last executing test programs: 2.392939702s ago: executing program 2 (id=4680): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, 0x26, 0x10, 0x70bd2d, 0x25dfdbfc, {0x1f}, [@typed={0x8, 0x111, 0x0, 0x0, @uid=0xee01}, @nested={0xe9, 0xac, 0x0, 0x1, [@generic="9a99ad7cea714cdfa651cac7996d56ed3ca3bf40b2a7c46c95bc07cbd0fff61709d7cac54a7b469568a6f5efc1248855ef2b0c90ca90bbd6b28d36972eee3beb3a7080ef24b721616ea4e3c22c7cf38ba4663897dbccaff62d8f12a41f71fbbf4ba1e6876f8c8cfa58d002635bbeacd0708afb85d4bd6ea930912c5f89da", @nested={0x4, 0x62}, @generic="d22665a1", @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x10}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x8}, @generic="a9887fe990fb5818a73a91e6d2248efa1bdad6439037d72bf486be9f7271056a13b90d6ccf5d0ad843d30a5f082ae6a9499cbb1bef9fb981d7c1a7fbe464934c0fa7cd12de2be6"]}]}, 0x108}, 0x1, 0x0, 0x0, 0x841}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/177, 0xb1}], 0x1, &(0x7f0000000600)=""/25, 0x19}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/236, 0xec}, {&(0x7f0000000740)=""/92, 0x5c}, {&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000000840)=""/79, 0x4f}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/198, 0xc6}, {&(0x7f00000019c0)=""/18, 0x12}], 0x7, &(0x7f0000001a80)=""/167, 0xa7}, 0x4}, {{&(0x7f0000001b40)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001bc0)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/140, 0x8c}], 0x2, &(0x7f0000001dc0)=""/52, 0x34}, 0x3}], 0x3, 0x2061, 0x0) r4 = accept(r2, 0x0, &(0x7f0000001ec0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x78, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000020c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000001}, 0x40000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000022c0)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1ff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$kcm(r4, &(0x7f0000003940)={&(0x7f0000002600)=@nfc={0x27, r3, 0x0, 0x1}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002680)="4fedc37a488ba7580db9df76bd40b9b4bafb7d218aa5c79b43ccc7f0ac019770788a69e6de592ddb13c364c02f028a4c609f9c870a3b1b3433cffd08f57ee1268d569d8806ce3ab8ca38f31883a5c11074173b708d168a66861d5046d0ffde6acf2324fe51037e24919e69204027847d47ea851f0ed08a534268cd96d55d0998dd9c81cf691e888a01e54eebe0ddaf31", 0x90}], 0x1, &(0x7f0000002780)=[{0x1010, 0x117, 0x40, "4f5cf3cccde208fbc1c237c16508a591f434f91cd82112989c9279928d98a6b55d156dd0c00141e6a5224e4d6ff621073b507181df21a8dd62097a7a5b8a3b430d76958a611f956fd95965b57e9b5b7ecd1bf1f5acf8c164761319044ebd62d8081f77a1922345172e15765b4575d682e2affe5ec2354a7f350861aa112be3e1dee971b6c1301c15d0f052f90cb2a297118fd2257777085598a358016feea9f75c6dfd16128decca991c46a6257c66ebcd7bfce5e5d57687bbcb8d05db578a28ebda826888d70edc10bbd863b67ffbf510565