last executing test programs: 9.316005063s ago: executing program 1 (id=9832): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000046c0012800b00010062726964676500005c00028008000500010000000c002e00feff000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 8.959045789s ago: executing program 1 (id=9835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="170900000000ffdbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900e0000002"], 0x44}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="170900000000ffdbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900e0000002"], 0x44}}, 0x4) (async) 8.752893804s ago: executing program 1 (id=9838): r0 = socket$alg(0x26, 0x5, 0x0) (async) close(0x3) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000400)=0xe, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x57}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) (async) r8 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000300000001000084008000000400000001000000000000810030615f61612e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f0000003d00)={&(0x7f00000017c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003c00)=[{0x0}, {&(0x7f0000001840)="1e19d3", 0x3}], 0x2}, 0x0) 7.400835337s ago: executing program 1 (id=9846): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x94, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) 7.161914534s ago: executing program 1 (id=9848): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x201, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x200a}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) close(r2) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r7, 0x0, 0x4804) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x100d0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0100001900010027bd7000ffdbdf25fe880000000000000000000000000001ac1414bb0000000000000000000000004e200000f7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f8ffffffffffffff0000000000000000ffffffffffffffff09000000000000000000000000000000000f000000000000000000000000000000000000000000000300000000000000060000190000000080000000000000000000000000000000fcffffff00000000000003000000000044010500fc000000a60000000000000000000004000000003c00000700000000e000000100000002000000000000d00b000000000000fe8000000000000000000000000000bb00000000320000000a000000ffffffff000000000000000000000000fdffffff010000000008000000080000ffffffff"], 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x4048000) 6.594047778s ago: executing program 1 (id=9853): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="01051c001000140006004500002d0000000040119078ac140002ac14000112344e20000290780000800000a497aaf51b06323a78cb2ff66a13efb01d371e2a963784ffa00030287ec625d1d47e5207ecb8bb2a0d90b24a1ad21371ce135662928d942204ac4f8b59"], 0x37) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket$inet6(0xa, 0x3, 0xff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) 5.445535805s ago: executing program 4 (id=9863): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r0, r3, 0x0, 0x9cba) 5.153549987s ago: executing program 4 (id=9864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', 0x0}) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0x8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffff00", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000010000009111b2000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x7}}]}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@private2}, &(0x7f0000000140)=0x14) close(0x3) 4.749321918s ago: executing program 2 (id=9866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000040000701feffffff00000000027c0000040042800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000040000701feffffff00000000027c0000040042800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) (async) 4.520816324s ago: executing program 4 (id=9867): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x24060400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) listen(r0, 0x0) unshare(0x48000000) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x20000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500000000000000000000000000000000000000ca6de2b0bf137e3a3d49dcf29a8c3355323d245a53d4964e320bb0aee8b36c27fa75b0694a7e4f8af26d16982792726504387d727fc4245ab2e393e156965e43aa82407e2376ce4e1ed066d6576cb31f6cd97a914c7f7c4541e9d3f5950258261716a1903fb654eab92ccdc84899ae2dc1665abef0e813195bbb321a31cb00"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0, 0x0, 0x10}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) 4.404571532s ago: executing program 2 (id=9868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="3c00238005000500"], 0x6c}, 0x1, 0x0, 0x0, 0x85}, 0x2004c850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0xd}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x840) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000200040000000030000007a000000", @ANYRES32=0x0, @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYRES16=r2, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000000000000000144fc1e0b26d187e572c61695070cd4ddbccd96ad6a469bc40c0d764c1ca343a1afd854cf56db85db406f1897419f940f5ec92a61104b5470dfa5cc6008c9f990a8af00eaad3b7cd0f8e0a62d37da236acdcb122924cb66b902146712fa5a6278c58ba15812b432af59328bae3bd38135f2bae7be212dd266b5fa95fd3cef9f5bd6aa995bbb62b4e96dd8db3a864e0a46f770d41ea687d5a79fe89a41917133495b5657a4d8edf76238077bc3c2212e2978e7245dca2db20497e88c353eff20f111662d0de50a0c68d1f6d867ed34f863d003ea99f229079706e263eb839b250057ce97cd2"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ed29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004b0013000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r9, 0x1, 0x10}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff800, 0x2}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) socket(0x400000000010, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 4.357390084s ago: executing program 0 (id=9869): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000001780)={&(0x7f0000000140)={0x1d, r5, 0x2, {0x0, 0xf0, 0x1}}, 0x18, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.808533312s ago: executing program 3 (id=9870): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) 3.584066725s ago: executing program 3 (id=9871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "b36819df", "4008000000008700"}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1213}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10b7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4080) close(0x3) 3.266938602s ago: executing program 3 (id=9872): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff033168440372b89e14f00800545e414debf3fe1ee6fc6b621fa99c3e227e5a03", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) close(0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0xa, 0xf8, 0x4, 0x10, @remote, @local, 0x80, 0x1, 0x100}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030400000000000000000000000089718aac7f32c02b604362c571208646c394a02b2e7f", @ANYRES32=r3, @ANYBLOB="0000000040000200240012800b00010067656e65766500001400028005000a00010000000500090001000000"], 0x44}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'pim6reg\x00', 0xbb00}) 3.143380904s ago: executing program 0 (id=9873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x5, &(0x7f0000001480)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x5}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffd, 0x5, 0x6, 0x9, 0x9, 0x8}, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40000342) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x8000) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r6, &(0x7f000000ca80)=[{{&(0x7f0000000000)=@ieee802154, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)="501d63b2dba6003c4fe872b183cf3c2a2fc84d2245521158619267c6ef2234eaab9fdc96376f0a78b8561a6603f87fbd061a58d9225d48b1cc892913a45c778eb39a38d529b1a28c7183e8c7e52951792f13711af95efbd8b00a2731", 0x5c}, {&(0x7f0000000640)="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", 0x57e}], 0x2}}], 0x2, 0x80) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES8=r7, @ANYRES32=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000840) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2.920151307s ago: executing program 3 (id=9874): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x605, 0x70bd25, 0x83, {0x0, 0x0, 0x0, r1, 0x1001}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6bbaf}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.561518259s ago: executing program 3 (id=9875): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1a, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @call={0x85, 0x0, 0x0, 0x15}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x5, 0xffffff8a, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe3, 0xb4, &(0x7f0000000280)="09841d4a2e2693a21b1ca7b3a180c05c4498af427fea5feb077fadd4f5113668304c22721f0e86ce74ccf477f721eaf5988e4ed9404830a4a1c6fefb9fb8d1ab7a428866fd4514f5872e3cb8277acc2674a3bfec20ccd6be9e0d675b675ab02c8d6d646c729679876f1f467481d227526ba89a36ebdf0c9ae1699bb2668c0be2fd4b5d5cd197cd5894dbe5b99e7b582474bd41b016f749dee5e31ce157868ed66e0dd5471cb152c1bf44eb9472a0721179cf321d091bfdf99c160b26774c7d7b1020ffe2e14c56629ed774ad6a52446da02fb32ea56a5b075b6a4aea2ad7ed7d33a9aa", &(0x7f0000000380)=""/180, 0x200, 0x0, 0x14, 0xbf, &(0x7f0000000440)="376843a92d65901ba6eda698ab4647a5c56eef2f", &(0x7f0000000480)="f7d0db29823bc199b1485f5a62b7131dc2980a003818abf04ff5b372fd03f489bd80566f2b1269476ccc5de7a947cb9621c71a72cb16cf08aeb34f6e49ddd4a58fd396317e4bc1f75c5e357873d880e2e5071cf1c46bdff5f22c7c14e91b1faad135127d9fe5ae547a87382b8ca1171a248b49f434f924f97317bcdf48a0ce56a2af0c3faa17f76bec8a99b09f40b78f2c237fb3334d5c8cb02fe56a0713557b42e541045697457c8fb86f133bb02cc15850daee2005c0eb6e07e61ca3ab52", 0x5, 0x0, 0x5}, 0x50) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000005c0)={@any, 0x5}) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000600)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000780)={r0, &(0x7f0000000680)='syzkaller\x00', 0x2182, &(0x7f00000006c0)={@_ha_fsid={[0x80, 0xe]}, {0x4, 0x7f, 0x9, 0x8}}, 0x0, &(0x7f0000000700), &(0x7f0000000740)=0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x2a, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x3, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x5, 0x89, &(0x7f0000000980)=""/137, 0x40f00, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x3, 0x80000000, 0x10000}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x1, 0x5, 0x9, 0x1}], 0x10, 0x3960}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x2000, 0x800, 0x9, 0x50200, r2, 0xbaa2, '\x00', 0x0, r3, 0x3, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) (async) r6 = socket$inet(0x2, 0x5, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000d00)={0x0, 0xbaa}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000d80)={r7, 0x0, 0x1}, 0x8) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000dc0)=0xffffffffffffffff) connect$llc(r3, &(0x7f0000000e00)={0x1a, 0x337, 0x8, 0x1, 0x0, 0x6, @remote}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000e40)={r7, 0x3a7b}, 0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000e80)={r7, 0x4}, &(0x7f0000000ec0)=0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x15500040}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x80d4) (async) ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f0000001080)) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xe0, r10, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4c}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008000}, 0x200060c5) (async) recvmsg$can_raw(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/21, 0x15}, 0x2040) syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001400)={r7, 0x2c, &(0x7f00000013c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}]}, &(0x7f0000001440)=0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r3) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r11, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) 2.425208375s ago: executing program 2 (id=9876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001001e1c00000c000a80040001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) close(r3) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffb, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaac5ff08004700103000aa0703e444049f01000058df0cfd8600000000004c7400000000000000008c8d7d09cfe459ab00004cd4d230b87ec820af0000000000000000", @ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES32=r3], 0x0) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1f4ffffffffff06010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000007ee6632baca2577f677972", @ANYRES16=r10, @ANYRES64], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000001e0000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010040"], 0x12) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) 1.712260539s ago: executing program 2 (id=9877): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a0800000000080041007278650014"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20040000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001180)={'wg1\x00', 0x0}) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x151, 0x151, 0x3, [@enum64={0x6, 0xa, 0x0, 0x13, 0x1, 0x2, [{0xe, 0x2, 0x1e6}, {0xa}, {0xa, 0x6, 0xdd61}, {0x5, 0x4, 0x1}, {0xb, 0x6, 0x80000000}, {0x10, 0x7, 0x1}, {0xf, 0x1, 0x4}, {0xb, 0x80000000, 0x2}, {0x7, 0x4, 0x1}, {0xd, 0x3, 0x7fff}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x2, 0x4}, {0x10, 0x2}]}, @enum64={0xc, 0x3, 0x0, 0x13, 0x0, 0x9, [{0x4, 0x3, 0x7fffffff}, {0x10, 0x2c, 0x28d}, {0x8, 0x0, 0x3}]}, @datasec={0xb, 0xb, 0x0, 0xf, 0x1, [{0x4, 0xfffffff7, 0x3}, {0x1, 0x4c18, 0x6}, {0x1, 0x3ff, 0xc2e}, {0x2, 0xbb1e, 0x6}, {0x2, 0x5, 0x81}, {0x2, 0x6, 0x9}, {0x2, 0x7, 0xc}, {0x3, 0x7, 0x6}, {0x3, 0x10000, 0x6}], '{'}]}, {0x0, [0x30]}}, &(0x7f0000001340)=""/100, 0x16f, 0x64, 0x0, 0x3}, 0x28) (rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x400, 0x0}, 0x8) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) (async, rerun: 32) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0x0, 0x2080, 0x10}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@o_path={&(0x7f0000001640)='./file0\x00', 0x0, 0xdd5e1ba26592f3e0, r2}, 0x18) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) (async, rerun: 64) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0x0, 0xd7, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1f, 0x11, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1b6d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000140)='GPL\x00', 0x2e902d69, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x4c, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000001400)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000001800)=[r7, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000001840)=[{0x0, 0x3, 0x8, 0x2}, {0x5, 0x2, 0x8, 0x4}, {0x4, 0x1, 0xb, 0x2}, {0x5, 0x1, 0x3, 0x7}], 0x10, 0xfffffff7}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180600000000000000000000000000000018110000b388ce039ca6d48f0f4aca72fdad99fc031b7ed76352006c4323fd575379efea5edde691917d0344089e5d94093efb1502ed71eaa01069599e227122aeedfe3f6061e2dcea4011d4221bab48b2f7b7d088267ebb7cd00bc84cc5602e28a2d156a94fe9acfe889ba365b54fe16c01c25e9ee64e0ff03b1d766693acb22391876fc75c47f1fd041fc725d8acb3b8980bdc5a5dafe8de4a101168c4dade6cc67de80e0ee935b2d36ee8803d2a8319df4c0b91951c6a423e53554468", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r15, r1}, 0xc) (async) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r16, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) 1.710481435s ago: executing program 3 (id=9878): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x22, 0x6, 0xfffff06f) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r4, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x2c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xb38a000) 1.586515225s ago: executing program 4 (id=9879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x26, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x4c}, 0x28) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00001a00", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x51) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000680)=[{0x0}, {&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000080)=""/172, 0xac}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/21, 0x15}], 0x5) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104fb2077cfcc912d000000040000095000000000000"], 0x0, 0x5}, 0x94) r5 = socket$inet(0x2, 0xa, 0x780a) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000140)=0x8, 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x5a54, 0x14) sendto$inet(r6, &(0x7f00000002c0)="21749c8ee03c258642e9ba06cc3b621b783d60625164746aaa4a1e4eb365b6881a412dc1bd8091e3edcf1eea3e8d0f71227237d212f835", 0x37, 0x448c4, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/125, 0x7d}, 0x7ff}], 0x1, 0x2101, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYRESDEC=r3], 0x54}}, 0x0) 1.469708509s ago: executing program 0 (id=9880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 955.923826ms ago: executing program 2 (id=9881): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r7, &(0x7f0000000680), &(0x7f0000000780)=@tcp6=r5, 0x1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) write(r4, &(0x7f0000000140)="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", 0xfc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="c26d6d6d9d01954b", 