6], 0x1, 0x8, 0x101, 0x3}}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000700)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000740)) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000780)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000007c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) listen(r3, 0x2a4e) (async) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000840)={r1, 0x7}, 0x8) (async) nanosleep(&(0x7f0000000880)={0x77359400}, &(0x7f00000008c0)) (async) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000900)={0xfffffffffffeffff, 0xc, 0x1, 0x7ff, 0x2}) (async) sendto$l2tp6(r0, &(0x7f0000000940)="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", 0xff, 0x40011, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0xb05, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008014) (async) sendmsg$alg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)="d754c2a7d564f6731e31925ce772db5bcef558dec33c752c42a623626f39c506e777e5544ce808a861f420fe3e1cb9", 0x2f}, {&(0x7f0000000bc0)="2e34d53d8a0b716e49ce4a727e518a7d2588666b4a3ddae1e9eae832cb1779b0ac3143ebe1234d9e05bad1efdc5955e9df45a06fa16d20239f755eca9cb6e7012e0a745da9c974ba91b8f034598d0ebae700451d48731d6fade6512a45f001ae57e974010d8379ea", 0x68}, {&(0x7f0000000c40)="66f9650e0acaeba23b5a6973848be22c0a2cd6f4f993fa0134f9eb73c6f704a3761750105e91f557ecd74a9be8fd23761065ee85166613d14d42a253b32444573b5042f3cb0e4a458d5a35d6df916b8517ae922440144dc42a9932e02da38954a69c71b7eb196d468b3c924df6f26b8a8aad6c859dafbddf9781aa5534cbacf57bdf54e86c367c8c7bf0bc5bec1a910a45f310662dfdfea474cf55ef3d566e01bf41a6829bf043", 0xa7}], 0x3, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x20, "0b8dd7fff47ae291d57215609253cd9aa9e40a6722f7db08b2242ae8d2164891"}, @iv={0x88, 0x117, 0x2, 0x72, "ec3914dca4be2efb779bcf0515c0f63aa18772a7e7400acb37e9ea194d5422b279f4d2ac322179c897943ec2e98971ebd1e3126a93fe23476dbda2a343a800f95369791477d56a17838a8ab84cd0f8b799540c5f5b33c924e2dab43bc75803310830f05c01ade603cc77bf64cfe1dc17036b"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x108, 0x50}, 0x1) (async) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000ec0)={@null, 0xf, 'veth0_macvtap\x00'}) r6 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000fc0), 0x4) (async) r7 = accept4$inet(r0, &(0x7f0000001000)={0x2, 0x0, @broadcast}, &(0x7f0000001040)=0x10, 0x0) clock_gettime(0x0, &(0x7f00000080c0)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000007ec0)=[{{&(0x7f0000001080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/128, 0x80}, {&(0x7f0000001180)=""/172, 0xac}], 0x2, &(0x7f0000001280)=""/24, 0x18}, 0x8}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000012c0)=""/133, 0x85}, {&(0x7f0000001380)=""/246, 0xf6}, {&(0x7f0000001480)=""/214, 0xd6}, {&(0x7f0000001580)=""/177, 0xb1}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f00000016c0)=""/144, 0x90}, {&(0x7f0000001780)=""/17, 0x11}, {&(0x7f00000017c0)=""/69, 0x45}, {&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/17, 0x11}], 0xa, &(0x7f00000019c0)=""/4096, 0x1000}, 0x10000}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/114, 0x72}], 0x1, &(0x7f0000002a80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003b00)=""/184, 0xb8}, {&(0x7f0000003bc0)=""/141, 0x8d}, {&(0x7f0000003c80)=""/188, 0xbc}, {&(0x7f0000003d40)=""/236, 0xec}], 0x4, &(0x7f0000003e80)=""/64, 0x40}, 0xffffffc0}, {{&(0x7f0000003ec0)=@phonet, 0x80, &(0x7f0000004640)=[{&(0x7f0000003f40)=""/157, 0x9d}, {&(0x7f0000004000)=""/179, 0xb3}, {&(0x7f00000040c0)=""/26, 0x1a}, {&(0x7f0000004100)=""/239, 0xef}, {&(0x7f0000004200)=""/114, 0x72}, {&(0x7f0000004280)=""/133, 0x85}, {&(0x7f0000004340)=""/45, 0x2d}, {&(0x7f0000004380)=""/193, 0xc1}, {&(0x7f0000004480)=""/229, 0xe5}, {&(0x7f0000004580)=""/143, 0x8f}], 0xa, &(0x7f0000004700)=""/157, 0x9d}, 0x3}, {{&(0x7f00000047c0)=@generic, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004840)=""/4, 0x4}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/239, 0xef}, {&(0x7f00000049c0)=""/238, 0xee}], 0x4, &(0x7f0000004b00)=""/17, 0x11}, 0x6d}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004b40)=""/113, 0x71}, {&(0x7f0000004bc0)=""/195, 0xc3}, {&(0x7f0000004cc0)=""/27, 0x1b}], 0x3, &(0x7f0000004d40)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000005d40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/4096, 0x1000}, {&(0x7f0000007dc0)=""/168, 0xa8}], 0x3}, 0xe}], 0x8, 0x12000, &(0x7f0000008100)={r8, r9+10000000}) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000008180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000008240)={&(0x7f0000008140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008200)={&(0x7f00000081c0)={0x1c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x81044) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000008280)) 1.748749415s ago: executing program 1 (id=5489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4, 0xb938) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000400)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x4804) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.669733941s ago: executing program 2 (id=5490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}]}, 0x11c}}, 0x4000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) 1.516147892s ago: executing program 3 (id=5491): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x802, 0xfffffffc, 0x7, 0x80000003}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) 1.319902305s ago: executing program 0 (id=5492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000000)={0x1, 0x9, 0x4, 0x6, 0x2, 0x8, 0x800, 0x5}) 1.289004601s ago: executing program 1 (id=5493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) 1.192635211s ago: executing program 2 (id=5494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000100)=0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000005c0)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x4) close(0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x62, @local, 0x4e21, 0x4, 'fo\x00', 0x18, 0x5, 0x10}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d5}, 0x0) 1.192221242s ago: executing program 3 (id=5495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180100003200010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200000b0002000000200000", 0x17) 1.125061967s ago: executing program 0 (id=5496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x24000000) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x5001}, 0x40005) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000002880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002840)={&(0x7f0000000580)={0x22a8, 0x17, 0x4, 0x70bd25, 0x25dfdbfc, {0xe}, [@typed={0x7, 0x95, 0x0, 0x0, @str='[\'\x00'}, @typed={0x1004, 0x85, 0x0, 0x0, @binary="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"}, @nested={0xd0, 0xbc, 0x0, 0x1, [@typed={0xba, 0xd6, 0x0, 0x0, @binary="52f71fd30667b10817a406226f2aab0cc8564abb303775cf8f6831ecae71aacd08a3b7a13c3bd6cdb6b7ef06dad5ccb06c5af72c326f6aab1ad25fb5f0bc90292254cfa2eee56cbdba2fd83a8dff4ba7b15b68f79c0676c960add0fdb7d24b4276dc12ee84143f74e18488bdb0b1fa58c0b625f525f052f5a0a305edd8f45e8cb5f5c24cae975aa04cf023eb07a8019cd5bb198be20bdbfd76a170c0c39de2aba92d2f6e0df3b524af4a56f6340a7cf5c6683e9ef428"}, @nested={0x4, 0xfb}, @nested={0x4, 0x112}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0xffffffff}]}, @generic="f02b27eeeec5b11a0a93872d42b8b1bd5d78f50153afe36b3986828699b26048ff9cea9d9cdcd984c4268a9dbdecf2b0978618fa9d09b73f2f676d5055e6ff18afcfc12c66a9ab100093924efe5b3c0a186bbc1e5d4c7e410e1b2f8fe1e38c68de12005841f949922457228d28774cd5ded863fc3718bd0f3b3010968cd52f0d495b29ec81b10e7a40b0884c02816a0bb146b4daba4668ca43d932b5c37fd1be856669e4b51b3d93e4df9bbf864b3f000840be76514bd98966ed536df62d7a7c0c20e0f0bbb7b9f7b9275deb124dee3a28fe435d2df94f6b0c", @generic="021f4068b2e84e35e8abb1496f5ac27fcf568ea25d44e8734c38f97f31e8dfc4b39acfce3fdb4f507662df30e934652f4bd9f45c4414cc15d44adefcd1e379045078dbb62b9ac31ade565fe63c26905d4511bc707c7ee02a6848c852ca2eae257e3b9f7cd3388880199a301e905b3f6999edb65af578e889afe390b882b20654b1f9b96e01ecdabe45009b70b0d0cce24c0f42c157e646d7f6e840ffe51b76f694902954ec83de866c61c3c9d8917bcbc7c44bff9db28d159af25cdc82e3672a893d5838c16935bbb4901319369dd05fe832ea7dd957c61fd472ab", @typed={0x1004, 0x26, 0x0, 0x0, @binary="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"}]}, 0x22a8}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040) sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000002b40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002900)={0x1e4, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2725}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x268}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x84a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x499}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8015}, 0x81) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000002cc0)={r10, &(0x7f0000002bc0)='\x00', 0x204082, &(0x7f0000002c00)={@_ha_fsid={[0x0, 0x2]}, {0x7, 0x9, 0x7c071ead, 0x1f}}, 0x0, &(0x7f0000002c40)={@_ha_fsid}, &(0x7f0000002c80)=0xc}) syz_genetlink_get_family_id$devlink(&(0x7f0000002b80), r11) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002d40), r6) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x14, r12, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000002e40)={r10}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x4c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c804}, 0x4000) (async) openat$cgroup_ro(r11, &(0x7f0000002fc0)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003040), r13) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, r14, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xf}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000003200)={'tunl0\x00', &(0x7f0000003180)={'sit0\x00', 0x0, 0x7, 0x700, 0xa6c0, 0x3, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @remote, {[@rr={0x7, 0x1b, 0xef, [@remote, @rand_addr=0x64010100, @multicast2, @multicast2, @local, @multicast2]}]}}}}}) sendmsg$nl_route(r13, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)=@ipv6_deladdr={0x48, 0x15, 0x8, 0x70bd26, 0x25dfdbfe, {0xa, 0x18, 0x20, 0xfd, r15}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x5) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x2c, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x20008000) (async) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000003480), r10) sendmsg$FOU_CMD_GET(r11, &(0x7f00000035c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003580)={&(0x7f00000034c0)={0x84, r16, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x4000011) 887.324525ms ago: executing program 3 (id=5497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000bc0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}}}}}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x48, r3, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x400400c) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000680)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000700)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0x20, &(0x7f0000001cc0)={&(0x7f0000000c40)=""/4096, 0x1000, 0x0, &(0x7f0000001c40)=""/68, 0x44}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0xc, 0xc, &(0x7f0000001f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000001fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000002040)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1a, 0x11, &(0x7f0000000780)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xb, 0x6, 0x8, 0x8, 0xd086}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x101}, @map_val={0x18, 0x8, 0x2, 0x0, r8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}], &(0x7f0000000840)='syzkaller\x00', 0x0, 0xb4, &(0x7f0000000880)=""/180, 0x41000, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x6, 0x800}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000002080)=[r10, r11, r12]}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="012226bd7000fddbdf251d0000000c000600030000000000000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000100000001000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x84) 772.213294ms ago: executing program 1 (id=5498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00ffffffd41064000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 484.311397ms ago: executing program 5 (id=5499): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000327bd7000ffdbdf2500000000"], 0x10}}, 0x20000084) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x3, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1f, 0xc, &(0x7f0000001700)=ANY=[], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r2, 0x0, 0x0, 0x0, &(0x7f0000001800), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x8e92, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001300)={{'\x00', 0x2}, {0x5}, 0xe6, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="562cda364124633b2c40faa37153e25684a4ccde8afcf0173a30f94586a750d3f0092fdf3b783387238f5a64fa5cefb8bcd1b95327ad45f93839474eb0623d3e02a10ba6a084ad436bfe4bc5f34c8c641fbbae0857205e461f2fdb12990c03597a65", 0x62, 0x0, &(0x7f0000000240)={0x2, 0x98, {0x0, 0xc, 0x3d, "005f1b516bb255b0ce58eda9d59798a8a2619301aec6e5ad38e1a88c3e57193c16db162355255d8b1f1e568c364e7c554428236b1c03c29e03660a1cc5", 0x4e, "261a90b72f319cecb458680abd51aa5c0f97e2cc2c9111674cd8d545e03719d2c4ae415dbbb0ba70b447dff83572005154dd7f988b8796847c4487ce3f45baed23d8165a320a29ce4b4853141769"}, 0x1000, "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"}, 0x10a4}) socketpair(0x2c, 0x3, 0x4, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r4, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40016) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000001400)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0xfffffffffffffd9b) 273.062939ms ago: executing program 2 (id=5500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000180)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x2, 0x1, 0x40, 0xf41d}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x5, 0x204, 0x1, 0x3, r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x30]}}, 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18ed", @ANYRESOCT=r4], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x4, 0x1ff, 0x4, 0x176, 0x80000000, 0x1, 0x0, 0x7, r2}, 0x20) 0s ago: executing program 1 (id=5501): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="4ff3c74a360001000000000000000100040000806d9c2a734ac244a5ee806b6bf19bbcb55e2708d499758efb"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000f7a1c84f5c4d850849cee409ce7f153b3d825299b3e78e4c90fa7f1bbe4755314a1015024b2c1a13e8aaf53de2f8123b0a2c270a5ff7d46ab91f1570a22574978fc441ea111657efb2060e2900eb2cbd8db058eb31f3834a7e59fd31589dcf245bd4ca4158b4728f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000840)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "a67c14ddeecb7282"}}}}}, 0x36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000700), &(0x7f0000000740)=@tcp, 0x3}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000480), 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x12, r8, 0x4}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000006000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x59}, 0x94) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f00000004c0)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x773c1000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000c50}, 0x20000000) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r2], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r7) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) kernel console output (not intermixed with test programs): e veth0_to_bond): Enslaving as an active interface with an up link [ 454.400410][ T1155] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 454.419470][ T1155] bond1: now running without any active interface! [ 457.048864][T19613] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3339'. [ 457.089022][T19612] netlink: 'syz.0.3338': attribute type 2 has an invalid length. [ 457.599400][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 457.649212][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3344'. [ 458.080649][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.188730][T19631] bridge3: entered promiscuous mode [ 458.229311][T19638] ip6gre1: entered allmulticast mode [ 458.254124][T19643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'. [ 458.255128][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.255398][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.255601][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.255849][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.256068][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.256273][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.336134][T19628] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 458.645469][T19653] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3347'. [ 459.037977][T19656] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.174686][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 459.174905][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 