last executing test programs: 1m16.945969796s ago: executing program 4 (id=3987): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xc, 0x4, 0x4, 0x8, 0x8, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000004180)={{r2, &(0x7f0000000080)='syzkaller\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x6, 0xed]}, {0xf5d, 0x2, 0x7, 0xffffffffffffffff}}, 0x1ff, &(0x7f00000001c0), &(0x7f0000000240)=0x8000}, 0xa, &(0x7f0000004040)=[{0x0, 0x7, &(0x7f0000000280)='syzkaller\x00', &(0x7f0000000a40)="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", 0x1000, 0x12}, {0x2, 0x3, &(0x7f0000001a40)='%@\x00', &(0x7f0000001a80)="6e0f20d171fbc7246c3ae5f1cd7a7f9799291dcc2b785598045e92b68fe2d707a0c4026afc00ecf369b39c5c7518b3ecac1af97e1252fc804369c0673d82c22f2b995881f4b8b14fc85f89bf5f838a070a2349809cecae224cff2341829b102d09e1dd16c8055788a4f6f3d8988e43cad11d3b0f63aaaaace28445bae6f321903274da5c684f0035fc925f1178e77565ca47200f9214facd0b360fb22dadd8343755c6d756bfa3b8", 0xa8, 0xa}, {0x3, 0x8000, &(0x7f0000001b40)='/)\xa9\\,\x00', &(0x7f0000001b80)="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", 0x1000}, {0x2, 0x0, &(0x7f0000002b80)='syzkaller\x00', &(0x7f0000002bc0)="5240705629727f8ac5d677d3cd1000671f8f8eccb98af0be8a4c78c739e50927a92305ee1c79cfddb3a8805819adc72ab80d6015e0c76ef40a9ecbbbe2a72311d13ffb14dd4555ea391b2ef2ff127e77732d1770e2971e4c7a5cbae7b2b76220830f6d444bc4b22743cca8185a912ab5f929539e24d4314dc75d3f7f855c03a188ea5ec7630a2da4b80c629baa899a71fad658aa55c9ced09886c6d4c59d81ddfb967b5943ed80d464b991a1fc40f1a5428d95fd1ad7ed96b9977dfc92f3752d117828175fddef9b7c886ee4b8cbf8c16b74", 0xd2, 0x20}, {0x1, 0x3, &(0x7f0000002cc0)='\x00', &(0x7f0000002d00)="f790bff5eaae5e677eded8bde396dd4d8f49020fef1875f1a6f163bf6264cff3c5c0ccf8b575646dc4c407b257048c0b05342684ddf82172f2c9dce99276c521ac5dc02a770de864464cfcb4b09750941a3fd813fa8c9dcd21", 0x59, 0x12}, {0x1, 0x8, &(0x7f0000002d80)='{%^%\\%!@-!-^-\xb2\xcc\x00', &(0x7f0000002dc0)="39985388e1d12c005c8d0ce5f9ce428f405d94c988b3a28727803092befd50e859fd3c91e761830b40b8fe", 0x2b, 0x12}, {0x1, 0x42500000, &(0x7f0000002e00)='$}:,&-!}&)\x03\x00', &(0x7f0000002e40)="0276176243877da96755905e505396a2db0aefa3c899876c71ff2fa01c33dd210c09f739a0824c22f269cc687f16d3c94dc2f34fe5882109f2408eeabc55f5128ff3c977b92823f9aca531366a638a6da3b0ede9c86f111b3baec7e82ec04191ba6e3a3c55a905f20009cd9e3800bb16b128011d7857a9669c441b7a500d4dff538cb040fcf0d413bdb6a9bfef61ff69e1f084d9fd0f2d317b02c5be457de14c788e83c181e054b82c1573b3827ae1e4aa77cfbb2356db6660dcbbb94fb13a6b05a7ab8f9dd60ac102109dcae4aa42f2aec13ae25142cfbe10e3c37a609a2ea2e2282be0d2d90179ef44ed50e4259376c5f2344b69332f4dbf45350472bc259f470e4a8c37b1f1db3b1f5c1a94dcc04897a8b9a5f741a15496fd0f27db4de68a17081b68cbe0f9645c0c7cb80f01eba919cd756c1402cd00d4565729fdcb7c5bf2ead9e27400e2199ab13679991abd73f068b0ac0e9675b243afb5204fdf54305e066f504d9763d6dc08a77c5e932e0656c2209241e2b50b27268dab975a72addf8e1294943e7855c35c6e93873972934b4f4060d74d84ee5396caa34b8d2e2178998e2b6e760de0734d8c931f3ff57c347473d69d0061d3bff4d6a0a2882ba2c638615aabff0161f78eb400cd68fa9f71229fad4738c4e3b61980a5b0a1c408be7b5e332fbb4fdd79315d867805efab5464aef75844b02cb287977531b55193d253fe19443876bf8d1dd9fe8d265eadc6c73edd4b3401d934385ced02f560cc894fa65c50e2203751b31f2ad1222c6d2d0e7b2d053aa298999f8e06a1fc2c6ce38fdffd4698f4429d52033e8a0091adabe8a6319062ba2d11fbb5713da0c0c0ea08caf4348b3fdd08d30d0674e6822f3a4ea938e9d503d4d60ba8c4af3cb53a104efbc0158e04a774f38f0dc16b23bf70d2ddf71db5476b9652472be87c4c018615c7f988fb47319484cd3406d6fbd1d16683579b8091488f3b36ba5461d0afeb6fb1c880a3f262dd8c930fa15d9eddcac855dab155659da51208040e1b684e2b21629c9d1c4c829a5fd86f07b00aa6f842545b435dedcbdf3eefa2035951683ad8252fd8adfddd42263b1af0129afc0ba20e2270209ed69b48d629afc79164547157dcb355f504ead202419745e80e8dc432f89f1fa1311a152d7fc400c50e9558ef4e0707b391dc86ef722b3472f25e17db483176e5b488d25776fbb09fd9bcf674dee2813ef64d6d164a4dfee95868a3aec235d5e0d6db17fbe9535a70993856b67518e23a60e052c4b8c59be5cf0885ba10c3e38ed8fecc1d8cd83ec715aa49b552f8ffcee11dcccbe045a6ef3c6937c2d690feae8ae049a51c145b0659d840b6d1eefe566d5036b7944e826827710b02f3aa35ae1a886a372b69130b7e6bdc5ce91829aa29fa14a58f3e80aeb49e6c823ae9220a9f18640324fc35d18240866ec3d1503d61186cd20fe1f9d686ddadafc3303a80bcd118c6dda21bb561356cfcba21728196644f49a492aa670286f31f9f157839ac1e6a77b3e25c4da689ecf861b3eefc1a62789ba685b3ac197343504793b733661974fc21287dc744455d312081a73573d161d1e49c5a5d66a0fbd3c012e45b732ea95b1940adcb73a80f00fea4550d3289fa41cd0b80c79da7b483bcb0ba7bd4ff6f5965b4f207c95ee78300a9b8252b2b020aa78c6aeb72fe517b46b5b22de0ddd23d08810666da45342bf662cfdbb65eee4f1902968b41a881789fa6f2d22d79f9fa67d003bd78756dcc1781afdd230d1778f9978dd37b5049d4799f5f95417c413f8e0b8a8135c965660b3530549f24e69909fbf707a2e9c3dd09436399cc9c4e262671b2a8c1f68e762f66229c5e496528683b40f97f298a47ae0f871026a86d5457bffaf99324e88fbdbb61fad30bf7da7e63ec0345e8de473bbea1badc59521a9f00d71ce6f2997328f49094768d548fec33c37ad2e7547fa140207ed1bba78b81ac2dbeb1d8f8d7871608e8464531eaf35e28bc5937da079f1e45862847b77906cdd08f5df697028ac3644b585beee1859926e566e03a30b4778e6cadfe827806582c43a768722f5dc7f3a97a4df31c8b076a5ecf7df4f661cc42a6b6ce59d7a3747330c3975ff79082e152b37f3db2c003b6d2c5fd307d90fa1088dcef2ba451375ea27ec5069ccc796d41b20d47218534fbc7eb6d8b3cf60ae4ba35e8c903ad640251dfe39f94cc079ad1ea0353e274a9d9d91acdf8822165153c25c88191917b47be645c86745fd7bab00a3a4efc93d76eae9700a72279e0c60113380e1bd6b4356f43cc57a2198bfb02d2482b62fb98d65ef994a15ca362754c668e54323107e824af3fe30fa013c2b6e321054c1d2c143044a5f897edff4fb406b0bce4cd4fabce45452f3bbb8e1b60e9a0e25dffba79ea02a046de9542f7cb64cc570f0a02616b2ac3115ab15cac013d0fd0661560b593e4a23c3342422366d723a90d5c39d2de06de7ef29bb6d97530b10f26e3233b11d8781b1ba74bfdb65223d8a366b20a7f31ad81312748203cb3defad331bb23d1a0d0404c517fa64e1e844b50a28b9bd60d1f98829ec6e59b192338e30643ef43fa615c3f3bbfdac74ae4febbb37866514f88991003d042394a3d407a281e4fc20fae30ff13bf6dfb2c4b7add081d59a378fd66b258a9346526f9d11817cebcd85906a960e57d24c89e216f52d3ae419854880ad1c3c6ffd395ccb7bc6d7200684d3a86911e2723e95f50755c0b1725a7552c35b5524efa23c0fe8b3b48b952f1b7248c6afa5c48f7b93bba815dd7d660dc9c146ed325d76d58b95c4343cd7d34527f42b39ad1da7ebde59a5213431e676cdc7ac3494a2a6aab080e9c6b85f62b15e0e51e11e03d01bce72a16f4b3b399076f7aa5de0b96551141045e3d8d9871606bde36a8b5b5ce3b3657002b5dffcb3a13ff9e144428209b12a1d7570de96a540115f94ee16c9c6972fbdc577973b3db5958edc11d118e478896bebe694b2c4f7f052a0a14591f2875e191b287c1cd88164afc7881001f09746dff1204e4451004395cbc3c64694eeffd7e7c19209bbcf99a7668804e0eccf204e4fbad885b654c0a2c36d902249c175d4838b53165c4d4aee669d9d72e23ad4c08347ac6bda7fc4fae95184f0e5bce1a61f07d2995bd0ec6a6f6f55e1a40e59db61a3435cff47ef8b7d148723dfcaceb8d4b2cf12c74368ee2c65d88bd9fc231b87e2773620d647368c398fe311b68eddbeb17533c70441ca0ac2c4126a19f452ad06d9db53a4e4d0fe7d5d6fb2268500f609ef8c23472c58f9254b7f2de0b9c6c60e1f1e46e764742e038aaff43441ffe112aebf048d2f3b0b027569d4d7999de00938b4b2bf6740038bfd364b1202bfc71c9e87ddad0b02c732b500cfd2248124dd658629dc8639c7b1ecf1fa455c4108aaddaf164a986d722a2d77d8d86d303c26c5c1bfd1838d635434899f2caadb75d62fed7e3ff5c0efd79124d61dd91866787774114f5d3c1a5d7d504799e8b55268e1e3fba0dafa758ca7e76072de73130ac56829c676fac231bbefc3cb03870655bcc8957ff4fbc7dd11c080ab36959004b953f66fbc8ad0aea46e70d141f3dd0a4cfc98f4219c6b6bdbcbe2fa6a336943e090b60fdaf16fcf424fa625c20a201a6cd7a524ebd2135be422fb47eab94dcded34b42772560616cd274d8785eb0af7e485dc1e939908c0ba2560851e18b83075601d12ef00491ee291284788f8e91b32c92bba59c530ccf14e4a5b67e6989093a49e8b80659e228f98b42552374704da192769d6777e0a33f6b31462c1c1e74182ef27aa3d4b88f3f41f088632a7c361f38745606faf347d1902189896b21a88e4e57e929672256983ac3436f440d295500585ff14c42a6f6de78e79d9d590ad32f43f36a6ce4bd33cc6505ac634a5147127b36ddd72d722a8bee4094331eedb732d5612b869580f5b81f68fca10e32b15a1315e13286e2186a955a1d54b7976176c6dff1afde06cb178d490893b4bed4c61a26a4a60c5b0f64e0ff133ad73675c2f94a058f6aa7fc3fdb9f0cf7c1ce0b4782d05aecbde92972370931dcd723e156c13551fc288b3dbdbef62ccda3d743c646edce9d30d214cbb1caa35ffc2f6966e109b58328e2ca364df6c5df0782cc6fbbae4799ae9a1ad797dfc1845562320f09bddf47b08ba382b051443e4709656100e62b53fb0e2c8dba8a6663bd07814b2ee8563ebac6ab83b04d85fa350a25691f08169c937263965d0c55bd1a658cf3c9bbfb6d6b11c59b333df7284b34fc38d8caca8d0fbc3ac15339086ed0a76c452bb40d131b750b1d559cf7f2961cc59a31326f28ffa8cd5796b0ee63298673c64fe7d687095be6920820b043e2d6d61b84758749795c7cd345747b383f0a40702e89d3c8c1cb574c1518707896a4bfcdc14807826086af07f244f80d43560e72434a7d64d603d1378656470181a6ec7198dbfb07bae4496d63622cc10bace2a3c4f603cb9255cd7627d26da405c9aabbb49e2aeb426b117eb5f88aa2bddbcd0ee7e00fa905800ef350f59071039ebff3f9424d6c5252e1acd491ddc8459d0b368ff1ebbd412521b1064918f816e99a3df1cb3b620eceaa50392eb60f0470530e212661f9c58dfea6eb8180c60bbbf802913033db11aa7df6e1605a159c6362efb27b9e831d4efd2b49b66385a4efdfe09b31af005aec052da6de07189a256b1c845b9a927f97e2919a05f5fb8d7e86cb254033192d003a5f79a5bd094eb6051a0fefe16b06ad29e2d8f1d8c58a871dbca70c61003aeb56468caa4c8e654dd6952eecce9d02553fce6feee6073ff4b02287247d0446ef6d6692a4aaff98e31db3508a8bda0e86fcd7b76cf6e07fdf73fdca689c1026a2b9ad763a0d44db7b8ca306b92d94923faaed1dc2f04c71c82350df41cccc922ff346fc82d26795e4f581294a3f76f78f10a0a3005e80a0896451235e8f1c8f56f0d37ba9a9142880507c46a64e6445d805f846ff0ebe92d0df0ebc69bf0f93e0659585ad05d6283dcb01c07177e367b52c2d48259fa21f01c463d6decf9a9249dcb7b5b019218d263b0ec9f17069c70670b67a2cd93d22bf8e8a259bf82d05e22e409df0c20f6119724f8721ae9e2af29b6e9d71cd083e4beedde4da7df027416f7c1be160a86cf7cc4870b4207c754509abe2839ce2ab2ae808c89e15ce45d0acd57f5d520f8db3bb00095dab87602d81768642e88dd56effa228d8d305378b59424c32a435ebc050a2869d305edb7eeecfc5e7b3a3e89b484dec0d3c8e1a42469d3216cf33a37f3a669a5ca5a3d06367799c4483530e82568e5d2552fa5b41fc7402cfc26a2d822d2847272921715dcd17a6e84eaeded23b041b709291d05756bbf0d1a1cb9960dfc7eecc12c490a2d3b68b161f0875e831c4440eddca36486100be25eee53f2a385355c19b10bfb4fbe201cea8300b28632cd905547e377257aae5313bddad75ceafb08694bdba038819c21eb6cdcb591b0480bafcbf49a8e97dcff8866a6ca03ba159825e9a3f256cb8327f6604984cd768791fb57a697b72af8aea9c360716476c6462319465286146da7459df8e147ee0413d76d9879a8cfa1b444c3743da880e910a43dab2606e323324f72fbd087cf7aee89d6b4a31c47a79117518f1bf31763abbab3fe35a11b58b181e0e2754a1c28a1861ec923ecaf91e47441b372b35a718e8ff61805818b3e0f8b04249a07ff891e33850c32b0b4352b32c2a296b7642bd490424d07b44747de01e1294bcb0be08", 0x1000, 0x22}, {0x1, 0xffff, &(0x7f0000003e40)='\x00', &(0x7f0000003e80)="aae3d1b05ba4a9d2286a99563d6a9ea9f3efcdae8d848b186f96289e1f990ec7c7f4df0b975adc75f79d647475d531a36e9aa66c3003117f281df0e31bdd22694ca1f32bd35aa159ea897c81da31eddb6327bff696a06d085d8f36769469ff369d84baf800640601efdca1cb23082a6be94d8a8332b86de90efb6b1b21dd891393cd64268a50edacce6413b1", 0x8c, 0x78}, {0x1, 0x1, &(0x7f0000003f40)=')!!%\x00', &(0x7f0000003f80)="ecda9a64e5852e9c029a420696c24113cfb2fad12a055715c672b8624ffad71f671718778b4c14c292cf234b1bae5e69095bfd8514bbb1", 0x37, 0x2}, {0x3, 0x2, &(0x7f0000003fc0)='syzkaller\x00', &(0x7f0000004000)="9cccc384db054f8934c72d5fda59c2a4ec", 0x11, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x60, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x85}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@arena={0x21, 0x0, 0x0, 0x38, 0x0, r0, 0x10001, '\x00', r8, r3, 0x0, 0x5, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1m16.652138196s ago: executing program 1 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @private=0xa010102}}, 0xde, 0x70, 0xa0, 0xffffff98, 0x3a, 0xfffffa75, 0x8}, &(0x7f0000000280)=0x9c) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x23}, @void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x2000c840) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000003c0)={0x1, 0x4}) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000440)=0x10, 0x80000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000480)=""/172, &(0x7f0000000540)=0xac) write(r0, &(0x7f0000000580)="7e537061761f4adf372eaaa27df7c43f61063ec4959519fe0f5a98c77c1f47ce5dbc5ed369517a00552577dc805612e9a7d04471e1cec861d6cf04541b83cca06771d10ef622afb344805657c773f5ba", 0x50) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}]}]}, @NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xdb3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000001}, 0x44000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000880)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0xe08, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x841) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000c80)={{&(0x7f0000000a40)=[{0x3f, 0x0, 0x400, {0x7ff, 0x7}, 0x7fffffffffffffff, 0x6, 0x10001}, {0x10, 0x3149, 0x7, {0xf6, 0x1}, 0xb, 0x9, 0x1}, {0x0, 0x8, 0x4a0d, {0x4800}, 0x3, 0xc, 0x2}, {0x10000, 0x7a, 0x8, {0x3}, 0x10000, 0x1acd, 0x1}], 0x4, 0x40, 0x2, 0x8001}, {&(0x7f0000000b40)=[{0x0, 0x101}, {0x8, 0x7}], 0x2, 0x10, 0x8, 0x8}, {&(0x7f0000000b80)=[0x3, 0x1, 0x4, 0xab8f], 0x4, 0x8, 0x7, 0x9}, {&(0x7f0000000bc0)=[{0x4, 0x9, 0x6, 0x8, 0x6af8bc4c}, {0x2, 0x100000000, 0x9, 0x1000}, {0x3, 0x3, 0x7fffffff, 0x6, 0x5}], 0x3, 0x28, 0x7, 0x5}, {&(0x7f0000000c40)=[0x4, 0xa2, 0xfffffffffffffffe, 0x80], 0x4, 0x8, 0x7, 0xfffffffffffffc00}}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000011c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d40)={0x3fc, r7, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x133, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x4, @broadcast, 0x4, @value, 0x5, 0x4, @broadcast, 0x9}}, @cf={0x4, 0x6, {0xfd, 0xfc, 0x6, 0x3}}, @perr={0x84, 0x5b, {0xd, 0x5, [{{}, @device_a, 0x1000, @void, 0x3e}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0xf}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@device_b, 0x12}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x35}]}}, @preq={0x82, 0x2b, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x71, 0x5, 0xfff, @device_b, 0x9, @value, 0x1, 0xfff, 0x1, [{{0x1, 0x0, 0x1}, @device_b}]}}, @fast_bss_trans={0x37, 0x62, {0x4, 0x1, "96fe3e35405930a40c1017216c20940d", "ee400ea69bc8e6520a4b48d4c086f960ec465e862231f979ba167724467dc0ef", "a977dcd90caa2c3a2a47b1f80d9e89958e7785aef6a6cecf307f2d9c211c8462", [{0x2, 0xe, "f51810991a0c2ed869a926db9f13"}]}}, @mic={0x8c, 0x10, {0x179, "bf99c5e3bca6", @short="892cdb08cd42aa07"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x114, 0x2a, [@peer_mgmt={0x75, 0x14, {0x1, 0x9, @void, @void, @val="d16c1bbbca76c577ca3201f3dc911705"}}, @supported_rates, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xeb, {0xdc, 0x97, 0xfe, "fecdd2fc8abc65658fde518886ff825af901199f5a0fa7e8ee0cf3842df9e54524f183dcbcd0392797eadb2cdaa1b8d53c0d8a8b9c374123e2bac13436dd91ac210f452e41c378afc7ede2da164179b2127fdf5383e028165a87132f359638b6114e4e071339a4dfa4c70fd89927bcbb08044a3c4098333893f9f813a03224d83a1a5faaefab63afb22e637ede79d3350edd9a9345899b4c0f122ec9e736b77d76b1ea0169842995f1d88340b187bc8f7c0539459e62c520aa8fea7b1b740634e2c053a7933356955ec8660c07f410a75da097700c7065125feb79defb5a791bec9d247d96932894"}}, @channel_switch={0x25, 0x3, {0x1, 0x40, 0x7}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_IE={0x156, 0x2a, [@random={0xfb, 0xe9, "f536c3aafe113b4fe4b35f46f086301843b7d3ac4dbb78d220aadf560e12aac81c06853041b8a7ede985e9f1d3396cfac5f07ef197cafed0a9a6f98848ec5d0d16ce6715ebac115a53620553cca1c780ef8f73337fd6e246fdf9f7ac8373b55ddfcbbf32bc300f930cffa013715590eeb8a29b8e26ed8ec30e13b063c0388a7b4d5011511df38ae73c453094502abc879d37f968d3d40d8cfb986469ac8c9ab8022005aac16acf70d9b59741b273657c3c2877b9cd5c3556371c53c15a372e07b6fc27c571f4758e48f05191e487df15d767c793cca12de5370787d7c0a632514fefa947b8bec8f511"}, @cf={0x4, 0x6, {0xe, 0x3, 0xa24c, 0x83}}, @tim={0x5, 0x5d, {0x7, 0xda, 0x1, "a1ae782de6470d83136827d17a20b8038f86106e355f9a31c89f617f315a5801fd916dd7fec6be9af4ab36a3e31aa6baa1e2cd9072231838afcfa3a3237638ad929585e70e8ed6fe5d803b9543c404230975a9bf99654dcb9f59"}}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x124, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8055}, 0x40045) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001440)={r2, 0xffffffffffffffff}, &(0x7f0000001480)=0xc) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000014c0)={0x1, {{0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}, {{0xa, 0x4e21, 0x9, @remote, 0x78}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001680)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x2d0, 0x2d0, 0xffffffff, 0x0, 0x120, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, &(0x7f0000001600), {[{{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0xff, 0x2, 0x72}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xf0}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast2, @gre_key=0xd, @port=0x4e23}}}}, {{@ip={@multicast2, @private=0xa010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x2, [0x6, 0x4, 0x5, 0x4, 0x2, 0xcdc04be61196c1fc], 0x0, 0x7}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @multicast2, @local, @gre_key=0x80, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @empty, @icmp_id=0x64, @gre_key}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'vcan0\x00', 'team_slave_0\x00', {}, {}, 0xc, 0x1, 0x39}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@local, @ipv6=@private1, @icmp_id=0x67, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001c40)={'ip6_vti0\x00', &(0x7f0000001bc0)={'ip6tnl0\x00', r11, 0x29, 0x6, 0x0, 0x7637, 0x0, @private0, @mcast2, 0x18, 0x20, 0x7ff, 0x8}}) sendfile(r5, r0, &(0x7f0000001c80)=0x5, 0x0) 1m16.515311028s ago: executing program 0 (id=3994): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="110000001000"/22, 0x16) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], 0xffdd) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000200)=0x10) ioctl$int_out(r1, 0x5460, &(0x7f0000000480)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x6, 0x2, 0x6, 0xffffffff, r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 1m16.344265964s ago: executing program 4 (id=3995): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x48) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000300)='GPL\x00', 0xffffffff, 0x2f, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000320001ff7f0000000000000001"], 0x14}}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, 0x0, 0x0) (async) connect$inet6(r3, 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d20599f664}, 0xc004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c0000000000000000000800010000000100"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB="3bf7dab9b806d11d221dbff63db075da7bf8dd723c36d72f721c1f53716a3c47c113e7fc9d1a1fa3c5f4e5eea85624181a5077c77ba8f3f5ffe9bbfd1c5c765b2ec48d7daa65f6c888742da5c1d46c0853843860bd4e38590191f7676738afad96083d04c445d92f1644d88783345a37d40aee"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000640)) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000bc0)={0x27, r8, 0x0, 0x7, 0x0, 0xfc, "d92984bd1ca44c226af5160e961811a07795c559b78411e88509de050000000000f2170e65e3f50327e4220000000000efffffff0002000000ec001900", 0x15}, 0x60) (async) bind$nfc_llcp(r10, &(0x7f0000000bc0)={0x27, r8, 0x0, 0x7, 0x0, 0xfc, "d92984bd1ca44c226af5160e961811a07795c559b78411e88509de050000000000f2170e65e3f50327e4220000000000efffffff0002000000ec001900", 0x15}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r11 = openat$nci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000840)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000840)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)) 1m15.665946782s ago: executing program 4 (id=3996): syz_emit_ethernet(0x23a, &(0x7f0000000500)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "973f9f", 0x204, 0x3a, 0xff, @loopback, @mcast2, {[@srh={0x2b, 0x10, 0x4, 0x8, 0x0, 0x40, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xe}]}, @fragment={0x6, 0x0, 0x7, 0x0, 0x0, 0xb, 0x64}, @fragment={0x3b, 0x0, 0xd, 0x1, 0x0, 0x0, 0x66}, @routing={0x0, 0x0, 0x2, 0x8}, @dstopts={0x29, 0x18, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0xa, [0x4, 0x7, 0x0, 0x10000]}}, @jumbo={0xc2, 0x4, 0xa00000}, @pad1, @ra={0x5, 0x2, 0xffff}, @generic={0x49, 0x4a, "333bb9e1d4b378f89ae2dea90367aed0714ce6023979a5430d5fd1e41a7d5c34858ff6a010543d352995532f5aaa627359ef629f343260a5b8e48723cd3a8ce068e26f841b7ea3cb3ffc"}, @calipso={0x7, 0x38, {0x3, 0xc, 0xdc, 0x10, [0x1, 0x7fffffffffffffff, 0x101, 0xffffffffffffffff, 0x5, 0x3]}}, @pad1, @pad1, @enc_lim]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x3, 0x0, 0x6, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @local, @empty, @private0]}, @hopopts={0x8, 0x0, '\x00', [@pad1, @ra]}, @fragment={0x2c, 0x0, 0x4, 0x1, 0x0, 0xb, 0x66}], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0xf, 0x2, 0x1, 0x590}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000000440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x0, 0x3}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4084) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1e, @empty, 0x7}, @in6={0xa, 0x4e24, 0x85, @private1, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0xff, @local, 0x8}, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5e3}, @in={0x2, 0x4e21, @broadcast}], 0xa0) 1m13.473645905s ago: executing program 1 (id=3997): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x1, 0x9}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="183000000100070000000003000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000780)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2200000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r7, @ANYRES8=r3, @ANYBLOB="a724291fde82bd81f12d5add492fbd88653618ec990ae78559a8ce997af7adbbc8724da70d78d6ed99fb0e48f8c0f63132be19b377ea233f2df3f5304bf871a109a9cefbeb21e7b5b98cd777234851d30434efa8a52fc626c23eba30dc11d95fa973403a7d828cd6dff751953f574061d7fb6f8ae739e5094859c63dd98c640f91d4904637d6a4dbcb33f08bf890d389f2abe582cbcaf46269d24ac7e5902c9c4f6f7406f935d462164f"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'veth0_macvtap\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000880)={r9, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {0xd, 0x9}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) close(0x3) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 1m13.389881632s ago: executing program 4 (id=4000): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42118, 0x42002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x665}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42118, 0x42002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x665}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x88}}, 0x0) r7 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3720d}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0xc}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 1m13.388283856s ago: executing program 0 (id=4001): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x25, 0xa, @void}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x10001) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) listen(r4, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) write(0xca, &(0x7f00000000c0)="041cc7f304007266", 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m12.859270961s ago: executing program 1 (id=4004): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3d0}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1m12.834600527s ago: executing program 0 (id=4006): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5130, 0x16}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fc0}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, 0xe) 1m12.728099081s ago: executing program 4 (id=4007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) read(r1, &(0x7f00000000c0)=""/219, 0xdb) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x60, 0x80, 0x2, 0x0, 0x5, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x0, 0x2, 0x6]}}]}]}, 0x50}}, 0x14) 1m12.518745722s ago: executing program 1 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040444}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4, ';o\'.'