0x8}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x48845) recvmmsg$unix(r8, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12102, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) 952.916851ms ago: executing program 0 (id=9882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006a000000850000005000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000020000081117000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 649.616804ms ago: executing program 4 (id=9883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0x80000000000ffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x4, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x80, 0xd0}, [@NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x55}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x44) 573.087934ms ago: executing program 0 (id=9884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) write$cgroup_devices(r4, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) 564.090528ms ago: executing program 2 (id=9885): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x1, 0xa8e9, 0x5, 0x10001}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, '(h'}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x20040084) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) close(r1) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b160000000000000000020000081c000480180001800d00010073796e70726f787900000000040002800900010073797a300000000013ea7d0073797a3200000000140000001100010000000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendfile(r6, r7, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="7961fdff0300000000007e0000000c0099006c9101001400000047c9488342b0134dc5f796bd14863a029a7f75bb0aa228ae1717356fcb85afdc6fbf6b6ccc0374fc11b982b1bdbe69b19a04e721ce97d51b6e623e7130df461de9d134e974f1ba2ab653d20eb9d43bf59ed2e6264ce1917064be3a19b1ed864dffc9d063b260516cea334e54e001700308bd8118be586cbde0e5c5f873911d64b2458cd122f4fcee260713ef804212195a7bb9"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.097229ms ago: executing program 4 (id=9886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000240)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) recvmmsg(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0), 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000380)=""/4, 0x4}], 0x2, &(0x7f0000000400)=""/61, 0x3d}, 0x7}], 0x1, 0x2, &(0x7f0000000480)={0x0, 0x989680}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd7000fcff6dff310000000800030033"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 0s ago: executing program 0 (id=9887): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=r2) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x9, 0x8, 0xc, @loopback, @mcast2, 0x8000, 0x7, 0x4}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000010c0)=""/4096, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {0x6, 0x5}, {0xfffa, 0xffff}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xac}]}, 0x34}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="cf97dd9eecbfd1060b963fa691ffc0c45b8ddc1f7153aea59544a4fbe892a8858c797807f924474377bc80d0e857e152af0a8dc88974af367cb71afd540f1d31ea0e2ca72f60b2df5aa48bc78c82a4127af5ad564c74f0e2805c69f0b2285f93832acde90d19cea19ca5ca83c9a56095149adc6c11edfd333ca9b0413f71ff199268eee90c9b602e8f9977631380b6c64426ec3477f98f4a0b33fdcde157262b2657a47f5cae21e2a884b731d723ce00923e8c91cdc8fbded5b1fbde17c066ca58689ffd418bf336257e85c68a2486db3c2349b51e57bcb492a53203f40c528c0ed810c6e193e346c6a8376afe50b146bfd8ec90aa295afa46", @ANYRES16=r5, @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4048810}, 0x20000004) kernel console output (not intermixed with test programs): 1485.881505][T20277] Bluetooth: hci4: link tx timeout [ 1485.887418][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.906247][T20277] Bluetooth: hci4: link tx timeout [ 1485.906265][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.917291][T20277] Bluetooth: hci4: link tx timeout [ 1485.917311][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.920625][T20277] Bluetooth: hci4: link tx timeout [ 1485.920668][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.920966][T20277] Bluetooth: hci4: link tx timeout [ 1485.920992][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.921423][T20277] Bluetooth: hci4: link tx timeout [ 1485.921458][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.928154][T20277] Bluetooth: hci4: link tx timeout [ 1485.928203][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.929847][T20277] Bluetooth: hci4: link tx timeout [ 1485.929898][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.934048][T20277] Bluetooth: hci4: link tx timeout [ 1485.934091][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.940305][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1485.950042][T20277] Bluetooth: hci4: link tx timeout [ 1485.950094][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.959172][T11636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1485.970283][T20277] Bluetooth: hci4: link tx timeout [ 1485.970332][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.980241][T20277] Bluetooth: hci4: link tx timeout [ 1485.980301][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.995497][T20277] Bluetooth: hci4: link tx timeout [ 1485.995558][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.996646][T20277] Bluetooth: hci4: link tx timeout [ 1485.996694][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1485.998579][T20277] Bluetooth: hci4: link tx timeout [ 1485.998621][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.003880][T20277] Bluetooth: hci4: link tx timeout [ 1486.003921][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.040615][T20277] Bluetooth: hci4: link tx timeout [ 1486.040635][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.056736][T20277] Bluetooth: hci4: link tx timeout [ 1486.056806][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.058087][T20277] Bluetooth: hci4: link tx timeout [ 1486.058129][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.059808][T20277] Bluetooth: hci4: link tx timeout [ 1486.059837][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.061047][T20277] Bluetooth: hci4: link tx timeout [ 1486.061082][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.064831][T20277] Bluetooth: hci4: link tx timeout [ 1486.064874][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.100538][T20277] Bluetooth: hci4: link tx timeout [ 1486.100597][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.131363][T20277] Bluetooth: hci4: link tx timeout [ 1486.131418][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.156755][T20277] Bluetooth: hci4: link tx timeout [ 1486.156818][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.208932][T20277] Bluetooth: hci4: link tx timeout [ 1486.208987][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.244621][T20277] Bluetooth: hci4: link tx timeout [ 1486.244680][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.295967][T20277] Bluetooth: hci4: link tx timeout [ 1486.296016][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.305902][T20277] Bluetooth: hci4: link tx timeout [ 1486.305983][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.346035][T20277] Bluetooth: hci4: link tx timeout [ 1486.346078][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.346443][T20277] Bluetooth: hci4: link tx timeout [ 1486.346463][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.373711][T20277] Bluetooth: hci4: link tx timeout [ 1486.373756][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.373783][T20277] Bluetooth: hci4: link tx timeout [ 1486.373918][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.380565][T20277] Bluetooth: hci4: link tx timeout [ 1486.380614][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.417471][T20277] Bluetooth: hci4: link tx timeout [ 1486.417517][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.417544][T20277] Bluetooth: hci4: link tx timeout [ 1486.417599][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.445001][T20277] Bluetooth: hci4: link tx timeout [ 1486.445044][T20277] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1486.460593][T11644] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1486.625435][T11647] validate_nla: 24 callbacks suppressed [ 1486.631154][T11647] netlink: 'syz.3.8656': attribute type 4 has an invalid length. [ 1486.861841][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1487.113858][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1487.127273][T11656] bridge8: entered promiscuous mode [ 1487.127322][T11656] bridge8: entered allmulticast mode [ 1487.166268][T11656] team0: Port device bridge8 added [ 1487.184341][T11656] bridge0: port 3(team0) entered blocking state [ 1487.184458][T11656] bridge0: port 3(team0) entered disabled state [ 1487.184644][T11656] team0: entered allmulticast mode [ 1487.184664][T11656] team_slave_0: entered allmulticast mode [ 1487.184768][T11656] team_slave_1: entered allmulticast mode [ 1487.227049][T11656] team0: entered promiscuous mode [ 1487.232425][T11656] team_slave_0: entered promiscuous mode [ 1487.232627][T11656] team_slave_1: entered promiscuous mode [ 1487.414271][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8663'. [ 1487.521902][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8664'. [ 1487.567942][T11671] bridge11: port 1(veth11) entered blocking state [ 1487.577108][T11671] bridge11: port 1(veth11) entered disabled state [ 1487.577312][T11671] veth11: entered allmulticast mode [ 1487.594024][T11671] veth11: entered promiscuous mode [ 1487.780721][T11677] bridge11: port 2(veth13) entered blocking state [ 1487.789903][T11677] bridge11: port 2(veth13) entered disabled state [ 1487.798571][T11677] veth13: entered allmulticast mode [ 1487.812846][T11677] veth13: entered promiscuous mode [ 1487.901826][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1487.983529][T20277] Bluetooth: hci4: command 0x0406 tx timeout [ 1488.047701][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8670'. [ 1488.565172][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8674'. [ 1488.578983][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8675'. [ 1488.717717][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1488.942924][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1488.968881][T11726] syzkaller0: entered promiscuous mode [ 1488.975853][T11726] syzkaller0: entered allmulticast mode [ 1489.061225][T11726] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8677'. [ 1489.456867][T11741] netlink: 'syz.3.8681': attribute type 1 has an invalid length. [ 1489.743223][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1489.859770][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8685'. [ 1489.949290][T11763] x_tables: unsorted entry at hook 2 [ 1489.981697][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1490.005329][T11765] netlink: 'syz.3.8686': attribute type 32 has an invalid length. [ 1491.019790][T11801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8694'. [ 1491.029183][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1491.549168][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8696'. [ 1491.577277][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'. [ 1491.577332][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8697'. [ 1491.577423][T11819] netlink: 'syz.3.8697': attribute type 6 has an invalid length. [ 1491.577481][T11819] netlink: 'syz.3.8697': attribute type 5 has an invalid length. [ 1491.735642][T30479] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.736158][T30479] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.759644][T30479] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.759720][T30479] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.061831][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1492.686770][T11837] netlink: 'syz.4.8701': attribute type 21 has an invalid length. [ 1492.686814][T11837] IPv6: NLM_F_CREATE should be specified when creating new route [ 1492.686903][T11837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1492.686916][T11837] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.686951][T11837] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.686973][T11837] IPv6: NLM_F_CREATE should be set when creating new route [ 1493.101941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1493.830432][T11879] __nla_validate_parse: 5 callbacks suppressed [ 1493.830489][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1493.855374][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1493.867436][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1493.868289][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8712'. [ 1493.987922][T11885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1494.090463][T11880] veth0_virt_wifi: entered allmulticast mode [ 1494.141837][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1494.279724][T11891] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1494.958210][T11921] syzkaller0: entered promiscuous mode [ 1494.967456][T11921] tipc: Enabling of bearer rejected, already enabled [ 1495.182565][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1495.219746][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1495.357737][T11936] netlink: 'syz.3.8732': attribute type 39 has an invalid length. [ 1495.450524][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8733'. [ 1495.712236][T11949] netlink: 'syz.0.8737': attribute type 4 has an invalid length. [ 1495.727056][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8737'. [ 1495.747208][T11949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8737'. [ 1495.941394][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8741'. [ 1496.221789][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1496.308980][T11978] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1496.315737][T11982] nft_compat: unsupported protocol 0 [ 1496.536452][T11987] netlink: 'syz.4.8749': attribute type 26 has an invalid length. [ 1496.759573][T11994] tipc: Enabling of bearer rejected, already enabled [ 1496.798850][T11994] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1496.833236][T11994] syzkaller0: mtu less than device minimum [ 1496.839801][T11994] xt_REDIRECT: bad MAP_IPS. [ 1497.261788][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1497.283851][T12011] syzkaller0: left promiscuous mode [ 1497.283893][T12011] syzkaller0: left allmulticast mode [ 1497.835936][ T31] audit: type=1800 audit(1788757174.569:29): pid=12037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8764" name=CB dev="tmpfs" ino=2300 res=0 errno=0 [ 1497.898902][T12040] netlink: 'syz.3.8765': attribute type 10 has an invalid length. [ 1497.963435][T12040] team0: Port device dummy0 added [ 1498.085461][T12052] openvswitch: netlink: Flow key attr not present in new flow. [ 1498.301972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1498.661043][T12075] openvswitch: netlink: Message has 8 unknown bytes. [ 1498.976932][T12093] team_slave_0: entered allmulticast mode [ 1498.988851][T12093] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 1499.122433][T12101] netlink: 'syz.2.8779': attribute type 49 has an invalid length. [ 1499.341805][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1499.660270][T12116] __nla_validate_parse: 20 callbacks suppressed [ 1499.661193][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8783'. [ 1500.136607][T12120] veth1_to_bond: entered allmulticast mode [ 1500.142137][T12120] veth1_to_bond: entered promiscuous mode [ 1500.162574][T12125] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1500.174085][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1500.291061][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8789'. [ 1500.328502][T12120] veth1_to_bond (unregistering): left promiscuous mode [ 1500.336049][T12120] veth1_to_bond (unregistering): left allmulticast mode [ 1500.381724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1500.417754][T32137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1500.435005][T32137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1500.450982][T32137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1500.463845][T32137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1500.471760][T32137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1500.807573][T12130] lo speed is unknown, defaulting to 1000 [ 1501.421796][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1501.941663][T12152] syzkaller0: entered promiscuous mode [ 1501.948181][T12152] syzkaller0: entered allmulticast mode [ 1501.958481][T12172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.984326][T12130] lo speed is unknown, defaulting to 1000 [ 1502.072902][T20277] Bluetooth: hci1: command 0x0405 tx timeout [ 1502.544011][T31370] Bluetooth: hci0: command tx timeout [ 1502.630420][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1502.639916][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1504.626881][T31370] Bluetooth: hci0: command tx timeout [ 1506.617298][T16671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1506.617388][T16671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.689503][T12136] lo speed is unknown, defaulting to 1000 [ 1506.702162][T31370] Bluetooth: hci0: command tx timeout [ 1506.726716][T12180] dvmrp6: entered allmulticast mode [ 1507.058104][T16671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.058171][T16671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.400772][T12136] lo speed is unknown, defaulting to 1000 [ 