459.175919][T19672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3351'. [ 459.178770][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 459.178971][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 459.179145][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3351'. [ 461.549923][ T5640] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 462.876919][T19744] __nla_validate_parse: 57 callbacks suppressed [ 462.876940][T19744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3369'. [ 462.997283][T19745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 464.153359][T19779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3378'. [ 464.206212][T19781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3380'. [ 464.286421][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3381'. [ 464.286457][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3381'. [ 464.396990][T19787] gretap0: entered promiscuous mode [ 464.430153][T19787] gretap0: left promiscuous mode [ 465.070892][T19798] rdma_op ffff88807c1eba38 conn xmit_rdma 0000000000000000 [ 465.299665][T19802] ip_tables: iptables: counters copy to user failed while replacing table [ 466.079887][T19816] policy can only be matched on NF_INET_PRE_ROUTING [ 466.079901][T19816] unable to load match [ 466.171212][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 466.323231][T19819] lo: entered promiscuous mode [ 466.355181][T19819] tunl0: entered promiscuous mode [ 466.397120][T19819] gre0: entered promiscuous mode [ 466.464383][T19819] gretap0: entered promiscuous mode [ 466.704267][T19819] erspan0: entered promiscuous mode [ 466.867041][T19837] ip_tables: iptables: counters copy to user failed while replacing table [ 466.899216][T19819] ip_vti0: entered promiscuous mode [ 467.118248][T19845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.118958][T19845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.044585][T19873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3405'. [ 468.301305][T19877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3407'. [ 468.872442][T19888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3410'. [ 468.997259][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3411'. [ 468.997281][T19894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3411'. [ 469.062870][T19895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3409'. [ 469.625939][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3415'. [ 469.625976][T19910] netlink: 'syz.5.3415': attribute type 7 has an invalid length. [ 469.625989][T19910] netlink: 'syz.5.3415': attribute type 8 has an invalid length. [ 469.626001][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3415'. [ 470.253421][T19922] xt_time: unknown flags 0x68 [ 471.758466][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'. [ 471.925192][T19966] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 472.130526][T19966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.818774][T19969] bond2: (slave ip6erspan0): making interface the new active one [ 472.853268][T19969] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 473.891478][T19992] tipc: Started in network mode [ 473.891544][T19992] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 473.891596][T19992] tipc: Enabling of bearer rejected, failed to enable media [ 474.144111][T20009] x_tables: duplicate underflow at hook 3 [ 475.271488][T20021] netlink: 'syz.3.3437': attribute type 12 has an invalid length. [ 475.278041][T20021] netlink: 'syz.3.3437': attribute type 29 has an invalid length. [ 475.278059][T20021] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3437'. [ 475.410562][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3439'. [ 475.676922][T20021] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 475.731356][T20021] bond3 (unregistering): Released all slaves [ 476.058566][T20037] ip_tables: iptables: counters copy to user failed while replacing table [ 476.468022][T20051] netlink: 'syz.5.3443': attribute type 1 has an invalid length. [ 476.468045][T20051] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3443'. [ 476.553642][T20052] netlink: 'syz.5.3443': attribute type 1 has an invalid length. [ 476.553664][T20052] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3443'. [ 477.087861][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 477.087899][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3445'. [ 477.088593][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 477.088617][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3445'. [ 477.426656][T20056] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.005918][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 480.531713][T20141] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3461'. [ 481.098264][T20151] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3463'. [ 481.195919][T20151] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3463'. [ 482.023888][T20170] IPVS: set_ctl: invalid protocol: 115 172.20.20.55:20000 [ 483.228361][T20190] x_tables: unsorted entry at hook 3 [ 483.695125][T20206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.861940][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'. [ 484.788851][T20243] netlink: 'syz.3.3489': attribute type 16 has an invalid length. [ 484.788875][T20243] netlink: 'syz.3.3489': attribute type 3 has an invalid length. [ 484.788888][T20243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3489'. [ 484.915640][T20253] lo: entered allmulticast mode [ 484.922617][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3488'. [ 484.967376][T20244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3485'. [ 484.967399][T20244] openvswitch: netlink: Flow key attr not present in new flow. [ 485.130679][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 485.191666][T20259] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3489'. [ 486.794111][ T7946] hid-generic 0005:15C2:8001.0001: item fetching failed at offset 0/1 [ 486.799732][ T7946] hid-generic 0005:15C2:8001.0001: probe with driver hid-generic failed with error -22 [ 487.392731][T20308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3498'. [ 487.398139][T20310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3498'. [ 487.538828][T20315] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3500'. [ 487.841177][T20318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.873351][T20319] netlink: 'syz.0.3501': attribute type 2 has an invalid length. [ 487.885318][T20328] netlink: 'syz.0.3501': attribute type 2 has an invalid length. [ 487.998698][T20334] secmark_tg_check: 55 callbacks suppressed [ 487.998821][T20334] xt_SECMARK: invalid mode: 9 [ 488.263044][T20352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3508'. [ 488.549797][T20379] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 488.846186][T20438] ip_tables: iptables: counters copy to user failed while replacing table [ 489.283648][T20482] syzkaller0: entered promiscuous mode [ 489.283670][T20482] syzkaller0: entered allmulticast mode [ 489.403015][T20490] syzkaller1: entered promiscuous mode [ 489.403036][T20490] syzkaller1: entered allmulticast mode [ 489.407918][T20491] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 489.424766][T20488] tipc: Resetting bearer [ 489.849506][T20508] netlink: 'syz.0.3525': attribute type 83 has an invalid length. [ 489.893184][ T5640] Bluetooth: hci2: SCO packet too small [ 490.113917][T20518] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3527'. [ 490.129164][T20510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3526'. [ 490.129546][T20510] netlink: 'syz.1.3526': attribute type 1 has an invalid length. [ 490.408093][T20515] bond2 (unregistering): Released all slaves [ 490.511421][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 490.576684][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 490.599486][T20525] batman_adv: batadv0: Adding interface: gretap1 [ 490.599505][T20525] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.599535][T20525] batman_adv: batadv0: Interface activated: gretap1 [ 491.022972][T20543] syzkaller1: entered promiscuous mode [ 491.022997][T20543] syzkaller1: entered allmulticast mode [ 491.108831][T20548] batman_adv: batadv0: Adding interface: wlan1 [ 491.108850][T20548] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.132877][T20548] batman_adv: batadv0: Interface activated: wlan1 [ 491.319375][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 491.389652][T20553] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.702425][T20578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.744963][T20580] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 491.822405][T20588] netlink: 'syz.5.3544': attribute type 61 has an invalid length. [ 491.929793][T20594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3546'. [ 492.038006][T20594] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 492.051145][T20609] netlink: 'syz.0.3547': attribute type 30 has an invalid length. [ 492.366672][T20620] netlink: 'syz.5.3550': attribute type 1 has an invalid length. [ 492.410154][T20621] netlink: 'syz.5.3550': attribute type 1 has an invalid length. [ 492.940708][T20657] __nla_validate_parse: 3 callbacks suppressed [ 492.940727][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 492.941025][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3559'. [ 493.067841][T20665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3562'. [ 493.225359][T20674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3566'. [ 493.245279][T20674] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3566'. [ 493.247660][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3566'. [ 493.358757][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'. [ 493.557676][T20687] netlink: 'syz.5.3569': attribute type 75 has an invalid length. [ 493.723605][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 493.786968][T20700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3573'. [ 493.806274][T20699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3573'. [ 493.945751][T20707] ip_tables: iptables: counters copy to user failed while replacing table [ 494.137743][T20719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.155505][T20721] xt_hashlimit: invalid interval [ 494.868591][T20756] netlink: 'syz.2.3590': attribute type 9 has an invalid length. [ 495.683318][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.324707][ T7946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.402909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.406505][ T7943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.422735][T20843] xt_hl: Unknown TTL match mode: 255 [ 496.726070][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.138538][T20390] block nbd64: NBD_DISCONNECT [ 497.324046][T20895] netlink: 'syz.5.3630': attribute type 1 has an invalid length. [ 497.490470][T20517] udevd[20517]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.764855][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.891820][T20924] ip_tables: iptables: counters copy to user failed while replacing table [ 498.000182][T20942] __nla_validate_parse: 52 callbacks suppressed [ 498.000202][T20942] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3642'. [ 498.179045][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3643'. [ 498.247816][T20949] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 498.669405][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3650'. [ 498.669722][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3650'. [ 498.805218][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.855143][T17933] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.855259][T17933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.869975][T20984] bridge_slave_1: left allmulticast mode [ 498.870001][T20984] bridge_slave_1: left promiscuous mode [ 498.870214][T20984] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.904941][T20984] bridge_slave_0: left promiscuous mode [ 498.905156][T20984] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.116784][T20994] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 499.116807][T20994] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3654'. [ 499.315362][T21000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3656'. [ 499.361943][ T7943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.364991][T21002] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 499.542808][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3660'. [ 499.668385][T21028] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3666'. [ 499.842739][ T7916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.988562][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'. [ 500.000420][T21053] pimreg: entered allmulticast mode [ 500.029246][T21049] pimreg: left allmulticast mode [ 500.408894][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3674'. [ 500.883992][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.924361][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.402119][ T7943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.604354][T21023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.604969][T21038] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 502.839900][ T5640] block nbd3: Receive control failed (result -32) [ 502.939394][T21091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.961857][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.008894][T21093] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 503.085012][T21084] ipvlan1: Caught tx_queue_len zero misconfig [ 503.124986][T21086] bond0: Caught tx_queue_len zero misconfig [ 503.188917][T21102] xt_HMARK: spi-set and port-set can't be combined [ 503.280907][T21106] __nla_validate_parse: 1 callbacks suppressed [ 503.280926][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 503.307637][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 503.357428][T21113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.357714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.413282][T21116] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3690'. [ 503.490209][T21119] ip_tables: iptables: counters copy to user failed while replacing table [ 503.526486][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 503.602092][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 503.836909][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 504.293408][T21120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.350648][T21120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.859581][T21159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3698'. [ 505.042494][T21139] net_ratelimit: 35 callbacks suppressed [ 505.042618][T21139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.453888][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.512348][T21120] batman_adv: batadv0: Interface deactivated: gretap1 [ 505.564797][T21123] hsr_slave_0: left promiscuous mode [ 505.567109][T21123] hsr_slave_1: left promiscuous mode [ 505.593408][ T160] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.595150][ T1155] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.762106][T17933] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.764765][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.957963][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3702'. [ 506.008523][ T7946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.043631][T21174] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3701'. [ 506.043659][T21174] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3701'. [ 506.082362][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.360340][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.360524][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.360759][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.387806][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.387959][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.388110][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.926701][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 507.066441][T21222] netlink: 'syz.5.3716': attribute type 1 has an invalid length. [ 507.748620][T21265] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.749222][T21265] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.915669][T21274] : renamed from veth1 (while UP) [ 508.309535][T21286] __nla_validate_parse: 7 callbacks suppressed [ 508.309554][T21286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3737'. [ 510.243358][ T7920] net_ratelimit: 41 callbacks suppressed [ 510.243380][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.282162][T21138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.391343][T21292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.524601][ T7943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.664016][T21350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.811806][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 511.887632][T21357] tipc: Enabled bearer , priority 0 [ 512.247396][T21357] syzkaller0: entered promiscuous mode [ 512.247420][T21357] syzkaller0: entered allmulticast mode [ 512.249083][T21357] tipc: Resetting