}, &(0x7f00000005c0)=0x2c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000040)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r7, &(0x7f0000000780), 0x4000000000001f2, 0x0) sendmsg$can_j1939(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)="f4b959619872aac6875fbc167c489ee17f79a0e618fb", 0x16}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000b14000328bd7000fedbdf250800010001000000080003000400000008003f00030000000800030000e3ffff07003f0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000b80026f8d65e69c405270000000600000000f28619a5e47d919dc8", @ANYRES32=0x0, @ANYBLOB="01000000000000006d616373656300000c00028005009d36ef00b34d464a4d8e0000000000000000", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m12.513398271s ago: executing program 0 (id=4010): r0 = socket(0x840000000002, 0x3, 0xff) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendto$inet(r1, 0x0, 0x38, 0x20000800, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="a9050000004074640001", 0xa}, {&(0x7f00000001c0)="736ab5c685154eb9e0f0143a3d10dbe10207a46e7dc0f467d0f0d083762559b0a684", 0x22}], 0x2}}], 0x1, 0x840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c890}, 0x881) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="0500"], 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) sendmsg$nl_generic(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x18, 0x42, 0x4, 0x70bd26, 0x25dfdbff, {0x1}, [@typed={0x4, 0x6b}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x88) 1m12.354710605s ago: executing program 1 (id=4013): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e}, 0x28) 1m12.231773525s ago: executing program 1 (id=4015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f00000008c0)='0', 0x1, 0x0, &(0x7f0000000900)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x15, 0x0, &(0x7f0000000940)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xb, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x86d9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a8230081"], 0x36) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x160, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cec}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd0f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4044040}, 0x2004040) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000100)) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000180)) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl(r12, 0x40047438, &(0x7f0000000240)) ioctl$PPPIOCCONNECT(r12, 0x4004743a, &(0x7f0000000280)) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f0000000300)=0x56a4c5c) pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000380)="ea61", 0x2}], 0x1, 0x1, 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 1m12.209440733s ago: executing program 3 (id=4017): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x78, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x42, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x4c22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0xfffd, {[@mss={0x2, 0x4, 0x8d}, @exp_smc={0xfe, 0x6}, @mptcp=@generic={0x61, 0xf, "5a668a14ebb2bf6e360d6af8ea"}]}}, {"e7c31237be617f00000000000000007f7128"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 1m12.108020644s ago: executing program 3 (id=4019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x402, 0xfffffffe, 0x4}}, 0xe8) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x4, {0x0, 0x0, 0x74, r4, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) 1m11.911943365s ago: executing program 2 (id=4020): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3f0}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1m11.878136264s ago: executing program 2 (id=4021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x2c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60f35, 0x463}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x81}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 1m11.832434632s ago: executing program 3 (id=4022): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x45, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wg1\x00', @random="7f60ba798eea"}) 1m11.727963899s ago: executing program 3 (id=4023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x4, 0x4, 0x428, 0xffffffff, 0xd0, 0x0, 0x200, 0xfeffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @empty, [0x47e128f2bce82ddb, 0xff, 0x0, 0xff], [0x0, 0xffffff00, 0xff, 0xff000000], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x8, 0x1, 0x31}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x2, 0x0, [0xfa, 0x4, 0x800, 0xfffc, 0x4, 0x1, 0x101, 0x6, 0x9, 0x5, 0x5ce, 0x6, 0x5, 0x3, 0xaf2, 0x5], 0xe}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x10, {0x4}}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x5c4274de50300c47}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xffffffff, 0x0, 0xffffffff], 0x4e21, 0x4e24, 0x4e20, 0x4e24, 0x1, 0x80, 0x1ff, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES32=r2, @ANYBLOB="010028000001000000000000000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) 1m11.727685553s ago: executing program 2 (id=4024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_FLOW={0x8, 0xb, 0xfffffffe}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 1m11.727155289s ago: executing program 4 (id=4025): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f00000008c0)='GPL\x00'}, 0x90) r0 = socket$kcm(0x10, 0x5, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b7000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@generic={0xc, "bae0d6b83e60b7a139343c89e26355974d59b736d601e88eeb153fede9b57fac2d74e462be13713e52c8207f1b7384660ed9561e8c08c8ebad8917c75330cf979fd07fa325bd218b2e452eb26c6062d4b0805a32d299fd7427fa7eab4a1f53c2e63619827381cdfecaeb12679bd940f2ba9b571046285a70cbcbdc91460e"}, 0x80, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)={0x14, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="373350d2def5b8284fcdc29aee7fcdac1237b0811d17c823338df383e910531bb1c383cee4e241ce908c1af1f144edfe60d48dc2a7c6eb19e32d9b3b14027b467b9e6a6daa"], 0x4a) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$inet(r6, &(0x7f0000000bc0)={0x2, 0x4e20, @local}, 0x10) (async, rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000002700)=""/4127, &(0x7f0000003740)=0x101f) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000400)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000500)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001780)="a38ba845ec4efadcef0748bc81c2b1e5871864cbd669dbeae919b80ed2cbe548fec9b69473db427a2f2e8e6e7c4c766444a00864121f6ee2ba4a23229ec0168a47176bb0a5bcb0f2755306372832f73ef0cd68b6f1579a637633db2d4efb1c66b1f17c0e06e6a5d58c7420a3e59452d125e53b7bc53aa594a451c4ff81840c1b3c7cc73f3bd32194441d8dc67f33f6b0dcc808c2ae12db6ee560d8aa8aa335f779b48d8be8821abb2d294aae2f69ed194ef5bcd2eca82b6b1f9cb1f0db166bd913c098a0aeac00ce81c0a0e7bb3281cec84a8560b0ac4c6e75913bcc9ff5a0b2ad32aac77d35137c79f0675a34e94bbe1540b700bfa1010eedb2946e56f2c583e1b9d27c1168224dd575d44bc6cae1f3fac5602d234a87a16f56ed6c289f2856d06095cadc3543d5240516ae90b73f49c30aa044a8b1c11e698ca4ca08075463a224b196ed8ac06923cf1ae96ceceb342bc2e83ab4b939c8a1b596f0ec03513a13bd37311d4401007f6dee043bc64db5231bb54ec21567f3479f62f43716a462225d3759eec053112bddc3889a70c5a766bf2877fdf8f948d031d98fbad1ca25b2c86c0ba90fd2114ab9e79674a81dbc162b43145c68fea3d0cfe31b33644d99e05c89b78257be2508f80473a8166fb984a22d96c26fc6f4524726bb90395ffbfafaf61cca0c0e20adbb9812e8ad7383cbaa7304ea83b5f6b67173432867ac4313625c91af7449ec6c84f172a2a6ee94269c7bbecce23389e5c808c8acad84b4e54de5cd4b480b4dd6f01ca4da2a6cf752f3a7bfba7e349d3ad6c4f3133df7d42748f428b0fa39bb675c8b70a600217d9968d21c4610e16c8dd34beb3c09cf8fbfd308d589af9528cfea7217b39ee9d95278890d9bf92eea19387bc1d0200e4b7ed9af292a04909721d60dde41ae7be9022ac249795da20e5c4eff6248b0fb0cbed270ce34aeea6e9bd76902c2b110bbf31a7e5e634372494525e63691910fcfad933949fa023d8b17f073c8b08635727f1bd74ff227ec6277ccf885f8b532ac364ce1696ae4030b11e00ea6ef87e93cc303bca52fa57af380866523b61ea4ec3759355c86053fe2200020a2ad1581fb38cf35493adae068881d74cc890e800155be3d2a6bccb0b44986b0c4fb2e7b4dfe6bad957a98b681de12bcbb9a7add192afdbb25f5cefbad8ea131f9dd5ffb0d15de48b3c9b109276dfccbe1626b8403366be5e384685db7e1621f11b61dfcca541f002b1f1050057fbc569ab6dbf4b93ae8436643dfce53f030e70b780f6ad2561e1d58daec22f924c6a015e695111e0db4c1afd339c6c5dd76386c4e34e526cea70c25886d768b2432c7550613eb24782a4c9ca26444f2b6332a21fcde4732ea63e2fb5f62f5852a79e4aadf54e857cfb675c60f463917403a5592f6bd5c996b5ec4df61632cd33cea6fc978b9ac9b05300e65b502b7c4ac681ddacbd3dabb177b6d92c484a80fb2031c5306faaf6258c287b7a1f800e8618c911de3f9c705a38255009931c003fc704141fe5b297547f58778a188b8643c7724a5690dfda8c39d02a5a9aac5b11f01e5596089a30e6f7170f727139d75ab5f6f6e885100aa9fb22ab1c6b8f24280ea2acbbe3bd2e11839ed4c732a5d27f59c6130c523d346ade2a8fde4777c092ab423fb4970e3911a4a46ce5213a78a56b03647150712aa86e0d007bfb5a55499286274751ec3a5fad77c95d41e96457696497af3efed3e9c0238e796d14f5e2b31f4fa420b2ac50b9a8c0cfff0fa175b375826585a3eea8292ffee23b25495663f9d9d43f2ca1a6bdc2df88d4bd2c8aba6ed317a88759fb6848e71a9274bfcea939fae6cdaa3874e51c56894010fc0ff25ccccd93c6d2e7e2f1279df8d5b77b5591189d215a5fe5285ebbfe59d3cd2e30b1731c8e897ec79049bb71d1c7b39eba19bdbc40dfa3501f9f988abe88de5b13fa4926fe285dcdea4bbaad2077b2693202cf97c09525669dddc957e776d3cc831af26f93a89d04dc5ce67e42aab3c39b258fcaaa23cfd4468079dccdf250bab5bad005b447df87063fe107f5b3b1586229199b3990b49166cc455701d6d87b6b83a199271e917c5fb029ba525231602cc310056e7a82727df687bc664243f8e133d6d09addd80e429f266f922e91fddfc4c3fbb6a794b9f4341d327ea78310c9eacebd2291899c27801b56604d7f6fa72fbf34466acedca022030d5ee1a013015b59b8db30d8dea314d24cb8a873a3ae4d0ab21c2943de4f3f621c018a49bb20aec08472eae115d16654d23127179bd53d48feb75a458bc97fa17b78b7ca06e52092730448635e1f48802ad6d7e1da4af30ac1e5900c625cdbfc8a952bd1577977eeafb949dbcf3e5468214896138bebe73c890c49964a77b", 0x6a2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000780)="3b500525681ebe3b74206e88cc0e3298ee76349c52bb85279113055fcc5776f284feafda39f6c7f53abde9c7da5673d9c37594117ee68f746a045d39f78e7bad986d73863163a5d76e6f846bbb19e2eb636516ea04e4b970b29cdd7b91575a79cf1f0288555f5c8f4a5704fccb296d38bbd9789d7e88671ef1f4768db588586460a7fb68b056f6b61a7fdd109bbc99906b785858e80fb2caeb815dc274b0639b1de1592a8e5da55dd498aa0d9c1d7805407a7ba78da47c5f2ef91abc513367a7daf93961bf3586fc000016cf0e84e31d599cb8ff9fee133b72c60b907700"/236, 0xec}, {&(0x7f0000001100)="f1909faee85e1e568b8dc8fa813be071128515bc7d7866b56e39755e39fef7118eb55c7ea0a635cef2d6efcdf348b8f6d35e3359e58a9e49025bb3c9cdcd12834653be8d874e0dbe665d364f49cf8fa8c95bd95840dab4264443201c3129b7ddb70c54d590e204d28a", 0x69}, {&(0x7f0000001180)="c1e9dbb001ae31abbfca8c39d4da2a0659048d70e1add794ae63222f89192fcc311cef88389d9f4809fde87de23a59634b472ac890ac8c489794203b0d2d94a822c33db06f72fa408f8eae5ae39d6eb935549c3639da4a3147d67c34b28463b7823e725612449f33391518f264aacc869a4dcda07fe96b1c5871e3e0cd6c509a832a34c10d6627539aa28d69ed11365bfceac72c2ac4042559c8d769450a5366a3e6cffca28fd308a64fb683653d680fed9e93197f0f72a11192b30b988b7b83401809ce714ecc", 0xc7}, {&(0x7f0000001280)="20ab55ff0109fe0f2c02905e5926e7ffbc774ef4f06fc3fcbfa8c19ef4ed3020f438ed85fe51def92e3db8159dccbf7819dabbc1303d4233f124ad3344b3da3c16624507f7601b2eaf7053dc2f5b1b0c6ae2d2a4f77fedbc3d53f77028f2050e4d5cd9c838b2708ad9878250542ac4aa6b3a87096a9eea80281f509259fac6b439d06bba4ceda8e8e90b70381b4cfda50546d9ce990357f248817cbbeed4927f95", 0xa1}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)}}], 0x3, 0x2000c044) (async) writev(r8, &(0x7f0000001700)=[{&(0x7f0000001740)="b420", 0x2}], 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) 1m11.667390923s ago: executing program 2 (id=4026): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000040)={0x1298, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "dccdfdf5ce33ce573edab7edaf81682fc7f5ddf86d170d2752eec3df685d2f3a10"}}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0xfffffff8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1da54740}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "57bf70f6f69561fa5da6913040ee0bb2984dd6326f00f5e46a772467c25483f859ce5f38dc213801bf31ad2373be158cf5db6a6e04b3d6af5a86b3b202cf491391216e424fa26a2524473584438c18a646435a1e3393fddc0e11e12cb44ef6b8f4bdc20ef3e746e5dea75b53cf870812fe9052dbcb42a52e7c8831fd1e290004aa562e7f6e482e9f6fd317f3622fcc3c34093b9c32c2629fd8e4af"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "89c4142039c4cdb7dfe5a60fd4b545eed62386c4fe"}}]}]}, 0x1298}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004000) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000013c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000014c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001500)={0x27, r3, 0x0, 0x1, 0xfc, 0xf5, "7558103f8b959ba2c8f063dd90287fef12c0a32c8a10a0c5d3d26bf03230549a70fe45e834020c6152d4112426b2235cdfbe5de4899bd03879f34896efd2ee", 0x33}, 0x60) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x50, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffeffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x50}}, 0x4404) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000001840)={r4, &(0x7f0000001740)='wlan0\x00', 0x80000, &(0x7f0000001780)={@align=0x9, {0x0, 0x1, 0x3, 0x64bab68b}}, 0x9, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0x4010000}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000001) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001a00), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001b00)={'tunl0\x00', &(0x7f0000001a40)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xfffffffd, 0x5, {{0x1a, 0x4, 0x0, 0x38, 0x68, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x30, 0x2, [{0x6, 0xf, "6a14db392438755a3fd2be5052"}, {0x7, 0x4, "0b06"}, {0x6, 0x8, "5b6f9fe9c923"}, {0x1, 0x8, "846562f884bc"}, {0x4, 0x7, "bb8184200b"}]}, @timestamp_addr={0x44, 0x24, 0x44, 0x1, 0x7, [{@local, 0x10000}, {@multicast2}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x200}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001b40)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x0, 0x8, {{0x2f, 0x4, 0x3, 0x1c, 0xbc, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@noop, @end, @cipso={0x86, 0x27, 0x3, [{0x1, 0xd, "79460786d6b4fb222f7145"}, {0x6, 0x8, "b5e870e01515"}, {0x5, 0xc, "ade40d4741a5e180b0eb"}]}, @timestamp_addr={0x44, 0x24, 0x1, 0x1, 0x3, [{@rand_addr=0x64010102}, {@local, 0xa6f}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0x7, 0x6f, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x3, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x5b, 0x3, 0x2, [{@local, 0xffffffff}, {@multicast1, 0x717e}, {@loopback, 0xf548}, {@multicast2, 0x4}, {@broadcast, 0x3}, {@private=0xa010101, 0xd}, {@remote, 0xffffffff}]}, @rr={0x7, 0xb, 0x72, [@multicast1, @private=0xa010100]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c80)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x1, 0x1ff, 0x8, @empty, @loopback, 0x10, 0x8000, 0x3, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001e40)={'tunl0\x00', &(0x7f0000001d40)={'erspan0\x00', 0x0, 0x20, 0x700, 0x401, 0x80, {{0x31, 0x4, 0x1, 0x4, 0xc4, 0x68, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0x6, [{@multicast1, 0x4}, {@multicast1, 0x5}, {@private=0xa010100, 0x4}, {@empty, 0xf8f}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x65, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x45, 0x1, 0x0, [{@multicast2, 0x7}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@broadcast, 0x2}, {@remote, 0x936d}, {@remote, 0x80000000}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x11, "51e5cfbde349c29c19eadd767024f3"}, @noop, @timestamp={0x44, 0x20, 0x30, 0x0, 0x9, [0x9, 0x100, 0x81, 0x4, 0x7ff, 0x6, 0x1]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x36, 0x7, 0x78, @mcast1, @private1, 0x8000, 0x7800, 0x7fff, 0xd}}) (async) getsockopt$inet_mreqn(r7, 0x0, 0x11, &(0x7f0000001f40)={@local, @initdev, 0x0}, &(0x7f0000001f80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001fc0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002080)={'syztnl1\x00', &(0x7f0000002000)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0x8, 0x34, @mcast2, @remote, 0x80, 0x8000, 0x4, 0x1}}) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000020c0)={@remote, @dev, 0x0}, &(0x7f0000002100)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000002280)={'gretap0\x00', &(0x7f0000002180)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x2, 0x4, {{0x2a, 0x4, 0x0, 0x10, 0xa8, 0x67, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@end, @noop, @timestamp={0x44, 0x8, 0xbd, 0x0, 0x8, [0x4]}, @timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x8, [{@rand_addr=0x64010100, 0x8}, {@loopback, 0xffffcc28}, {@multicast2, 0x8e27}, {@empty, 0x5}, {@multicast1}]}, @generic={0x44, 0x12, "bf1911920f470ab16b91c0a63d6c3192"}, @timestamp_prespec={0x44, 0x44, 0xf7, 0x3, 0xd, [{@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@rand_addr=0x64010100, 0xbff}, {@empty, 0x7}, {@private=0xa010101, 0x9}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6d87}]}, @ssrr={0x89, 0x7, 0x55, [@loopback]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002580)={r7, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002300)=[0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000002380)=[{}], 0x8, 0x10, &(0x7f00000023c0), &(0x7f0000002400), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000002440)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000025c0)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002700)={'syztnl1\x00', &(0x7f0000002600)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xff, 0x9, {{0x29, 0x4, 0x0, 0x2f, 0xa4, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@lsrr={0x83, 0x7, 