cafacb5ec91a3f09559e1ec26f71a73271e09002ef9e43000d386d54238eddeb8ed1960cfcdf07a3ff5bd92cd1088fe0cd5196640d15f1dbd192cba746bfa58fd91ec69fd808d6f3a94c06d9648411873a703e241d0fb7e4086a4e636820c2091e37104dc6dd35b4bc4829580a8cf29c518dce84fb42b277c92aaa0c3c5985ec083b43d54d9afdbc0817ef379676352fdcfe1acf9cf598f514a645d5948f8e2e157757ad33694a56d44ad35f09421222d34bcd1ee687e75900d56edd55ce4ed9ead9aae578e5a745d040f4bedec2e145970d1c7e8f30fa7be8ab84984f30d77a36adc3279dc1401fa73548490f63bba3f772d707ccf9474ab03c21c113ee3e658a4f22e9eaa20dc83c910b8166c6d9abf438d06e3c8a567555588e3767257ba10ae29441c622db42d08c804b768c6437b40f3e89a8898286e57786354de84a03a7d632ff0a7587d6e04e92c98de3b1e7cfbe3efe721122bd95ad5e8f114902c9d92b6d36d9513634cd75c02efcf5fa9a1614c908d676fb9a936a56044b17fb1ea128012bc49d8e63281d799e612228b2b8d66bc39169be69d258923856d9c5d6ed6f0f4459662d321dfe30a12b65d65b2a159b7617958e2f3dc3ace3c2be593a30d5565ae5172f9efeb979131e3d37977ffcc2f1d31e8bf29db9f6bc9bb0720090668922c5e0729ab0d481b228d128519358e2249a8f18b5c3fe92b0773a53a1801ad78f0b2d7f51ebc2fa6fdf028559c19d40f436f9b72d58f7bb25028fc3fc037bb955b7b6cfd69c54432dbd2e055d0223b160eb57e735a53852ff084e4c22961166a6f5654252e4aaf038b3fb80708c354710c006331e12583e421a93497cd29b0cf818b12a884ba46fce00b88b74ba793e4cd51c51437d3ad9f3adcad1796bac11c5d7de1aeaf66c87371ccb08b860478c0e41c6695ff5e3b4b05e16b1f1d17f6633dc685d67b5e93206cc686100472b932c44015a35ac6c51a8c1fd6ef4824a6362435d4a3a77671bb770b55abab7ff6a519d978ee8b9a8b5a56ca4193fd2b3d2109cc0da841a7cf19d22d0d05efeab3616286ee58730f6aa1631a6ff3dd8eb06158dd4e5ed00975d9c02895d36ed5d29be06e27670374aa0502e2ddc70237c82c9d9ee3f877e5da689f7e3c55af91ffa4896a222a88210ec925e84983bfad55b5f223b679e7afd716252c3f233a56d2933904caff29f166c1426f2510acfbf1f31b2cdce6faf1dd99508e44f4db5b30949826f367fd0c9dbd6f38c6986574ebaf47fa06f21cffd86407002028588aa35ca4f6a6500627c91c51f56deb09e93369683c99d599e88bd42940ffe81a0006de8550f25f3050478435fcf323a3ba4526c8d7a4617bb6c8b4e9ecc8775095b4339d93ef7dd94cd6b56df7bd3fbd2c92b2eef1c0aa6f6333726d79566c2164e87737a5b2abcecacb54866f8a7cdce0dff8f8c55a0f37571a7d57c1802295374512dab0c0423b0bd8b105a5bc39e1c43a81ec526717539b05dce8d65c54c7cf67e55e855e0dd41650a423a79f455c17242b029193ce38d03d3157386e62b94dcf9e5ee3af13b9d0dade8acb665724e7cec24611f9e9bb599764b16bc4c22a800b3562b79fb27575a42dc14dce042b97f18b0f04245c2c423f788f4f8d96baa18afa64c66e6046a22ec9e9ebc3498a6ff412b3f81bd59ab62b555c09fd75ae5d5b3f69cb6d7afa1ccdad7e5dd7cd12cbcf886997f87619774d2790bdb33ecb369f13788debdb342855039196045f3212b112b07f429ee4a2bf48821e83434436ed76ce5586bf09abae3853d899738318c8253ebd7b2d0962ea371b0c7f8eee9513a3390d68b4d6fc71a79c2eb0c9463b6e6a47af5368b8adc64fbd5a5168b9d76a545b6540f3b1def65ca62a6a597f04f070b16b2e9fb5a42f23d131ad8e300f7986b2f1e907dea372a04bc72b4bf169af277cad427f1d2eaa9a071f9fd52df