bearer [ 512.249174][T21376] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3762'. [ 512.322618][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.340962][T21382] Bluetooth: MGMT ver 1.23 [ 512.384332][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3765'. [ 512.384362][T21388] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 512.564570][T21356] tipc: Resetting bearer [ 512.833731][T21408] netlink: 'syz.1.3772': attribute type 1 has an invalid length. [ 513.365010][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.317316][T21356] tipc: Disabling bearer [ 514.324594][T21408] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 514.330026][T21409] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 514.374862][T21139] tipc: Node number set to 1 [ 514.376796][T21411] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 514.410601][T21139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.563073][ T7942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.681140][T21430] vlan1: entered promiscuous mode [ 514.681330][T21430] vlan1: entered allmulticast mode [ 514.681343][T21430] veth0_vlan: entered allmulticast mode [ 514.706703][T21427] syzkaller1: entered promiscuous mode [ 514.706742][T21427] syzkaller1: entered allmulticast mode [ 514.716967][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 514.716987][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3777'. [ 514.717190][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 514.717204][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3777'. [ 514.807361][T21433] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3780'. [ 515.064400][T21452] syzkaller1: entered promiscuous mode [ 515.064425][T21452] syzkaller1: entered allmulticast mode [ 515.071016][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 515.137739][T21452] batman_adv: batadv0: Adding interface: gretap1 [ 515.137758][T21452] batman_adv: batadv0: The MTU of interface gretap1 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.137789][T21452] batman_adv: batadv0: Interface activated: gretap1 [ 515.215862][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 515.217789][T21452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'. [ 515.218509][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 515.218532][T21452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'. [ 515.392582][T21479] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 515.438955][T21479] bond5: (slave geneve2): making interface the new active one [ 515.439856][T21479] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 515.458495][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.462786][T17933] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.468985][T17933] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.469025][T17933] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.469056][T17933] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.587734][T21492] netlink: 'syz.3.3793': attribute type 21 has an invalid length. [ 515.596389][T21485] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 515.603355][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.940938][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.941218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.009758][ T9217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.009945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.025157][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.025349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.070097][T21490] NFSD: Failed to start, no listeners configured. [ 516.178855][T21521] x_tables: duplicate underflow at hook 1 [ 516.310102][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.310326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.331652][ T9217] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.333809][ T9217] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.333848][ T9217] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.333879][ T9217] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.685157][T21586] team_slave_1: entered promiscuous mode [ 517.881052][T21593] netlink: 'syz.5.3817': attribute type 11 has an invalid length. [ 518.454175][T21610] 8021q: VLANs not supported on sit0 [ 518.456050][T21612] 8021q: VLANs not supported on sit0 [ 518.517571][T21613] Cannot find del_set index 2 as target [ 518.893769][T21636] syzkaller1: entered promiscuous mode [ 518.893854][T21636] syzkaller1: entered allmulticast mode [ 519.699511][T21627] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 520.045793][T21659] __nla_validate_parse: 9 callbacks suppressed [ 520.045812][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 520.168328][T21670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3838'. [ 520.644424][T21139] net_ratelimit: 141 callbacks suppressed [ 520.644444][T21139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.644696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.709589][T21694] netlink: 'syz.1.3845': attribute type 10 has an invalid length. [ 520.712528][T21694] macvlan1: entered promiscuous mode [ 520.712549][T21694] macvlan1: entered allmulticast mode [ 520.749415][T21697] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3846'. [ 520.823997][T21694] veth1_vlan: entered allmulticast mode [ 520.852967][T21694] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 520.879864][T21699] erspan0: entered promiscuous mode [ 520.956563][T21701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3849'. [ 521.475960][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.476220][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.476422][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.476627][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.476832][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.477043][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.477246][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.496418][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.496640][T21720] netlink: 'syz.1.3854': attribute type 4 has an invalid length. [ 521.708245][T21721] pim6reg527: entered allmulticast mode [ 522.105804][T21715] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 534.322211][ T5640] Bluetooth: hci2: command 0x0405 tx timeout [ 536.401798][ T5633] Bluetooth: hci2: command 0x0405 tx timeout [ 584.124519][T21788] lo: Caught tx_queue_len zero misconfig [ 584.138977][T21793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3866'. [ 585.202608][T21832] validate_nla: 25 callbacks suppressed [ 585.202631][T21832] netlink: 'syz.2.3877': attribute type 8 has an invalid length. [ 585.283891][T21825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3874'. [ 585.287031][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 585.463685][T21850] netlink: 'syz.0.3881': attribute type 62 has an invalid length. [ 585.644110][T21857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3883'. [ 585.785290][T21866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 585.877937][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3886'. [ 585.992591][T21868] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3886'. [ 586.000145][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 586.194144][T21889] netlink: 'syz.5.3893': attribute type 8 has an invalid length. [ 586.194170][T21889] sch_fq: defrate 0 ignored. [ 586.454003][T21884] syzkaller0: entered promiscuous mode [ 586.454027][T21884] syzkaller0: entered allmulticast mode [ 586.495644][T21884] veth0: entered promiscuous mode [ 586.743230][T21879] veth0: left promiscuous mode [ 586.857688][T21914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3896'. [ 587.005196][T21916] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3897'. [ 587.915609][T21962] bond0: entered promiscuous mode [ 587.915632][T21962] bond_slave_0: entered promiscuous mode [ 587.915819][T21962] bond_slave_1: entered promiscuous mode [ 587.977461][T21962] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 588.073351][T21968] netlink: 'syz.5.3913': attribute type 1 has an invalid length. [ 588.153390][T21978] netlink: 'syz.1.3917': attribute type 30 has an invalid length. [ 588.186228][T21968] bond19: entered promiscuous mode [ 588.188605][T21968] 8021q: adding VLAN 0 to HW filter on device bond19 [ 588.482447][T21983] ip6gre1: entered promiscuous mode [ 588.482471][T21983] ip6gre1: entered allmulticast mode [ 588.658647][T21983] netlink: 'syz.0.3915': attribute type 2 has an invalid length. [ 588.768340][T22002] bond3 (unregistering): Released all slaves [ 589.309879][T22023] netlink: 'syz.3.3928': attribute type 7 has an invalid length. [ 589.310108][T22023] netlink: 'syz.3.3928': attribute type 7 has an invalid length. [ 589.508592][T22037] tipc: Started in network mode [ 589.508621][T22037] tipc: Node identity ac1414aa, cluster identity 4711 [ 589.508869][T22037] tipc: New replicast peer: 172.20.20.187 [ 589.536312][T22037] tipc: Enabled bearer , priority 10 [ 589.709751][T22048] __nla_validate_parse: 8 callbacks suppressed [ 589.709770][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'. [ 590.643517][T21138] tipc: Node number set to 2886997162 [ 590.869910][T22106] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3943'. [ 591.316216][T22117] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 591.387494][T22120] ip_tables: iptables: counters copy to user failed while replacing table [ 591.701279][T22135] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3952'. [ 591.776027][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 591.776601][T22137] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3954'. [ 591.832882][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3952'. [ 591.956030][T22148] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 591.956053][T22148] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3956'. [ 592.248689][T22159] netlink: 'syz.5.3959': attribute type 10 has an invalid length. [ 592.248712][T22159] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3959'. [ 592.390119][T22172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.439894][T22159] vlan0 (unregistering): left allmulticast mode [ 592.439917][T22159] veth0_vlan (unregistering): left allmulticast mode [ 592.439934][T22159] vlan0 (unregistering): left promiscuous mode [ 593.466405][T22182] ip_tables: iptables: counters copy to user failed while replacing table [ 593.760454][T22203] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3970'. [ 593.872288][T22210] veth0: Caught tx_queue_len zero misconfig [ 595.263403][T22270] x_tables: duplicate underflow at hook 1 [ 595.578227][T22286] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3997'. [ 595.578249][T22286] nbd: illegal input index 65508 [ 595.640611][T22288] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3997'. [ 595.640635][T22288] nbd: illegal input index 65508 [ 596.910146][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'. [ 597.184472][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4013'. [ 597.184499][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4013'. [ 597.188407][T22362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4013'. [ 597.270701][T22373] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 597.847414][T22398] mac80211_hwsim hwsim36 ÿ: renamed from wlan1 (while UP) [ 598.215467][T22405] macsec1: entered promiscuous mode [ 598.435164][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4025'. [ 598.489527][T22416] bridge6: entered allmulticast mode [ 599.017767][T22424] netlink: 'syz.2.4029': attribute type 4 has an invalid length. [ 599.058321][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 599.064482][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 599.066254][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 599.067165][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 599.067748][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.253431][T22463] tipc: Enabling of bearer rejected, media not registered [ 600.299765][T22463] bridge0: port 1(batadv1) entered blocking state [ 600.301401][T22463] bridge0: port 1(batadv1) entered disabled state [ 600.315126][T22463] batadv1: entered allmulticast mode [ 600.359542][T22463] batadv1: entered promiscuous mode [ 600.596401][T22431] rxe_eth0 speed is unknown, defaulting to 1000 [ 600.792249][ T1155] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 600.792281][ T1155] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 601.122328][ T5640] Bluetooth: hci0: command tx timeout [ 601.185413][T22431] wg0 speed is unknown, defaulting to 1000 [ 601.189899][T22431] lo speed is unknown, defaulting to 1000 [ 602.432799][T22431] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.432955][T22431] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.433048][T22431] bridge_slave_0: entered allmulticast mode [ 602.434592][T22431] bridge_slave_0: entered promiscuous mode [ 602.464659][T22431] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.464835][T22431] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.465253][T22431] bridge_slave_1: entered allmulticast mode [ 602.467016][T22431] bridge_slave_1: entered promiscuous mode [ 602.525728][T22431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.529143][T22431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.576970][T22431] team0: Port device team_slave_0 added [ 602.579658][T22431] team0: Port device team_slave_1 added [ 602.707699][T22536] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 602.744856][T22431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.744880][T22431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.744905][T22431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.763783][T22431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.763798][T22431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.763823][T22431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.082648][T22431] hsr_slave_0: entered promiscuous mode [ 603.092923][T22431] hsr_slave_1: entered promiscuous mode [ 603.210719][ T5640] Bluetooth: hci0: command tx timeout [ 603.593132][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 603.866356][ T5640] Bluetooth: hci1: SCO packet too small [ 603.877632][T22565] macsec1: entered allmulticast mode [ 603.879045][T22565] batman_adv: batadv0: Adding interface: macsec1 [ 603.879058][T22565] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.879083][T22565] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 604.030806][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 604.119181][T22582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4054'. [ 604.410960][T22585] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4059'. [ 604.596415][T22589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4060'. [ 604.622781][T22589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4060'. [ 604.938750][T22606] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4067'. [ 605.005803][T22605] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 605.007686][T22605] bond3 (unregistering): Released all slaves [ 605.127807][T22431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.141682][T22615] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 605.141702][T22615] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4069'. [ 605.142824][T22431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.148059][T22431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 605.163038][T22431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.282305][ T5640] Bluetooth: hci0: command tx timeout [ 605.399927][T22431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.413540][T22431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.415436][T22431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.436327][T22431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.516602][T22646] netlink: 'syz.0.4074': attribute type 24 has an invalid length. [ 605.776491][T22431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.790591][T22654] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 605.800935][T22654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4077'. [ 605.835077][T22431] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.859497][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.859611][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.883622][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.883735][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.368669][T22677] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 606.377516][T22681] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 606.449303][T22684] netlink: 'syz.2.4084': attribute type 1 has an invalid length. [ 606.520176][T22684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 606.619993][T22687] bond2: (slave gretap2): making interface the new active one [ 606.620928][T22687] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 606.667382][T22689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4085'. [ 606.868057][T22431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.101198][ T5640] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 