0x8c, [@remote]}, @generic={0x82, 0xc, "c9bdce245afa3df5489f"}, @rr={0x7, 0x13, 0xe8, [@loopback, @empty, @broadcast, @local]}, @noop, @timestamp_prespec={0x44, 0x54, 0xea, 0x3, 0x1, [{@remote, 0x80000000}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x5}, {@local, 0x4}, {@remote, 0xfff}, {@broadcast, 0x950f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0xfffffff5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @timestamp={0x44, 0x14, 0x9f, 0x0, 0x1, [0x4, 0x4, 0x3, 0xb]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000003040)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003000)={&(0x7f0000002a00)={0x5ec, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x61}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x290, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xb, 0x4, 0x6, 0xf}, {0x2, 0x4, 0x6, 0xcb1}, {0x7, 0x7, 0x63, 0xffff}, {0xf, 0xf9, 0x7, 0x9}, {0xff2d, 0x2, 0x1, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r23}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x40800}, 0xc810) 1m11.648246818s ago: executing program 3 (id=4027): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x2}, 0x90) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x40}}, 0x0) 1m11.395821436s ago: executing program 0 (id=4028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 1m11.034926389s ago: executing program 3 (id=4029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0x7}, {0x2, 0xfff1}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008848}, 0x24004004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "4a8d2b79c3648bf061121b3687dcce42c73c0ce3"}}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c0000040042800c000180060006000806"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c0000040042800c000180060006000806"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m10.852956686s ago: executing program 0 (id=4030): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000007000000bb7f1ab07600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x20005, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x38, 0x32, 0x800, 0x70bd25, 0x6, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000007000000bb7f1ab07600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x20005, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x38, 0x32, 0x800, 0x70bd25, 0x6, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) 1m10.851553497s ago: executing program 2 (id=4031): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ffffffffb87b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.837845636s ago: executing program 2 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c4854}, 0x400c000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c4854}, 0x400c000) 0s ago: executing program 32 (id=4030): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000007000000bb7f1ab07600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x20005, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x38, 0x32, 0x800, 0x70bd25, 0x6, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000007000000bb7f1ab07600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x20005, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x38, 0x32, 0x800, 0x70bd25, 0x6, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) kernel console output (not intermixed with test programs): s an invalid length. [ 353.902163][T15711] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 353.902302][T15711] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 354.251256][ T30] audit: type=1800 audit(1793508963.373:5): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2792" name="memory.events" dev="tmpfs" ino=2949 res=0 errno=-22 [ 354.298415][T15731] bond7: entered promiscuous mode [ 354.298439][T15731] bond7: entered allmulticast mode [ 354.368352][ T30] audit: type=1804 audit(1793508963.493:6): pid=15751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2792" name="/newroot/578/memory.events" dev="tmpfs" ino=2949 res=1 errno=0 [ 354.407446][T15742] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 354.442969][T15742] bond5 (unregistering): Released all slaves [ 355.121875][T15804] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 355.555818][T15824] veth0: entered promiscuous mode [ 355.555997][T15825] veth0: left promiscuous mode [ 356.043708][T15848] __nla_validate_parse: 73 callbacks suppressed [ 356.043731][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2819'. [ 356.095196][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'. [ 356.095223][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'. [ 356.320608][T15865] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2823'. [ 356.830472][T15902] veth0: entered promiscuous mode [ 356.832454][T15904] veth0: left promiscuous mode [ 356.871540][T15902] veth0: entered promiscuous mode [ 357.013797][T15898] veth0: left promiscuous mode [ 357.125133][T13048] net_ratelimit: 10 callbacks suppressed [ 357.125153][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.281347][T15936] validate_nla: 66 callbacks suppressed [ 357.281366][T15936] netlink: 'syz.1.2838': attribute type 32 has an invalid length. [ 357.686249][T15959] sctp: [Deprecated]: syz.3.2845 (pid 15959) Use of int in maxseg socket option. [ 357.686249][T15959] Use struct sctp_assoc_value instead [ 357.893931][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 358.104197][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.114033][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.125050][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.127985][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.128796][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.171028][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.244361][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.333324][T15992] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 358.401198][T15992] bond9: entered promiscuous mode [ 358.401615][T15992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.417601][T15993] bond9: (slave bridge6): making interface the new active one [ 358.417622][T15993] bridge6: entered promiscuous mode [ 358.419039][T15993] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 358.586987][T13044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.587024][T13044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.613469][T15997] syzkaller0: entered promiscuous mode [ 358.613490][T15997] syzkaller0: entered allmulticast mode [ 358.757540][T13044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.761506][T13044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.893442][T13044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.893478][T13044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.997482][T13044] batman_adv: batadv0: Interface deactivated: macsec0 [ 359.020984][T13044] batman_adv: batadv0: Removing interface: macsec0 [ 359.036908][T13044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.036942][T13044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.102080][T15981] rxe_eth0 speed is unknown, defaulting to 1000 [ 359.293604][T16032] ip_tables: iptables: counters copy to user failed while replacing table [ 359.345995][T13046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.522694][T13044] pim6reg527: left allmulticast mode [ 359.604422][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 359.981019][T13044] bond4 (unregistering): (slave bridge7): Releasing active interface [ 360.011263][T13044] bond0 (unregistering): Released all slaves [ 360.020904][T13044] bond1 (unregistering): Released all slaves [ 360.032298][T13044] bond2 (unregistering): Released all slaves [ 360.043462][T13044] bond3 (unregistering): Released all slaves [ 360.070635][T13044] bond4 (unregistering): Released all slaves [ 360.091441][T15981] wg1 speed is unknown, defaulting to 1000 [ 360.164627][ T4952] Bluetooth: hci5: command tx timeout [ 360.472619][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.707187][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880839f4400: rx timeout, send abort [ 360.819833][T15973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.064165][T16085] gretap0: entered promiscuous mode [ 361.149570][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 361.207031][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880839f4000: rx timeout, send abort [ 361.207233][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880839f4400: abort rx timeout. Force session deactivation [ 361.567577][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.707082][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880839f4000: abort rx timeout. Force session deactivation [ 361.728288][ C0] vcan0: j1939_tp_rxtimer: 0xffff888085167c00: rx timeout, send abort [ 361.728734][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888085167c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.032731][T13044] hsr_slave_0: left promiscuous mode [ 362.040374][T13044] hsr_slave_1: left promiscuous mode [ 362.058389][T13044] veth1_vlan: left promiscuous mode [ 362.058497][T13044] veth0_vlan: left promiscuous mode [ 362.244609][ T4952] Bluetooth: hci5: command tx timeout [ 362.402890][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 362.431837][T16149] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2867'. [ 362.563014][T16155] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2873'. [ 362.563047][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'. [ 362.667666][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.014849][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.014954][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.015078][T15981] bridge_slave_0: entered allmulticast mode [ 363.016147][T15981] bridge_slave_0: entered promiscuous mode [ 363.067097][T16158] IPv6: sit2: Disabled Multicast RS [ 363.086387][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.086498][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.086640][T15981] bridge_slave_1: entered allmulticast mode [ 363.091820][T15981] bridge_slave_1: entered promiscuous mode [ 363.186543][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.208023][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.328510][T16169] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2877'. [ 363.328538][T16169] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2877'. [ 363.345595][T16172] sctp: [Deprecated]: syz.3.2879 (pid 16172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.345595][T16172] Use struct sctp_sack_info instead [ 363.398508][T15981] team0: Port device team_slave_0 added [ 363.423879][T15981] team0: Port device team_slave_1 added [ 363.493262][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.493279][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.493299][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.516066][T16172] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 363.516130][T16172] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 363.516172][T16172] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 363.581003][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.581018][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.581044][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.757723][T15981] hsr_slave_0: entered promiscuous mode [ 363.758713][T15981] hsr_slave_1: entered promiscuous mode [ 363.759425][T15981] debugfs: 'hsr0' already exists in 'hsr' [ 363.759445][T15981] Cannot create hsr debugfs directory [ 363.777063][T16178] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2880'. [ 363.785501][T13046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.920499][T13044] IPVS: stop unused estimator thread 0... [ 364.103545][T16199] trusted_key: syz.4.2883 sent an empty control message without MSG_MORE. [ 364.251499][T13053] smbdirect: ib_dev[syz2] removed [ 364.280450][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 364.325776][ T4952] Bluetooth: hci5: command tx timeout [ 364.376324][T16207] netlink: 'syz.1.2885': attribute type 6 has an invalid length. [ 364.430515][T16216] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2887'. [ 364.436030][T16207] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 364.527990][T16209] siw: device registration error -23 [ 364.531556][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'. [ 364.532844][T16209] netlink: 'syz.1.2885': attribute type 10 has an invalid length. [ 364.580987][ T4952] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 364.581018][ T4952] Bluetooth: unknown link type 128 [ 364.886633][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.943822][T16236] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 365.002940][T16236] bond8: (slave bridge7): making interface the new active one [ 365.003535][T16236] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 365.542800][T16262] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.550182][T16267] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 365.607323][T16276] netlink: 'syz.3.2899': attribute type 10 has an invalid length. [ 365.607463][T16280] openvswitch: netlink: IP tunnel dst address not specified [ 365.624955][T16267] bond10: option mode: invalid value (43) [ 365.638874][T16267] bond10 (unregistering): Released all slaves [ 365.836047][T16276] dummy0: entered promiscuous mode [ 365.887582][T15981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.909969][T15981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.912408][T15981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.932712][T15981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.933608][T15981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.958321][T15981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.971769][T15981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 365.986293][T15981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.992505][T16289] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.996269][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.161055][T16304] geneve4: entered promiscuous mode [ 366.161080][T16304] geneve4: entered allmulticast mode [ 366.164016][T16304] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 366.189678][T16304] __nla_validate_parse: 4 callbacks suppressed [ 366.189698][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 366.209474][T16308] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2906'. [ 366.373120][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2906'. [ 366.385725][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 366.401909][T15981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.404660][ T4952] Bluetooth: hci5: command tx timeout [ 366.466170][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.501913][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.502019][T13043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.553958][T12378] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.554115][T12378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.644573][ T4952] Bluetooth: hci3: command 0x0406 tx timeout [ 366.872809][T16334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.094748][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.124555][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.303840][T16364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2917'. [ 367.343206][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2917'. [ 367.503267][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 367.519925][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 367.771929][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.786154][T16389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.137369][T16407] ip_tables: iptables: counters copy to user failed while replacing table [ 368.194848][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2927'. [ 368.198552][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.408058][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.711186][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.858496][T16440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.877540][T15981] veth0_vlan: entered promiscuous mode [ 368.927820][T15981] veth1_vlan: entered promiscuous mode [ 369.142451][T15981] veth0_macvtap: entered promiscuous mode [ 369.160918][T15981] veth1_macvtap: entered promiscuous mode [ 369.206980][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.237111][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.305622][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.389509][T13043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.389907][T13043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.389944][T13043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.395736][T13043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.571886][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'. [ 369.695799][T12378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.695818][T12378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.239004][T13046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.239052][T13046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.426910][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.621101][T16512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.092642][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.096036][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.101856][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.112391][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.113109][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.513537][T16546] __nla_validate_parse: 3 callbacks suppressed [ 371.513557][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 371.513685][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 371.541927][T13046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.563663][ T5631] syz_tun (unregistering): left promiscuous mode [ 372.043470][T16575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2959'. [ 372.082845][T16575] geneve2: entered allmulticast mode [ 372.458122][T16526] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.132947][T16526] wg1 speed is unknown, defaulting to 1000 [ 373.205901][ T4952] Bluetooth: hci2: command tx timeout [ 373.216230][T16641] syzkaller1: entered promiscuous mode [ 373.216250][T16641] syzkaller1: entered allmulticast mode [ 373.735138][T13043] net_ratelimit: 1 callbacks suppressed [ 373.735157][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.810916][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 374.039986][T16679] ip_tables: iptables: counters copy to user failed while replacing table [ 374.090007][T16686] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 374.090029][T16686] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2982'. [ 374.509998][T16699] netlink: 'syz.3.2986': attribute type 4 has an invalid length. [ 374.689574][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2988'. [ 374.807624][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 374.825639][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 374.847522][T13046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.063656][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.063833][T16526] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.067689][T16526] bridge_slave_0: entered allmulticast mode [ 375.071251][T16526] bridge_slave_0: entered promiscuous mode [ 375.075084][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.075183][T16526] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.075315][T16526] bridge_slave_1: entered allmulticast mode [ 375.077130][T16526] bridge_slave_1: entered promiscuous mode [ 375.273526][T16526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.296202][ T4952] Bluetooth: hci2: command tx timeout [ 375.299585][T16526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.373402][T16526] team0: Port device team_slave_0 added [ 375.382456][T16526] team0: Port device team_slave_1 added [ 375.416470][T16745] syzkaller0: entered promiscuous mode [ 375.416492][T16745] syzkaller0: entered allmulticast mode [ 375.421122][T16526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.421141][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.421165][T16526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.486437][T16526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.486454][T16526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.486478][T16526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.707201][T16526] hsr_slave_0: entered promiscuous mode [ 375.709360][T16765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.710785][T16526] hsr_slave_1: entered promiscuous mode [ 375.711964][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2997'. [ 375.712360][T16526] debugfs: 'hsr0' already