683ae316e78fd5e665e9a468e32c7f9f2ada8d345af169750de43acfda27d962a3b7bf6322fad7e3b0b6461d9d24c4410567d1d1b3f560f1db954f5290efda05c022e167df744c600776ec5811aa971a050776c46b1676cd8b51e3cc251b328425f68af5dfff583b634bc5f575519b2b6e6e60e7e8008da0c8d5d03b2bf5de9d56f550857cf49c6aebf113eef098c2d779f55b2682b20a89580d77853c1b4738af64d75301cac7e50e620340e30224934bcdb7bdd6ee36b9eb15b9365a6015efa6f0bfe372c2db58f6334467a9a0f944b8958451b10b056e55063d6fc978bbe677b27166417fd6a81f8b6925bad896f0f08714b0c00215ef820ca61cce9c183367b8ad83df07e8af5e0b040c4598099687770019885cb9864424770a2e2f99660d70b2e3253842ce7f401eb4b43ff95ba563e0c8900677ebb6c629ccf3b8b9a13aeb561cc2ff827e9fc43205c8133e56e1e48401067b39d5e6529d98a44442a7cd5b22e0bf826dc1006776b0ac77d4a1acd6f6cd3b92c37c22fc40becee10ba3db04aac7ddfc6ab09d57749c7fb4accdee8224d232c6a00f1031b1b3b65b7e989b7092120e3263c7642fe355020d37f431260e56da63524cb7877dde74cfb59e847356867b8a30cc0a143f298c5d9130f0c208b41d511cf75d8e552c9bede4581c258aeccdb195b051da43c6f6f1aa4868cbae49291205f55b813c212ea9b1f82b3417fb4c0d61ed09fbdf812952ffdf1a1c3392ba5a82b50459e0a922c125703bcd2d5418c37aa8fc1e872dafc62fe86d189775dd208285c0bc53398da730e0e40082ff691de0af05cb829c81b2df5493a2b62a44c4c27d1840363bf31ae2a681d4fb6b80dc519fcf8abb70c513e37d825a9f8de219076ba54b2750e875da88595c3a19b8137684327909dde39322011bace66ecd3eee3645ecba058c59ba6cf0dffa04568f36a7760c99c35e5d7573900234fd2874ffef2947ec087034815dfabc1bde5632aec5987d7ce3301ffb23fcf56b4e97093af9a1ea5f5b2f5aeae836515775a8a9cbf8e8616d55b55ec56e4d775c1d9ec83afdcdc95f7fd23e3a59ad402ea003f10714675ed21f33533cfdb5e2f1eed982c75d02c33239f13f42a6cfd9ffb66595b388f858b19a5a1c15de15c01eee5f1e31cfbf297e50966bbc97aade8ee8e5a3c8a21129d21e0214a8216808c153017f0d62bbbbe85138a9e6471d413685322d6410881c5c7bc3fcb16a1d91ee83c84a6295b44694e9a05e79f0fe354dc4c634e776bbc40feb80d1d17ffc4a14da10300f3d5a6c460d96ad345cfc61c9b95e5fad8e0a87e27218baa0ac5184d0f08f80651d0a13953e17a10542dec2e2e48f96460046a008887054e62e34f189577129bed1b1d93c4bc44bb3c638a7cd393af1c9d8511676cf1fcc28d97a6b238a4c48a8ec3a9a1523b123f750eedf895a4ff29faf1da12e618d1a326b7fbba6f913564dbeabd53d56eee8f1c1711c797d791a5ec17131ecbe8782703378d88e0d07728d01074d755d884e643203a0bcec9ff4de93aa02f0655230a415634927b7fafb9924234d5b00b7c40cd3657ff40d60736c076e8b4d01a42879005340e3f0efb4e2787a68c57f4ce97cfd274ae6075742f35eb44b6434bfc046e70995bb1ae558baa8230efd8d92b1b2b5807f397df800ef14f8ecf8d7b065f1d80fa29c0e7e10dcc5ce40c3d59d0b5132714cf061dcd1102497c5945a41fb1e879d6e40d50d8701fb5b7df0e10e5add3f8a7f0b317ae7ade15acba71fdef64cdf731f168a6819381fb51b2c0328ca2919b9646f8a1972f02ee8c46d737126a7875313dcb1cf4fe1c8e709a9ae961e682d279b8a0d3bb22bd63c18c86d66da1ceeb6dc5b0086b413f0bbc09d0c19727aa684c04e36b6d36b756274a32abc4dacb1a95fbe5ba4dae29c5cf972d2938c8a516591f92ba9021ff073056c8e63e4b1c2b