607.110739][ T5640] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 607.216100][ T30] audit: type=1107 audit(1794250255.639:8): pid=22712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 607.362336][ T5640] Bluetooth: hci0: command tx timeout [ 607.620765][T22730] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 607.659847][T22733] netlink: 'syz.3.4095': attribute type 1 has an invalid length. [ 607.871056][T22724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 608.138586][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.138883][T22751] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.180681][T22431] veth0_vlan: entered promiscuous mode [ 608.210708][T22431] veth1_vlan: entered promiscuous mode [ 608.292040][T22431] veth0_macvtap: entered promiscuous mode [ 608.309740][T22431] veth1_macvtap: entered promiscuous mode [ 608.349826][T22431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.381786][T22431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.405081][T22759] veth1: Caught tx_queue_len zero misconfig [ 608.415032][ T173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.421261][ T9220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.421747][ T9220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.421954][ T9220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.627066][T22767] __nla_validate_parse: 5 callbacks suppressed [ 608.627084][T22767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4107'. [ 608.688712][T22771] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4107'. [ 608.819523][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.819545][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.036606][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.036627][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.149622][T22785] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4111'. [ 609.489231][T22811] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 609.567844][T22813] veth1_macvtap: left promiscuous mode [ 609.591191][T22813] netlink: 'syz.5.4120': attribute type 1 has an invalid length. [ 609.597645][T22813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4120'. [ 609.597955][T22813] 8021q: VLANs not supported on ip6_vti0 [ 609.707791][T22820] netlink: 'syz.3.4123': attribute type 33 has an invalid length. [ 609.866490][T22820] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 609.870106][ T62] IPVS: starting estimator thread 0... [ 609.878302][T22820] bond3 (unregistering): Released all slaves [ 609.956226][T22827] IPVS: using max 29 ests per chain, 69600 per kthread [ 610.111417][T22829] syzkaller1: entered promiscuous mode [ 610.112496][T22829] syzkaller1: entered allmulticast mode [ 610.141316][T22833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 610.286777][T22839] bond6: entered promiscuous mode [ 610.286801][T22839] bond6: entered allmulticast mode [ 610.532415][T22856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4134'. [ 610.559156][T22858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 610.559172][T22858] IPv6: NLM_F_CREATE should be set when creating new route [ 610.559200][T22858] IPv6: NLM_F_CREATE should be set when creating new route [ 610.648654][T22864] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 610.716898][T22867] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4139'. [ 610.718173][T22868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4139'. [ 610.753721][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4139'. [ 610.923866][T22877] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4141'. [ 610.983628][T22880] syzkaller0: entered promiscuous mode [ 610.983651][T22880] syzkaller0: entered allmulticast mode [ 611.392952][ T5640] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 611.460688][T22907] bond1: entered promiscuous mode [ 611.460712][T22907] bond1: entered allmulticast mode [ 611.476048][T22907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.629894][T22923] netlink: 'syz.5.4154': attribute type 1 has an invalid length. [ 612.981983][ T9220] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.982027][ T9220] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.982059][ T9220] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.982089][ T9220] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.442007][ T5633] Bluetooth: hci0: command 0x0405 tx timeout [ 613.480867][T23020] netlink: 'syz.2.4181': attribute type 1 has an invalid length. [ 613.563756][T23028] netlink: 'syz.0.4182': attribute type 1 has an invalid length. [ 613.630179][T23028] bond7: entered promiscuous mode [ 613.630668][T23028] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.687715][T23031] bond7: (slave bridge4): making interface the new active one [ 613.687737][T23031] bridge4: entered promiscuous mode [ 613.690408][T23031] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 613.734429][T23031] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 613.784299][T23040] __nla_validate_parse: 6 callbacks suppressed [ 613.784321][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4186'. [ 613.837021][T23043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4185'. [ 613.837086][T23031] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 613.891966][T23031] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 614.007192][T23031] bond7: (slave bridge8): Enslaving as a backup interface with an up link [ 614.044719][T23031] bond7: (slave bridge9): Enslaving as a backup interface with an up link [ 614.064696][T23031] bond7: (slave bridge10): Enslaving as a backup interface with an up link [ 614.118148][T23044] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.175931][T23031] bond7: (slave bridge11): Enslaving as a backup interface with an up link [ 614.203442][T23031] bond7: (slave bridge12): Enslaving as a backup interface with an up link [ 614.277338][T23031] bond7: (slave bridge13): Enslaving as a backup interface with an up link [ 614.299201][T23031] bond7: (slave bridge14): Enslaving as a backup interface with an up link [ 614.375586][T23031] bond7: (slave bridge15): Enslaving as a backup interface with an up link [ 614.404530][T23031] bond7: (slave bridge16): Enslaving as a backup interface with an up link [ 614.462794][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4192'. [ 614.520630][T23066] x_tables: duplicate underflow at hook 2 [ 614.612444][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4193'. [ 614.705903][T23076] netlink: 'syz.5.4194': attribute type 1 has an invalid length. [ 614.807924][T23084] --map-set only usable from mangle table [ 614.853210][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 614.853330][T23083] openvswitch: netlink: Missing key (keys=40, expected=80) [ 615.136590][T23100] tc_dump_action: action bad kind [ 615.221261][T23105] Bluetooth: MGMT ver 1.23 [ 615.330624][T23110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4210'. [ 615.410065][ T10] hid (null): unknown global tag 0xc [ 615.418681][T23118] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4213'. [ 615.436904][ T10] hid-generic 0005:15C2:8001.0002: unexpected long global item [ 615.444330][ T10] hid-generic 0005:15C2:8001.0002: probe with driver hid-generic failed with error -22 [ 615.499442][T23113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.697558][T23126] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4214'. [ 615.748655][T23130] netlink: 'syz.3.4217': attribute type 12 has an invalid length. [ 615.834529][T23135] netlink: 3584 bytes leftover after parsing attributes in process `syz.0.4218'. [ 615.859793][T23133] netlink: 3604 bytes leftover after parsing attributes in process `syz.0.4218'. [ 615.991106][T23138] 8021q: VLANs not supported on gre0 [ 616.109935][T23137] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.109969][T23137] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.144641][T23147] tipc: Invalid UDP bearer configuration [ 616.144690][T23147] tipc: Enabling of bearer rejected, failed to enable media [ 616.370141][T23167] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 616.440784][T23167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.454727][T23176] bond5: (slave gretap2): making interface the new active one [ 616.456545][T23176] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 616.616901][T23137] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.616934][T23137] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.776615][T23137] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.776650][T23137] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.897192][T23193] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 616.980344][T23137] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.980378][T23137] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.579742][T23225] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 617.603102][ T50] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.603134][ T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.633741][ T9223] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.633771][ T9223] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.641925][ T9222] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.641954][ T9222] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.653192][ T1155] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.653222][ T1155] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.057442][T23253] Bluetooth: hci0: unsupported parameter 5135 [ 618.057465][T23253] Bluetooth: hci0: unsupported parameter 8192 [ 618.057476][T23253] Bluetooth: hci0: unsupported parameter 5135 [ 618.057488][T23253] Bluetooth: hci0: unsupported parameter 8192 [ 618.933360][T23292] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 618.972273][T23294] __nla_validate_parse: 9 callbacks suppressed [ 618.972292][T23294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4260'. [ 619.189362][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4261'. [ 619.211360][T23300] ip6t_hbh: unknown flags 38 [ 619.225590][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4261'. [ 619.239463][T23294] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.239497][T23294] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.342404][T23294] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.342440][T23294] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.401964][T23307] vlan1: entered promiscuous mode [ 619.402144][T23307] vlan1: entered allmulticast mode [ 619.402159][T23307] veth0_vlan: entered allmulticast mode [ 619.497437][T23294] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.497474][T23294] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.563985][T23314] netlink: 'syz.3.4266': attribute type 83 has an invalid length. [ 619.619804][T23294] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.619840][T23294] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.738953][T23325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4270'. [ 619.749389][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4271'. [ 619.803399][T23323] syzkaller0: entered promiscuous mode [ 619.803445][T23323] syzkaller0: entered allmulticast mode [ 619.827297][ T9222] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.829059][ T9222] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.829097][ T9222] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.829130][ T9222] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.859677][T23332] netlink: 592 bytes leftover after parsing attributes in process `syz.1.4272'. [ 620.000587][T23341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4275'. [ 620.001076][T23343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4275'. [ 620.054025][T23341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4275'. [ 620.110137][T23346] bond3: entered promiscuous mode [ 620.110241][T23346] bond3: entered allmulticast mode [ 620.111177][T23346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.309259][T23365] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 620.438994][T23365] batman_adv: batadv0: Interface deactivated: wlan1 [ 621.824373][ T9223] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.824404][ T9223] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.831937][ T9223] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.831966][ T9223] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.844227][ T9223] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.844259][ T9223] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.844355][ T9223] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.844376][ T9223] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.963842][T23378] x_tables: duplicate underflow at hook 2 [ 622.988230][T23345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.014712][T23372] netlink: 'syz.0.4277': attribute type 11 has an invalid length. [ 623.014734][T23372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4277'. [ 623.289178][T23388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.965715][T23434] ip6t_REJECT: ECHOREPLY is not supported [ 624.034699][T23440] veth0_vlan: left promiscuous mode [ 624.034766][T23440] vlan1: entered promiscuous mode [ 624.034778][T23440] veth0_vlan: entered promiscuous mode [ 624.034969][T23440] vlan1: entered allmulticast mode [ 624.034982][T23440] veth0_vlan: entered allmulticast mode [ 624.310168][T23461] __nla_validate_parse: 6 callbacks suppressed [ 624.310186][T23461] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4303'. [ 624.310201][T23461] openvswitch: netlink: Flow key attr not present in new flow. [ 624.507826][T23471] netlink: 'syz.1.4307': attribute type 3 has an invalid length. [ 624.524072][T23466] tc mirred to Houston: device batadv0 is down [ 624.758676][T23487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4312'. [ 624.759855][T23487] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4312'. [ 624.849804][T23482] bond3 (unregistering): Released all slaves [ 624.919504][T23490] openvswitch: netlink: Duplicate or invalid key (type 0). [ 624.919541][T23490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.979388][T23495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4316'. [ 625.165448][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4321'. [ 625.476174][T23519] batman_adv: batadv0: Adding interface: gretap3 [ 625.476192][T23519] batman_adv: batadv0: The MTU of interface gretap3 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.476224][T23519] batman_adv: batadv0: Interface activated: gretap3 [ 625.744078][T23531] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4328'. [ 625.768810][T23529] xt_l2tp: unknown flags: 43 [ 625.778201][T23529] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 625.806719][T23531] netlink: Unknown conntrack attr (0) [ 625.841244][T23533] ip6gre1: entered promiscuous mode [ 625.841266][T23533] ip6gre1: entered allmulticast mode [ 625.854875][ T9224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.860222][ T9224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.868369][T23533] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.881883][ T7942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.920659][T23539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4331'. [ 626.064401][ T7942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.069010][T23549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4334'. [ 626.156393][T23553] netlink: 'syz.3.4335': attribute type 83 has an invalid length. [ 626.158120][T23553] Cannot find del_set index 65532 as target [ 626.291281][T23559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'. [ 626.304529][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'. [ 626.313483][T23564] netlink: 'syz.2.4334': attribute type 3 has an invalid length. [ 626.400069][T23571] ipvlan0: entered promiscuous mode [ 626.400132][T23571] ipvlan0: entered allmulticast mode [ 626.400146][T23571] veth0_vlan: entered allmulticast mode [ 626.494214][T23575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.494239][T23575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.496235][T23575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.496254][T23575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.723633][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.766498][T23584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.069088][T23603] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.219317][T23612] vlan2: entered promiscuous mode [ 627.284676][T23621] openvswitch: netlink: ufid size 44 bytes exceeds the range (1, 16) [ 627.284698][T23621] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 627.325971][T23624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.377365][T23626] batadv_slave_1: entered allmulticast mode [ 627.662464][T23638] syzkaller1: entered promiscuous mode [ 627.662486][T23638] syzkaller1: entered allmulticast mode [ 627.959826][T23641] syzkaller1: entered promiscuous mode [ 627.959849][T23641] syzkaller1: entered allmulticast mode [ 628.743747][T23666] NFSD: Failed to start, no listeners configured. [ 629.060637][T23685] tipc: Enabled bearer , priority 0 [ 