exists in 'hsr' [ 375.712379][T16526] Cannot create hsr debugfs directory [ 375.985496][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.083926][T16526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.083964][T16526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.083990][T16526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 376.177292][T16526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.177326][T16526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.177348][T16526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 376.307572][T16526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.307610][T16526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.307636][T16526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 376.600484][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'. [ 377.095578][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.364396][ T4952] Bluetooth: hci2: command tx timeout [ 377.816384][T16722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.845856][T16526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.869590][T16526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.870878][T16526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.927246][T16526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.929435][T16526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.946026][T16526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.946942][T16526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.955028][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 377.981119][T16526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.983334][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 378.012356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.128634][T16813] syzkaller1: entered promiscuous mode [ 378.128658][T16813] syzkaller1: entered allmulticast mode [ 378.150886][T16823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.208890][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.257474][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 378.323432][T16526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.378837][T16526] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.407654][T13046] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.407740][T13046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.443002][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.443117][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.517335][T16828] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3017'. [ 378.687350][T16853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.687564][T16853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.182607][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3030'. [ 379.182669][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3030'. [ 379.310957][T16526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.315937][T13046] net_ratelimit: 28 callbacks suppressed [ 379.315955][T13046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.385990][T16526] veth0_vlan: entered promiscuous mode [ 379.394045][T16526] veth1_vlan: entered promiscuous mode [ 379.397619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059720c00: rx timeout, send abort [ 379.397869][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059720c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.431510][T16526] veth0_macvtap: entered promiscuous mode [ 379.437801][T16526] veth1_macvtap: entered promiscuous mode [ 379.533252][T16526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.555822][T16526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.607404][T13053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.614790][T12378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.615566][T12378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.615617][T12378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.890226][T13046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.890247][T13046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.074674][T12378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.074698][T12378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.445331][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.597670][T16937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2949'. [ 380.751770][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 381.381208][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 381.383506][T16968] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.419705][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.421428][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.423413][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.427723][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.430662][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.546383][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.608998][T16976] __nla_validate_parse: 1 callbacks suppressed [ 381.609020][T16976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3052'. [ 381.609346][T16976] gre0: Master is either lo or non-ether device [ 381.620975][T16978] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 381.663245][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3053'. [ 381.774502][T16978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.787237][T16979] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 381.787366][T16977] veth0_to_bond: entered allmulticast mode [ 381.879029][ T5651] tipc: Resetting bearer [ 381.898016][T16994] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3056'. [ 381.940500][ T5651] tipc: Disabling bearer [ 382.004759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.004960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.084526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.084750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.084945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.110339][T16999] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3058'. [ 382.506613][T17020] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 382.540009][T16969] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.670098][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.736436][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'. [ 382.885668][T17041] netlink: 'syz.2.3067': attribute type 12 has an invalid length. [ 382.914235][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3067'. [ 382.914264][T17041] netlink: 'syz.2.3067': attribute type 6 has an invalid length. [ 383.020719][T16969] wg1 speed is unknown, defaulting to 1000 [ 383.524634][ T53] Bluetooth: hci0: command tx timeout [ 384.386762][T16969] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.386961][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.387102][T16969] bridge_slave_0: entered allmulticast mode [ 384.390952][T16969] bridge_slave_0: entered promiscuous mode [ 384.427105][T16969] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.427864][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.428039][T16969] bridge_slave_1: entered allmulticast mode [ 384.429838][T16969] bridge_slave_1: entered promiscuous mode [ 384.496574][T16969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.501570][T16969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.560011][T16969] team0: Port device team_slave_0 added [ 384.563149][T16969] team0: Port device team_slave_1 added [ 384.605395][T16969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.605413][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.605436][T16969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.607381][T16969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.607395][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.607419][T16969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.800374][T16969] hsr_slave_0: entered promiscuous mode [ 384.801621][T16969] hsr_slave_1: entered promiscuous mode [ 384.802548][T16969] debugfs: 'hsr0' already exists in 'hsr' [ 384.802678][T16969] Cannot create hsr debugfs directory [ 384.838696][T17100] netlink: 'syz.1.3076': attribute type 10 has an invalid length. [ 384.850292][T17100] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3076'. [ 384.851260][T17100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3076'. [ 384.936356][ T6056] net_ratelimit: 2 callbacks suppressed [ 384.936374][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.011841][T16969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.011865][T16969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 385.011879][T16969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.099907][T16969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.099931][T16969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 385.099945][T16969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.168312][T16969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.168335][T16969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 385.168349][T16969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.250723][T16969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.250746][T16969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 385.250764][T16969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.604398][ T53] Bluetooth: hci0: command tx timeout [ 386.024708][T17053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.048541][T16969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.059814][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.064215][T16969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.067841][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.129865][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.130785][T16969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.179855][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.187594][T16969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.209215][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.419212][T17137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3083'. [ 386.423955][T16969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.438594][T17135] syzkaller0: entered promiscuous mode [ 386.438616][T17135] syzkaller0: entered allmulticast mode [ 386.489469][T16969] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.495574][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3082'. [ 386.523277][T13051] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.523387][T13051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.631303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.631407][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.783086][T17162] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3086'. [ 386.843478][T17162] syzkaller1: entered promiscuous mode [ 386.843502][T17162] syzkaller1: entered allmulticast mode [ 387.195127][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.329850][T17196] block nbd3: not configured, cannot reconfigure [ 387.572540][T17203] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 387.572635][T17203] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 387.611057][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.684974][ T53] Bluetooth: hci0: command tx timeout [ 387.930530][T17227] xt_hashlimit: size too large, truncated to 1048576 [ 387.930765][T17227] xt_hashlimit: max too large, truncated to 1048576 [ 387.930919][T17227] xt_hashlimit: overflow, rate too high: 0 [ 387.947335][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 388.115410][T16969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.169773][T17234] tipc: Started in network mode [ 388.170646][T17234] tipc: Node identity ac1414aa, cluster identity 4711 [ 388.171796][T17234] tipc: New replicast peer: 172.20.20.187 [ 388.181321][T17234] tipc: Enabled bearer , priority 10 [ 388.221139][T17236] syzkaller1: entered promiscuous mode [ 388.221163][T17236] syzkaller1: entered allmulticast mode [ 388.317516][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.521933][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 388.722490][T17253] syzkaller0: entered promiscuous mode [ 388.722512][T17253] syzkaller0: entered allmulticast mode [ 388.770330][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 388.951789][T17264] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 389.033116][T17265] bond10: (slave gretap2): making interface the new active one [ 389.033909][T17265] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 389.099263][T17271] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 389.257509][T16969] veth0_vlan: entered promiscuous mode [ 389.298114][ T5759] tipc: Node number set to 2886997162 [ 389.300345][T16969] veth1_vlan: entered promiscuous mode [ 389.444874][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.502009][T16969] veth0_macvtap: entered promiscuous mode [ 389.521327][T16969] veth1_macvtap: entered promiscuous mode [ 389.594173][T16969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.631045][T16969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.715613][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.715677][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.715710][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.715743][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.764491][ T53] Bluetooth: hci0: command tx timeout [ 389.844557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.844794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.844972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.845152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.966085][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 389.981148][T17299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3120'. [ 389.981167][T17299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3120'. [ 390.047275][T13049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.047297][T13049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.126117][T13051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.126138][T13051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.157657][T17301] Bluetooth: MGMT ver 1.23 [ 390.157691][T17301] Bluetooth: hci0: unsupported parameter 5135 [ 390.157704][T17301] Bluetooth: hci0: unsupported parameter 8192 [ 390.157717][T17301] Bluetooth: hci0: unsupported parameter 5135 [ 390.157730][T17301] Bluetooth: hci0: unsupported parameter 8192 [ 390.207031][T17301] bridge0: port 1(batadv1) entered blocking state [ 390.207232][T17301] bridge0: port 1(batadv1) entered disabled state [ 390.212400][T17301] batadv1: entered allmulticast mode [ 390.229225][T17301] batadv1: entered promiscuous mode [ 390.546538][ T13] net_ratelimit: 4 callbacks suppressed [ 390.546556][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.595499][T17331] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 390.619006][T17341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3130'. [ 390.676383][T13053] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 390.676404][T13053] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 390.862382][ T4952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.881374][ T4952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.882245][ T4952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.901979][ T4952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.902585][ T4952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.077033][T17356] netlink: 'syz.4.3135': attribute type 9 has an invalid length. [ 391.078513][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 391.127014][T17356] team0 (unregistering): Port device team_slave_0 removed [ 391.154209][T17356] team0 (unregistering): Port device team_slave_1 removed [ 391.645448][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.689557][T17379] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 391.943311][T17386] Bluetooth: hci0: unsupported parameter 5135 [ 391.943332][T17386] Bluetooth: hci0: unsupported parameter 8192 [ 391.943346][T17386] Bluetooth: hci0: unsupported parameter 5135 [ 391.943358][T17386] Bluetooth: hci0: unsupported parameter 8192 [ 392.036849][T17388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3142'. [ 392.132743][T17349] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.157610][T17391] netlink: 'syz.2.3142': attribute type 10 has an invalid length. [ 392.157853][T17391] veth1_macvtap: left promiscuous mode [ 392.190704][T17391] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 392.593666][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3148'. [ 392.626265][T17412] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3146'. [ 392.650460][T17415] netlink: 'syz.4.3146': attribute type 1 has an invalid length. [ 392.715997][T17387] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 392.755125][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.965132][ T53] Bluetooth: hci4: command tx timeout [ 392.983586][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 393.024124][T17349] wg1 speed is unknown, defaulting to 1000 [ 393.041830][T17435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3152'. [ 393.222885][T17444] netlink: 'syz.4.3154': attribute type 4 has an invalid length. [ 393.856052][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.922775][T17449] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3152'. [ 394.205712][T17486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.238438][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'. [ 394.240218][ T5739] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 394.243558][T17481] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 394.367339][ T5739] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 394.564136][T17497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3159'. [ 394.884547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.884747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.884941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.885128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.885319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.893287][T17349] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.893456][T17349] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.893581][T17349] bridge_slave_0: entered allmulticast mode [ 394.895983][T17349] bridge_slave_0: entered promiscuous mode [ 394.899078][T17349] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.899236][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.899622][T17349] bridge_slave_1: entered allmulticast mode [ 394.901195][T17349] bridge_slave_1: entered promiscuous mode [ 394.934037][T17349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.938193][T17349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.030119][T17349] team0: Port device team_slave_0 added [ 395.033526][T17349] team0: Port device team_slave_1 added [ 395.055583][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 395.065649][T17349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.065666][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.065691][T17349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.067659][T17349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.067673][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.067697][T17349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.140721][T17349] hsr_slave_0: entered promiscuous mode [ 395.142095][T17349] hsr_slave_1: entered promiscuous mode [ 395.142957][T17349] debugfs: 'hsr0' already exists in 'hsr' [ 395.142976][T17349] Cannot create hsr debugfs directory [ 395.424973][T17349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.425011][T17349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.509054][T17349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.509090][T17349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.603155][T17349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.603193][T17349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.679551][T17349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.679586][T17349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.216110][T13079] net_ratelimit: 4 callbacks suppressed [ 396.216133][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.018512][T17482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.043121][T17502] netlink: 'syz.4.3161': attribute type 2 has an invalid length. [ 397.061458][T17349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.089422][T17349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.095179][T17349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.129536][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 