6576edd9027c06eda90c53e30e6df48da52f74986934ddac12bf32f8b52c782cd463945259902b288229bfaa06c67f1b5987ea0cebdfacbd2051d0fa23ae32ace41d23afcf5739ac0e13e2171a6ad0f193627ce2bd23154e21acc87d24e657ec46fd0b8bc4f76d46b3caf34b8bbec1ccceb231709e50dbdcf5b6981c2efcac9799f492b717a25084d90d94dcd134349413cd864ea15a732a7978d34cdc9767a9e9a54ef0a7e800a427df275147669765a46085c4815502868ff8229f37c4c9d2ea0f2fb26ea93edbf68549ca92aa04596840595f2408c6507329facc8324be501b85a9a8f6fbfa61f8798645ea39e8b9132aa0e5e447a004d8b6b0fecd5e80a0d0c9b0c81e6b0bbd5a05c4b7755a632df3fc4d7e7eef931a0b75f4cb0a12a481168500ecc1394552836898b6def84cb337a22c94a042cacb57887ee3b4481db3aed4079ac57d22e193d15c4c3bf0e489ab25f32ae590cd2260df2d259fab700500d2707831e5aabbdb78a09714f3b9cc9ba67380bbf9e2b1fdf616f04ffa2f5a27806186fc48d30ccbcd8fc3385955b48b31d413c508f2de5467899a3ceeb52ebed3b4685b6eb65736b7d2a401f0bf7c78f0c31c02a9327cfd6d8347032fe06e4ab2b05e34a00aba669e09084c0bbc70c29e26de2d4cbeeb956883382f5fa1364ad1e7dbf3a5031802335b876f14c05497132640d8f8ea86a7cfb099b062af1af6de4794e300d6109f729f11e45030f959709c6cebdccecd4ae1db31584446d0f3a304b9bfbdfa5023dc368bf2b57bf186f9f16e2378906c9db6135c91aa13e1ae1c5d7a42c9089a6385b2b6ac595e76d2408f97bbc58552375cb89b98571c490098fff5a7ec7d772eb3c33c9294381535746bdaad0e91bd7b0d7156c48d1f8e2f2ff9cc10e62265dbbca11db6ce1689e1118c4c65a906f45e9cc8b2726a0539d1afe0a36afeb500f1377fa4050de048913ab6728c70bdd803ff34f68a59dc057a847c87146ff0e547f1b80f06c4fbaf207b224eaf107c0070feba3705f8a3566555553d807dd197f82a44546d63f4b503d11f893566cf7c90d67f381ed7bdaafae604cd29d89c1165cf21f80047c8547b7ca2c8eae6876509c211d7d5ae221b0888230a1529b7c55393ab6edb5d9dae114c0329c1860e6d7a1da9b9b0b10596762fa1e7691dda88e623fcfd957a63260b4e0141c1e3cde15013837f152cfa2f3f8309ad02c783e057fc132df6fb850f464e177de43b0689ed227fcd4e37164f9b35612c13f261152513c4504f114057315cc3990fdbb17aed5aa05666d482c45de8ac52ca878a99c6bbe903a356f4b15fc5d9c633382115df1f5c1f4f7512e01b02b3e757372c9851a49649ea442678aced043781f721eddc5de10809361f232f81011e97831d48ceffc1f2915aad2f8739681a46735b25ff81c480432291b289b7397bf8ecbe0633637a8129dd54369abd0206775b549a7fe9172428e1b612062bdbd769f5a0ed0313ca5ee3911fe5b92f675057d3144d2dd6ccdace7d93e77ff927f6cec49e10a1d6a518"}, {0x98, 0x101, 0xb0, "5897bcac6045945a0453e3e54298f36d53f02468cf462653a0dbf0f48ad194cdc1332d6c713ccc78b24a07d63bdf8b296523ad7283ca289c488ca484a5a45ffecb387056fa62f2ef738ed60662177614ffa0114cb0c44a5505ec7f67174fd9c2f67e56815bc0a0f44a5eba80b2b1af4fc9a25befb3888a475586dc61f6e8f5a8a6c2"}, {0x110, 0x10a, 0x15c0db2f, "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"}], 0x11b8}, 0x60) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40d4}, 