1507.430124][T12205] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1507.521221][T16671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.537541][T16671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.577125][T12207] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8800'. [ 1508.018534][T16671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.018604][T16671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.240555][T12216] syzkaller0: entered promiscuous mode [ 1508.240600][T12216] syzkaller0: entered allmulticast mode [ 1508.479136][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1508.567848][T30486] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.636990][T12224] vlan9: entered promiscuous mode [ 1508.637060][T12224] 0ªî{X¹¦: entered promiscuous mode [ 1508.769752][T28892] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.782621][T28892] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.794914][T31370] Bluetooth: hci0: command tx timeout [ 1509.003939][T16671] veth13: left allmulticast mode [ 1509.003993][T16671] veth13: left promiscuous mode [ 1509.005004][T16671] bridge11: port 2(veth13) entered disabled state [ 1509.043861][T16671] veth11: left allmulticast mode [ 1509.043913][T16671] veth11: left promiscuous mode [ 1509.044149][T16671] bridge11: port 1(veth11) entered disabled state [ 1509.078411][T16671] lo: left allmulticast mode [ 1509.570235][T16671] bond8 (unregistering): (slave bridge4): Releasing active interface [ 1509.604039][T16671] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 1509.613443][T16671] bond9 (unregistering): (slave bridge6): the permanent HWaddr of slave - be:b6:3e:b3:dc:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1509.637978][T16671] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 1509.698396][T16671] bond0 (unregistering): Released all slaves [ 1509.712282][T16671] bond1 (unregistering): Released all slaves [ 1509.733911][T16671] bond2 (unregistering): Released all slaves [ 1509.761481][T16671] bond3 (unregistering): Released all slaves [ 1509.777498][T16671] bond4 (unregistering): Released all slaves [ 1509.807205][T16671] bond5 (unregistering): (slave veth3): Releasing active interface [ 1509.820552][T16671] bond5 (unregistering): Released all slaves [ 1509.840216][T16671] bond6 (unregistering): Released all slaves [ 1509.879487][T16671] bond7 (unregistering): Released all slaves [ 1509.919290][T16671] bond8 (unregistering): Released all slaves [ 1509.946870][T16671] bond9 (unregistering): Released all slaves [ 1509.971174][T16671] bond10 (unregistering): Released all slaves [ 1509.994110][T16671] bond11 (unregistering): Released all slaves [ 1510.021229][T16671] bond12 (unregistering): Released all slaves [ 1510.039590][T16671] bond13 (unregistering): Released all slaves [ 1510.102059][T24720] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.392757][T16671] tipc: Disabling bearer [ 1510.392909][T16671] tipc: Disabling bearer [ 1510.482652][T16671] tipc: Disabling bearer [ 1510.527722][T16671] tipc: Left network mode [ 1511.181280][T12280] netlink: 'syz.3.8815': attribute type 13 has an invalid length. [ 1511.850080][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8812'. [ 1511.857659][T12263] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1512.218700][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.230386][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.240056][T12136] bridge_slave_0: entered allmulticast mode [ 1512.256149][T12136] bridge_slave_0: entered promiscuous mode [ 1512.308089][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.319079][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.326642][T12136] bridge_slave_1: entered allmulticast mode [ 1512.335060][T12136] bridge_slave_1: entered promiscuous mode [ 1512.483668][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.508946][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.777187][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1512.959389][T12136] team0: Port device team_slave_0 added [ 1513.007575][T12136] team0: Port device team_slave_1 added [ 1513.233231][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.233274][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.233305][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.267357][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.267396][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.267467][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.386991][ T31] audit: type=1800 audit(1788757190.119:30): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8823" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2357 res=0 errno=0 [ 1513.500741][T12345] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8823'. [ 1513.549887][T12340] SET target dimension over the limit! [ 1513.576154][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8821'. [ 1513.576225][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8821'. [ 1514.059519][T12361] SET target dimension over the limit! [ 1514.440703][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8826'. [ 1515.057889][T12341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.059729][T12341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.961173][T12341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.044975][T12341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.095448][T12374] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1517.095519][T12374] bond_slave_0: entered promiscuous mode [ 1517.127047][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1517.133838][T24719] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.133936][T24719] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.134072][T24719] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.134158][T24719] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.134264][T24719] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.134350][T24719] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.134460][T24719] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.134525][T24719] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.416787][T12136] hsr_slave_0: entered promiscuous mode [ 1517.419563][T12136] hsr_slave_1: entered promiscuous mode [ 1517.420331][T12136] debugfs: 'hsr0' already exists in 'hsr' [ 1517.420358][T12136] Cannot create hsr debugfs directory [ 1518.184073][T12395] lo speed is unknown, defaulting to 1000 [ 1518.305743][T16671] hsr_slave_0: left promiscuous mode [ 1518.353837][T16671] veth1_macvtap: left promiscuous mode [ 1518.353904][T16671] veth0_macvtap: left promiscuous mode [ 1518.375959][T16671] veth1_vlan: left promiscuous mode [ 1518.376045][T16671] veth0_vlan: left promiscuous mode [ 1519.025881][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1520.277837][T12427] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8834'. [ 1520.369898][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1520.440456][T12395] lo speed is unknown, defaulting to 1000 [ 1521.203417][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1521.276124][T12487] netlink: 'syz.3.8842': attribute type 1 has an invalid length. [ 1521.276170][T12487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8842'. [ 1521.307446][T12478] bond6: option lacp_active: invalid value (5) [ 1521.338407][T12478] bond6 (unregistering): Released all slaves [ 1521.909840][T16671] IPVS: stop unused estimator thread 0... [ 1522.124277][T12136] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.605356][T12136] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.883060][T12136] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.298748][T12136] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.423517][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8851'. [ 1523.656233][T12540] hsr_slave_1 (unregistering): left promiscuous mode [ 1524.169779][T12589] netlink: 'syz.1.8855': attribute type 10 has an invalid length. [ 1524.382789][T12598] IPVS: Error connecting to the multicast addr [ 1524.698427][T12136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1524.850952][T12136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1524.871870][T12136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1524.908270][T12136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1524.916877][T12136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1524.948525][T12136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1524.959026][T12136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1524.995586][T12136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1525.000878][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8860'. [ 1525.379978][T12635] netlink: 'syz.1.8863': attribute type 1 has an invalid length. [ 1525.380029][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8863'. [ 1525.424179][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.464998][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.485201][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.485431][T12562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.556470][T30484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.556645][T30484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.353661][T12660] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1526.353719][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1526.353758][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1526.882178][T12681] netlink: 'syz.2.8871': attribute type 23 has an invalid length. [ 1526.910308][T12682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1526.959231][T12682] mac80211_hwsim hwsim90 wlan0: entered promiscuous mode [ 1526.981978][T12682] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1526.999495][T12682] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1527.008908][T12682] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1527.023839][T12682] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1527.240159][T12559] bridge5: port 1(veth7) entered blocking state [ 1527.240308][T12559] bridge5: port 1(veth7) entered forwarding state [ 1527.267598][T12559] bridge5: port 2(veth9) entered blocking state [ 1527.267751][T12559] bridge5: port 2(veth9) entered forwarding state [ 1527.310778][T12582] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1527.339956][T12676] lo speed is unknown, defaulting to 1000 [ 1527.555409][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8871'. [ 1527.555457][T12681] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8871'. [ 1527.555498][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8871'. [ 1527.555521][T12681] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8871'. [ 1527.988451][T12676] lo speed is unknown, defaulting to 1000 [ 1528.082539][T12709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8874'. [ 1528.138900][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.734674][T12136] veth0_vlan: entered promiscuous mode [ 1528.764801][T12136] veth1_vlan: entered promiscuous mode [ 1528.922879][T12742] xt_NETMAP: bad rangesize 37. [ 1528.945204][T12136] veth0_macvtap: entered promiscuous mode [ 1528.966744][T12136] veth1_macvtap: entered promiscuous mode [ 1529.134879][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.158083][T12749] 8021q: VLANs not supported on ip6_vti0 [ 1529.201467][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.224520][T12754] 8021q: VLANs not supported on ip6_vti0 [ 1529.451706][T12559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.451784][T12559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.451904][T12559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.452075][T12559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.803674][ T8022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.803716][ T8022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.031771][T12568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.031810][T12568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.080029][T12769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.293952][T12796] netlink: 'syz.3.8890': attribute type 1 has an invalid length. [ 1530.825675][T12803] netlink: 'syz.4.8892': attribute type 4 has an invalid length. [ 1530.959409][T12810] netlink: 'syz.4.8892': attribute type 4 has an invalid length. [ 1530.986542][T12816] __nla_validate_parse: 3 callbacks suppressed [ 1530.986606][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1530.986635][T12816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1531.671796][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1532.373107][T12859] netlink: 'syz.3.8906': attribute type 4 has an invalid length. [ 1532.373165][T12859] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8906'. [ 1532.929566][T12872] batman_adv: batadv0: Adding interface: wlan1 [ 1532.929611][T12872] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.929645][T12872] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1533.105956][T12878] nbd: couldn't find a device at index 0 [ 1533.423610][T12892] netlink: 'syz.4.8912': attribute type 13 has an invalid length. [ 1533.929771][T12904] batadv_slave_1: entered allmulticast mode [ 1533.956963][T12906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.276975][T12897] batadv_slave_1: left allmulticast mode [ 1534.353484][T12925] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1534.462949][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1534.475717][T12928] netlink: 15 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1534.638422][T12936] veth0: entered promiscuous mode [ 1534.696434][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1534.696503][T12928] netlink: 15 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1535.055666][T12933] veth0: left promiscuous mode [ 1535.269202][T12953] lo speed is unknown, defaulting to 1000 [ 1535.786290][T12967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1536.314717][T12953] lo speed is unknown, defaulting to 1000 [ 1538.491819][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1538.694684][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8939'. [ 1539.179072][T13055] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1539.321205][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1539.485078][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8945'. [ 1539.574895][ T31] audit: type=1800 audit(1788757216.309:31): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8947" name=B702 dev="tmpfs" ino=400 res=0 errno=0 [ 1539.819796][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1539.854341][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1539.963065][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1540.135528][T13098] netlink: 'syz.3.8956': attribute type 1 has an invalid length. [ 1540.200459][T13098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1540.248578][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8952'. [ 1540.277215][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1540.286492][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1540.305429][T13114] netlink: 'syz.3.8956': attribute type 1 has an invalid length. [ 1540.320817][T13101] bond1: (slave gretap1): making interface the new active one [ 1540.333415][T13101] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1540.343076][T13102] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 1540.390206][T13098] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1540.441408][T13098] bond1 (unregistering): Released all slaves [ 1540.556034][T13107] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1540.698220][T13114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1540.743083][T13117] bond1 (unregistering): Released all slaves [ 1540.806322][T13102] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1540.819731][T13122] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1540.963535][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1541.965891][T13162] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1543.644212][T13132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.656555][T13165] __nla_validate_parse: 6 callbacks suppressed [ 1543.656588][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8966'. [ 1545.128198][T13225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8983'. [ 1545.388672][T13234] netlink: 'syz.2.8988': attribute type 13 has an invalid length. [ 1545.388713][T13234] netlink: 'syz.2.8988': attribute type 17 has an invalid length. [ 1545.561656][T13234] gretap0: refused to change device tx_queue_len [ 1545.565708][T13234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1545.568095][T13225] lo speed is unknown, defaulting to 1000 [ 1545.703035][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8990'. [ 1545.712806][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 1546.934309][T13270] netlink: 'syz.1.8993': attribute type 4 has an invalid length. [ 1547.011399][T13225] lo speed is unknown, defaulting to 1000 [ 1547.614814][T13292] erspan1: entered promiscuous mode [ 1547.709801][T13269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.710046][T13284] netlink: 'syz.0.8997': attribute type 1 has an invalid length. [ 1547.710070][T13284] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.8997'. [ 1547.839581][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9001'. [ 1548.265349][T13308] bond6: entered allmulticast mode [ 1548.277628][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1548.364560][T13313] ip6gretap2: entered allmulticast mode [ 1548.370763][T13313] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1548.456979][T13316] tunl0: Caught tx_queue_len zero misconfig [ 1548.546102][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1548.627405][T13331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1548.683049][T13331] bond1: entered promiscuous mode [ 1548.683097][T13331] bond1: entered allmulticast mode [ 1548.683518][T13331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1548.709900][T13334] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.9010'. [ 1548.739433][T13329] netlink: 'syz.0.9009': attribute type 2 has an invalid length. [ 1548.773010][T13329] : entered promiscuous mode [ 1549.006537][T13346] netlink: 'syz.1.9013': attribute type 39 has an invalid length. [ 1549.964076][T13373] lo speed is unknown, defaulting to 1000 [ 1550.100857][ T31] audit: type=1804 audit(1788757226.829:32): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9021" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=1906 res=1 errno=0 [ 1550.124149][ T31] audit: type=1800 audit(1788757226.859:33): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9021" name="cgroup.controllers" dev="tmpfs" ino=1906 res=0 errno=0 [ 1550.164400][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1550.207663][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1551.005564][T13373] lo speed is unknown, defaulting to 1000 [ 1551.148371][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9028'. [ 1551.542842][T13431] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1551.570325][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1551.844714][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.844858][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.844995][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.845104][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.845215][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.845324][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.845446][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.845573][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.863325][T13435] xt_l2tp: wrong L2TP version: 18 [ 1551.863765][T13435] xt_l2tp: wrong L2TP version: 18 [ 1552.214484][T13438] syzkaller0: entered promiscuous mode [ 1552.220534][T13438] syzkaller0: entered allmulticast mode [ 1552.487056][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1552.498580][T13450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1552.498637][T13450] IPv6: NLM_F_CREATE should be set when creating new route [ 1552.498686][T13450] IPv6: NLM_F_CREATE should be set when creating new route [ 1552.709004][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9039'. [ 1552.729309][T13457] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9039'. [ 1552.937570][T13457] bond2: entered promiscuous mode [ 1552.945943][T13457] bond2: entered allmulticast mode [ 1552.959893][T13457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1553.037282][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9041'. [ 1553.521834][T13477] ip6tnl2: entered allmulticast mode [ 1553.554254][T11655] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1553.556987][T11655] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1553.588402][T12575] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1553.662224][T12575] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1553.759105][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.759372][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.783708][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.794853][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.804614][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.814801][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.815042][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.815274][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.815497][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1553.815719][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9044'. [ 1554.072277][T29342] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1555.341331][T13544] sctp: [Deprecated]: syz.4.9057 (pid 13544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1555.341331][T13544] Use struct sctp_sack_info instead [ 1555.613136][T13554] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1555.613188][T13554] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1555.705401][T13566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1555.756578][T13554] bridge6: entered promiscuous mode [ 1556.069465][T13584] netlink: 'syz.2.9068': attribute type 4 has an invalid length. [ 1557.019442][T13621] syzkaller0: entered promiscuous mode [ 1557.019486][T13621] syzkaller0: entered allmulticast mode [ 1557.077378][T13621] netlink: 'syz.3.9074': attribute type 4 has an invalid length. [ 1557.107576][T13621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1557.825983][T13634] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1557.982059][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1558.034380][T13640] dvmrp6: left allmulticast mode [ 1558.409349][T13667] netlink: 'syz.2.9085': attribute type 11 has an invalid length. [ 1558.534412][T13666] lo speed is unknown, defaulting to 1000 [ 1558.655527][T13672] syzkaller0: entered promiscuous mode [ 1558.661586][T13672] syzkaller0: entered allmulticast mode [ 1559.174510][T13683] ip6gre2: entered promiscuous mode [ 1559.239690][T13683] __nla_validate_parse: 13 callbacks suppressed [ 1559.239748][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1559.280416][T13666] lo speed is unknown, defaulting to 1000 [ 1559.302510][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9091'. [ 1559.502429][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1560.180192][T13721] netlink: 'syz.1.9097': attribute type 1 has an invalid length. [ 1560.325074][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1560.358587][T13721] bond16: entered promiscuous mode [ 1560.362993][T13721] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1560.462727][T13726] bond16 (unregistering): Released all slaves [ 1560.725734][ T5276] veth0_macvtap: left promiscuous mode [ 1561.069698][T13749] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1561.110490][T13750] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1561.351311][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9103'. [ 1561.351415][T13758] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1561.469617][T13763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1561.523948][T13763] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9104'. [ 1561.738119][T13757] netlink: 'syz.4.9104': attribute type 11 has an invalid length. [ 1561.738173][T13757] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.9104'. [ 1562.250854][T13792] x_tables: unsorted entry at hook 2 [ 1562.252707][T13790] x_tables: unsorted entry at hook 2 [ 1563.286255][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1563.447691][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9115'. [ 1563.626191][T13810] xt_hashlimit: size too large, truncated to 1048576 [ 1563.770224][T13819] lo speed is unknown, defaulting to 1000 [ 1563.814706][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9118'. [ 1563.814756][T13829] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1564.115908][T13833] tipc: Started in network mode [ 1564.120987][T13833] tipc: Node identity ac14140f, cluster identity 4711 [ 1564.128522][T13833] tipc: New replicast peer: 255.255.255.255 [ 1564.136549][T13833] tipc: Enabled bearer , priority 26 [ 1564.155067][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.294650][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.296564][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.300720][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.301315][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.311178][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.315437][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.325596][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.332086][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.338732][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.339306][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1564.899416][T13857] xt_hashlimit: size too large, truncated to 1048576 [ 1564.956828][T13819] lo speed is unknown, defaulting to 1000 [ 1565.139159][T13864] @0Ù: renamed from bond_slave_1 (while UP) [ 1565.277083][T12386] tipc: Node number set to 2886997007 [ 1566.116774][T13894] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1566.374622][T13910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1566.521823][T13917] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1566.895955][T13930] vxcan0: tx address claim with dlc 1 [ 1567.181690][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1567.289540][T13946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1567.357560][T13947] tipc: Enabling of bearer rejected, failed to enable media [ 1567.478676][T13953] nft_compat: unsupported protocol 0 [ 1567.939746][T13977] Bluetooth: MGMT ver 1.23 [ 1568.397850][T13960] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1568.418948][T13964] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1568.945507][T14013] netlink: 'syz.0.9165': attribute type 1 has an invalid length. [ 1569.491049][T14038] __nla_validate_parse: 26 callbacks suppressed [ 1569.497890][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1569.507729][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1569.524141][T14038] netlink: 'syz.3.9172': attribute type 1 has an invalid length. [ 1569.541455][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1569.662288][T31370] Bluetooth: hci1: command 0x0405 tx timeout [ 1570.081834][T14052] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9174'. [ 1570.123382][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9174'. [ 1570.422124][T14068] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1570.569291][T14068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1570.675630][T14078] netlink: 'syz.4.9179': attribute type 4 has an invalid length. [ 1570.846408][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9183'. [ 1570.879363][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1571.752555][T31370] Bluetooth: hci1: command 0x0405 tx timeout [ 1572.103329][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1572.853570][T14124] tipc: Enabling of bearer rejected, failed to enable media [ 1572.982780][T12566] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.982856][T12566] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.982959][T12566] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.983139][T12566] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.810856][T14147] netlink: 'syz.2.9198': attribute type 14 has an invalid length. [ 1573.897150][T14152] netlink: 'syz.2.9198': attribute type 14 has an invalid length. [ 1575.098673][T14190] __nla_validate_parse: 5 callbacks suppressed [ 1575.098738][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9206'. [ 1575.768899][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9210'. [ 1575.769123][T14210] ovs-system: left promiscuous mode [ 1576.364418][T14235] ip_tables: iptables: counters copy to user failed while replacing table [ 1577.116377][T14250] netlink: 'syz.4.9217': attribute type 16 has an invalid length. [ 1577.116422][T14250] netlink: 'syz.4.9217': attribute type 17 has an invalid length. [ 1577.313079][T14253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9216'. [ 1578.259382][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.259738][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.031244][T14273] netlink: 204 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1579.040457][T14274] netlink: 204 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1579.130977][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.184658][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.439681][T14250] gre0: left promiscuous mode [ 1579.444647][T14250] gre0: left allmulticast mode [ 1579.465156][T14250] bridge6: port 1(erspan0) entered blocking state [ 1579.465433][T14250] bridge6: port 1(erspan0) entered forwarding state [ 1579.563426][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.563597][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.589412][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.589560][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.769687][T14250] virt_wifi0: left allmulticast mode [ 1579.798128][T14250] vlan0: left allmulticast mode [ 1579.798175][T14250] veth0_vlan: left allmulticast mode [ 1579.875688][T14250] batman_adv: batadv0: Interface activated: wlan1 [ 1579.900265][T14250] bond1: left allmulticast mode [ 1579.917563][T14250] geneve4: left promiscuous mode [ 1579.923343][T14250] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 1579.979544][T14253] veth1_to_team: entered promiscuous mode [ 1580.006137][T14253] veth1_to_team: left promiscuous mode [ 1580.084620][T28892] bridge0: port 3(team0) entered blocking state [ 1580.084766][T28892] bridge0: port 3(team0) entered forwarding state [ 1580.166668][T14282] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9222'. [ 1580.452615][T12561] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.464332][T12561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.464424][T12561] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.464459][T12561] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.464500][T12561] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.464532][T12561] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.464575][T12561] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.486532][T12561] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.537519][T14286] netlink: 'syz.1.9223': attribute type 210 has an invalid length. [ 1580.998430][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1581.880291][T14338] netlink: 34 bytes leftover after parsing attributes in process `syz.2.9233'. [ 1582.267545][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1582.316322][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1582.380142][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9237'. [ 1582.403654][T14350] gretap1: entered allmulticast mode [ 1582.440178][T14364] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1582.803448][T14353] veth9: entered allmulticast mode [ 1582.857243][T14353] bond7: (slave veth9): Enslaving as an active interface with an up link [ 1583.040923][T14353] veth11: entered allmulticast mode [ 1583.064919][T14353] bond7: (slave veth11): Enslaving as an active interface with an up link [ 1583.124176][T14353] veth13: entered allmulticast mode [ 1583.140946][T14353] bond7: (slave veth13): Enslaving as an active interface with an up link [ 1583.901439][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9249'. [ 1584.482184][T14438] x_tables: duplicate underflow at hook 1 [ 1584.631091][T14434] ip6gre3: entered allmulticast mode [ 1585.101839][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1585.124526][T14460] sctp: [Deprecated]: syz.3.9258 (pid 14460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1585.124526][T14460] Use struct sctp_sack_info instead [ 1586.341241][T14503] lo speed is unknown, defaulting to 1000 [ 1586.579766][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1586.632825][T14506] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1586.655603][T14515] netlink: 'syz.0.9267': attribute type 1 has an invalid length. [ 1586.674328][T14506] bond1 (unregistering): Released all slaves [ 1586.953615][T14520] block nbd2: server does not support multiple connections per device. [ 1586.954903][T14520] block nbd2: shutting down sockets [ 1587.291324][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.291718][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.291914][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.292103][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.292304][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.292495][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.292696][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.295374][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.295575][T14529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1587.529747][T14503] lo speed is unknown, defaulting to 1000 [ 1588.782059][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1589.210212][T14592] syzkaller0: entered promiscuous mode [ 1589.216168][T14592] syzkaller0: entered allmulticast mode [ 1589.295958][T14604] bond11: entered promiscuous mode [ 1589.302036][T14604] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1591.000491][T14556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.927905][T14658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 1593.751401][T14662] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1593.783653][T14662] __nla_validate_parse: 61 callbacks suppressed [ 1593.783957][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9289'. [ 1594.712230][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1595.236915][T14662] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1595.252907][T14665] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.9289'. [ 1595.570890][T14673] netlink: 'syz.2.9292': attribute type 10 has an invalid length. [ 1595.615353][T14673] team0 (unregistering): Port device batadv1 removed [ 1595.640833][T14672] netlink: 'syz.4.9291': attribute type 2 has an invalid length. [ 1595.651298][T14687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9292'. [ 