629.093189][T23684] tipc: Disabling bearer [ 629.184116][T23689] syzkaller1: entered promiscuous mode [ 629.184140][T23689] syzkaller1: entered allmulticast mode [ 629.676859][T23713] gre1: entered promiscuous mode [ 629.921745][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.930191][T23720] syzkaller1: entered promiscuous mode [ 629.930213][T23720] syzkaller1: entered allmulticast mode [ 629.940183][T23716] __nla_validate_parse: 12 callbacks suppressed [ 629.940202][T23716] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4384'. [ 630.148227][T23743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4391'. [ 630.159997][T23746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4391'. [ 630.218127][T23748] net_ratelimit: 2 callbacks suppressed [ 630.218156][T23748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.266300][T23752] dvmrp1: entered allmulticast mode [ 630.313256][T23756] syz_tun: entered allmulticast mode [ 630.313861][T23754] syz_tun: left allmulticast mode [ 630.427389][T23755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4395'. [ 630.560305][T23765] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4398'. [ 630.959691][T23775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.963258][T23778] bridge0: port 3(veth0) entered blocking state [ 630.963666][T23778] bridge0: port 3(veth0) entered disabled state [ 630.963827][T23778] veth0: entered allmulticast mode [ 630.966434][T23778] veth0: entered promiscuous mode [ 631.113330][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 631.127119][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 631.790141][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4415'. [ 632.030535][T23834] xt_IDLETIMER: label is empty or not nul-terminated [ 632.056468][T23836] netlink: 'syz.1.4420': attribute type 17 has an invalid length. [ 632.056489][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4420'. [ 632.056516][T23836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4420'. [ 632.914790][ T10] hid (null): unknown global tag 0xc [ 632.920557][ T10] hid-generic 0005:15C2:8001.0003: unexpected long global item [ 632.929669][ T10] hid-generic 0005:15C2:8001.0003: probe with driver hid-generic failed with error -22 [ 633.295255][T23912] netlink: 'syz.1.4438': attribute type 1 has an invalid length. [ 633.360706][T23912] bond3: entered promiscuous mode [ 633.361114][T23912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.428955][T23912] bond3: entered allmulticast mode [ 633.448565][T23928] syzkaller0: left promiscuous mode [ 633.448585][T23928] syzkaller0: left allmulticast mode [ 633.496022][T23912] bond3: (slave bridge4): making interface the new active one [ 633.496046][T23912] bridge4: entered promiscuous mode [ 633.496207][T23912] bridge4: entered allmulticast mode [ 633.497728][T23912] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 633.498093][T23928] tipc: Enabled bearer , priority 0 [ 633.498219][T23930] lo: Caught tx_queue_len zero misconfig [ 633.861371][ T5633] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 633.861401][ T5633] Bluetooth: unknown link type 48 [ 633.862044][ T5633] Bluetooth: hci1: connection err: -111 [ 633.961665][T23950] sit1: entered promiscuous mode [ 633.961688][T23950] sit1: entered allmulticast mode [ 633.996459][T23950] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 634.108835][T23955] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 634.670916][T23981] bridge17: entered promiscuous mode [ 634.670957][T23981] bridge17: entered allmulticast mode [ 635.043908][T24000] veth0: entered promiscuous mode [ 635.044185][T24000] veth0: left promiscuous mode [ 635.088031][T24004] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001 [ 635.115577][T24005] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 635.144728][T24007] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 635.648360][T24028] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 635.664073][T24028] __nla_validate_parse: 8 callbacks suppressed [ 635.664091][T24028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 636.628070][T24078] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4492'. [ 637.533665][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4496'. [ 637.536977][T24109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4496'. [ 637.663712][T24119] veth0: entered promiscuous mode [ 637.665514][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 637.665536][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 637.666420][T24118] veth0: left promiscuous mode [ 637.805669][T24128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4499'. [ 638.173982][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 638.174006][T24146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4504'. [ 638.349887][T24149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 638.481614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 638.764892][T24167] netlink: 'syz.1.4508': attribute type 1 has an invalid length. [ 638.885756][T24167] bond4: entered promiscuous mode [ 638.886162][T24167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.968965][T24174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.974281][T24174] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 638.974303][T24174] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 638.999606][T24174] bond4: (slave ip6gre1): making interface the new active one [ 638.999629][T24174] ip6gre1: entered promiscuous mode [ 639.017199][T24174] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 639.129309][T24185] x_tables: unsorted entry at hook 1 [ 639.138030][T24187] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4512'. [ 639.138055][T24187] openvswitch: netlink: IP tunnel dst address not specified [ 639.138399][T24188] openvswitch: netlink: IP tunnel dst address not specified [ 639.242349][T24175] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 639.247142][T24190] netlink: 'syz.1.4513': attribute type 7 has an invalid length. [ 639.266490][T24175] bond4 (unregistering): Released all slaves [ 639.580791][T24212] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 640.672066][T24281] netlink: 'syz.2.4532': attribute type 1 has an invalid length. [ 640.866987][T24281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.909923][T24296] __nla_validate_parse: 9 callbacks suppressed [ 640.909941][T24296] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4537'. [ 640.966335][T24281] netlink: 'syz.2.4532': attribute type 1 has an invalid length. [ 641.067996][T24290] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 641.169541][T24314] netlink: 'syz.0.4538': attribute type 12 has an invalid length. [ 641.221896][T24281] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.588623][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4541'. [ 641.617910][T24329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4543'. [ 641.790658][T24343] netlink: 'syz.3.4545': attribute type 32 has an invalid length. [ 641.790682][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4545'. [ 641.947598][T24343] bond6: Setting coupled_control to off (0) [ 641.965240][T24350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4548'. [ 642.010741][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'. [ 642.222385][T24361] syzkaller0: entered promiscuous mode [ 642.222407][T24361] syzkaller0: entered allmulticast mode [ 642.563829][T24382] xt_hashlimit: size too large, truncated to 1048576 [ 642.569274][T24383] xt_hashlimit: size too large, truncated to 1048576 [ 642.718294][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4555'. [ 642.718559][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4555'. [ 642.718742][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4555'. [ 642.718923][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4555'. [ 642.720120][T24390] ip_tables: iptables: counters copy to user failed while replacing table [ 642.765948][T24383] Cannot find set identified by id 2 to match [ 643.573921][T24432] veth0: entered promiscuous mode [ 643.644764][T24432] vcan0: tx address claim with different name [ 643.670542][T24429] veth0: left promiscuous mode [ 643.759913][T24436] : renamed from bond0 (while UP) [ 644.820378][T24498] syzkaller0: left promiscuous mode [ 644.820402][T24498] syzkaller0: left allmulticast mode [ 644.852856][T24498] syzkaller1: entered promiscuous mode [ 644.852880][T24498] syzkaller1: entered allmulticast mode [ 645.031805][T24505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.551133][ T30] audit: type=1800 audit(1794250293.969:9): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4583" name=680B20 dev="tmpfs" ino=1608 res=0 errno=-22 [ 645.723083][T24537] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 646.557652][T24571] __nla_validate_parse: 66 callbacks suppressed [ 646.557675][T24571] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4592'. [ 646.629992][T24577] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 646.720048][T24581] netlink: 'syz.3.4596': attribute type 49 has an invalid length. [ 646.821310][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'. [ 646.833462][T24581] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 646.833584][T24581] ip6gretap0: entered promiscuous mode [ 646.833600][T24581] ip6gretap0: entered allmulticast mode [ 647.127854][T24600] Cannot find add_set index 65532 as target [ 648.244027][T24519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.696431][T24610] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 648.696473][T24610] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 648.843699][T24642] Bluetooth: MGMT ver 1.23 [ 648.979811][T24646] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4612'. [ 649.248956][T24661] netlink: 'syz.0.4615': attribute type 11 has an invalid length. [ 649.630222][T24676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4618'. [ 649.834675][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4623'. [ 649.887737][ T5633] Bluetooth: hci3: unexpected cc 0x1009 length: 8 > 7 [ 649.887771][ T5633] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 649.909450][T24696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4624'. [ 649.909470][T24696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4624'. [ 650.028032][T24704] netlink: 'syz.2.4625': attribute type 1 has an invalid length. [ 650.032304][T24705] netlink: 'syz.2.4625': attribute type 1 has an invalid length. [ 650.078467][T24704] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.090022][ T5633] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 650.223469][T24716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4629'. [ 650.279573][T24722] netlink: 'syz.5.4626': attribute type 29 has an invalid length. [ 650.280813][T24704] bond6: (slave geneve2): making interface the new active one [ 650.304855][T24704] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 650.311686][T17930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.312907][T17930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.312947][T17930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.312980][T17930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.617484][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4631'. [ 650.621148][T24732] Bluetooth: hci0: unsupported parameter 5135 [ 650.621166][T24732] Bluetooth: hci0: unsupported parameter 8192 [ 650.621178][T24732] Bluetooth: hci0: unsupported parameter 5135 [ 650.621189][T24732] Bluetooth: hci0: unsupported parameter 8192 [ 650.668342][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4631'. [ 650.683818][T24742] Bluetooth: hci0: unsupported parameter 5135 [ 650.683837][T24742] Bluetooth: hci0: unsupported parameter 8192 [ 650.683849][T24742] Bluetooth: hci0: unsupported parameter 5135 [ 650.683860][T24742] Bluetooth: hci0: unsupported parameter 8192 [ 650.869233][T24745] netlink: 'syz.2.4634': attribute type 1 has an invalid length. [ 650.882045][ T5640] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 651.100796][ T5640] Bluetooth: hci2: unexpected event 0x05 length: 3 < 4 [ 651.147262][T24766] netlink: 'syz.0.4640': attribute type 1 has an invalid length. [ 651.184285][ T30] audit: type=1107 audit(1794250299.589:10): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 651.197117][T24766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 651.199233][T24771] tls_set_device_offload: netdev not found [ 651.224764][T24766] bond9: (slave geneve4): making interface the new active one [ 651.238501][T24766] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 651.494997][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.495291][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.495565][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.498205][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.500740][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.528947][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.529336][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.529629][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.529908][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.562016][T24791] __nla_validate_parse: 1 callbacks suppressed [ 651.562032][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4646'. [ 651.600335][T24784] ip_tables: iptables: counters copy to user failed while replacing table [ 651.610670][T24787] xt_hashlimit: size too large, truncated to 1048576 [ 651.832857][T24803] wlan1 speed is unknown, defaulting to 1000 [ 651.832917][T24803] wlan1 speed is unknown, defaulting to 1000 [ 651.833607][T24803] wlan1 speed is unknown, defaulting to 1000 [ 651.839408][T24803] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 651.839439][T24803] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 651.839475][T24803] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 651.920653][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 652.075847][T24805] bond7: option xmit_hash_policy: invalid value (64) [ 652.081334][T24805] bond7 (unregistering): Released all slaves [ 652.196263][T24787] xt_hashlimit: size too large, truncated to 1048576 [ 652.293609][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.375164][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.388714][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.390452][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.407153][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.410426][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.428819][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.439725][T24803] wlan1 speed is unknown, defaulting to 1000 [ 652.475203][T24805] siw: device registration error -23 [ 652.638065][T24833] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 652.638090][T24833] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 652.901266][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4658'. [ 652.925160][T24860] netlink: 'syz.2.4659': attribute type 18 has an invalid length. [ 653.119166][T24865] Cannot find set identified by id 65534 to match [ 653.119906][T24864] Cannot find set identified by id 65534 to match [ 653.138383][T24864] netlink: 'syz.1.4661': attribute type 5 has an invalid length. [ 653.320701][T24876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4663'. [ 653.377237][T24877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4663'. [ 653.567346][T24890] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4666'. [ 653.725161][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4667'. [ 653.825933][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4670'. [ 653.825961][T24901] block nbd4: Unsupported socket: should be TCP or UNIX. [ 653.901237][T24910] netlink: 'syz.2.4671': attribute type 3 has an invalid length. [ 653.903645][T24910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4671'. [ 654.470414][T24937] tipc: MTU too low for tipc bearer [ 654.470856][T24937] netlink: 'syz.0.4678': attribute type 24 has an invalid length. [ 655.125655][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.434995][T24978] netlink: 'syz.5.4692': attribute type 33 has an invalid length. [ 655.499135][T24978] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 655.508723][T24978] bond2 (unregistering): Released all slaves [ 655.624755][T24983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4695'. [ 655.858656][T24991] xt_TCPMSS: Only works on TCP SYN packets [ 656.189841][T25006] ip6tnl2: entered promiscuous mode [ 656.784750][T25039] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 656.791095][T25039] bond10 (unregistering): Released all slaves [ 657.204934][T25067] __nla_validate_parse: 3 callbacks suppressed [ 657.204954][T25067] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4711'. [ 657.237236][T25067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4711'. [ 657.237261][T25067] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4711'. [ 657.237275][T25067] netlink: 'syz.0.4711': attribute type 5 has an invalid length. [ 657.237287][T25067] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4711'. [ 657.560394][T25089] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 