0x40000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c00), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x78, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xba5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3b}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80c1) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000003d40)) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003dc0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x28, r10, 0x908, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2b, 0x25dfdbfb, 0x7, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044101}, 0x20000000) 2.141571864s ago: executing program 4 (id=4685): r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x7ff, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004acf02eb567fd14feac628095a2713890e41120bde073608e6602e6842fc26dc8dcfae50564a67cd7bc06944db1d2316212cfa496cb2f0dcc1bafff24317979b98602d75b072993251ee88862604ee0046a7a95cc8e24e1e11ced3123ff75975144f4d2d39553cada753fe9267453f7cec54624012324b5fcf9e6989569e2c446542744c6601b2f0f470dcb973"], 0xe) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x24008810) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.769529186s ago: executing program 2 (id=4687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r4, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x749d1f8ae78f7a5a}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x1b0, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1538}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13b2404e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x565}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc00}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040010}, 0x8080) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.746167538s ago: executing program 4 (id=4688): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r3, 0x0, 0x0, 0x0}, 0x30) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000839968f944f5686f7e00100037040000006d5147ed13da4c8da3277c7d68077a1b605464ad21f9ade9c131203d9af8a912cae9fd1af77d85454f58ffcf74eafaf194501e48befb3fcf330a3528476f6f3191289ee6ef3142a2a57dff2e4a4509cf7643107735a555a336539f1acd52c1b3f99e896ff8583ffb968ffb341ff081f3540f0c9977f8d984f10e7e3ada9dbfe4a0eb6ca138", @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="a30c7b81e76c9955a1b84dd4624de21f157442b1aad481a985c4eaea1edaf0b69c7c9859f3814dfb02966101d0df517fc9da9cc50e6208183a85ea82f215f1acf9f54d204d1c5a6786321e1d36ce125402d555e16df7912024b6a5bc84b76344faeb411050741d5b769154ded8dba28a7fd2f82d025fd68f5ba8b9225dfee4e64807d5f46ca161dab19be53c83f1f7a226aa438dc11c6895d6d26d63cf026f", 0x9f}, {&(0x7f00000001c0)="2cf61782a0d200b83c0b36e4f21bf646392cf2f1c275a0ef74c84abee0ca1e34dedc7679960b5b865ffd2cf9a56dba987e415e8e1e15c57b25ed14770dfe023d27f0bef91eb79a5374a5cd3fba3679ed80041630b19a29ae45af8840", 