1595.732302][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 1596.087706][T14701] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1596.098926][T14699] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9298'. [ 1596.150686][T14706] netlink: 'syz.1.9300': attribute type 1 has an invalid length. [ 1596.286688][T14706] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1596.297238][T14698] tc_dump_action: action bad kind [ 1596.380628][T14706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.429277][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1596.439394][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1596.457444][T14710] bond16: (slave veth11): Enslaving as an active interface with a down link [ 1596.585623][T14711] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1596.643116][T14711] bond16: (slave batadv1): making interface the new active one [ 1596.646805][T14711] batadv1: entered promiscuous mode [ 1596.650932][T14711] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 1596.861933][T14725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9302'. [ 1596.996757][T14706] bond16 (unregistering): (slave veth11): Releasing active interface [ 1597.071462][T14706] bond16 (unregistering): (slave batadv1): Releasing active interface [ 1597.074333][T14706] batadv1: left promiscuous mode [ 1597.107796][T14706] bond16 (unregistering): Released all slaves [ 1597.265806][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1597.497358][T14734] netlink: 'syz.1.9304': attribute type 8 has an invalid length. [ 1597.604281][T31370] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 1597.990096][T14746] netlink: 'syz.0.9309': attribute type 4 has an invalid length. [ 1598.378821][T14753] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1598.496790][T14771] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9315'. [ 1598.617984][T14753] bond1 (unregistering): Released all slaves [ 1599.030759][T14790] __nla_validate_parse: 1 callbacks suppressed [ 1599.037209][T14790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9318'. [ 1599.232075][T14795] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9321'. [ 1599.311853][T14801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.419732][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9322'. [ 1600.421791][T14833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1600.855596][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1600.855607][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1600.874587][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1600.883925][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1600.893602][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1600.903105][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 1602.285486][T14797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1602.743733][T14877] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.744816][T14867] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.803268][T14865] bond2: Caught tx_queue_len zero misconfig [ 1603.954957][T14923] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1604.083987][T14928] block nbd10: server does not support multiple connections per device. [ 1604.088953][T14928] block nbd10: shutting down sockets [ 1604.125622][T14929] __nla_validate_parse: 63 callbacks suppressed [ 1604.125686][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9348'. [ 1604.125724][T14929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1604.166227][T14928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9350'. [ 1604.337449][T14935] netlink: 'syz.2.9353': attribute type 15 has an invalid length. [ 1604.348500][T14935] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1604.351004][T14933] nftables ruleset with unbound set [ 1604.606399][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1604.956848][T14949] lo speed is unknown, defaulting to 1000 [ 1604.976162][T14939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1605.004429][T14939] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1605.150882][T22495] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1605.232061][T14939] bridge6: port 1(erspan0) entered disabled state [ 1605.484107][T14939] bridge0: port 3(team0) entered disabled state [ 1605.485291][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.485754][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.696332][T14962] fido_id[14962]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1605.797493][T14954] netlink: 'syz.3.9359': attribute type 11 has an invalid length. [ 1605.929131][T14972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1605.963659][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1605.993869][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.213742][T14939] batman_adv: batadv0: Interface deactivated: wlan1 [ 1606.330544][T14939] geneve0: left promiscuous mode [ 1606.340150][T14939] macsec1: left promiscuous mode [ 1606.355172][T14939] xfrm1: left allmulticast mode [ 1606.355605][T14939] bridge2: left promiscuous mode [ 1606.355660][T14939] bridge2: left allmulticast mode [ 1606.376444][T14939] macvtap1: left allmulticast mode [ 1606.376868][T14939] macvtap2: left allmulticast mode [ 1606.396245][T14939] macvtap3: left allmulticast mode [ 1606.415742][T14939] bond11: left promiscuous mode [ 1606.421132][T14959] netlink: 'syz.1.9360': attribute type 7 has an invalid length. [ 1606.449946][T14964] bridge0: left allmulticast mode [ 1606.775193][T14949] lo speed is unknown, defaulting to 1000 [ 1606.783359][T12582] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.783397][T12582] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.783447][T12582] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1606.783524][T12582] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.783553][T12582] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.783588][T12582] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1606.803123][ T59] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.803229][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.803309][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1606.804675][ T1169] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.804757][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.804831][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1606.929145][T14987] tap0: tun_chr_ioctl cmd 1074025677 [ 1606.929392][T14987] tap0: linktype set to 804 [ 1607.384762][T14987] syzkaller0: entered promiscuous mode [ 1607.384805][T14987] syzkaller0: entered allmulticast mode [ 1607.559790][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9368'. [ 1608.016728][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9372'. [ 1608.075630][T15013] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1608.075675][T15013] batman_adv: batadv0: Removing interface: macvtap1 [ 1608.091183][T15013] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1608.091208][T15013] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1609.630803][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1609.942969][T15081] bond1: entered allmulticast mode [ 1610.934610][T15117] netlink: 'syz.2.9394': attribute type 11 has an invalid length. [ 1610.946150][T15118] netlink: 'syz.2.9394': attribute type 11 has an invalid length. [ 1611.460830][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1611.470680][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1611.737275][T15139] syzkaller0: entered promiscuous mode [ 1611.737333][T15139] syzkaller0: entered allmulticast mode [ 1612.070121][T15148] bridge0: entered allmulticast mode [ 1612.254815][T15152] lo speed is unknown, defaulting to 1000 [ 1612.657010][T15165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1612.657245][T15165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1612.657301][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1613.163369][T15152] lo speed is unknown, defaulting to 1000 [ 1613.172917][T15174] lo speed is unknown, defaulting to 1000 [ 1613.658316][T15192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9410'. [ 1613.901961][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1614.020909][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9412'. [ 1614.227717][T15185] mac80211_hwsim hwsim112 syzkaller0: entered promiscuous mode [ 1614.229550][T15185] mac80211_hwsim hwsim112 syzkaller0: entered allmulticast mode [ 1614.248723][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9404'. [ 1614.284763][T15209] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1614.322960][T15213] bond12: Removing last arp target with arp_interval on [ 1614.334794][T15215] vlan4: entered allmulticast mode [ 1614.334854][T15215] bond0: entered allmulticast mode [ 1614.416707][T15174] lo speed is unknown, defaulting to 1000 [ 1614.713476][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9414'. [ 1614.773293][T15223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1614.861214][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9414'. [ 1615.295525][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9418'. [ 1615.309323][T15244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9418'. [ 1615.402904][T15249] netlink: 566 bytes leftover after parsing attributes in process `syz.2.9419'. [ 1615.999576][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9423'. [ 1616.082509][T15260] tipc: Started in network mode [ 1616.082566][T15260] tipc: Node identity 080211, cluster identity 4711 [ 1616.083051][T15260] tipc: Enabled bearer , priority 0 [ 1616.200170][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9425'. [ 1616.240159][T15262] openvswitch: netlink: Actions may not be safe on all matching packets [ 1616.299092][T15267] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1616.300430][T15266] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1616.347764][T15272] netlink: 'syz.1.9426': attribute type 10 has an invalid length. [ 1616.440083][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9427'. [ 1616.445523][T15281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1616.445594][T15281] netlink: 35 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1616.445643][T15281] netlink: 'syz.0.9429': attribute type 5 has an invalid length. [ 1616.445707][T15281] netlink: 'syz.0.9429': attribute type 6 has an invalid length. [ 1616.663281][T15272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1616.665421][T15272] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1616.682260][T15272] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1616.700586][T15269] macvlan0: left promiscuous mode [ 1616.750298][T15269] netlink: 'syz.2.9427': attribute type 1 has an invalid length. [ 1616.750349][T15269] netlink: 'syz.2.9427': attribute type 2 has an invalid length. [ 1617.216332][T10047] tipc: Node number set to 134353152 [ 1617.323804][T15302] gretap0: entered allmulticast mode [ 1617.454748][T15299] gretap0: left allmulticast mode [ 1618.109980][T15331] netlink: 'syz.3.9441': attribute type 4 has an invalid length. [ 1618.115721][T15331] netlink: 'syz.3.9441': attribute type 4 has an invalid length. [ 1618.294550][T12565] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.294617][T12565] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.294672][T12565] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.294712][T12565] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.634897][T15357] lo speed is unknown, defaulting to 1000 [ 1619.168356][T15371] TC_ACT_REPEAT abuse ? [ 1619.204444][T15364] syzkaller0: entered promiscuous mode [ 1619.210203][T15364] syzkaller0: entered allmulticast mode [ 1619.279572][T15357] lo speed is unknown, defaulting to 1000 [ 1619.297781][T15369] xt_TCPMSS: Only works on TCP SYN packets [ 1619.731200][T15385] xt_TCPMSS: Only works on TCP SYN packets [ 1620.253437][T15397] __nla_validate_parse: 70 callbacks suppressed [ 1620.253718][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1620.303377][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1625.140952][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9457'. [ 1625.332864][T15418] netlink: 'syz.2.9460': attribute type 23 has an invalid length. [ 1625.448377][T15421] No such timeout policy "s " [ 1625.448421][T15421] netlink: Failed to associated timeout policy 's ' [ 1625.528900][T15426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9462'. [ 1625.566705][T15432] No such timeout policy "s " [ 1625.566748][T15432] netlink: Failed to associated timeout policy 's ' [ 1625.610549][T15420] bond0: entered promiscuous mode [ 1625.620037][T15420] batadv0: entered promiscuous mode [ 1625.630211][T15420] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1625.640483][T15420] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1625.651853][T15420] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 1625.679057][T15423] netlink: 'syz.2.9460': attribute type 23 has an invalid length. [ 1625.790239][T15421] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1625.811997][T15421] bond10 (unregistering): Released all slaves [ 1626.010327][T15433] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1626.034342][T15433] bond10 (unregistering): Released all slaves [ 1626.287397][T15440] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1626.393342][T20277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1626.422136][T20277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1626.432621][T20277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1626.440693][T20277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1626.448497][T20277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1626.946025][T15472] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1627.721125][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9474'. [ 1627.832438][T15491] tc_dump_action: action bad kind [ 1628.246984][T15455] lo speed is unknown, defaulting to 1000 [ 1628.366076][T15503] IPVS: Unknown mcast interface: bond_slave_1 [ 1628.542422][T20277] Bluetooth: hci5: command tx timeout [ 1628.585161][T15455] lo speed is unknown, defaulting to 1000 [ 1628.659463][T15511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9482'. [ 1628.669570][T15511] netlink: 'syz.4.9482': attribute type 1 has an invalid length. [ 1628.692542][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1628.693001][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1628.880053][T15490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9477'. [ 1629.130049][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9483'. [ 1629.358751][T15516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.373484][T15516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.585313][T15516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.612386][T15516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.659558][T15516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1629.659615][T15516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1629.705087][T15516] virt_wifi0: left promiscuous mode [ 1629.713860][T15516] veth1_vlan: left promiscuous mode [ 1629.726006][T15516] veth0_vlan: left promiscuous mode [ 1629.738411][T15516] veth0_vlan: entered promiscuous mode [ 1629.751601][T15516] veth1_vlan: entered promiscuous mode [ 1629.775836][T15516] veth1_macvtap: left promiscuous mode [ 1629.784601][T15516] veth0_macvtap: left promiscuous mode [ 1629.790899][T15516] veth0_macvtap: entered promiscuous mode [ 1629.798652][T15516] veth1_macvtap: entered promiscuous mode [ 1629.812655][T15516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.830181][T15516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.843409][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9487'. [ 1629.849255][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9487'. [ 1629.862714][T15516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.872640][T15532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9486'. [ 1629.882959][T15516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.897355][T15516] batman_adv: batadv0: Interface activated: wlan1 [ 1629.908605][T15516] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1629.960459][T15516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.976130][T15516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1629.989786][T15516] virt_wifi0: entered promiscuous mode [ 1630.008698][T15516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1630.020052][T15516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1630.034944][T15516] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 1630.052728][T28892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.052788][T28892] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1630.054139][T28892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.054218][T28892] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1630.166723][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.166870][T12567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.188549][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.188670][T12567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.251236][T12567] bridge0: port 3(team0) entered blocking state [ 1630.251353][T12567] bridge0: port 3(team0) entered forwarding state [ 1630.588493][T15549] netlink: 'syz.4.9488': attribute type 10 has an invalid length. [ 1630.622384][T20277] Bluetooth: hci5: command tx timeout [ 1630.739140][ T59] IPVS: starting estimator thread 0... [ 