657.560463][T25089] syzkaller1: Refused to change device type [ 657.560632][T17932] IPVS: starting estimator thread 0... [ 657.563923][T25093] netlink: 'syz.1.4718': attribute type 10 has an invalid length. [ 657.639504][T25093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.641629][T25097] IPVS: using max 32 ests per chain, 76800 per kthread [ 657.660480][T25093] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 657.664890][T25086] tipc: Started in network mode [ 657.664916][T25086] tipc: Node identity 260c928c956, cluster identity 4711 [ 657.665090][T25086] tipc: Enabled bearer , priority 0 [ 657.734499][T25102] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 657.734610][T25103] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 657.734672][T25103] syzkaller1: Refused to change device type [ 657.741842][T25086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4715'. [ 657.839519][T25115] syzkaller0: entered promiscuous mode [ 657.839543][T25115] syzkaller0: entered allmulticast mode [ 657.840234][T25115] tipc: Resetting bearer [ 657.964166][T25108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 658.008625][T25122] netlink: 'syz.2.4722': attribute type 1 has an invalid length. [ 658.033922][T25108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 658.049111][T25081] tipc: Resetting bearer [ 658.534954][T25144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4728'. [ 660.635352][T25081] tipc: Disabling bearer [ 660.640476][T25108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 660.691242][ T7920] tipc: Node number set to 3010237068 [ 660.948720][T25165] netlink: 'syz.5.4730': attribute type 1 has an invalid length. [ 660.998602][T25165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.112569][T25176] bond2: (slave gretap1): making interface the new active one [ 661.116792][T25176] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 661.117084][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4731'. [ 661.837608][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'. [ 661.920328][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'. [ 662.027710][ T30] audit: type=1804 audit(1794250310.449:11): pid=25236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4747" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=1913 res=1 errno=0 [ 662.027935][ T30] audit: type=1800 audit(1794250310.449:12): pid=25236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4747" name="cgroup.controllers" dev="tmpfs" ino=1913 res=0 errno=-22 [ 662.356096][T25251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.377453][T25252] netlink: 'syz.3.4751': attribute type 4 has an invalid length. [ 662.432423][T25253] netlink: 'syz.3.4751': attribute type 4 has an invalid length. [ 664.364538][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 664.469518][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 665.786001][T25338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.786025][T25338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.928085][T25353] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 666.101794][T25361] netlink: 'syz.5.4767': attribute type 3 has an invalid length. [ 666.101818][T25361] netlink: 'syz.5.4767': attribute type 3 has an invalid length. [ 666.157270][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4767'. [ 666.157296][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4767'. [ 666.328837][T25374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4768'. [ 666.344221][T25373] net_ratelimit: 87 callbacks suppressed [ 666.344240][T25373] netlink: ct family unspecified [ 666.349577][T25374] netlink: 'syz.2.4768': attribute type 11 has an invalid length. [ 666.349595][T25374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4768'. [ 666.639949][T25385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4772'. [ 666.748966][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4775'. [ 666.790028][T25377] ip6gre1: entered allmulticast mode [ 666.925431][T25406] netlink: 'syz.2.4776': attribute type 1 has an invalid length. [ 666.925453][T25406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4776'. [ 666.997548][T25409] netlink: 'syz.1.4777': attribute type 8 has an invalid length. [ 667.075776][T25419] netlink: 'syz.0.4779': attribute type 8 has an invalid length. [ 667.263655][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4782'. [ 667.302419][T25429] erspan0: entered promiscuous mode [ 667.307606][T25429] gretap0: entered promiscuous mode [ 667.644166][T25448] ip_tables: iptables: counters copy to user failed while replacing table [ 667.668202][T25444] netlink: 'syz.0.4786': attribute type 2 has an invalid length. [ 667.812997][T25462] netlink: 'syz.2.4792': attribute type 24 has an invalid length. [ 667.813159][T25461] netlink: 'syz.2.4792': attribute type 24 has an invalid length. [ 667.874833][T25455] ip_tables: iptables: counters copy to user failed while replacing table [ 668.215555][T25477] netlink: 'syz.2.4794': attribute type 1 has an invalid length. [ 668.509180][T25487] netlink: 'syz.3.4799': attribute type 20 has an invalid length. [ 668.509206][T25487] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.038880][T25512] xt_hashlimit: size too large, truncated to 1048576 [ 669.039121][T25512] xt_hashlimit: max too large, truncated to 1048576 [ 669.039224][T25512] xt_hashlimit: overflow, rate too high: 0 [ 669.112234][T25510] bond3: entered promiscuous mode [ 669.112648][T25510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.189419][T25515] bond3: (slave bridge3): making interface the new active one [ 669.189442][T25515] bridge3: entered promiscuous mode [ 669.200069][T25515] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 669.492204][T25528] __nla_validate_parse: 5 callbacks suppressed [ 669.492223][T25528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4809'. [ 669.492347][T25528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.628939][T25528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.805224][T25536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 670.449169][T25566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.464984][T25563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.687642][T25586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4825'. [ 670.692733][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4825'. [ 670.846385][T25599] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4831'. [ 670.850585][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'. [ 670.880148][T25599] vlan4: entered promiscuous mode [ 670.880168][T25599] team_slave_1: entered promiscuous mode [ 670.910652][T25603] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4832'. [ 670.979974][T25609] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4835'. [ 671.016322][T25609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.031350][T25609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.047120][T25609] bond0 (unregistering): Released all slaves [ 671.079171][T25614] veth1_to_bond: entered allmulticast mode [ 671.085707][T25612] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4834'. [ 671.118287][T25610] 8021q: adding VLAN 0 to HW filter on device bond10 [ 671.118980][T25611] veth1_to_bond: left allmulticast mode [ 671.319905][T25625] wg2: Caught tx_queue_len zero misconfig [ 671.582957][T25639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.631036][T25631] sit0: entered promiscuous mode [ 671.631206][T25631] validate_nla: 3 callbacks suppressed [ 671.631220][T25631] netlink: 'syz.2.4841': attribute type 1 has an invalid length. [ 671.631233][T25631] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4841'. [ 671.717359][T25645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.779833][T25650] x_tables: duplicate underflow at hook 2 [ 671.969461][T25658] x_tables: duplicate underflow at hook 2 [ 672.269118][T25680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4852'. [ 673.293369][T25712] ip6tnl0: Caught tx_queue_len zero misconfig [ 673.628901][T25731] syzkaller0: entered promiscuous mode [ 673.628922][T25731] syzkaller0: entered allmulticast mode [ 673.670130][T25731] TC_ACT_REPEAT abuse ? [ 673.875559][T25738] sctp: [Deprecated]: syz.0.4869 (pid 25738) Use of int in max_burst socket option. [ 673.875559][T25738] Use struct sctp_assoc_value instead [ 675.849714][T25694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.098144][T25765] __nla_validate_parse: 6 callbacks suppressed [ 676.098163][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4878'. [ 676.271244][T25783] xt_hashlimit: size too large, truncated to 1048576 [ 677.184273][T25799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4882'. [ 677.946755][T25790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4880'. [ 678.170263][T25817] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4889'. [ 678.184840][T25817] ip_tables: iptables: counters copy to user failed while replacing table [ 678.230150][T25810] syzkaller0: entered promiscuous mode [ 678.230172][T25810] syzkaller0: entered allmulticast mode [ 678.904530][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 678.906473][T25851] Bluetooth: hci0: unsupported parameter 5135 [ 678.906492][T25851] Bluetooth: hci0: unsupported parameter 8192 [ 678.906503][T25851] Bluetooth: hci0: unsupported parameter 5135 [ 678.906514][T25851] Bluetooth: hci0: unsupported parameter 8192 [ 679.029353][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4895'. [ 679.775398][T25874] netlink: 5208 bytes leftover after parsing attributes in process `syz.5.4900'. [ 680.408156][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4908'. [ 680.507655][T25926] xt_hashlimit: size too large, truncated to 1048576 [ 680.580978][T25932] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.729503][T25932] bridge_slave_0 (unregistering): left promiscuous mode [ 680.729592][T25932] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.185556][T25956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4915'. [ 681.620606][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'. [ 681.706305][T25995] netlink: 'syz.1.4919': attribute type 83 has an invalid length. [ 681.737779][T25992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4923'. [ 681.737798][T25992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4923'. [ 681.837763][T25976] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 681.859296][T25976] bond5 (unregistering): Released all slaves [ 682.330422][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4927'. [ 682.904141][T26048] netlink: 'syz.3.4935': attribute type 1 has an invalid length. [ 683.128267][T26060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4934'. [ 683.479794][T26071] xt_hashlimit: size too large, truncated to 1048576 [ 683.923034][ T5640] Bluetooth: hci3: command 0x1407 tx timeout [ 684.026489][T26098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4947'. [ 684.033127][T26096] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4946'. [ 684.039908][T26100] syzkaller0: entered promiscuous mode [ 684.039927][T26100] syzkaller0: entered allmulticast mode [ 684.444511][T26119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4951'. [ 684.459829][T26121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4951'. [ 685.023702][T26152] geneve0: entered allmulticast mode [ 685.387754][T26165] vlan2: entered allmulticast mode [ 685.512973][T26177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.515204][T26177] netlink: 'syz.1.4965': attribute type 34 has an invalid length. [ 685.570888][T26177] bond5: option lacp_strict: invalid value (245) [ 685.575311][T26177] bond5 (unregistering): Released all slaves [ 685.598496][T26180] netlink: 'syz.0.4966': attribute type 14 has an invalid length. [ 685.616462][T26180] netlink: 'syz.0.4966': attribute type 14 has an invalid length. [ 685.791683][T26188] xt_bpf: check failed: parse error [ 685.797932][T26189] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.341830][T26228] __nla_validate_parse: 9 callbacks suppressed [ 686.341849][T26228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4980'. [ 686.378776][T26231] netlink: 'syz.5.4977': attribute type 2 has an invalid length. [ 686.378797][T26231] netlink: 'syz.5.4977': attribute type 11 has an invalid length. [ 686.378810][T26231] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4977'. [ 686.456730][T26220] netlink: 'syz.5.4977': attribute type 5 has an invalid length. [ 686.652072][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4983'. [ 686.666489][T26244] veth1_to_bond: entered allmulticast mode [ 686.666618][T26244] veth1_to_bond: left allmulticast mode [ 687.180002][T26282] bond0: (slave macvlan1): Releasing backup interface [ 687.180028][T26282] bond0: (slave macvlan1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:35 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 687.206794][T26284] ip_tables: iptables: counters copy to user failed while replacing table [ 687.228536][T26282] veth1_vlan: left allmulticast mode [ 687.228860][T26282] veth1_vlan: left promiscuous mode [ 687.252923][T26282] bond0: (slave netdevsim1): Releasing backup interface [ 687.284790][T26282] batman_adv: batadv0: Removing interface: wlan1 [ 687.307829][T26282] bond1: (slave bridge1): Releasing backup interface [ 687.307855][T26282] bridge1: left promiscuous mode [ 687.308171][T26282] bridge1: left allmulticast mode [ 687.336896][T26282] batadv1: left allmulticast mode [ 687.336985][T26282] batadv1: left promiscuous mode [ 687.337204][T26282] bridge0: port 1(batadv1) entered disabled state [ 687.367222][T26282] bond3: (slave bridge4): Releasing backup interface [ 687.367247][T26282] bridge4: left promiscuous mode [ 687.367487][T26282] bridge4: left allmulticast mode [ 687.395142][T26282] bond4: (slave ip6gre1): Releasing backup interface [ 687.395159][T26282] ip6gre1: left promiscuous mode [ 687.483965][T26296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5000'. [ 687.544748][ T5640] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 687.544776][ T5640] Bluetooth: unknown link type 128 [ 687.673979][T26303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5002'. [ 687.860737][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5005'. [ 688.148298][T26330] syzkaller0: left promiscuous mode [ 688.148319][T26330] syzkaller0: left allmulticast mode [ 688.150144][T26329] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 688.386398][T26356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5014'. [ 689.041565][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.150373][T26371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5018'. [ 689.162536][T26371] ip_tables: iptables: counters copy to user failed while replacing table [ 689.163099][T26371] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 689.475863][T26390] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 689.603236][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 689.893639][T26421] bond4: option min_links: invalid value (18446744073709551614) [ 689.893663][T26421] bond4: option min_links: allowed values 0 - 2147483647 [ 689.900403][T26421] bond4 (unregistering): Released all slaves [ 690.038908][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5035'. [ 690.038983][T26429] veth0: left allmulticast mode [ 690.039002][T26429] veth0: left promiscuous mode [ 690.039208][T26429] bridge0: port 3(veth0) entered disabled state [ 690.074237][T26429] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.091123][T26429] ¾x9ÿ: left allmulticast mode [ 690.091145][T26429] ¾x9ÿ: left promiscuous mode [ 690.093462][T26429] bridge0: port 1(1¾x9ÿ) entered disabled state [ 690.139170][T26430] syzkaller0: entered promiscuous mode [ 690.139193][T26430] syzkaller0: entered allmulticast mode [ 690.157290][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5036'. [ 690.518260][T26445] ipt_ah: unknown flags FF [ 691.356090][T26509] geneve1: Caught tx_queue_len zero misconfig [ 691.465598][T26518] __nla_validate_parse: 4 callbacks suppressed [ 691.465617][T26518] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5060'. [ 691.616107][T26532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5064'. [ 691.627515][T26532] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 694.201035][T26494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.462285][T26563] netlink: 'syz.3.5073': attribute type 21 has an invalid length. [ 694.462307][T26563] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5073'. [ 694.462357][T26563] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5073'. [ 694.535582][T26567] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 694.713073][T26577] netlink: 'syz.5.5078': attribute type 1 has an invalid length. [ 694.747670][T26568] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 694.764214][T26568] bond11 (unregistering): Released all slaves [ 694.908361][T26577] bond5: entered promiscuous mode [ 694.908744][T26577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.211080][T26588] netlink: 'syz.0.5082': attribute type 1 has an invalid length. [ 695.211102][T26588] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5082'. [ 