397.138666][T17349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.139535][T17349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.171397][T17349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.183374][T17349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.189531][T17514] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3163'. [ 397.189562][T17514] openvswitch: netlink: Missing key (keys=40, expected=80) [ 397.210414][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.233199][T17349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.327179][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.535602][T17349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.589081][T17349] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.604132][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.604246][T13080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.643856][T13081] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.643963][T13081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.070619][T17546] bond1 (unregistering): Released all slaves [ 398.365674][T17555] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3177'. [ 398.451703][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.632466][T17573] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3179'. [ 398.803513][T17349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.860384][T17349] veth0_vlan: entered promiscuous mode [ 398.888690][T17349] veth1_vlan: entered promiscuous mode [ 398.929341][T17349] veth0_macvtap: entered promiscuous mode [ 398.953383][T17349] veth1_macvtap: entered promiscuous mode [ 398.994154][T17349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.028226][T17349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.095773][T13051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.132808][T17592] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 399.204770][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 399.263100][T17592] bond1: entered promiscuous mode [ 399.263484][T17592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.320532][T17592] bond1: (slave bridge1): making interface the new active one [ 399.320619][T17592] bridge1: entered promiscuous mode [ 399.322355][T17592] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 399.379053][T17602] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 399.418825][T17611] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3190'. [ 399.419348][T17606] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 399.426012][T13081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.426031][T13081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.484692][T13049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.515024][T13049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.515043][T13049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.526263][T13049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.527855][T13049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.544112][T17601] netlink: ct family unspecified [ 399.567245][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.721646][T17621] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 399.840065][T17629] netlink: 'syz.2.3195': attribute type 2 has an invalid length. [ 399.840090][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 399.869862][T17629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3195'. [ 399.924531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.924744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.560788][ T4952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.571566][ T4952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.573042][ T4952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.588828][ T4952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.589436][ T4952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.939060][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 401.055872][T17676] ipvlan2: entered allmulticast mode [ 401.055896][T17676] virt_wifi0: entered allmulticast mode [ 401.058080][T17676] batman_adv: batadv0: Adding interface: ipvlan2 [ 401.058100][T17676] batman_adv: batadv0: Interface activated: ipvlan2 [ 401.079884][ T30] audit: type=1804 audit(1793509010.203:7): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3210" name="/newroot/1/cgroup.controllers" dev="tmpfs" ino=24 res=1 errno=0 [ 401.080152][ T30] audit: type=1800 audit(1793509010.203:8): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3210" name="cgroup.controllers" dev="tmpfs" ino=24 res=0 errno=-22 [ 401.148497][T13081] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.150868][T13079] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.151027][T13079] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.151065][T13079] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.285369][ T4952] Bluetooth: hci4: command 0x041b tx timeout [ 401.375730][T17699] net_ratelimit: 8 callbacks suppressed [ 401.375750][T17699] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 401.577171][T17659] rxe_eth0 speed is unknown, defaulting to 1000 [ 401.650907][ T4952] Bluetooth: hci2: Malformed HCI Event [ 401.775181][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.828169][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 401.914220][T17721] tipc: Started in network mode [ 401.914250][T17721] tipc: Node identity 16fcae6e6961, cluster identity 4711 [ 401.915671][T17721] tipc: Enabled bearer , priority 0 [ 401.920490][T17721] syzkaller0: entered promiscuous mode [ 401.920510][T17721] syzkaller0: entered allmulticast mode [ 401.933151][T17720] syzkaller0: MTU not usable for tipc bearer [ 401.933174][T17720] tipc: Disabling bearer [ 402.070071][T17711] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 402.070098][T17711] bond1: option packets_per_slave: allowed values 0 - 65535 [ 402.093817][T17711] bond1 (unregistering): Released all slaves [ 402.129939][T17659] wg1 speed is unknown, defaulting to 1000 [ 402.224577][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.224778][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.224949][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.227420][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.227601][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.227765][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.227937][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.228119][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.232642][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.232819][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 402.251084][T17735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.386066][T17738] vlan2: entered promiscuous mode [ 402.386090][T17738] hsr0: entered promiscuous mode [ 402.386354][T17738] vlan2: entered allmulticast mode [ 402.386368][T17738] hsr0: entered allmulticast mode [ 402.386380][T17738] hsr_slave_0: entered allmulticast mode [ 402.386396][T17738] hsr_slave_1: entered allmulticast mode [ 402.564062][T17747] netlink: 'syz.4.3229': attribute type 39 has an invalid length. [ 402.657713][ T4952] Bluetooth: hci1: command tx timeout [ 402.849436][T17758] xt_CONNSECMARK: invalid mode: 0 [ 402.874738][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.012285][T17765] netlink: 'syz.2.3234': attribute type 21 has an invalid length. [ 403.266843][T17781] netlink: 'syz.0.3237': attribute type 1 has an invalid length. [ 403.266872][T17781] nbd: nbd296 already in use [ 403.349928][T17784] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 403.499480][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.501355][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.501516][T17659] bridge_slave_0: entered allmulticast mode [ 403.526361][T17659] bridge_slave_0: entered promiscuous mode [ 403.545092][T17794] bond0: entered allmulticast mode [ 403.545113][T17794] bond_slave_0: entered allmulticast mode [ 403.545130][T17794] bond_slave_1: entered allmulticast mode [ 403.546202][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.546295][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.546422][T17659] bridge_slave_1: entered allmulticast mode [ 403.550786][T17659] bridge_slave_1: entered promiscuous mode [ 403.679442][T17659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.700379][T17659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.749271][T17659] team0: Port device team_slave_0 added [ 403.752336][T17659] team0: Port device team_slave_1 added [ 403.800916][T17659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.800933][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.800960][T17659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.852865][T17659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.852881][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.852908][T17659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.941598][T17659] hsr_slave_0: entered promiscuous mode [ 403.942230][T17659] hsr_slave_1: entered promiscuous mode [ 403.942703][T17659] debugfs: 'hsr0' already exists in 'hsr' [ 403.942723][T17659] Cannot create hsr debugfs directory [ 403.994825][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.270381][T17659] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.270420][T17659] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.399082][T17659] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.399116][T17659] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.501367][T17659] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.501404][T17659] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.629375][T17659] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.629410][T17659] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.709665][T17825] bond1: entered promiscuous mode [ 404.709690][T17825] bond1: entered allmulticast mode [ 404.726110][ T4952] Bluetooth: hci1: command tx timeout [ 404.964702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.965008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.965300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.965540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.123951][T17659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.142844][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.144008][T17659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.162099][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.167375][T17659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.190404][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.192962][T17659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.225503][T17659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.549066][T17659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.572402][T17659] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.587149][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.587256][T13049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.605322][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.605424][T13049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.867907][T17882] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 406.297593][T17902] h: entered promiscuous mode [ 406.301951][T17898] syzkaller0: entered promiscuous mode [ 406.301975][T17898] syzkaller0: entered allmulticast mode [ 406.752776][T17920] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 406.768502][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.806897][ T53] Bluetooth: hci1: command tx timeout [ 406.807968][ T10] net_ratelimit: 7 callbacks suppressed [ 406.807984][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.930398][T17659] veth0_vlan: entered promiscuous mode [ 406.977838][T17659] veth1_vlan: entered promiscuous mode [ 407.130737][T17659] veth0_macvtap: entered promiscuous mode [ 407.143989][T17659] veth1_macvtap: entered promiscuous mode [ 407.194779][T13080] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.194834][T13080] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.194880][T13080] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.194911][T13080] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.242071][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.283039][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.335040][ T6056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.335976][ T6056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.336012][ T6056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.336045][ T6056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.405334][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.636655][T13048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.636677][T13048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.721350][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.721372][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.732195][T17974] __nla_validate_parse: 43 callbacks suppressed [ 407.732215][T17974] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3284'. [ 407.780903][T17976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.104159][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'. [ 408.116010][T17992] hsr_slave_0: left promiscuous mode [ 408.119009][T17992] hsr_slave_1: left promiscuous mode [ 408.126192][T17989] netlink: 'syz.3.3289': attribute type 8 has an invalid length. [ 408.269164][T18004] netlink: 'syz.4.3291': attribute type 1 has an invalid length. [ 408.397637][T18004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.420511][T13048] IPVS: starting estimator thread 0... [ 408.432225][T18012] xt_TCPMSS: Only works on TCP SYN packets [ 408.448777][T18012] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 408.453597][T18004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3291'. [ 408.453658][T18008] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 408.514944][T18013] IPVS: using max 33 ests per chain, 79200 per kthread [ 408.525697][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.852654][T18018] erspan0: entered allmulticast mode [ 408.884807][ T4952] Bluetooth: hci1: command tx timeout [ 409.135951][T18030] x_tables: duplicate underflow at hook 1 [ 409.377820][T13049] bridge_slave_1: left allmulticast mode [ 409.378892][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.381652][T13049] x9: left allmulticast mode [ 409.381672][T13049] x9: left promiscuous mode [ 409.383008][T13049] bridge0: port 1(1x9) entered disabled state [ 409.517403][T13049] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 409.547741][T13049] ip6gretap0 (unregistering): left promiscuous mode [ 409.646304][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.677204][T13049] bond2 (unregistering): (slave geneve3): Releasing active interface [ 409.761055][T13049]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.761378][T13049] bond_slave_0: left promiscuous mode [ 409.763277][T13049]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.763510][T13049] bond_slave_1: left promiscuous mode [ 409.780718][T13049]  (unregistering): (slave team0): Releasing backup interface [ 409.796614][T13049] team0: left promiscuous mode [ 409.796634][T13049] team_slave_0: left promiscuous mode [ 409.796820][T13049] team_slave_1: left promiscuous mode [ 409.799078][T13049]  (unregistering): Released all slaves [ 409.810011][T13049] bond1 (unregistering): left allmulticast mode [ 409.810033][T13049] bond1 (unregistering): left promiscuous mode [ 409.820947][T13049] team0: Port device macvlan2 removed [ 409.833600][T13049] bond1 (unregistering): Released all slaves [ 409.853892][T13049] bond2 (unregistering): Released all slaves [ 409.875061][T13049] bond3 (unregistering): Released all slaves [ 409.883104][T13049] bond4 (unregistering): Released all slaves [ 409.901483][T13049] bond5 (unregistering): Released all slaves [ 409.912548][T13049] bond6 (unregistering): Released all slaves [ 409.945241][T13049] bond7 (unregistering): Released all slaves [ 409.953130][T13049] bond0 (unregistering): Released all slaves [ 410.004972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.005180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.005366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.005550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.071139][T13049] tipc: Left network mode [ 410.223957][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'. [ 410.223984][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'. [ 410.247911][T18037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3301'. [ 410.247926][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'. [ 410.757992][T13049] hsr_slave_0: left promiscuous mode [ 410.758474][T13049] hsr_slave_1: left promiscuous mode [ 410.759056][T13049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.759092][T13049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.759764][T13049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.759781][T13049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.817331][T13049] veth1_macvtap: left promiscuous mode [ 410.817467][T13049] veth0_macvtap: left promiscuous mode [ 410.817531][T13049] veth1_vlan: left promiscuous mode [ 410.817546][T13049] veth0_vlan: left promiscuous mode [ 411.106978][T17997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.380827][T13049] team0 (unregistering): Port device team_slave_1 removed [ 411.402078][T13049] team0 (unregistering): Port device team_slave_0 removed [ 411.959286][T12378] net_ratelimit: 6 callbacks suppressed [ 411.959307][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.690611][T18099] netlink: 'syz.1.3314': attribute type 2 has an invalid length. [ 412.720832][T18101] netlink: 'syz.3.3315': attribute type 83 has an invalid length. [ 412.722863][T18101] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3315'. [ 412.732126][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 412.845937][T18105] x_tables: duplicate entry at hook 1 [ 412.849024][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'. [ 413.065671][T18099] !: entered promiscuous mode [ 413.067799][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.068018][T13080] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 413.068056][T13080] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 413.084423][T13079] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 413.130302][T18103] !: left promiscuous mode [ 413.148721][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 413.149088][T13049] IPVS: stop unused estimator thread 0... [ 413.296089][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 413.331303][T18112] ipvlan2: entered allmulticast mode [ 413.331326][T18112] virt_wifi0: entered allmulticast mode [ 413.335491][T18112] batman_adv: batadv0: Adding interface: ipvlan2 [ 413.336344][T18112] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.336376][T18112] batman_adv: batadv0: Interface activated: ipvlan2 [ 413.410600][T18114] netlink: 'syz.2.3319': attribute type 21 has an invalid length. [ 413.518131][T18116] ipvlan3: entered allmulticast mode [ 413.529720][T18116] batman_adv: batadv0: Adding interface: ipvlan3 [ 413.529737][T18116] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.529760][T18116] batman_adv: The newly added mac address (4a:62:5c:84:24:fa) already exists on: ipvlan2 [ 413.529774][T18116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.529785][T18116] batman_adv: batadv0: Interface activated: ipvlan3 [ 413.639555][T18114] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 413.670549][T18114] bond2 (unregistering): Released all slaves [ 413.827645][T18145] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3328'. [ 413.827667][T18145] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3328'. [ 413.920432][T18145] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3328'. [ 413.927983][T18149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3329'. [ 413.928453][T18145] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3328'. [ 414.051144][T18153] syzkaller0: entered promiscuous mode [ 414.051168][T18153] syzkaller0: entered allmulticast mode [ 414.166435][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.270845][T18170] FAULT_INJECTION: forcing a failure. [ 414.270845][T18170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.270891][T18170] CPU: 1 UID: 0 PID: 18170 Comm: syz.2.3333 Not tainted syzkaller #0 PREEMPT(full) [ 414.270913][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 414.270928][T18170] Call Trace: [ 414.270935][T18170] [ 414.270943][T18170] dump_stack_lvl+0xe8/0x150 [ 414.270979][T18170] should_fail_ex+0x3eb/0x540 [ 414.271011][T18170] _copy_from_user+0x2d/0xb0 [ 414.271036][T18170] ___sys_sendmsg+0x1c6/0x360 [ 414.271164][T18170] ? __lock_acquire+0x747/0x2de0 [ 414.271215][T18170] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.271274][T18170] ? __fget_files+0x3a2/0x420 [ 414.271297][T18170] ? __fget_files+0x2a/0x420 [ 