1630.750843][T15559] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1630.813560][T12565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.813623][T12565] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1630.822899][T15560] IPVS: using max 28 ests per chain, 67200 per kthread [ 1630.866243][T12559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.866332][T12559] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1630.905249][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.905893][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.906107][T15455] bridge_slave_0: entered allmulticast mode [ 1630.930434][T15455] bridge_slave_0: entered promiscuous mode [ 1630.945981][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.954002][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.961336][T15455] bridge_slave_1: entered allmulticast mode [ 1630.970748][T15455] bridge_slave_1: entered promiscuous mode [ 1631.155328][T15455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.167009][T15555] netlink: 'syz.0.9489': attribute type 29 has an invalid length. [ 1631.167054][T15555] __nla_validate_parse: 1 callbacks suppressed [ 1631.167069][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9489'. [ 1631.168921][T15553] netlink: 'syz.0.9489': attribute type 29 has an invalid length. [ 1631.168973][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9489'. [ 1631.225840][T15455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.295694][T15455] team0: Port device team_slave_0 added [ 1631.304915][T15455] team0: Port device team_slave_1 added [ 1631.426835][T15455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.432467][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.432563][T15455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.444267][T15455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.444311][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.444386][T15455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.735709][T15455] hsr_slave_0: entered promiscuous mode [ 1631.737605][T15455] hsr_slave_1: entered promiscuous mode [ 1631.740235][T15455] debugfs: 'hsr0' already exists in 'hsr' [ 1631.740308][T15455] Cannot create hsr debugfs directory [ 1632.119749][T15596] netlink: 'syz.0.9500': attribute type 30 has an invalid length. [ 1632.717805][T20277] Bluetooth: hci5: command tx timeout [ 1633.235080][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1633.433517][T20277] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1633.525383][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9503'. [ 1633.538378][T20277] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1633.782405][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9505'. [ 1633.867651][T15455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.883364][T15455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.031920][T15638] hsr_slave_1 (unregistering): left promiscuous mode [ 1634.061064][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1634.061118][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1634.073727][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1634.183228][T15455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.193945][T15455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.472345][T15455] bond0: (slave netdevsim1): Releasing backup interface [ 1634.500785][T15455] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1634.545737][T15455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.565774][T15455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.652403][T15652] syzkaller0: left promiscuous mode [ 1634.652451][T15652] syzkaller0: left allmulticast mode [ 1634.699360][T15653] openvswitch: netlink: Missing valid actions attribute. [ 1634.699419][T15653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1634.734832][T15646] netlink: 'syz.0.9507': attribute type 2 has an invalid length. [ 1634.781783][T20277] Bluetooth: hci5: command tx timeout [ 1634.798509][T15455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.820007][T15455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.982576][T15665] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9510'. [ 1635.511041][T15684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9515'. [ 1635.617737][T15691] netlink: 'syz.0.9516': attribute type 1 has an invalid length. [ 1636.051344][T15691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1636.157858][T15694] bond5: (slave geneve3): making interface the new active one [ 1636.159858][T15694] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1636.177977][T12565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.180841][T12567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.180998][T12567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.181119][T12567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.228652][T15713] __nla_validate_parse: 5 callbacks suppressed [ 1636.228745][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1636.247164][T15705] bridge3: entered allmulticast mode [ 1636.477171][T15455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1636.509820][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1636.520431][T15455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1636.544083][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1636.588988][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1636.608672][T15455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1636.719975][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.764704][T15455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1636.794447][T15455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1636.822860][T15721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1637.153504][T15748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1637.164514][T15747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1637.199699][T15753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1637.776065][T15455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.851039][T15455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.883803][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.884030][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.940853][T12582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.941165][T12582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.236562][T15786] netlink: 'syz.4.9532': attribute type 10 has an invalid length. [ 1638.517048][T15795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1638.531878][T15795] netlink: Invalid conntrack timeout [ 1638.538871][T15795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1638.563181][T15795] x_tables: duplicate underflow at hook 3 [ 1638.832162][T15455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.905513][T15455] veth0_vlan: entered promiscuous mode [ 1638.917322][T15455] veth1_vlan: entered promiscuous mode [ 1638.956109][T15455] veth0_macvtap: entered promiscuous mode [ 1638.969034][T15455] veth1_macvtap: entered promiscuous mode [ 1639.005434][T15455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.023186][T15455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.057391][T12559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.071124][T12559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.081191][T12559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.121616][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.085617][T15753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1640.420448][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.420486][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.493893][T15815] netlink: 'syz.3.9538': attribute type 10 has an invalid length. [ 1640.535003][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1640.578387][T15815] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1640.590820][T12562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.590890][T12562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.969362][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9542'. [ 1641.171823][T15829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.255320][T15839] erspan0: entered promiscuous mode [ 1641.255525][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9541'. [ 1641.620578][T15851] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1641.630864][T15851] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1641.819225][T15858] ip6gre1: entered promiscuous mode [ 1641.826765][T15858] ip6gre1: entered allmulticast mode [ 1641.855709][T15857] 8021q: VLANs not supported on gre0 [ 1642.459966][T31370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1642.478338][T31370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1642.487838][T31370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1642.500064][T31370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1642.508635][T31370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1642.635414][T15876] netlink: 'syz.3.9552': attribute type 10 has an invalid length. [ 1642.635478][T15876] syz_tun: entered promiscuous mode [ 1642.700747][T15876] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1642.725338][T15888] netlink: 'syz.3.9552': attribute type 10 has an invalid length. [ 1643.578726][T15921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1643.728446][T15877] lo speed is unknown, defaulting to 1000 [ 1644.104948][T15939] tipc: Enabling of bearer rejected, already enabled [ 1644.428982][T15945] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1644.478979][T15877] lo speed is unknown, defaulting to 1000 [ 1644.625052][T20277] Bluetooth: hci2: command tx timeout [ 1645.449583][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.449791][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.451057][T15877] bridge_slave_0: entered allmulticast mode [ 1645.457049][T15877] bridge_slave_0: entered promiscuous mode [ 1645.469490][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.469965][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.470361][T15877] bridge_slave_1: entered allmulticast mode [ 1645.500655][T15877] bridge_slave_1: entered promiscuous mode [ 1645.658866][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1645.680379][T15877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.693536][T15877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.749440][T15978] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1645.761275][T15987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.828512][T15877] team0: Port device team_slave_0 added [ 1645.840334][T15877] team0: Port device team_slave_1 added [ 1645.852345][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1646.093332][T15877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.093372][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.093402][T15877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.113646][T15877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.113708][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.113802][T15877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.375523][T16002] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1646.400521][T15877] hsr_slave_0: entered promiscuous mode [ 1646.417312][T15877] hsr_slave_1: entered promiscuous mode [ 1646.428270][T15877] debugfs: 'hsr0' already exists in 'hsr' [ 1646.428312][T15877] Cannot create hsr debugfs directory [ 1646.701878][T20277] Bluetooth: hci2: command tx timeout [ 1647.137503][T16026] netlink: 'syz.0.9588': attribute type 23 has an invalid length. [ 1647.494061][T15877] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.494129][T15877] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1647.821721][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1647.894775][ T31] audit: type=1800 audit(1788757324.629:34): pid=16051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9592" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2465 res=0 errno=0 [ 1647.944195][T15877] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.965349][T15877] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1648.119979][T15877] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.120056][T15877] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1648.457278][T15877] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.457345][T15877] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1648.654010][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1648.654065][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 1648.782038][T20277] Bluetooth: hci2: command tx timeout [ 1649.023438][T16086] gretap2: entered allmulticast mode [ 1649.116298][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1649.148025][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1649.148065][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1649.506175][T16106] netlink: 'syz.0.9602': attribute type 11 has an invalid length. [ 1649.548700][T16108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1649.612026][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9602'. [ 1649.679322][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9602'. [ 1649.690406][T16108] vxcan7: entered promiscuous mode [ 1649.746878][T12565] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.881914][T12562] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.882006][T12562] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.882072][T12562] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.925378][T15877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1649.957870][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1649.970291][T15877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1649.995227][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1650.005327][T15877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1650.021407][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1650.044018][T15877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1650.056538][T15877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1650.129009][T16124] netlink: 'syz.3.9605': attribute type 1 has an invalid length. [ 1650.204751][T16127] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 1650.555990][T16139] syzkaller0: entered promiscuous mode [ 1650.556044][T16139] syzkaller0: entered allmulticast mode [ 1650.740314][T16151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9608'. [ 1650.762278][T15877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.847211][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9609'. [ 1650.861944][T20277] Bluetooth: hci2: command tx timeout [ 1650.899352][T15877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.944769][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.945010][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.013496][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.013658][T12565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.130781][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9610'. [ 1651.318005][T16161] lo speed is unknown, defaulting to 1000 [ 1651.446240][T16169] netlink: 'syz.4.9612': attribute type 1 has an invalid length. [ 1651.562433][T16169] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1651.610772][T16169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1651.719827][T16173] bond13: (slave geneve5): making interface the new active one [ 1651.769355][T16173] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 1651.865171][T16161] lo speed is unknown, defaulting to 1000 [ 1653.051095][T16205] netlink: 'syz.1.9621': attribute type 2 has an invalid length. [ 1653.099582][T16205] : entered promiscuous mode [ 1653.168968][T15877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.486266][T15877] veth0_vlan: entered promiscuous mode [ 1653.506831][T15877] veth1_vlan: entered promiscuous mode [ 1653.619912][T15877] veth0_macvtap: entered promiscuous mode [ 1653.670577][T15877] veth1_macvtap: entered promiscuous mode [ 1653.765066][T15877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.798069][T15877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.842780][T28892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.842862][T28892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.863474][T12559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.002954][T12561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.275377][T16242] __nla_validate_parse: 2 callbacks suppressed [ 1654.282504][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1654.354645][T28892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.354703][T28892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.809341][T16239] batman_adv: batadv0: Interface deactivated: wlan1 [ 1654.970330][T16239] tipc: Resetting bearer [ 1655.985000][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9638'. [ 1656.090036][T16271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.158724][T16271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.434802][T16289] netlink: 'syz.0.9641': attribute type 11 has an invalid length. [ 1656.546673][T31370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1656.564509][T31370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1656.575397][T31370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1656.584510][T31370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1656.592441][T31370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.656913][T16294] netlink: 'syz.0.9641': attribute type 11 has an invalid length. [ 1656.711292][T12567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.744623][T16274] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1656.754612][T16277] ip_vti0: entered promiscuous mode [ 1656.773823][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1656.789337][T16281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1656.879089][T16283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1657.171973][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9642'. [ 1657.190980][T16307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9642'. [ 1657.201671][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9645'. [ 1657.201713][T16310] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9645'. [ 1657.298271][T12567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.372649][T16305] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1657.413604][T16314] gtp1: entered promiscuous mode [ 1657.418747][T16314] gtp1: entered allmulticast mode [ 1657.426983][T16314] team0: Device gtp1 is of different type [ 1657.799080][T12567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.216363][T12567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.428225][T16291] lo speed is unknown, defaulting to 1000 [ 1658.622022][T31370] Bluetooth: hci2: command tx timeout [ 1658.770838][T12568] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.038964][T16376] netlink: 'syz.3.9655': attribute type 1 has an invalid length. [ 1659.048189][T28892] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.060999][T11655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.070246][T16378] netlink: 'syz.3.9655': attribute type 1 has an invalid length. [ 1659.169888][T12567] bridge_slave_1: left allmulticast mode [ 1659.169950][T12567] bridge_slave_1: left promiscuous mode [ 1659.170195][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.247239][T12567] bridge_slave_0: left allmulticast mode [ 1659.247293][T12567] bridge_slave_0: left promiscuous mode [ 1659.262954][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.658157][T16392] netlink: 'syz.4.9658': attribute type 1 has an invalid length. [ 1660.024052][T12567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.051403][T12567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.065410][T12567] bond0 (unregistering): Released all slaves [ 1660.217380][T16392] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1660.263782][T12561] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.269014][T16291] lo speed is unknown, defaulting to 1000 [ 1660.301048][T16362] lo speed is unknown, defaulting to 1000 [ 1660.469537][T16408] netlink: 'syz.4.9660': attribute type 2 has an invalid length. [ 1660.573206][T16411] xt_TCPMSS: Only works on TCP SYN packets [ 1660.705478][T31370] Bluetooth: hci2: command tx timeout [ 1660.760448][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1660.881300][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1660.938729][T16362] lo speed is unknown, defaulting to 1000 [ 1661.445961][T16429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1661.517123][T12567] hsr_slave_0: left promiscuous mode [ 1661.533360][T12567] hsr_slave_1: left promiscuous mode [ 1661.544093][T12567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.544147][T12567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.564249][T12567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.564306][T12567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.857593][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9668'. [ 1662.059135][T12567] veth1_macvtap: left promiscuous mode [ 1662.059225][T12567] veth0_macvtap: left promiscuous mode [ 1662.061388][T12567] veth1_vlan: left promiscuous mode [ 1662.068170][T12567] veth0_vlan: left promiscuous mode [ 1662.781874][T31370] Bluetooth: hci2: command tx timeout [ 1662.799919][T12567] team0 (unregistering): Port device team_slave_1 removed [ 1662.829686][T12567] team0 (unregistering): Port device team_slave_0 removed [ 1663.239571][T16444] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1663.252110][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1663.418472][T16459] ip_vti0: left promiscuous mode [ 1663.454536][T16465] ip_tables: iptables: counters copy to user failed while replacing table [ 1663.514449][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9671'. [ 1663.625278][T16459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.625967][T16459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.754847][T16459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1663.822039][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.950324][T16459] ip6gre1: left promiscuous mode [ 1663.956118][T16459] ip6gre1: left allmulticast mode [ 1664.185686][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9674'. [ 1664.252030][ T1169] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.252094][ T1169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.252233][ T1169] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.252334][ T1169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.252436][ T1169] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.252505][ T1169] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.252606][ T1169] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.252672][ T1169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.537237][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9675'. [ 1664.865271][T31370] Bluetooth: hci2: command tx timeout [ 1665.461062][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.469040][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.478366][T16291] bridge_slave_0: entered allmulticast mode [ 1665.496707][T16291] bridge_slave_0: entered promiscuous mode [ 1665.514077][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.521431][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.530662][T16291] bridge_slave_1: entered allmulticast mode [ 1665.544236][T16291] bridge_slave_1: entered promiscuous mode [ 1665.553977][T16521] netlink: 'syz.4.9681': attribute type 2 has an invalid length. [ 1665.831099][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1665.847884][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.869238][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.102921][T16291] team0: Port device team_slave_0 added [ 1666.121134][T16291] team0: Port device team_slave_1 added [ 1666.135956][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9685'. [ 1666.189877][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.197369][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.224360][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.237380][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.253445][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.253517][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.369342][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9685'. [ 1666.487429][T16556] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 1666.524618][T16543] netlink: 'syz.0.9684': attribute type 10 has an invalid length. [ 1666.746120][T16565] netlink: 'syz.4.9688': attribute type 1 has an invalid length. [ 1666.814269][T16291] hsr_slave_0: entered promiscuous mode [ 1666.827123][T16291] hsr_slave_1: entered promiscuous mode [ 1666.833996][T16291] debugfs: 'hsr0' already exists in 'hsr' [ 1666.834050][T16291] Cannot create hsr debugfs directory [ 1666.864353][T16572] netlink: 'syz.4.9688': attribute type 10 has an invalid length. [ 1666.864403][T16572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9688'. [ 1667.329091][T16565] bond15: option mode: invalid value (7) [ 1667.359859][T16565] bond15 (unregistering): Released all slaves [ 1667.410987][T16589] netlink: 'syz.3.9690': attribute type 33 has an invalid length. [ 1667.465117][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9690'. [ 1668.044264][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1668.294309][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1668.376488][T16607] lo speed is unknown, defaulting to 1000 [ 1668.386280][T16607] lo speed is unknown, defaulting to 1000 [ 1668.414806][T16607] lo speed is unknown, defaulting to 1000 [ 1668.448066][T16607] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1668.448129][T16607] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1668.448197][T16607] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1668.626653][T16607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1668.741094][T16621] syzkaller0: left promiscuous mode [ 1668.741147][T16621] syzkaller0: left allmulticast mode [ 1668.767856][T16607] lo speed is unknown, defaulting to 1000 [ 1668.811040][T16607] lo speed is unknown, defaulting to 1000 [ 1668.928904][T16291] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.951941][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1668.981649][T16631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9698'. [ 1669.375909][T16607] lo speed is unknown, defaulting to 1000 [ 1669.387078][T16607] lo speed is unknown, defaulting to 1000 [ 1669.410161][T16607] lo speed is unknown, defaulting to 1000 [ 1669.419881][T16607] lo speed is unknown, defaulting to 1000 [ 1669.428497][T16607] lo speed is unknown, defaulting to 1000 [ 1669.443717][T16607] lo speed is unknown, defaulting to 1000 [ 1669.454545][T16607] lo speed is unknown, defaulting to 1000 [ 1669.463838][T16607] lo speed is unknown, defaulting to 1000 [ 1669.476212][T16607] lo speed is unknown, defaulting to 1000 [ 1669.487434][T16607] lo speed is unknown, defaulting to 1000 [ 1669.876732][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9701'. [ 1669.980132][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9702'. [ 1670.111272][T16665] sctp: [Deprecated]: syz.3.9703 (pid 16665) Use of int in max_burst socket option. [ 1670.111272][T16665] Use struct sctp_assoc_value instead [ 1670.610510][T16291] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.912858][T16668] workqueue: Failed to create a rescuer kthread for wq "nfc18_nci_tx_wq": -EINTR [ 1670.945386][T16291] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.107210][T16740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9708'. [ 1671.107259][T16740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9708'. [ 1671.249143][T16291] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.889628][T16770] __nla_validate_parse: 1 callbacks suppressed [ 1671.896497][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9710'. [ 1672.829048][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9713'. [ 1672.829118][T16789] netlink: 'syz.0.9713': attribute type 30 has an invalid length. [ 1672.829138][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9713'. [ 1672.920227][T16793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9712'. [ 1672.920963][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9712'. [ 1673.224211][T16803] netlink: 'syz.3.9714': attribute type 4 has an invalid length. [ 1673.265133][T16806] netlink: 'syz.3.9714': attribute type 4 has an invalid length. [ 1673.302031][ T59] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x32 [ 1673.876270][T16831] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9715'. [ 1674.443889][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9719'. [ 1674.458795][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9720'. [ 1674.482994][T16291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1674.509648][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1674.537697][T16291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1674.568998][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.600964][T16291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1674.672019][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1674.700347][T16291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1674.750991][T16291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1674.851395][T16862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1674.909878][T16861] netlink: 'syz.4.9721': attribute type 4 has an invalid length. [ 1675.289552][T16291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.389340][T16291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.435839][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.436114][T11655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.518776][T16291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1675.532217][T16291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.593274][T28892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.593431][T28892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.921367][T16894] netlink: 'syz.3.9726': attribute type 39 has an invalid length. [ 1676.336760][T16906] xt_l2tp: invalid flags combination: 8 [ 1677.096550][T16927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9731'. [ 1677.377079][T16935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1677.377142][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1677.944131][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.135869][T16291] veth0_vlan: entered promiscuous mode [ 1678.204632][T16291] veth1_vlan: entered promiscuous mode [ 1678.450404][T16966] tipc: Started in network mode [ 1678.450472][T16966] tipc: Node identity 2659fbf01656, cluster identity 4711 [ 1678.450925][T16966] tipc: Enabled bearer , priority 10 [ 1678.480597][T16291] veth0_macvtap: entered promiscuous mode [ 1678.977755][T16963] tipc: Resetting bearer [ 1679.087815][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9738'. [ 1679.138389][T16963] tipc: Disabling bearer [ 1679.270671][T16291] veth1_macvtap: entered promiscuous mode [ 1679.400853][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.427923][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.491399][T11655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.517533][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.518398][ T8022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.518532][ T8022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.807382][T17003] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1679.820021][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1680.209043][T24720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.217728][T24720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.360991][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.361031][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.802459][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9747'. [ 1680.889286][T17032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9546'. [ 1681.146821][T17038] team0 (unregistering): Port device team_slave_0 removed [ 1681.166735][T17038] team0 (unregistering): Port device team_slave_1 removed [ 1681.217076][T17045] netlink: 'syz.4.9749': attribute type 1 has an invalid length. [ 1681.217125][T17045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9749'. [ 1681.606355][T17063] netlink: 'syz.4.9755': attribute type 1 has an invalid length. [ 1681.624614][T17061] ip6gretap0: entered promiscuous mode [ 1681.935600][T17063] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1681.962329][T17063] bond16 (unregistering): Released all slaves [ 1682.108826][T17086] bridge11: entered promiscuous mode [ 1682.130251][T17086] bond15: (slave bridge11): making interface the new active one [ 1682.147261][T17086] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 1682.278051][T17095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1682.295132][T17095] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9760'. [ 1684.710523][T17072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1685.057953][T17130] 8021q: VLANs not supported on ip6gre0 [ 1685.319387][T17151] netlink: 'syz.1.9771': attribute type 10 has an invalid length. [ 1685.451913][T17158] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9771'. [ 1685.613047][T17158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9771'. [ 1685.696738][T17169] netlink: 'syz.3.9774': attribute type 1 has an invalid length. [ 1685.696785][T17169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9774'. [ 1686.074630][T17176] tipc: Enabled bearer , priority 10 [ 1686.140585][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9777'. [ 1686.385550][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1686.394496][T17200] netlink: 'syz.4.9780': attribute type 4 has an invalid length. [ 1686.394570][T17200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1687.422963][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1687.489052][T17226] netlink: 'syz.2.9789': attribute type 4 has an invalid length. [ 1687.489102][T17226] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1687.909515][T17226] .