695.246108][T26591] netlink: 'syz.2.5084': attribute type 1 has an invalid length. [ 695.328537][T26591] bond8 (unregistering): Released all slaves [ 695.363407][T26603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5084'. [ 695.502171][T26611] ip_tables: iptables: counters copy to user failed while replacing table [ 695.770068][T26615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5090'. [ 695.901099][T26624] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 695.905024][T26624] bond12 (unregistering): Released all slaves [ 695.985357][T26631] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5094'. [ 695.987488][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 696.156501][T26646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5099'. [ 696.410820][T26659] veth1_to_bridge: entered promiscuous mode [ 696.410842][T26659] veth1_to_bridge: entered allmulticast mode [ 696.630209][T26657] netlink: 'syz.0.5103': attribute type 10 has an invalid length. [ 696.630230][T26657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5103'. [ 697.131114][T26696] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 697.143956][T26695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.551845][T26705] tipc: Enabling of bearer rejected, failed to enable media [ 697.940312][T26728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5124'. [ 697.940345][T26728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5124'. [ 697.941435][T26728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5124'. [ 698.169124][T26739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5127'. [ 698.266156][T26743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5129'. [ 698.534478][T26750] mac80211_hwsim hwsim43 ÿ: renamed from wlan1 [ 698.776787][T26759] netlink: 'syz.5.5134': attribute type 11 has an invalid length. [ 698.777039][T26758] netlink: 'syz.5.5134': attribute type 11 has an invalid length. [ 698.856591][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 699.713511][T26794] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 700.068877][T26809] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5151'. [ 700.228621][T26813] netlink: 'syz.3.5153': attribute type 1 has an invalid length. [ 700.228645][T26813] netlink: 'syz.3.5153': attribute type 3 has an invalid length. [ 700.228657][T26813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5153'. [ 700.635759][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5156'. [ 700.813546][ T43] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.813580][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.995514][T26840] netlink: 'syz.5.5160': attribute type 2 has an invalid length. [ 701.194775][T26848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.387865][T26855] nbd: must specify a size in bytes for the device [ 701.479412][T26864] ip_tables: iptables: counters copy to user failed while replacing table [ 701.798365][T26876] __nla_validate_parse: 7 callbacks suppressed [ 701.798417][T26876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5171'. [ 701.994889][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'. [ 702.038039][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'. [ 702.223808][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5176'. [ 702.517443][T26916] netlink: get zone limit has 4 unknown bytes [ 702.728560][T26923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5184'. [ 702.735540][T26926] netlink: 'syz.1.5185': attribute type 1 has an invalid length. [ 702.739821][T26925] netlink: 'syz.1.5185': attribute type 1 has an invalid length. [ 702.986112][T26938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5187'. [ 703.128274][T26940] openvswitch: netlink: Message has 254 unknown bytes. [ 703.635208][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5195'. [ 703.917572][T26977] netlink: 'syz.2.5200': attribute type 1 has an invalid length. [ 703.917593][T26977] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5200'. [ 703.948577][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 704.098575][T26984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5202'. [ 704.098599][T26984] nbd: must specify at least one socket [ 704.133411][T26987] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 705.666531][T27064] netlink: 'syz.0.5217': attribute type 1 has an invalid length. [ 705.750582][T27064] 8021q: adding VLAN 0 to HW filter on device bond12 [ 705.825651][T27069] bond12: (slave gretap1): making interface the new active one [ 705.846685][T27069] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 706.636486][T27109] tipc: Enabling of bearer rejected, no device for the media [ 706.807545][T27111] __nla_validate_parse: 4 callbacks suppressed [ 706.807564][T27111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5228'. [ 707.444144][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5234'. [ 707.444176][T27134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5234'. [ 707.597918][T27140] bond6: option lp_interval: invalid value (0) [ 707.597943][T27140] bond6: option lp_interval: allowed values 1 - 2147483647 [ 707.619720][T27140] bond6 (unregistering): Released all slaves [ 707.641109][T27143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5236'. [ 707.728970][T27147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5236'. [ 707.741888][T27150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.793192][T27147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5236'. [ 708.005166][T27173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 708.115424][T27177] Bluetooth: hci0: unsupported parameter 5135 [ 708.115449][T27177] Bluetooth: hci0: unsupported parameter 8192 [ 708.115461][T27177] Bluetooth: hci0: unsupported parameter 5135 [ 708.115473][T27177] Bluetooth: hci0: unsupported parameter 8192 [ 710.695555][T27151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.719788][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5243'. [ 710.737357][T27183] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5245'. [ 710.737381][T27183] nbd: must specify at least one socket [ 710.883558][T27186] x_tables: duplicate underflow at hook 2 [ 710.936352][ T5640] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 710.936406][ T5640] Bluetooth: unknown link type 128 [ 710.936495][ T5640] Bluetooth: hci3: connection err: -111 [ 710.992058][T27195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5247'. [ 710.992112][T27195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5247'. [ 710.995728][T27196] xt_IDLETIMER: timeout value is zero [ 711.018464][T27197] netlink: 'syz.3.5246': attribute type 58 has an invalid length. [ 711.138826][T27201] netlink: 'syz.3.5246': attribute type 58 has an invalid length. [ 711.185745][T27200] netlink: 'syz.1.5251': attribute type 4 has an invalid length. [ 711.301247][ T10] lo speed is unknown, defaulting to 1000 [ 711.301311][ T10] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 712.051900][T27261] netlink: 'syz.1.5266': attribute type 11 has an invalid length. [ 712.088134][T27261] __nla_validate_parse: 4 callbacks suppressed [ 712.088153][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.147926][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.150685][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.157063][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.187126][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.190108][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.190850][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.219605][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.230089][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.242402][T27261] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5266'. [ 712.630826][T27308] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 715.237951][T27276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.917144][T27380] netlink: 'syz.3.5291': attribute type 4 has an invalid length. [ 716.124590][T27392] syzkaller0: entered promiscuous mode [ 716.124612][T27392] syzkaller0: entered allmulticast mode [ 716.175024][T27396] netlink: 'syz.5.5292': attribute type 1 has an invalid length. [ 716.960111][T27396] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 716.976099][T27404] bond6: (slave gretap2): making interface the new active one [ 716.976598][T27404] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 717.020159][T27409] 8021q: adding VLAN 0 to HW filter on device bond6 [ 718.691888][T27362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.897104][T27457] netlink: 'syz.5.5307': attribute type 2 has an invalid length. [ 718.897127][T27457] __nla_validate_parse: 91 callbacks suppressed [ 718.897139][T27457] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5307'. [ 719.045987][T27464] pimreg3: entered allmulticast mode [ 719.108056][T27464] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 719.110287][T27464] bond8 (unregistering): Released all slaves [ 719.140401][T27473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5314'. [ 719.222583][T27472] TC_ACT_REPEAT abuse ? [ 719.380027][T27489] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5316'. [ 719.401936][T27489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5316'. [ 719.417295][T27488] Cannot find map_set index 135 as target [ 719.549717][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5318'. [ 719.597490][T27499] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5321'. [ 719.647029][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 719.647054][T27494] openvswitch: netlink: Invalid VLAN frame [ 719.954907][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5328'. [ 720.036075][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880530d5400: rx timeout, send abort [ 720.036529][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880530d5400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 720.414156][T27545] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:19999 [ 720.416173][T27545] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004 [ 720.416416][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 720.447235][T27524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5330'. [ 720.490711][T27545] bond13: option xmit_hash_policy: invalid value (64) [ 720.505646][T27545] bond13 (unregistering): Released all slaves [ 720.761773][T27564] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 720.919309][T27579] netlink: 'syz.1.5347': attribute type 4 has an invalid length. [ 721.107559][T27592] netlink: 'syz.3.5349': attribute type 5 has an invalid length. [ 721.146037][T27597] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 721.179063][T27594] netlink: 'syz.3.5349': attribute type 10 has an invalid length. [ 721.284466][T27594] netlink: 'syz.3.5349': attribute type 1 has an invalid length. [ 721.398450][T27607] netlink: 'syz.5.5354': attribute type 10 has an invalid length. [ 721.424792][T27607] geneve3: entered promiscuous mode [ 721.424815][T27607] geneve3: entered allmulticast mode [ 721.442440][T27615] xt_cluster: node mask cannot exceed total number of nodes [ 721.537996][T27617] x_tables: (null)_tables: helper.0 match: invalid size 40 (kernel) != (user) 48 [ 721.760727][T27628] sit0: Caught tx_queue_len zero misconfig [ 721.841280][ T7920] hid-generic 0005:0B57:0004.0004: item fetching failed at offset 0/1 [ 721.864991][ T7920] hid-generic 0005:0B57:0004.0004: probe with driver hid-generic failed with error -22 [ 721.904406][T27634] netlink: 'syz.1.5363': attribute type 83 has an invalid length. [ 721.971324][T27646] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 722.159515][T27657] block nbd0: reconnected socket [ 722.159534][T27657] nbd: socks must be embedded in a SOCK_ITEM attr [ 722.199059][ T5640] block nbd0: Receive control failed (result -32) [ 722.928473][T27687] IPv6: addrconf: prefix option has invalid lifetime [ 722.928490][T27687] IPv6: addrconf: prefix option has invalid lifetime [ 722.967276][ T43] bond0 (unregistering): (slave geneve2): Releasing active interface [ 722.967301][ T43] geneve2 (unregistering): left promiscuous mode [ 723.180442][ T43] .` (unregistering): Released all slaves [ 723.191124][ T43] bond1 (unregistering): Released all slaves [ 723.208527][ T43] bond2 (unregistering): Released all slaves [ 723.235769][ T43] bond3 (unregistering): Released all slaves [ 723.260915][ T43] bond4 (unregistering): Released all slaves [ 723.289670][ T43] bond5 (unregistering): Released all slaves [ 723.336761][ T43] bond6 (unregistering): Released all slaves [ 723.385352][ T43] bond0 (unregistering): Released all slaves [ 723.596509][ T43] : left promiscuous mode [ 723.797345][ T43] tipc: Disabling bearer [ 723.799042][ T43] tipc: Disabling bearer [ 723.799214][ T43] tipc: Left network mode [ 723.896755][T27717] syzkaller0: left promiscuous mode [ 723.896774][T27717] syzkaller0: left allmulticast mode [ 724.250006][T27730] __nla_validate_parse: 16 callbacks suppressed [ 724.250028][T27730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5380'. [ 724.529201][T27736] netlink: 'syz.0.5383': attribute type 2 has an invalid length. [ 724.529222][T27736] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5383'. [ 724.558855][ T9217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 724.559085][ T9217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 724.582456][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 724.745939][T27743] netlink: 'syz.3.5384': attribute type 2 has an invalid length. [ 724.977153][T27754] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 725.012618][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 725.016449][T27753] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 725.265698][T27761] netlink: 'syz.3.5389': attribute type 16 has an invalid length. [ 725.265721][T27761] netlink: 'syz.3.5389': attribute type 17 has an invalid length. [ 725.317286][T27761] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.317410][T27761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.344439][T27761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.365292][T27761] veth1_to_bridge: left promiscuous mode [ 725.365314][T27761] veth1_to_bridge: left allmulticast mode [ 725.368501][T27759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5391'. [ 725.397943][T27761] team_slave_1: left promiscuous mode [ 725.476334][T27761] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 725.488134][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.488241][ T9217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.554700][T17923] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 725.554787][T17923] bond1: (slave veth0_to_bond): making interface the new active one [ 725.561278][T17923] bond1: active interface up! [ 725.608457][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 725.642984][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5392'. [ 725.645338][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5392'. [ 725.884180][T27784] sctp: [Deprecated]: syz.1.5398 (pid 27784) Use of int in maxseg socket option. [ 725.884180][T27784] Use struct sctp_assoc_value instead [ 726.038246][ T43] hsr_slave_0: left promiscuous mode [ 726.169840][T27803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5403'. [ 726.195970][ T43] hsr_slave_1: left promiscuous mode [ 726.230945][ T43] veth1_macvtap: left promiscuous mode [ 726.231016][ T43] veth0_macvtap: left promiscuous mode [ 727.010620][T27812] tipc: Resetting bearer [ 727.061654][ T9222] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.061689][ T9222] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.061760][ T9222] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.061784][ T9222] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.063064][ T9222] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.063092][ T9222] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.113666][T27830] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5410'. [ 727.141221][T27824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5409'. [ 727.141887][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.141916][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.164727][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.164795][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.165523][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.197714][T27830] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 727.197747][T27830] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 727.197783][T27830] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 727.313702][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.317207][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.318879][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.320528][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.350114][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.360170][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.368489][T27830] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.626722][ T43] IPVS: stop unused estimator thread 0... [ 