414.271336][T18170] __x64_sys_sendmsg+0x1b1/0x290 [ 414.271359][T18170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.271403][T18170] do_syscall_64+0x166/0x520 [ 414.271424][T18170] ? trace_irq_disable+0x3b/0x140 [ 414.271449][T18170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.271469][T18170] ? clear_bhb_loop+0x70/0xc0 [ 414.271493][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.271517][T18170] RIP: 0033:0x7f6cdd99f559 [ 414.271535][T18170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.271551][T18170] RSP: 002b:00007f6cdbbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.271572][T18170] RAX: ffffffffffffffda RBX: 00007f6cddc26180 RCX: 00007f6cdd99f559 [ 414.271586][T18170] RDX: 00000000000012cd RSI: 0000200000000700 RDI: 0000000000000003 [ 414.271598][T18170] RBP: 00007f6cdbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.271610][T18170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.271621][T18170] R13: 00007f6cddc26218 R14: 00007f6cddc26180 R15: 00007ffd1c897b08 [ 414.271654][T18170] [ 415.045513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.045906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.046241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.046572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.046925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.047269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.047593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.246407][T18183] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3337'. [ 416.511110][T18178] vti0: entered allmulticast mode [ 416.752310][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 416.864085][T18193] bond1: option xmit_hash_policy: invalid value (64) [ 416.893627][T18193] bond1 (unregistering): Released all slaves [ 417.192436][T18222] FAULT_INJECTION: forcing a failure. [ 417.192436][T18222] name failslab, interval 1, probability 0, space 0, times 0 [ 417.192466][T18222] CPU: 1 UID: 0 PID: 18222 Comm: syz.4.3347 Not tainted syzkaller #0 PREEMPT(full) [ 417.192488][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 417.192501][T18222] Call Trace: [ 417.192508][T18222] [ 417.192516][T18222] dump_stack_lvl+0xe8/0x150 [ 417.192554][T18222] should_fail_ex+0x3eb/0x540 [ 417.192583][T18222] should_failslab+0xa8/0x100 [ 417.192656][T18222] __kmalloc_noprof+0xf9/0x710 [ 417.192686][T18222] ? iovec_from_user+0x87/0x250 [ 417.192709][T18222] ? iovec_from_user+0x87/0x250 [ 417.192738][T18222] iovec_from_user+0x87/0x250 [ 417.192766][T18222] __import_iovec+0x15e/0x7e0 [ 417.192802][T18222] import_iovec+0x73/0xa0 [ 417.192831][T18222] ___sys_sendmsg+0x255/0x360 [ 417.192852][T18222] ? __lock_acquire+0x747/0x2de0 [ 417.192883][T18222] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.192944][T18222] ? __fget_files+0x3a2/0x420 [ 417.192967][T18222] ? __fget_files+0x2a/0x420 [ 417.193001][T18222] __x64_sys_sendmsg+0x1b1/0x290 [ 417.193025][T18222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.193072][T18222] do_syscall_64+0x166/0x520 [ 417.193093][T18222] ? trace_irq_disable+0x3b/0x140 [ 417.193120][T18222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.193140][T18222] ? clear_bhb_loop+0x70/0xc0 [ 417.193165][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.193185][T18222] RIP: 0033:0x7fdd6719f559 [ 417.193204][T18222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.193221][T18222] RSP: 002b:00007fdd68038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.193241][T18222] RAX: ffffffffffffffda RBX: 00007fdd67426180 RCX: 00007fdd6719f559 [ 417.193256][T18222] RDX: 00000000000012cd RSI: 0000200000000700 RDI: 0000000000000003 [ 417.193269][T18222] RBP: 00007fdd68038090 R08: 0000000000000000 R09: 0000000000000000 [ 417.193282][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.193294][T18222] R13: 00007fdd67426218 R14: 00007fdd67426180 R15: 00007ffc9a92a308 [ 417.193328][T18222] [ 417.505178][T13079] net_ratelimit: 6 callbacks suppressed [ 417.505200][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.042719][T18212] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3348'. [ 418.042759][T18212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.209291][T18253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3357'. [ 418.244706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.359531][T18260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3358'. [ 418.379071][T18260] syzkaller0: entered promiscuous mode [ 418.379095][T18260] syzkaller0: entered allmulticast mode [ 418.580596][T18269] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 418.636052][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.765361][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 418.803402][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 418.803424][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 419.008901][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3369'. [ 419.008928][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3369'. [ 419.009758][T18299] syzkaller0: entered promiscuous mode [ 419.009778][T18299] syzkaller0: entered allmulticast mode [ 419.286148][T18318] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3378'. [ 419.286205][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 419.322776][T18320] Bluetooth: hci0: unsupported parameter 5161 [ 419.322799][T18320] Bluetooth: hci0: unsupported parameter 8192 [ 419.322813][T18320] Bluetooth: hci0: unsupported parameter 5161 [ 419.322826][T18320] Bluetooth: hci0: unsupported parameter 8192 [ 419.441594][T18322] syzkaller1: entered promiscuous mode [ 419.441616][T18322] syzkaller1: entered allmulticast mode [ 419.443955][T18322] syzkaller1: left promiscuous mode [ 419.443972][T18322] syzkaller1: left allmulticast mode [ 419.523878][T18322] can: request_module (can-proto-3) failed. [ 419.749030][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.813562][T18343] netlink: 'syz.3.3386': attribute type 19 has an invalid length. [ 420.038400][T18354] netlink: 'syz.2.3388': attribute type 4 has an invalid length. [ 420.055728][T18351] veth3: entered allmulticast mode [ 420.339489][ T30] audit: type=1107 audit(1793509029.463:9): pid=18369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ٮQbXX͝)P&PP6h;ve% #' [ 420.541073][T18378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.542300][T18378] bond1: option mode: unable to set because the bond device is up [ 420.542494][T18378] bond1: option mode: unable to set because the bond device is up [ 420.542687][T18378] bond1: option mode: unable to set because the bond device is up [ 420.542897][T18378] bond1: option mode: unable to set because the bond device is up [ 420.543201][T18378] bond1: option mode: unable to set because the bond device is up [ 420.543549][T18378] bond1: option mode: unable to set because the bond device is up [ 420.543763][T18378] bond1: option mode: unable to set because the bond device is up [ 420.544006][T18378] bond1: option mode: unable to set because the bond device is up [ 420.544228][T18378] bond1: option mode: unable to set because the bond device is up [ 420.626650][T18378] bond1: option mode: unable to set because the bond device is up [ 420.626875][T18378] bond1: option mode: unable to set because the bond device is up [ 420.627072][T18378] bond1: option mode: unable to set because the bond device is up [ 420.627359][T18378] bond1: option mode: unable to set because the bond device is up [ 420.627553][T18378] bond1: option mode: unable to set because the bond device is up [ 420.627868][T18378] bond1: option mode: unable to set because the bond device is up [ 420.628071][T18378] bond1: option mode: unable to set because the bond device is up [ 420.628293][T18378] bond1: option mode: unable to set because the bond device is up [ 420.628491][T18378] bond1: option mode: unable to set because the bond device is up [ 420.628694][T18378] bond1: option mode: unable to set because the bond device is up [ 420.628935][T18378] bond1: option mode: unable to set because the bond device is up [ 420.629126][T18378] bond1: option mode: unable to set because the bond device is up [ 420.629381][T18378] bond1: option mode: unable to set because the bond device is up [ 420.629630][T18378] bond1: option mode: unable to set because the bond device is up [ 420.629845][T18378] bond1: option mode: unable to set because the bond device is up [ 420.630046][T18378] bond1: option mode: unable to set because the bond device is up [ 420.630279][T18378] bond1: option mode: unable to set because the bond device is up [ 420.630517][T18378] bond1: option mode: unable to set because the bond device is up [ 420.630734][T18378] bond1: option mode: unable to set because the bond device is up [ 420.630937][T18378] bond1: option mode: unable to set because the bond device is up [ 420.631150][T18378] bond1: option mode: unable to set because the bond device is up [ 420.631373][T18378] bond1: option mode: unable to set because the bond device is up [ 420.631573][T18378] bond1: option mode: unable to set because the bond device is up [ 420.791802][T18377] bond1 (unregistering): Released all slaves [ 420.853699][T13079] IPVS: starting estimator thread 0... [ 420.864800][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.946656][T18390] IPVS: using max 28 ests per chain, 67200 per kthread [ 421.682975][T18419] syzkaller0: entered promiscuous mode [ 421.683000][T18419] syzkaller0: entered allmulticast mode [ 421.800955][T18422] netlink: 'syz.0.3408': attribute type 1 has an invalid length. [ 421.966215][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.028320][T18422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.200605][T18436] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 422.255505][T12378] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.256190][T13079] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.256228][T13079] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.256261][T13079] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.404537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.496966][T18446] syzkaller0: entered promiscuous mode [ 422.496991][T18446] syzkaller0: entered allmulticast mode [ 422.816177][T13080] IPVS: starting estimator thread 0... [ 422.818556][T18467] xt_l2tp: missing protocol rule (udp|l2tpip) [ 422.904793][T18468] IPVS: using max 25 ests per chain, 60000 per kthread [ 422.930863][T18473] x9: renamed from bridge_slave_0 (while UP) [ 423.076761][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.212405][T18485] pim6reg1: entered promiscuous mode [ 423.212437][T18485] pim6reg1: entered allmulticast mode [ 423.410794][T18495] syzkaller0: entered promiscuous mode [ 423.410817][T18495] syzkaller0: entered allmulticast mode [ 423.433762][T18495] __nla_validate_parse: 12 callbacks suppressed [ 423.433783][T18495] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3435'. [ 423.434883][T18495] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3435'. [ 423.488178][T18500] netlink: 'syz.3.3437': attribute type 4 has an invalid length. [ 423.633839][T18506] Cannot find set identified by id 0 to match [ 423.644149][T18506] ip_tables: iptables: counters copy to user failed while replacing table [ 423.812837][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 423.912709][T18527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.185984][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.519485][T18551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3454'. [ 424.521930][T18551] netlink: 'syz.1.3454': attribute type 10 has an invalid length. [ 424.522704][T18551] veth1_macvtap: left promiscuous mode [ 424.532382][T18551] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 424.555615][T18550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3455'. [ 424.849004][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 424.875392][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3458'. [ 424.977616][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'. [ 425.073369][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3462'. [ 425.207708][T18580] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 425.306125][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.334568][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3468'. [ 425.359268][T18582] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.506055][T18590] atomic_op ffff888085f4d9e0 conn xmit_atomic 0000000000000000 [ 425.562914][T18597] ip_tables: iptables: counters copy to user failed while replacing table [ 426.008254][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.363939][T18629] netlink: 'syz.3.3484': attribute type 8 has an invalid length. [ 426.375208][T18628] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 426.411811][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.484573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.124747][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 427.170847][T18678] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 428.624980][T12378] net_ratelimit: 1 callbacks suppressed [ 428.625012][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.342152][T18628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.758824][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.844785][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.873615][T18732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.874747][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.985173][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.734591][T18714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.095809][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.588230][T18793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.591074][T18793] bridge0: port 3(bond1) entered blocking state [ 433.591331][T18793] bridge0: port 3(bond1) entered disabled state [ 433.591462][T18793] bond1: entered allmulticast mode [ 433.600861][T18793] bond1: entered promiscuous mode [ 433.603064][T18793] bridge0: port 3(bond1) entered blocking state [ 433.603216][T18793] bridge0: port 3(bond1) entered forwarding state [ 433.869895][T18817] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 433.919456][T18820] netlink: 'syz.4.3535': attribute type 3 has an invalid length. [ 434.124974][T18830] __nla_validate_parse: 5 callbacks suppressed [ 434.125005][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 434.125029][T18830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'. [ 434.125599][T18828] netlink: 'syz.0.3540': attribute type 5 has an invalid length. [ 434.125613][T18828] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3540'. [ 434.195719][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.351703][T18837] netlink: 'syz.0.3541': attribute type 13 has an invalid length. [ 434.351724][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3541'. [ 434.456065][T18837] netlink: 'syz.0.3541': attribute type 13 has an invalid length. [ 434.456088][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3541'. [ 434.466518][T13080] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.466575][T13080] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.466608][T13080] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.475298][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.521702][T13049] bridge0: port 3(bond1) entered disabled state [ 434.538291][T18848] netlink: 'syz.4.3544': attribute type 21 has an invalid length. [ 434.538315][T18848] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3544'. [ 434.538393][T18848] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3544'. [ 434.591057][T18852] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.591381][T18852] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.884996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.931067][T18857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.940639][T18857] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3547'. [ 434.965744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.007869][T18857] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3547'. [ 435.009814][T18857] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3547'. [ 435.189807][T18872] netlink: zone id is out of range [ 435.219355][T18872] netlink: 'syz.4.3550': attribute type 23 has an invalid length. [ 435.304831][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.607732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.128290][T18906] tipc: Started in network mode [ 436.128322][T18906] tipc: Node identity 162f12fcfaa6, cluster identity 4711 [ 436.128479][T18906] tipc: Enabled bearer , priority 0 [ 436.159064][T18906] syzkaller0: MTU not usable for tipc bearer [ 436.159088][T18906] tipc: Disabling bearer [ 436.586315][T18923] tipc: New replicast peer: 255.255.255.255 [ 436.587187][T18923] tipc: Enabled bearer , priority 10 [ 436.681660][T18941] Bluetooth: hci0: unsupported parameter 5135 [ 436.681682][T18941] Bluetooth: hci0: unsupported parameter 8192 [ 436.681694][T18941] Bluetooth: hci0: unsupported parameter 5135 [ 436.681733][T18941] Bluetooth: hci0: unsupported parameter 8192 [ 436.691023][T18942] IPVS: length: 4096 != 24 [ 436.918518][T18947] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 436.952112][T18947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.995798][T18947] bond1: (slave geneve2): making interface the new active one [ 436.998154][T18947] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 436.999868][T18946] tipc: Enabled bearer , priority 10 [ 437.118237][T18945] tipc: Resetting bearer [ 437.172601][T18945] tipc: Disabling bearer [ 437.643909][T18985] gtp2: entered promiscuous mode [ 437.643943][T18985] gtp2: entered allmulticast mode [ 437.705201][ T5728] tipc: Node number set to 3968406268 [ 438.070336][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036575400: rx timeout, send abort [ 438.288366][T19026] netlink: 'syz.4.3597': attribute type 1 has an invalid length. [ 438.570390][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036575400: abort rx timeout. Force session deactivation [ 438.570589][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036575800: rx timeout, send abort [ 438.806534][T19045] vlan0: entered allmulticast mode [ 439.070631][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036575800: abort rx timeout. Force session deactivation [ 439.400690][T19070] xt_hashlimit: size too large, truncated to 1048576 [ 439.431761][T19073] __nla_validate_parse: 13 callbacks suppressed [ 439.431780][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'. [ 439.431808][T19073] netlink: 'syz.0.3609': attribute type 30 has an invalid length. [ 439.492683][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'. [ 439.492721][T19067] netlink: 'syz.0.3609': attribute type 30 has an invalid length. [ 439.623973][T19080] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 439.623995][T19080] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3610'. [ 439.707505][T13048] net_ratelimit: 4 callbacks suppressed [ 439.707526][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.956117][T19048] pim6reg: entered allmulticast mode [ 440.016679][T19089] ip_tables: iptables: counters copy to user failed while replacing table [ 440.283327][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3614'. [ 440.317473][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3614'. [ 440.437827][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3616'. [ 440.437863][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3616'. [ 440.472494][T19107] erspan0: entered promiscuous mode [ 440.473651][T19107] gretap0: entered promiscuous mode [ 440.608788][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3618'. [ 440.795570][T19120] netlink: 32844 bytes leftover after parsing attributes in process `syz.0.3617'. [ 440.826570][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.028518][T19124] syzkaller0: entered promiscuous mode [ 441.028543][T19124] syzkaller0: entered allmulticast mode [ 441.079559][T19078] syzkaller0: entered promiscuous mode [ 441.079582][T19078] syzkaller0: entered allmulticast mode [ 441.081752][T19124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3621'. [ 441.931276][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.790060][T19202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.037243][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.103813][T19206] syzkaller0: entered promiscuous mode [ 443.103836][T19206] syzkaller0: entered allmulticast mode [ 443.618036][ T4952] Bluetooth: hci4: connection err: -111 [ 443.721051][T19231] netlink: 'syz.4.3644': attribute type 12 has an invalid length. [ 443.721074][T19231] netlink: 'syz.4.3644': attribute type 29 has an invalid length. [ 443.783280][T19254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.930012][T19261] syzkaller0: entered promiscuous mode [ 443.930035][T19261] syzkaller0: entered allmulticast mode [ 444.137489][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.235248][T19279] ebt_among: dst integrity fail: 101 [ 444.410967][T19297] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 444.639536][T19304] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.639620][T19304] gretap1: entered promiscuous mode [ 444.639635][T19304] gretap1: entered allmulticast mode [ 444.682185][T19305] syzkaller0: entered promiscuous mode [ 444.682207][T19305] syzkaller0: entered allmulticast mode [ 444.702646][T19315] __nla_validate_parse: 19 callbacks suppressed [ 444.702666][T19315] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3666'. [ 444.702979][T19315] 8021q: VLANs not supported on gre0 [ 444.713749][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'. [ 444.713780][T19305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3665'. [ 444.729652][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'. [ 444.729683][T19305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3665'. [ 444.737230][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 444.812010][T19316] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 444.838226][T19315] macvtap1: entered promiscuous mode [ 444.838346][T19315] vlan0: entered promiscuous mode [ 444.838867][T19315] macvtap1: entered allmulticast mode [ 444.838883][T19315] vlan0: entered allmulticast mode [ 444.838895][T19315] veth0_vlan: entered allmulticast mode [ 444.896209][T19315] netlink: 'syz.3.3666': attribute type 2 has an invalid length. [ 444.896232][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'. [ 445.018998][T13043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.019021][T13043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.230173][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.232234][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.245350][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.268651][T19329] netlink: 'syz.0.3671': attribute type 4 has an invalid length. [ 445.268676][T19329] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3671'. [ 445.271188][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.278344][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.361653][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.361777][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.361858][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.361934][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.362013][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.390073][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390095][T19334] tun0: persist enabled [ 445.390222][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390235][T19334] tun0: persist enabled [ 445.390310][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390322][T19334] tun0: persist enabled [ 445.390400][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390411][T19334] tun0: persist enabled [ 445.390487][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390499][T19334] tun0: persist enabled [ 445.390576][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390588][T19334] tun0: persist enabled [ 445.390664][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390676][T19334] tun0: persist enabled [ 445.390779][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390790][T19334] tun0: persist enabled [ 445.390866][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390877][T19334] tun0: persist enabled [ 445.390954][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.390966][T19334] tun0: persist enabled [ 445.391041][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.391053][T19334] tun0: persist enabled [ 445.391128][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.391140][T19334] tun0: persist enabled [ 445.391223][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.391234][T19334] tun0: persist enabled [ 445.391313][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.391325][T19334] tun0: persist enabled [ 445.391400][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.391412][T19334] tun0: persist enabled [ 445.398316][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.398336][T19334] tun0: persist enabled [ 445.398798][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.398892][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.398973][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399064][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399141][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399228][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399306][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399383][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399461][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399564][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399643][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399720][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399798][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399877][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.399962][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.400040][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.400117][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.400196][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.400279][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406200][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406296][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406375][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406453][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406530][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406607][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406689][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.406766][T19332] tun0: tun_chr_ioctl cmd 1074025673 [ 445.411925][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.411943][T19334] tun0: persist enabled [ 445.412039][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412053][T19334] tun0: persist enabled [ 445.412134][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412147][T19334] tun0: persist enabled [ 445.412233][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412246][T19334] tun0: persist enabled [ 445.412324][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412337][T19334] tun0: persist enabled [ 445.412442][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412455][T19334] tun0: persist enabled [ 445.412535][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412548][T19334] tun0: persist enabled [ 445.412624][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412636][T19334] tun0: persist enabled [ 445.412713][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412726][T19334] tun0: persist enabled [ 445.412802][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412815][T19334] tun0: persist enabled [ 445.412894][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412906][T19334] tun0: persist enabled [ 445.412980][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.412992][T19334] tun0: persist enabled [ 445.413065][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.413076][T19334] tun0: persist enabled [ 445.413147][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.413159][T19334] tun0: persist enabled [ 445.413243][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.413255][T19334] tun0: persist enabled [ 445.413329][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.413341][T19334] tun0: persist enabled [ 445.418407][T19334] tun0: tun_chr_ioctl cmd 1074025675 [ 445.418423][T19334] tun0: persist enabled [ 446.099323][T19357] ipt_REJECT: ECHOREPLY no longer supported. [ 446.278609][T19361] x_tables: duplicate underflow at hook 1 [ 446.376605][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3681'. [ 446.379662][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 446.415027][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.261397][T19407] C: renamed from lo [ 447.274501][T19407] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.277798][T19407] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 447.460643][T19420] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 447.538092][T13053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.823505][T19439] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 447.880105][T19442] netlink: 'syz.4.3704': attribute type 1 has an invalid length. [ 448.054739][T19439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.442468][T19494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 448.633097][T19531] ip_tables: iptables: counters copy to user failed while replacing table [ 448.647934][ T53] Bluetooth: hci1: link tx timeout [ 448.647954][ T53] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 448.675695][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.430860][T19614] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.592533][T19604] can: request_module (can-proto-0) failed. [ 450.011993][T19661] xt_hashlimit: size too large, truncated to 1048576 [ 450.070155][T19669] __nla_validate_parse: 41 callbacks suppressed [ 450.070207][T19669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3722'. [ 450.070763][T19669] x_tables: unsorted entry at hook 3 [ 450.724632][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 450.917843][T12378] net_ratelimit: 1 callbacks suppressed [ 450.917863][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.534584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.066127][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.131299][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.167891][T19670] bridge_slave_0 (unregistering): left allmulticast mode [ 452.167919][T19670] bridge_slave_0 (unregistering): left promiscuous mode [ 452.167990][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.395116][T19691] bond1: left allmulticast mode [ 452.395640][T19691] bond1: left promiscuous mode [ 452.395902][T19691] bridge0: port 3(bond1) entered disabled state [ 452.413841][T19691] bridge_slave_1: left allmulticast mode [ 452.413887][T19691] bridge_slave_1: left promiscuous mode [ 452.414093][T19691] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.451080][T19691] x9: left allmulticast mode [ 452.451107][T19691] x9: left promiscuous mode [ 452.451352][T19691] bridge0: port 1(1x9) entered disabled state [ 452.467399][T19698] ip6t_hbh: too many supported opts specified [ 452.552325][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3729'. [ 452.601472][T19700] netlink: 'syz.0.3728': attribute type 12 has an invalid length. [ 452.601842][T19703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.601862][T19703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.606180][T19703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.606200][T19703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.647269][T19703] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 452.647291][T19703] batman_adv: batadv0: Removing interface: ipvlan2 [ 452.867131][T19708] TC_ACT_REPEAT abuse ? [ 452.960748][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3732'. [ 452.960777][T19714] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3732'. [ 453.067517][T19718] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 453.121125][T19726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3734'. [ 453.170921][T19718] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.176518][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.215487][T19728] IPVS: set_ctl: invalid protocol: 141 10.1.1.1:20004 [ 453.713801][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 453.767528][T13053] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.776701][T13043] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.776783][T13043] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.776815][T13043] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.297352][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.710482][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3757'. [ 454.807747][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.855474][T19799] tipc: Enabling of bearer rejected, already enabled [ 454.996713][T19809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 455.213081][T19816] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 455.291279][T19826] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3767'. [ 455.418265][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.893771][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 456.339676][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3777'. [ 456.452117][T19864] : renamed from dummy0 (while UP) [ 456.554800][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.722784][T19873] veth1_to_hsr: entered allmulticast mode [ 456.751753][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3782'. [ 456.847509][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3782'. [ 456.933003][T19876] syzkaller0: entered promiscuous mode [ 456.933028][T19876] syzkaller0: entered allmulticast mode [ 457.082343][T19896] unsupported nlmsg_type 40 [ 457.159020][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3785'. [ 457.159045][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3785'. [ 457.478590][T19906] syzkaller0: entered promiscuous mode [ 457.478612][T19906] syzkaller0: entered allmulticast mode [ 457.597399][T19919] netlink: 'syz.3.3792': attribute type 1 has an invalid length. [ 457.675512][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.712860][T19919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.799530][T19921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3792'. [ 457.799898][T19924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3792'. [ 457.828895][T19923] bond2: (slave geneve2): making interface the new active one [ 457.830269][T19923] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 457.928943][T19919] bond0: (slave bond_slave_0): Releasing backup interface [ 457.969441][T19919] bond0: (slave bond_slave_1): Releasing backup interface [ 458.010798][T19919] team0: Port device team_slave_0 removed [ 458.041034][T19919] team0: Port device team_slave_1 removed [ 458.041884][T19919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.041904][T19919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.075552][T19919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.092366][T19919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.111358][T19919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.178345][T19943] netlink: 'syz.1.3796': attribute type 3 has an invalid length. [ 458.178369][T19943] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3796'. [ 458.179216][T19943] netlink: 'syz.1.3796': attribute type 58 has an invalid length. [ 458.181889][T19919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.260264][T19941] bond2 (unregistering): Released all slaves [ 458.351446][T19919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.457012][T19919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.461015][T19950] netlink: 'syz.4.3800': attribute type 20 has an invalid length. [ 458.515046][T19950] netlink: 'syz.4.3800': attribute type 20 has an invalid length. [ 458.676665][T19968] syzkaller0: entered promiscuous mode [ 458.676688][T19968] syzkaller0: entered allmulticast mode [ 458.776537][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.440223][T20005] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 459.558381][T20011] syzkaller0: entered promiscuous mode [ 459.558404][T20011] syzkaller0: entered allmulticast mode [ 459.885742][T13043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.274567][T20025] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 461.006217][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.084203][T20063] netlink: 'syz.4.3825': attribute type 1 has an invalid length. [ 461.084224][T20063] __nla_validate_parse: 7 callbacks suppressed [ 461.084234][T20063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3825'. [ 461.317924][T20081] sctp: [Deprecated]: syz.1.3828 (pid 20081) Use of int in max_burst socket option. [ 461.317924][T20081] Use struct sctp_assoc_value instead [ 461.443744][T20085] syzkaller0: entered promiscuous mode [ 461.443767][T20085] syzkaller0: entered allmulticast mode [ 461.545904][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3830'. [ 461.546170][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3830'. [ 461.577848][T20088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.577872][T20088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.581610][T20088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.581631][T20088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.659497][T20094] tipc: Started in network mode [ 461.659553][T20094] tipc: Node identity ac1414aa, cluster identity 4711 [ 461.659789][T20094] tipc: New replicast peer: 172.20.20.187 [ 461.678840][T20096] x_tables: duplicate entry at hook 2 [ 461.694837][T20094] tipc: Enabled bearer , priority 10 [ 461.702266][T20086] tipc: Enabling of bearer rejected, already enabled [ 462.045507][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 462.106112][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.241010][T20130] xt_recent: Unsupported userspace flags (000000b1) [ 462.732170][T20149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3844'. [ 462.758276][T20146] syzkaller0: entered promiscuous mode [ 462.758299][T20146] syzkaller0: entered allmulticast mode [ 462.774746][ T5758] tipc: Node number set to 2886997162 [ 462.898719][T20157] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 462.988127][T20161] netlink: 'syz.2.3846': attribute type 1 has an invalid length. [ 463.022548][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 463.022574][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 463.022606][T20155] netlink: 'syz.4.3845': attribute type 4 has an invalid length. [ 463.067802][T20164] ip_tables: iptables: counters copy to user failed while replacing table [ 463.122445][T20173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3849'. [ 463.208382][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.261319][T20178] xt_hashlimit: size too large, truncated to 1048576 [ 463.307075][ T53] block nbd1: Receive control failed (result -32) [ 463.433365][T20188] netlink: 'syz.1.3852': attribute type 1 has an invalid length. [ 463.433388][T20188] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3852'. [ 463.517784][T20186] netlink: 'syz.3.3854': attribute type 32 has an invalid length. [ 463.517809][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 463.585495][T20186] bond3: option coupled_control: invalid value (29) [ 463.602506][T20186] bond3 (unregistering): Released all slaves [ 464.108433][T20208] syzkaller0: entered promiscuous mode [ 464.108459][T20208] syzkaller0: entered allmulticast mode [ 464.188637][T20214] xt_socket: unknown flags 0xc [ 464.305474][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.408437][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.526225][T20225] netlink: 'syz.0.3863': attribute type 13 has an invalid length. [ 464.960155][T20245] tap0: tun_chr_ioctl cmd 1074025672 [ 464.960178][T20245] tap0: ignored: set checksum disabled [ 465.226674][T20263] syzkaller0: entered promiscuous mode [ 465.226701][T20263] syzkaller0: entered allmulticast mode [ 465.416728][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.120062][T20312] syzkaller0: entered promiscuous mode [ 466.120087][T20312] syzkaller0: entered allmulticast mode [ 466.191236][T20312] __nla_validate_parse: 4 callbacks suppressed [ 466.191257][T20312] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3888'. [ 466.206670][T20312] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3888'. [ 466.481530][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.481557][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.511670][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.511696][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.525192][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.558999][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.575315][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.575340][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.581915][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 466.950240][T20351] sit1: entered promiscuous mode [ 466.950265][T20351] sit1: entered allmulticast mode [ 467.111962][T20360] syzkaller0: entered promiscuous mode [ 467.111988][T20360] syzkaller0: entered allmulticast mode [ 467.625551][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.786911][T20412] netlink: 'syz.1.3917': attribute