`: renamed from bond0 (while UP) [ 1688.101970][ T7433] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1688.242078][T17236] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1688.381078][T17253] netlink: 'syz.3.9795': attribute type 11 has an invalid length. [ 1688.381124][T17253] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9795'. [ 1688.418926][T17255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9792'. [ 1688.707040][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9797'. [ 1688.853360][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9800'. [ 1689.113003][ T7438] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1689.184767][T31370] block nbd10: Receive control failed (result -107) [ 1689.206953][T17277] netlink: 'syz.1.9802': attribute type 1 has an invalid length. [ 1689.207885][T17278] netlink: 'syz.1.9802': attribute type 1 has an invalid length. [ 1689.308117][T17277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1689.318371][T17286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9802'. [ 1689.318697][T17278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9802'. [ 1689.421821][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1689.494650][T17286] bond2: option all_slaves_active: invalid value (8) [ 1689.518739][T17286] bond2 (unregistering): Released all slaves [ 1689.677873][T17278] bond2: option all_slaves_active: invalid value (8) [ 1689.696597][T17278] bond2 (unregistering): Released all slaves [ 1689.954400][T17309] netlink: 'syz.4.9807': attribute type 1 has an invalid length. [ 1689.954628][T17309] netlink: 'syz.4.9807': attribute type 2 has an invalid length. [ 1690.246271][T17321] netlink: 'syz.2.9812': attribute type 8 has an invalid length. [ 1690.257539][T17322] netlink: 'syz.2.9812': attribute type 8 has an invalid length. [ 1690.345321][T17326] bridge12: entered promiscuous mode [ 1690.488201][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9817'. [ 1690.499601][T17336] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1690.513853][T17333] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1690.521409][T17333] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1690.587508][T17333] hsr_slave_1 (unregistering): left promiscuous mode [ 1690.799266][T17350] netlink: 'syz.2.9820': attribute type 3 has an invalid length. [ 1690.844652][T17342] pimreg9: entered allmulticast mode [ 1690.962749][T17353] syzkaller0: entered promiscuous mode [ 1690.968456][T17353] syzkaller0: entered allmulticast mode [ 1691.659850][T17397] validate_nla: 3 callbacks suppressed [ 1691.659906][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.745687][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.746667][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.747654][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.748736][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.749353][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.750293][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.751147][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.753795][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.754612][T17397] netlink: 'syz.4.9829': attribute type 1 has an invalid length. [ 1691.948279][T17398] gretap2: entered allmulticast mode [ 1692.021235][T17398] bond16: (slave gretap2): making interface the new active one [ 1692.029702][T17398] bond16: (slave gretap2): Enslaving as an active interface with an up link [ 1692.637388][T17429] batadv_slave_0: entered promiscuous mode [ 1692.648364][T17429] __nla_validate_parse: 19 callbacks suppressed [ 1692.655501][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9839'. [ 1692.664750][T17429] netlink: 15 bytes leftover after parsing attributes in process `syz.4.9839'. [ 1692.910458][T17424] batadv_slave_0: left promiscuous mode [ 1693.665171][T17448] netlink: Failed to add %pK helper -22 [ 1693.671382][T17448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.685952][T17445] netlink: Failed to add %pK helper -22 [ 1693.686307][T17445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.982760][T17463] vlan2: entered allmulticast mode [ 1693.982879][T17463] bond0: entered allmulticast mode [ 1693.982913][T17463] bond_slave_0: entered allmulticast mode [ 1693.982935][T17463] bond_slave_1: entered allmulticast mode [ 1694.155191][T17469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9847'. [ 1694.525421][T17482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9850'. [ 1694.542324][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1694.671297][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9851'. [ 1694.694797][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1694.785488][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1694.845432][T17500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1694.991376][T17498] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1696.001781][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1696.028805][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1696.040406][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1696.734407][T17566] validate_nla: 57 callbacks suppressed [ 1696.734465][T17566] netlink: 'syz.2.9866': attribute type 1 has an invalid length. [ 1696.977460][T17571] lo speed is unknown, defaulting to 1000 [ 1697.062927][T17575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1697.291934][T17575] batman_adv: batadv0: Interface activated: wlan1 [ 1697.358656][T17575] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 1697.790433][T17569] lo speed is unknown, defaulting to 1000 [ 1697.811121][T17571] lo speed is unknown, defaulting to 1000 [ 1697.829052][T17571] lo speed is unknown, defaulting to 1000 [ 1698.970543][T17569] lo speed is unknown, defaulting to 1000 [ 1698.978131][T17569] lo speed is unknown, defaulting to 1000 [ 1699.119064][T17603] __nla_validate_parse: 64 callbacks suppressed [ 1699.119143][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9876'. [ 1699.198783][T31370] Bluetooth: hci5: link tx timeout [ 1699.199465][T31370] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1699.218629][T31370] Bluetooth: hci5: link tx timeout [ 1699.226438][T31370] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1700.000054][T17620] netlink: 'syz.4.9879': attribute type 4 has an invalid length. [ 1700.086155][T17620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1701.250664][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9885'. [ 1701.263043][T31370] Bluetooth: hci5: command 0x0406 tx timeout [ 1701.420359][T20277] [ 1701.422763][T20277] ====================================================== [ 1701.429810][T20277] WARNING: possible circular locking dependency detected [ 1701.436874][T20277] syzkaller #0 Not tainted [ 1701.441506][T20277] ------------------------------------------------------ [ 1701.448554][T20277] kworker/u9:2/20277 is trying to acquire lock: [ 1701.454823][T20277] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 1701.463687][T20277] [ 1701.463687][T20277] but task is already holding lock: [ 1701.471079][T20277] ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 1701.479654][T20277] [ 1701.479654][T20277] which lock already depends on the new lock. [ 1701.479654][T20277] [ 1701.490084][T20277] [ 1701.490084][T20277] the existing dependency chain (in reverse order) is: [ 1701.499132][T20277] [ 1701.499132][T20277] -> #9 (dpm_list_mtx){+.+.}-{4:4}: [ 1701.506568][T20277] __mutex_lock+0x19d/0x1550 [ 1701.511733][T20277] device_pm_add+0x7d/0x350 [ 1701.516806][T20277] device_add+0x4eb/0xb80 [ 1701.521707][T20277] device_create+0x269/0x300 [ 1701.526863][T20277] msr_device_create+0x33/0x50 [ 1701.532183][T20277] cpuhp_invoke_callback+0x434/0x810 [ 1701.538033][T20277] cpuhp_thread_fun+0x362/0x780 [ 1701.543449][T20277] smpboot_thread_fn+0x565/0xa70 [ 1701.548978][T20277] kthread+0x38b/0x480 [ 1701.553607][T20277] ret_from_fork+0x514/0xb70 [ 1701.558772][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.564097][T20277] [ 1701.564097][T20277] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1701.571702][T20277] cpuhp_thread_fun+0x127/0x780 [ 1701.577155][T20277] smpboot_thread_fn+0x565/0xa70 [ 1701.582661][T20277] kthread+0x38b/0x480 [ 1701.587294][T20277] ret_from_fork+0x514/0xb70 [ 1701.592440][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.597782][T20277] [ 1701.597782][T20277] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1701.605589][T20277] cpus_read_lock+0x42/0x160 [ 1701.610741][T20277] static_key_slow_inc+0x12/0x30 [ 1701.616262][T20277] tcp_md5_do_add+0x1d4/0x390 [ 1701.621499][T20277] tcp_v6_parse_md5_keys+0x550/0x670 [ 1701.627343][T20277] do_tcp_setsockopt+0x1250/0x1f80 [ 1701.633011][T20277] do_sock_setsockopt+0x17c/0x1b0 [ 1701.638604][T20277] __x64_sys_setsockopt+0x13d/0x1b0 [ 1701.644359][T20277] do_syscall_64+0x166/0x520 [ 1701.649523][T20277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.655986][T20277] [ 1701.655986][T20277] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1701.663769][T20277] lock_sock_nested+0x41/0x100 [ 1701.669125][T20277] inet_shutdown+0x6a/0x390 [ 1701.674238][T20277] nbd_mark_nsock_dead+0x2cb/0x550 [ 1701.679935][T20277] recv_work+0x1cee/0x1e10 [ 1701.684923][T20277] process_scheduled_works+0xc3d/0x1630 [ 1701.691026][T20277] worker_thread+0xa47/0xfb0 [ 1701.696191][T20277] kthread+0x38b/0x480 [ 1701.700825][T20277] ret_from_fork+0x514/0xb70 [ 1701.705975][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.711315][T20277] [ 1701.711315][T20277] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1701.719021][T20277] __mutex_lock+0x19d/0x1550 [ 1701.724188][T20277] nbd_queue_rq+0x373/0xff0 [ 1701.729261][T20277] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1701.735395][T20277] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1701.742290][T20277] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1701.748938][T20277] blk_mq_run_work_fn+0x16c/0x300 [ 1701.754575][T20277] process_scheduled_works+0xc3d/0x1630 [ 1701.760777][T20277] worker_thread+0xa47/0xfb0 [ 1701.765941][T20277] kthread+0x38b/0x480 [ 1701.770580][T20277] ret_from_fork+0x514/0xb70 [ 1701.775770][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.781116][T20277] [ 1701.781116][T20277] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1701.788379][T20277] __mutex_lock+0x19d/0x1550 [ 1701.793559][T20277] nbd_queue_rq+0xc1/0xff0 [ 1701.798550][T20277] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1701.804671][T20277] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1701.811569][T20277] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1701.818120][T20277] blk_mq_run_work_fn+0x16c/0x300 [ 1701.823720][T20277] process_scheduled_works+0xc3d/0x1630 [ 1701.829837][T20277] worker_thread+0xa47/0xfb0 [ 1701.834993][T20277] kthread+0x38b/0x480 [ 1701.839624][T20277] ret_from_fork+0x514/0xb70 [ 1701.844764][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.850081][T20277] [ 1701.850081][T20277] -> #3 (set->srcu){.+.+}-{0:0}: [ 1701.857238][T20277] __synchronize_srcu+0xc9/0x2f0 [ 1701.862732][T20277] elevator_switch+0x1e8/0x7b0 [ 1701.868062][T20277] elevator_change+0x2fa/0x480 [ 1701.873380][T20277] elevator_set_default+0x375/0x440 [ 1701.879149][T20277] blk_register_queue+0x3f3/0x4e0 [ 1701.884730][T20277] __add_disk+0x6cb/0xe30 [ 1701.889611][T20277] add_disk_fwnode+0x100/0x3a0 [ 1701.894919][T20277] nbd_dev_add+0x733/0xb60 [ 1701.899891][T20277] nbd_init+0x168/0x1f0 [ 1701.904605][T20277] do_one_initcall+0x250/0x870 [ 1701.909923][T20277] do_initcall_level+0x10a/0x1a0 [ 1701.915407][T20277] do_initcalls+0x59/0xa0 [ 1701.920277][T20277] kernel_init_freeable+0x29d/0x3e0 [ 1701.926019][T20277] kernel_init+0x22/0x1d0 [ 1701.930889][T20277] ret_from_fork+0x514/0xb70 [ 1701.936019][T20277] ret_from_fork_asm+0x1a/0x30 [ 1701.941331][T20277] [ 1701.941331][T20277] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1701.949174][T20277] __mutex_lock+0x19d/0x1550 [ 1701.954321][T20277] elevator_change+0x1af/0x480 [ 1701.959644][T20277] elevator_set_none+0xb5/0x140 [ 1701.965049][T20277] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1701.971398][T20277] nbd_start_device+0x189/0xb30 [ 1701.976799][T20277] nbd_genl_connect+0x167d/0x1cd0 [ 1701.982367][T20277] genl_family_rcv_msg_doit+0x233/0x340 [ 1701.988462][T20277] genl_rcv_msg+0x614/0x7a0 [ 1701.993514][T20277] netlink_rcv_skb+0x226/0x4a0 [ 1701.998829][T20277] genl_rcv+0x28/0x40 [ 1702.003375][T20277] netlink_unicast+0x7bd/0x940 [ 1702.008688][T20277] netlink_sendmsg+0x813/0xb40 [ 1702.014002][T20277] sock_sendmsg_nosec+0x13a/0x180 [ 1702.019584][T20277] ____sys_sendmsg+0x54e/0x850 [ 1702.024894][T20277] ___sys_sendmsg+0x2a5/0x360 [ 1702.030140][T20277] __x64_sys_sendmsg+0x1b1/0x290 [ 1702.035626][T20277] do_syscall_64+0x166/0x520 [ 1702.040766][T20277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.047203][T20277] [ 1702.047203][T20277] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1702.055833][T20277] blk_alloc_queue+0x544/0x690 [ 1702.061150][T20277] __blk_mq_alloc_disk+0x194/0x390 [ 1702.066803][T20277] nbd_dev_add+0x494/0xb60 [ 1702.071769][T20277] nbd_init+0x168/0x1f0 [ 1702.076476][T20277] do_one_initcall+0x250/0x870 [ 1702.081791][T20277] do_initcall_level+0x10a/0x1a0 [ 1702.087276][T20277] do_initcalls+0x59/0xa0 [ 1702.092147][T20277] kernel_init_freeable+0x29d/0x3e0 [ 1702.097886][T20277] kernel_init+0x22/0x1d0 [ 1702.102764][T20277] ret_from_fork+0x514/0xb70 [ 1702.107894][T20277] ret_from_fork_asm+0x1a/0x30 [ 1702.113294][T20277] [ 1702.113294][T20277] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1702.120531][T20277] __lock_acquire+0x15ff/0x2e50 [ 1702.125923][T20277] lock_acquire+0x115/0x350 [ 1702.130964][T20277] fs_reclaim_acquire+0x71/0x100 [ 1702.136457][T20277] __kmalloc_noprof+0xbc/0x720 [ 1702.141777][T20277] kobject_get_path+0xc5/0x2f0 [ 1702.147089][T20277] kobject_move+0x2fa/0x720 [ 1702.152342][T20277] device_move+0xe0/0x720 [ 1702.157216][T20277] hci_conn_del_sysfs+0xb8/0x1a0 [ 1702.162700][T20277] hci_conn_del+0xc3d/0x1200 [ 1702.167863][T20277] hci_abort_conn_sync+0xdd0/0x1190 [ 1702.173606][T20277] hci_cmd_sync_work+0x20b/0x3f0 [ 1702.179139][T20277] process_scheduled_works+0xc3d/0x1630 [ 1702.185231][T20277] worker_thread+0xa47/0xfb0 [ 1702.190368][T20277] kthread+0x38b/0x480 [ 1702.194976][T20277] ret_from_fork+0x514/0xb70 [ 1702.200107][T20277] ret_from_fork_asm+0x1a/0x30 [ 1702.205450][T20277] [ 1702.205450][T20277] other info that might help us debug this: [ 1702.205450][T20277] [ 1702.215696][T20277] Chain exists of: [ 1702.215696][T20277] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 1702.215696][T20277] [ 1702.227994][T20277] Possible unsafe locking scenario: [ 1702.227994][T20277] [ 1702.235480][T20277] CPU0 CPU1 [ 1702.240869][T20277] ---- ---- [ 1702.246255][T20277] lock(dpm_list_mtx); [ 1702.250432][T20277] lock(cpuhp_state-up); [ 1702.257305][T20277] lock(dpm_list_mtx); [ 1702.264005][T20277] lock(fs_reclaim); [ 1702.268009][T20277] [ 1702.268009][T20277] *** DEADLOCK *** [ 1702.268009][T20277] [ 1702.276160][T20277] locks held by kworker/u9:2/20277: 5, last CPU#1: [ 1702.282708][T20277] #0: ffff888078e1f140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1702.293538][T20277] #1: ffffc90005157c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1702.306085][T20277] #2: ffff88803b6b8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1702.316056][T20277] #3: ffff88803b6b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1702.325834][T20277] #4: ffffffff8f8120c0 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 1702.334911][T20277] [ 1702.334911][T20277] stack backtrace: [ 1702.340835][T20277] CPU: 1 UID: 0 PID: 20277 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1702.350407][T20277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1702.360478][T20277] Workqueue: hci5 hci_cmd_sync_work [ 1702.365713][T20277] Call Trace: [ 1702.369101][T20277] [ 1702.372055][T20277] dump_stack_lvl+0xe8/0x150 [ 1702.376672][T20277] print_circular_bug+0x2e2/0x300 [ 1702.381723][T20277] check_noncircular+0x12f/0x150 [ 1702.386696][T20277] __lock_acquire+0x15ff/0x2e50 [ 1702.391577][T20277] ? __bfs+0x153/0x290 [ 1702.395690][T20277] ? __pfx_hlock_conflict+0x10/0x10 [ 1702.400919][T20277] lock_acquire+0x115/0x350 [ 1702.405436][T20277] ? __kmalloc_noprof+0xbc/0x720 [ 1702.410407][T20277] ? __lock_acquire+0x14b9/0x2e50 [ 1702.415450][T20277] ? kobject_get_path+0xc5/0x2f0 [ 1702.420411][T20277] fs_reclaim_acquire+0x71/0x100 [ 1702.425384][T20277] ? __kmalloc_noprof+0xbc/0x720 [ 1702.430345][T20277] __kmalloc_noprof+0xbc/0x720 [ 1702.435134][T20277] ? get_device_parent+0x20d/0x3a0 [ 1702.440274][T20277] ? kobject_get_path+0xc5/0x2f0 [ 1702.445405][T20277] ? kobject_get_path+0xc5/0x2f0 [ 1702.450362][T20277] kobject_get_path+0xc5/0x2f0 [ 1702.455147][T20277] kobject_move+0x2fa/0x720 [ 1702.459695][T20277] ? __pfx_kobject_move+0x10/0x10 [ 1702.464741][T20277] ? do_raw_spin_unlock+0xf5/0x200 [ 1702.469886][T20277] ? get_device_parent+0x366/0x3a0 [ 1702.475028][T20277] device_move+0xe0/0x720 [ 1702.479378][T20277] hci_conn_del_sysfs+0xb8/0x1a0 [ 1702.484344][T20277] hci_conn_del+0xc3d/0x1200 [ 1702.488961][T20277] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1702.494357][T20277] hci_abort_conn_sync+0xdd0/0x1190 [ 1702.499599][T20277] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1702.505256][T20277] ? abort_conn_sync+0x26/0x210 [ 1702.510152][T20277] ? abort_conn_sync+0x26/0x210 [ 1702.515024][T20277] ? abort_conn_sync+0x19c/0x210 [ 1702.519988][T20277] ? __pfx_abort_conn_sync+0x10/0x10 [ 1702.525301][T20277] hci_cmd_sync_work+0x20b/0x3f0 [ 1702.530265][T20277] ? process_scheduled_works+0x97a/0x1630 [ 1702.536013][T20277] process_scheduled_works+0xc3d/0x1630 [ 1702.541599][T20277] ? __pfx_process_scheduled_works+0x10/0x10 [ 1702.547612][T20277] ? assign_work+0x3cf/0x5d0 [ 1702.552224][T20277] worker_thread+0xa47/0xfb0 [ 1702.556853][T20277] ? __kthread_parkme+0x71/0x1f0 [ 1702.561910][T20277] kthread+0x38b/0x480 [ 1702.566004][T20277] ? __pfx_worker_thread+0x10/0x10 [ 1702.571142][T20277] ? __pfx_kthread+0x10/0x10 [ 1702.575749][T20277] ret_from_fork+0x514/0xb70 [ 1702.580450][T20277] ? __pfx_ret_from_fork+0x10/0x10 [ 1702.585598][T20277] ? __switch_to+0xc89/0x1420 [ 1702.590300][T20277] ? __pfx_kthread+0x10/0x10 [ 1702.594916][T20277] ret_from_fork_asm+0x1a/0x30 [ 1702.599721][T20277] [ 1703.101725][T31370] Bluetooth: hci2: command tx timeout [ 1704.782675][T20277] Bluetooth: hci5: command 0x0406 tx timeout