727.908748][T27859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5417'. [ 727.935227][T27856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5417'. [ 728.253077][T27875] netlink: 'syz.3.5422': attribute type 11 has an invalid length. [ 728.422742][T27886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.543902][T27898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.616093][T27886] bond6: option min_links: invalid value (18446744073709551614) [ 728.616118][T27886] bond6: option min_links: allowed values 0 - 2147483647 [ 728.650665][T27886] bond6 (unregistering): Released all slaves [ 728.721651][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 728.861061][T27903] bond6: option min_links: invalid value (18446744073709551614) [ 728.861085][T27903] bond6: option min_links: allowed values 0 - 2147483647 [ 728.888908][T27903] bond6 (unregistering): Released all slaves [ 729.373863][T27934] Cannot find map_set index 2 as target [ 729.668789][T27949] No such timeout policy "syz1" [ 730.161678][T27961] __nla_validate_parse: 4 callbacks suppressed [ 730.161698][T27961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5440'. [ 731.800733][T28001] syzkaller0: left promiscuous mode [ 731.800757][T28001] syzkaller0: left allmulticast mode [ 731.872232][ T9224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.872285][ T9224] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.872318][ T9224] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.872349][ T9224] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.340806][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5447'. [ 732.340842][T28005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5447'. [ 732.495880][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5447'. [ 732.495912][T28005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5447'. [ 732.773794][T28011] xt_HMARK: proto mask must be zero with L3 mode [ 732.776134][T28011] sctp: [Deprecated]: syz.0.5449 (pid 28011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.776134][T28011] Use struct sctp_sack_info instead [ 732.825470][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5450'. [ 733.008910][T28017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5449'. [ 733.808601][T28037] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5455'. [ 733.815909][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5455'. [ 734.370246][T28047] syzkaller1: entered promiscuous mode [ 734.370268][T28047] syzkaller1: entered allmulticast mode [ 734.497020][T28052] netlink: 'syz.3.5458': attribute type 10 has an invalid length. [ 734.769980][T28052] macvlan1: entered promiscuous mode [ 734.770003][T28052] macvlan1: entered allmulticast mode [ 735.362422][T28073] IPVS: wrr: TCP 172.20.20.170:20000 - no destination available [ 735.460684][T28076] netlink: 'syz.0.5464': attribute type 1 has an invalid length. [ 735.567758][T28081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5464'. [ 735.779092][T28076] 8021q: adding VLAN 0 to HW filter on device bond13 [ 735.877922][T28083] ip_tables: iptables: counters copy to user failed while replacing table [ 736.360764][T28107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.408841][T28105] netlink: 'syz.3.5469': attribute type 1 has an invalid length. [ 736.537212][T28111] openvswitch: netlink: IP tunnel dst address not specified [ 736.538542][T28114] Cannot find set identified by id 4 to match [ 737.042852][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 737.159009][T28129] netlink: 'syz.5.5476': attribute type 3 has an invalid length. [ 737.159030][T28129] netlink: 'syz.5.5476': attribute type 2 has an invalid length. [ 737.358578][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5479'. [ 737.896567][T28150] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 738.356587][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5487'. [ 738.468111][T28168] netlink: 'syz.1.5489': attribute type 4 has an invalid length. [ 738.468686][T28168] netlink: 'syz.1.5489': attribute type 4 has an invalid length. [ 738.502640][ T10] lo speed is unknown, defaulting to 1000 [ 738.502664][ T10] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 738.880571][T28181] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5495'. [ 738.909865][T28181] Bluetooth: hci0: unsupported parameter 5135 [ 738.909889][T28181] Bluetooth: hci0: unsupported parameter 8192 [ 738.909901][T28181] Bluetooth: hci0: unsupported parameter 5135 [ 738.909912][T28181] Bluetooth: hci0: unsupported parameter 8192 [ 740.058434][T28212] sock: sock_timestamping_bind_phc: sock not bind to device [ 740.072976][T28200] [ 740.075343][T28200] ====================================================== [ 740.082388][T28200] WARNING: possible circular locking dependency detected [ 740.089564][T28200] syzkaller #0 Not tainted [ 740.093981][T28200] ------------------------------------------------------ [ 740.100985][T28200] syz.3.5497/28200 is trying to acquire lock: [ 740.107033][T28200] ffff88802894a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 740.116526][T28200] [ 740.116526][T28200] but task is already holding lock: [ 740.123869][T28200] ffff888028949c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 740.134053][T28200] [ 740.134053][T28200] which lock already depends on the new lock. [ 740.134053][T28200] [ 740.144446][T28200] [ 740.144446][T28200] the existing dependency chain (in reverse order) is: [ 740.153449][T28200] [ 740.153449][T28200] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 740.162165][T28200] blk_alloc_queue+0x544/0x690 [ 740.167497][T28200] __blk_mq_alloc_disk+0x194/0x390 [ 740.173154][T28200] nbd_dev_add+0x494/0xb60 [ 740.178111][T28200] nbd_init+0x168/0x1f0 [ 740.182855][T28200] do_one_initcall+0x250/0x870 [ 740.188137][T28200] do_initcall_level+0x10a/0x1a0 [ 740.193681][T28200] do_initcalls+0x59/0xa0 [ 740.198518][T28200] kernel_init_freeable+0x29d/0x3e0 [ 740.204221][T28200] kernel_init+0x22/0x1d0 [ 740.209056][T28200] ret_from_fork+0x514/0xb70 [ 740.214151][T28200] ret_from_fork_asm+0x1a/0x30 [ 740.219418][T28200] [ 740.219418][T28200] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 740.226614][T28200] fs_reclaim_acquire+0x71/0x100 [ 740.232066][T28200] __kmalloc_cache_node_noprof+0x66/0x620 [ 740.238299][T28200] create_worker+0x112/0x7c0 [ 740.243396][T28200] workqueue_prepare_cpu+0xe4/0x170 [ 740.249105][T28200] cpuhp_invoke_callback+0x434/0x810 [ 740.254903][T28200] _cpu_up+0x2ce/0x5b0 [ 740.259481][T28200] cpu_up+0x1d2/0x220 [ 740.263972][T28200] cpuhp_bringup_mask+0xb2/0x1a0 [ 740.269514][T28200] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 740.275829][T28200] bringup_nonboot_cpus+0x17/0x30 [ 740.281372][T28200] smp_init+0x32/0x110 [ 740.286053][T28200] kernel_init_freeable+0x27f/0x3e0 [ 740.291767][T28200] kernel_init+0x22/0x1d0 [ 740.296605][T28200] ret_from_fork+0x514/0xb70 [ 740.301714][T28200] ret_from_fork_asm+0x1a/0x30 [ 740.306999][T28200] [ 740.306999][T28200] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 740.314720][T28200] cpus_read_lock+0x3d/0x160 [ 740.319830][T28200] static_key_slow_inc+0x12/0x30 [ 740.325283][T28200] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 740.331515][T28200] nbd_genl_foreach_sock+0x265/0x450 [ 740.337311][T28200] nbd_genl_reconfigure+0xbbb/0x1040 [ 740.343113][T28200] genl_family_rcv_msg_doit+0x233/0x340 [ 740.349286][T28200] genl_rcv_msg+0x614/0x7a0 [ 740.354297][T28200] netlink_rcv_skb+0x226/0x4a0 [ 740.359693][T28200] genl_rcv+0x28/0x40 [ 740.364202][T28200] netlink_unicast+0x8ef/0xa80 [ 740.369485][T28200] netlink_sendmsg+0x7f0/0xb20 [ 740.374770][T28200] sock_sendmsg_nosec+0x14e/0x190 [ 740.380411][T28200] ____sys_sendmsg+0x54e/0x850 [ 740.385696][T28200] ___sys_sendmsg+0x2a5/0x360 [ 740.390884][T28200] __x64_sys_sendmsg+0x1b1/0x290 [ 740.396349][T28200] do_syscall_64+0x166/0x520 [ 740.401456][T28200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.407894][T28200] [ 740.407894][T28200] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 740.415529][T28200] __mutex_lock+0x197/0x15a0 [ 740.420637][T28200] nbd_queue_rq+0x373/0xff0 [ 740.425651][T28200] blk_mq_dispatch_rq_list+0x499/0x1990 [ 740.431797][T28200] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 740.438680][T28200] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 740.445168][T28200] blk_mq_run_work_fn+0x167/0x2f0 [ 740.450704][T28200] process_scheduled_works+0xc3d/0x1630 [ 740.456763][T28200] worker_thread+0xa47/0xfb0 [ 740.461871][T28200] kthread+0x38b/0x480 [ 740.466451][T28200] ret_from_fork+0x514/0xb70 [ 740.471550][T28200] ret_from_fork_asm+0x1a/0x30 [ 740.476821][T28200] [ 740.476821][T28200] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 740.484018][T28200] __mutex_lock+0x197/0x15a0 [ 740.489123][T28200] nbd_queue_rq+0xc1/0xff0 [ 740.494047][T28200] blk_mq_dispatch_rq_list+0x499/0x1990 [ 740.500108][T28200] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 740.506969][T28200] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 740.513456][T28200] blk_mq_run_work_fn+0x167/0x2f0 [ 740.518995][T28200] process_scheduled_works+0xc3d/0x1630 [ 740.525059][T28200] worker_thread+0xa47/0xfb0 [ 740.530162][T28200] kthread+0x38b/0x480 [ 740.534737][T28200] ret_from_fork+0x514/0xb70 [ 740.539834][T28200] ret_from_fork_asm+0x1a/0x30 [ 740.545113][T28200] [ 740.545113][T28200] -> #1 (set->srcu){.+.+}-{0:0}: [ 740.552224][T28200] __synchronize_srcu+0xca/0x2f0 [ 740.557683][T28200] elevator_switch+0x1e8/0x7b0 [ 740.562982][T28200] elevator_change+0x2fa/0x480 [ 740.568272][T28200] elevator_set_default+0x375/0x440 [ 740.573988][T28200] blk_register_queue+0x404/0x4f0 [ 740.579522][T28200] __add_disk+0x6b8/0xdb0 [ 740.584366][T28200] add_disk_fwnode+0x100/0x3a0 [ 740.589644][T28200] nbd_dev_add+0x733/0xb60 [ 740.594565][T28200] nbd_init+0x168/0x1f0 [ 740.599232][T28200] do_one_initcall+0x250/0x870 [ 740.604501][T28200] do_initcall_level+0x10a/0x1a0 [ 740.609944][T28200] do_initcalls+0x59/0xa0 [ 740.614780][T28200] kernel_init_freeable+0x29d/0x3e0 [ 740.620485][T28200] kernel_init+0x22/0x1d0 [ 740.625321][T28200] ret_from_fork+0x514/0xb70 [ 740.630417][T28200] ret_from_fork_asm+0x1a/0x30 [ 740.635689][T28200] [ 740.635689][T28200] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 740.643496][T28200] __lock_acquire+0x164c/0x2de0 [ 740.648862][T28200] lock_acquire+0x115/0x350 [ 740.653879][T28200] __mutex_lock+0x197/0x15a0 [ 740.658985][T28200] elevator_change+0x1af/0x480 [ 740.664259][T28200] elevator_set_none+0xb5/0x140 [ 740.669621][T28200] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 740.675932][T28200] nbd_start_device+0x189/0xb30 [ 740.681290][T28200] nbd_genl_connect+0x167d/0x1cd0 [ 740.686823][T28200] genl_family_rcv_msg_doit+0x233/0x340 [ 740.692885][T28200] genl_rcv_msg+0x614/0x7a0 [ 740.697896][T28200] netlink_rcv_skb+0x226/0x4a0 [ 740.703171][T28200] genl_rcv+0x28/0x40 [ 740.707662][T28200] netlink_unicast+0x8ef/0xa80 [ 740.712935][T28200] netlink_sendmsg+0x7f0/0xb20 [ 740.718210][T28200] sock_sendmsg_nosec+0x14e/0x190 [ 740.723744][T28200] ____sys_sendmsg+0x54e/0x850 [ 740.729013][T28200] ___sys_sendmsg+0x2a5/0x360 [ 740.734197][T28200] __x64_sys_sendmsg+0x1b1/0x290 [ 740.739647][T28200] do_syscall_64+0x166/0x520 [ 740.744755][T28200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.751153][T28200] [ 740.751153][T28200] other info that might help us debug this: [ 740.751153][T28200] [ 740.761362][T28200] Chain exists of: [ 740.761362][T28200] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 740.761362][T28200] [ 740.775170][T28200] Possible unsafe locking scenario: [ 740.775170][T28200] [ 740.782618][T28200] CPU0 CPU1 [ 740.787967][T28200] ---- ---- [ 740.793330][T28200] lock(&q->q_usage_counter(io)#53); [ 740.798696][T28200] lock(fs_reclaim); [ 740.805182][T28200] lock(&q->q_usage_counter(io)#53); [ 740.813065][T28200] lock(&q->elevator_lock); [ 740.817642][T28200] [ 740.817642][T28200] *** DEADLOCK *** [ 740.817642][T28200] [ 740.825767][T28200] locks held by syz.3.5497/28200: 6, last CPU#0: [ 740.832266][T28200] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 740.840457][T28200] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 740.849410][T28200] #2: ffff8880289ca9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x1b70 [ 740.860793][T28200] #3: ffff8880289ca8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x1b70 [ 740.871741][T28200] #4: ffff888028949c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 740.882360][T28200] #5: ffff888028949c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 740.893237][T28200] [ 740.893237][T28200] stack backtrace: [ 740.899109][T28200] CPU: 0 UID: 0 PID: 28200 Comm: syz.3.5497 Not tainted syzkaller #0 PREEMPT(full) [ 740.908460][T28200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 740.918500][T28200] Call Trace: [ 740.921768][T28200] [ 740.924688][T28200] dump_stack_lvl+0xe8/0x150 [ 740.929276][T28200] print_circular_bug+0x2e2/0x300 [ 740.934311][T28200] check_noncircular+0x12f/0x150 [ 740.939244][T28200] __lock_acquire+0x164c/0x2de0 [ 740.944100][T28200] lock_acquire+0x115/0x350 [ 740.948593][T28200] ? elevator_change+0x1af/0x480 [ 740.953530][T28200] __mutex_lock+0x197/0x15a0 [ 740.958112][T28200] ? elevator_change+0x1af/0x480 [ 740.963041][T28200] ? rcu_is_watching+0x16/0xb0 [ 740.967798][T28200] ? work_grab_pending+0x3d1/0x930 [ 740.972893][T28200] ? elevator_change+0x1af/0x480 [ 740.977822][T28200] ? __pfx___mutex_lock+0x10/0x10 [ 740.982838][T28200] ? lockdep_hardirqs_on+0x7b/0x110 [ 740.988117][T28200] ? cancel_delayed_work_sync+0xd9/0xf0 [ 740.993648][T28200] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 740.999098][T28200] elevator_change+0x1af/0x480 [ 741.003859][T28200] elevator_set_none+0xb5/0x140 [ 741.008700][T28200] ? __pfx_elevator_set_none+0x10/0x10 [ 741.014152][T28200] ? xa_load+0x1db/0x210 [ 741.018471][T28200] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 741.024290][T28200] ? kernfs_add_one+0xfc/0x510 [ 741.029067][T28200] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 741.035310][T28200] ? sysfs_add_file_mode_ns+0x258/0x300 [ 741.040856][T28200] nbd_start_device+0x189/0xb30 [ 741.045698][T28200] ? device_create_file+0xf4/0x1b0 [ 741.050964][T28200] nbd_genl_connect+0x167d/0x1cd0 [ 741.056003][T28200] ? __pfx_nbd_genl_connect+0x10/0x10 [ 741.061381][T28200] ? rcu_is_watching+0x16/0xb0 [ 741.066151][T28200] ? __nla_parse+0x40/0x60 [ 741.070568][T28200] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 741.076895][T28200] genl_family_rcv_msg_doit+0x233/0x340 [ 741.082436][T28200] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.088500][T28200] ? __lock_acquire+0x747/0x2de0 [ 741.093433][T28200] genl_rcv_msg+0x614/0x7a0 [ 741.097928][T28200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.102941][T28200] ? __pfx_nbd_genl_connect+0x10/0x10 [ 741.108306][T28200] netlink_rcv_skb+0x226/0x4a0 [ 741.113064][T28200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.118075][T28200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.123357][T28200] ? down_read+0x2b9/0x320 [ 741.127779][T28200] genl_rcv+0x28/0x40 [ 741.131749][T28200] netlink_unicast+0x8ef/0xa80 [ 741.136521][T28200] netlink_sendmsg+0x7f0/0xb20 [ 741.141290][T28200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.146568][T28200] ? aa_sock_msg_perm+0x144/0x210 [ 741.151672][T28200] ? apparmor_socket_sendmsg+0x98/0x360 [ 741.157208][T28200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.162483][T28200] sock_sendmsg_nosec+0x14e/0x190 [ 741.167501][T28200] ____sys_sendmsg+0x54e/0x850 [ 741.172255][T28200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.177533][T28200] ? import_iovec+0x73/0xa0 [ 741.182092][T28200] ___sys_sendmsg+0x2a5/0x360 [ 741.186763][T28200] ? __lock_acquire+0x747/0x2de0 [ 741.191696][T28200] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.196880][T28200] ? futex_wait+0x2a2/0x390 [ 741.201388][T28200] ? __fget_files+0x3a2/0x420 [ 741.206119][T28200] ? __fget_files+0x2a/0x420 [ 741.210704][T28200] __x64_sys_sendmsg+0x1b1/0x290 [ 741.215631][T28200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.221084][T28200] do_syscall_64+0x166/0x520 [ 741.225663][T28200] ? trace_irq_disable+0x3b/0x140 [ 741.230678][T28200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.236728][T28200] ? clear_bhb_loop+0x70/0xc0 [ 741.241399][T28200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.247281][T28200] RIP: 0033:0x7fb85f39fb19 [ 741.251681][T28200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.271274][T28200] RSP: 002b:00007fb860344028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.279676][T28200] RAX: ffffffffffffffda RBX: 00007fb85f625fa0 RCX: 00007fb85f39fb19 [ 741.287635][T28200] RDX: 000000000400400c RSI: 0000200000000080 RDI: 0000000000000007 [ 741.295594][T28200] RBP: 00007fb85f437b70 R08: 0000000000000000 R09: 0000000000000000 [ 741.303550][T28200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.311508][T28200] R13: 00007fb85f626038 R14: 00007fb85f625fa0 R15: 00007ffe3f5476f8 [ 741.319475][T28200] [ 741.558695][ T5633] block nbd4: Receive control failed (result -32) [ 741.558777][ T5640] block nbd4: Receive control failed (result -32)