type 58 has an invalid length. [ 467.803504][T20405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 467.852583][T20418] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 467.854143][T20418] ebt_among: dst integrity fail: 200 [ 467.898717][T20416] syzkaller0: entered promiscuous mode [ 467.898767][T20416] syzkaller0: entered allmulticast mode [ 467.969381][T20420] sctp: [Deprecated]: syz.1.3921 (pid 20420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.969381][T20420] Use struct sctp_sack_info instead [ 468.737699][T13080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.853447][T20465] xt_connbytes: Forcing CT accounting to be enabled [ 468.853496][T20465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.170421][T20472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.841152][T20512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.851622][T20512] netlink: 'syz.2.3949': attribute type 21 has an invalid length. [ 469.870206][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.903703][T20512] netlink: 'syz.2.3949': attribute type 2 has an invalid length. [ 469.930099][T20514] syzkaller0: entered promiscuous mode [ 469.930122][T20514] syzkaller0: entered allmulticast mode [ 470.100864][T20526] Cannot find set identified by id 4 to match [ 470.459401][T20541] tls_set_device_offload: netdev not found [ 470.523910][T20544] ip_tables: iptables: counters copy to user failed while replacing table [ 470.951766][T20568] bond3: option downdelay: invalid value (18446744073709551615) [ 470.951804][T20568] bond3: option downdelay: allowed values 0 - 2147483647 [ 470.985429][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.986968][T20568] bond3 (unregistering): Released all slaves [ 471.299839][T20582] __nla_validate_parse: 86 callbacks suppressed [ 471.299861][T20582] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3963'. [ 471.301984][T20582] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3963'. [ 471.330894][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3965'. [ 471.442018][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 471.546917][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 471.546976][T20600] netlink: 'syz.1.3964': attribute type 10 has an invalid length. [ 471.546991][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 471.632636][T20593] bond5: invalid ARP target 0.0.0.0 specified for addition [ 471.632664][T20593] bond5: option arp_ip_target: invalid value (0) [ 471.669597][T20593] bond5 (unregistering): Released all slaves [ 471.957596][T20600] geneve3: entered promiscuous mode [ 471.957621][T20600] geneve3: entered allmulticast mode [ 472.104974][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.182435][T20628] ip_tables: iptables: counters copy to user failed while replacing table [ 472.311584][T20638] xt_hashlimit: size too large, truncated to 1048576 [ 472.443264][T20635] syzkaller0: entered promiscuous mode [ 472.443289][T20635] syzkaller0: entered allmulticast mode [ 472.453396][T20635] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3976'. [ 472.455888][T20635] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3976'. [ 472.578188][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 472.614827][T20638] xt_hashlimit: size too large, truncated to 1048576 [ 472.868540][T20662] netlink: 'syz.4.3981': attribute type 29 has an invalid length. [ 472.937284][T20660] syzkaller0: entered promiscuous mode [ 472.937332][T20660] syzkaller0: entered allmulticast mode [ 472.988141][T20638] xt_hashlimit: size too large, truncated to 1048576 [ 473.156930][T20676] Bluetooth: MGMT ver 1.23 [ 473.213012][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.541602][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3989'. [ 473.576912][T20696] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.594530][T20688] syzkaller0: entered promiscuous mode [ 473.594562][T20688] syzkaller0: entered allmulticast mode [ 473.693249][T20698] x_tables: duplicate underflow at hook 1 [ 473.751613][T20706] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 474.010831][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.314888][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.500871][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.610408][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.630320][T20706] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 476.820486][T13049] IPVS: starting estimator thread 0... [ 476.866885][T20735] atomic_op ffff88802a64c9e0 conn xmit_atomic 0000000000000000 [ 476.894589][T20735] __nla_validate_parse: 3 callbacks suppressed [ 476.894609][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 476.904584][T20737] IPVS: using max 30 ests per chain, 72000 per kthread [ 476.986264][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4001'. [ 477.095687][T20754] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 477.095703][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 477.252245][T20758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.383634][T20764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 477.545746][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'. [ 477.545770][T20773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4009'. [ 477.618926][T20775] SET target dimension over the limit! [ 477.751244][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.992858][T20804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.077933][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'. [ 478.237546][T20813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.865784][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.279960][ T4952] Bluetooth: hci5: command 0x0406 tx timeout [ 484.178826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.849280][ C1] sched: DL replenish lagged too much [ 495.542179][ T4952] Bluetooth: hci2: command 0x0405 tx timeout [ 499.209169][ T4952] Bluetooth: hci2: command 0x0405 tx timeout [ 507.429031][ T4952] Bluetooth: hci0: command 0x0406 tx timeout [ 515.006281][ T4952] Bluetooth: hci4: command 0x041b tx timeout [ 547.607569][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 549.188983][ T4952] Bluetooth: hci1: link tx timeout [ 549.189010][ T4952] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 551.784855][ T4952] Bluetooth: hci1: command 0x0405 tx timeout [ 578.333804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.579496][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 617.534195][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 617.541183][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5758/1:b..l.. [ 617.550443][ C1] rcu: (detected by 1, t=10503 jiffies, g=91213, q=911952 ncpus=2) [ 617.558448][ C1] task:kworker/0:4 state:R running task stack:23880 pid:5758 tgid:5758 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 617.572055][ C1] Workqueue: events rht_deferred_worker [ 617.577635][ C1] Call Trace: [ 617.580920][ C1] [ 617.583869][ C1] __schedule+0x17dd/0x5830 [ 617.588410][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 617.593648][ C1] ? check_path+0x21/0x40 [ 617.598005][ C1] ? check_noncircular+0xdb/0x150 [ 617.603057][ C1] ? __lock_acquire+0x747/0x2de0 [ 617.608015][ C1] ? __pfx___schedule+0x10/0x10 [ 617.612888][ C1] ? __lock_acquire+0x747/0x2de0 [ 617.617869][ C1] preempt_schedule_irq+0x4b/0x90 [ 617.622918][ C1] irqentry_exit+0x14f/0x9b0 [ 617.627536][ C1] ? trace_irq_disable+0x3b/0x140 [ 617.632629][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 617.638625][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 617.643938][ C1] Code: 08 1c 13 00 00 00 00 eb b5 e8 8b 66 5e 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 93 c0 1b 13 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 88 61 fc [ 617.663643][ C1] RSP: 0018:ffffc9000484f368 EFLAGS: 00000282 [ 617.669736][ C1] RAX: d96a840cb0dd7d00 RBX: 0000000000000206 RCX: 0000000000000046 [ 617.677719][ C1] RDX: ffffc9000484f401 RSI: ffffffff8e92d57d RDI: ffffffff8c8e8c80 [ 617.685700][ C1] RBP: ffff88802a086a10 R08: ffffc9000484f9b8 R09: 0000000000000000 [ 617.693682][ C1] R10: ffffc9000484f498 R11: fffff52000909e95 R12: 0000000000000004 [ 617.701669][ C1] R13: 0000000000000004 R14: ffffffff8ff5a320 R15: ffff88802a085dc0 [ 617.709772][ C1] ? unwind_next_frame+0x8f/0x2550 [ 617.714965][ C1] unwind_next_frame+0x1baa/0x2550 [ 617.720108][ C1] ? rhashtable_rehash_alloc+0x8e/0x170 [ 617.725682][ C1] ? unwind_next_frame+0x8f/0x2550 [ 617.730823][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 617.737040][ C1] arch_stack_walk+0x11b/0x150 [ 617.741866][ C1] ? rht_deferred_worker+0x473/0x2090 [ 617.747291][ C1] stack_trace_save+0xa9/0x100 [ 617.752080][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 617.757576][ C1] save_stack+0x122/0x230 [ 617.761934][ C1] ? __lock_acquire+0x747/0x2de0 [ 617.766899][ C1] ? __pfx_save_stack+0x10/0x10 [ 617.771773][ C1] ? __free_frozen_pages+0xc97/0xd90 [ 617.777117][ C1] ? __slab_free+0x269/0x2c0 [ 617.781726][ C1] ? qlist_free_all+0x99/0x100 [ 617.786505][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 617.792157][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 617.796944][ C1] ? __kvmalloc_node_noprof+0x50a/0x820 [ 617.802515][ C1] ? bucket_table_alloc+0x78/0x390 [ 617.807642][ C1] ? rhashtable_rehash_alloc+0x8e/0x170 [ 617.813221][ C1] ? page_ext_put+0x97/0xc0 [ 617.817759][ C1] __reset_page_owner+0x73/0x2a0 [ 617.822735][ C1] __free_frozen_pages+0xc97/0xd90 [ 617.827881][ C1] __slab_free+0x269/0x2c0 [ 617.832341][ C1] ? qlist_free_all+0x8e/0x100 [ 617.837129][ C1] qlist_free_all+0x99/0x100 [ 617.841746][ C1] kasan_quarantine_reduce+0x148/0x160 [ 617.847231][ C1] __kasan_kmalloc+0x22/0xb0 [ 617.851865][ C1] __kvmalloc_node_noprof+0x50a/0x820 [ 617.857262][ C1] ? __kvmalloc_node_noprof+0x340/0x820 [ 617.862828][ C1] ? bucket_table_alloc+0x78/0x390 [ 617.867959][ C1] ? bucket_table_alloc+0x78/0x390 [ 617.873093][ C1] bucket_table_alloc+0x78/0x390 [ 617.878052][ C1] rhashtable_rehash_alloc+0x8e/0x170 [ 617.883448][ C1] rht_deferred_worker+0x473/0x2090 [ 617.888676][ C1] ? lock_acquire+0x115/0x350 [ 617.893389][ C1] ? rcu_is_watching+0x16/0xb0 [ 617.898212][ C1] ? process_scheduled_works+0x97a/0x1630 [ 617.903982][ C1] process_scheduled_works+0xc3d/0x1630 [ 617.909625][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 617.915639][ C1] ? assign_work+0x3cf/0x5d0 [ 617.920264][ C1] worker_thread+0xa47/0xfb0 [ 617.924910][ C1] ? __kthread_parkme+0x71/0x1f0 [ 617.929880][ C1] kthread+0x38b/0x480 [ 617.933969][ C1] ? __pfx_worker_thread+0x10/0x10 [ 617.939110][ C1] ? __pfx_kthread+0x10/0x10 [ 617.943726][ C1] ret_from_fork+0x514/0xb70 [ 617.948384][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 617.953518][ C1] ? __switch_to+0xc78/0x1410 [ 617.958235][ C1] ? __pfx_kthread+0x10/0x10 [ 617.962845][ C1] ret_from_fork_asm+0x1a/0x30 [ 617.967645][ C1] [ 617.970674][ C1] rcu: rcu_preempt kthread starved for 998 jiffies! g91213 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 617.981536][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 617.991518][ C1] rcu: RCU grace-period kthread stack dump: [ 617.997414][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 618.010930][ C1] Call Trace: [ 618.014223][ C1] [ 618.017172][ C1] __schedule+0x17dd/0x5830 [ 618.021698][ C1] ? __lock_acquire+0x747/0x2de0 [ 618.026763][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 618.031925][ C1] ? __pfx___schedule+0x10/0x10 [ 618.036801][ C1] ? lock_acquire+0x115/0x350 [ 618.041519][ C1] ? schedule+0x90/0x2b0 [ 618.045790][ C1] schedule+0x164/0x2b0 [ 618.049975][ C1] schedule_timeout+0x152/0x2c0 [ 618.054939][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 618.060344][ C1] ? __pfx_process_timeout+0x10/0x10 [ 618.065660][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 618.071490][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 618.077069][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 618.082663][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 618.087571][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 618.093763][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 618.099117][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 618.104618][ C1] rcu_gp_kthread+0x9c/0x340 [ 618.109250][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 618.114481][ C1] ? __kthread_parkme+0x71/0x1f0 [ 618.119533][ C1] ? __kthread_parkme+0x199/0x1f0 [ 618.124587][ C1] kthread+0x38b/0x480 [ 618.128694][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 618.133919][ C1] ? __pfx_kthread+0x10/0x10 [ 618.138624][ C1] ret_from_fork+0x514/0xb70 [ 618.143244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 618.148377][ C1] ? __switch_to+0xc78/0x1410 [ 618.153171][ C1] ? __pfx_kthread+0x10/0x10 [ 618.157788][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.162592][ C1] [ 618.165621][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 618.171963][ C1] Sending NMI from CPU 1 to CPUs 0: [ 618.177194][ C0] NMI backtrace for cpu 0 [ 618.177213][ C0] CPU: 0 UID: 0 PID: 13048 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 618.177236][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 618.177249][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 618.177398][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 618.177439][ C0] Code: 01 10 4a 89 74 01 18 4a 89 44 01 20 e9 91 ae 3c 0a cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 18 f5 f6 12 65 48 8b 0d 18 f5 f6 12 f7 c1 00 01 00 ff [ 618.177455][ C0] RSP: 0000:ffffc90000006ba8 EFLAGS: 00000046 [ 618.177472][ C0] RAX: ffffffff8a06bfb8 RBX: ffffffff8a06bf88 RCX: ffff888066b08000 [ 618.177487][ C0] RDX: 00000000105209fd RSI: 0000000000000001 RDI: 0000000000000000 [ 618.177499][ C0] RBP: 0000000000000001 R08: ffffffff8a06bf88 R09: 0000000000000001 [ 618.177513][ C0] R10: dffffc0000000000 R11: ffffed10058c8a56 R12: ffff888026baa000 [ 618.177527][ C0] R13: ffff88802c645000 R14: dffffc0000000000 R15: ffff88802c645340 [ 618.177543][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 618.177559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.177573][ C0] CR2: 00007fffca7af768 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 618.177590][ C0] Call Trace: [ 618.177597][ C0] [ 618.177604][ C0] advance_sched+0xa18/0xc80 [ 618.177724][ C0] ? __pfx_advance_sched+0x10/0x10 [ 618.177753][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 618.177788][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 618.177829][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 618.177859][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 618.177882][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.177904][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 618.177929][ C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 28 fa f6 12 65 48 8b 15 28 fa f6 12 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 [ 618.177945][ C0] RSP: 0000:ffffc90000006f78 EFLAGS: 00000246 [ 618.177961][ C0] RAX: ffffffff89ccfaf1 RBX: 0000000000000001 RCX: ffff888066b08000 [ 618.177975][ C0] RDX: 8000000000000301 RSI: 0000000000000100 RDI: 0000000000000000 [ 618.177988][ C0] RBP: ffffc90000007230 R08: 0000000000000100 R09: 0000000000000000 [ 618.178001][ C0] R10: ffffc90000007130 R11: fffff52000000e34 R12: dffffc0000000000 [ 618.178016][ C0] R13: ffff88807b627800 R14: ffff88802c95d000 R15: ffff88814affe710 [ 618.178036][ C0] ? __dev_queue_xmit+0x631/0x3920 [ 618.178102][ C0] __dev_queue_xmit+0x631/0x3920 [ 618.178128][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 618.178156][ C0] ? ipv4_synproxy_hook+0x246/0xd00 [ 618.178222][ C0] ? __lock_acquire+0x747/0x2de0 [ 618.178249][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 618.178273][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 618.178339][ C0] ? ip_finish_output2+0x972/0x10b0 [ 618.178412][ C0] ip_finish_output2+0xbda/0x10b0 [ 618.178434][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 618.178462][ C0] ip_output+0x29f/0x450 [ 618.178481][ C0] ? ip_output+0x5a/0x450 [ 618.178500][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 618.178534][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 618.178558][ C0] ? nft_osf_eval+0x514/0x880 [ 618.178613][ C0] ? synproxy_pernet+0x45/0x270 [ 618.178643][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 618.178673][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 618.178701][ C0] ? nf_ip_checksum+0x13c/0x510 [ 618.178754][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 618.178780][ C0] ? __pfx_fl_classify+0x10/0x10 [ 618.178839][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 618.178876][ C0] nft_do_chain+0x48d/0x1b10 [ 618.178938][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 618.178969][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 618.179003][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 618.179043][ C0] nft_do_chain_ipv4+0x195/0x290 [ 618.179119][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 618.179175][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 618.179204][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 618.179233][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 618.179260][ C0] nf_hook_slow+0xc5/0x220 [ 618.179283][ C0] NF_HOOK+0x21f/0x3c0 [ 618.179335][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 618.179361][ C0] ? NF_HOOK+0x9e/0x3c0 [ 618.179391][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 618.179418][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 618.179449][ C0] ? ip_local_deliver+0x113/0x190 [ 618.179477][ C0] NF_HOOK+0x336/0x3c0 [ 618.179503][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 618.179528][ C0] ? NF_HOOK+0x9e/0x3c0 [ 618.179552][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 618.179579][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 618.179604][ C0] ? ip_rcv_core+0x88d/0xd50 [ 618.179632][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 618.179658][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 618.179683][ C0] process_backlog+0xa6b/0x18b0 [ 618.179767][ C0] ? process_backlog+0x3de/0x18b0 [ 618.179806][ C0] __napi_poll+0xaa/0x330 [ 618.179835][ C0] net_rx_action+0x61d/0xf50 [ 618.179872][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 618.179900][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 618.179989][ C0] ? net_tx_action+0x5bb/0xc30 [ 618.180021][ C0] ? net_tx_action+0xbff/0xc30 [ 618.180053][ C0] handle_softirqs+0x265/0x8d0 [ 618.180087][ C0] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 618.180135][ C0] do_softirq+0x77/0xd0 [ 618.180160][ C0] [ 618.180167][ C0] [ 618.180174][ C0] __local_bh_enable_ip+0x100/0x140 [ 618.180201][ C0] cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 618.180231][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 618.180272][ C0] ? _ieee802_11_parse_elems_full+0x2bc/0x4b60 [ 618.180368][ C0] ? cfg80211_inform_bss_data+0x248/0x3be0 [ 618.180393][ C0] cfg80211_inform_bss_data+0x25b/0x3be0 [ 618.180434][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 618.180482][ C0] ? __lock_acquire+0x747/0x2de0 [ 618.180517][ C0] ? cfg80211_defragment_element+0x3e/0x360 [ 618.180546][ C0] cfg80211_inform_bss_frame_data+0x51a/0xae0 [ 618.180577][ C0] ieee80211_bss_info_update+0x772/0xa30 [ 618.180612][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 618.180627][ C0] ? sta_info_get+0x4f/0x300 [ 618.180685][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 618.180734][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ce1/0x2c40 [ 618.180761][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 618.180796][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 618.180817][ C0] ? __lock_acquire+0x747/0x2de0 [ 618.180841][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 618.180878][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.180899][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 618.180930][ C0] ? kcov_remote_start+0x1a6/0x7e0 [ 618.180962][ C0] ieee80211_iface_work+0x769/0xfa0 [ 618.181016][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 618.181043][ C0] ? process_scheduled_works+0x97a/0x1630 [ 618.181072][ C0] process_scheduled_works+0xc3d/0x1630 [ 618.181123][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.181156][ C0] ? assign_work+0x3cf/0x5d0 [ 618.181191][ C0] worker_thread+0xa47/0xfb0 [ 618.181240][ C0] kthread+0x38b/0x480 [ 618.181262][ C0] ? __pfx_worker_thread+0x10/0x10 [ 618.181290][ C0] ? __pfx_kthread+0x10/0x10 [ 618.181313][ C0] ret_from_fork+0x514/0xb70 [ 618.181334][ C0] ? save_fpregs_to_fpstate+0x176/0x200 [ 618.181368][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 618.181390][ C0] ? __switch_to+0xc78/0x1410 [ 618.181422][ C0] ? __pfx_kthread+0x10/0x10 [ 618.181444][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.181477][ C0]