0x5c}, {&(0x7f0000000480)="9ada96414b516bc70f1bede90ad08cca4610f886be829b2783cc48cacc1f55f05774607a412d217bc2979169982974b1579238a8880138c3170025abb3f578d980f05818c8e6e21a3e5876152ca5dec0184a92bdd7ea8603d9c96c4ce1a19597aeb1bd427ba30f24e4bda2016c3b0bc0054e34a95e144e78b438a32752dc9babe119be24", 0x84}, {&(0x7f0000000540)="4bb437f18c82ab14cd09c5ce76aec3bba81f603b7bbd476aa49789356f4a4c672eca5e6e492cb799e400a545909968e5def93f2b24d816e50c48339275e61500f6c38636d74799470bb8ecf8084a738be195ed97c435c516f404cbcd96e5a535da20ca668a25350c4288e108d6606c990ae2ddf55a71ace042517516b8a5bf64f0e4d63bcc1fa2fd4261237f12066f63", 0x90}, {&(0x7f0000000600)="84e0d7da598fcc165cdbdcced4f85aa98431d130cd0d3788765079f6d42a4021f2876c2c8f7f2a341458354c94cac8ad65cb05b2b9c5838b076f47318e6e822b4e6e6ecc48eb3b9931fe572c8b3f50ad2cba2e00b709d95f5c91c32528d40fcedb7df223d788595e41b6f65a17e4d9b5088379d1a67648a628202d0e4b15353729077e2fa50a1a2a12ead01549edc73d960a8d12493ff979f62d006b701dd486e225ad71b1852611f6baaef4df7633d81806c66396b8057536f14b7571a9afe5e335bc2de14fe0ac599a6a", 0xcb}], 0x5, 0x0, 0x0, 0x1}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) recvfrom(r8, &(0x7f0000001000)=""/41, 0x29, 0x0, &(0x7f0000001040)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) recvmsg(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000100)=@ax25={{0x3, @default}, [@netrom, @default, @rose, @default, @netrom, @null, @netrom]}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000800)=""/84, 0x54}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/154, 0x9a}, {&(0x7f0000000c80)=""/220, 0xdc}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/102, 0x66}], 0x9}, 0x40020100) 1.579197269s ago: executing program 2 (id=4691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x25dfdbfa, {0x2, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x8000}, 0x8, 0x7, 0xa1bc, 0x3, 0x12, 'syz0\x00', "c49fc40417f455ddbee5db95aac0b20061dfe4baa53e5a1b41705a0c3b3c4cf1", "a9f44fef207ceaa01fb0c462ee0880e229d4cb3335b1745b971e6dc42632c8be", [{0x7, 0x6, {0x3, 0x5}}, {0xcafc, 0x9, {0x3, 0x8}}, {0x8, 0x1, {0x0, 0xffff}}, {0x2, 0x80, {0x0, 0x6}}, {0x3, 0x2a, {0x0, 0x7c1ac835}}, {0xd, 0x5, {0x0, 0x400}}, {0x0, 0x4, {0x0, 0xc769}}, {0xc, 0x9, {0x0, 0x7}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0xe6, {0x1, 0x6f1}}, {0x3, 0x101, {0x1}}, {0x4cc, 0x2, {0x2, 0xfffffff7}}, {0xffff, 0xfff9, {0x0, 0x6}}, {0x5, 0x1, {0x1, 0x10001}}, {0x0, 0x1000, {0x2, 0x7fffffff}}, {0x71, 0x3ff, {0x3, 0x1}}, {0xe, 0xc, {0x0, 0xf00c}}, {0x62b, 0x8, {0x3, 0xffff8000}}, {0x9, 0x7, {0x3, 0xb54}}, {0xc, 0x4, {0x2, 0x7}}, {0xfff, 0xfff}, {0x7, 0x0, {0x1, 0x5}}, {0x7ff, 0x63d, {0x3, 0x8}}, {0x200, 0xb054, {0x1, 0x8}}, {0x4, 0x758, {0x2, 0xfffffffb}}, {0x4, 0xdc, {0x0, 0x9}}, {0x504, 0x3, {0x3, 0xd}}, {0xf801, 0x800, {0x1, 0x8000}}, {0x5, 0x7, {0x1, 0x5}}, {0xf9, 0x6, {0x2, 0x8f}}, {0xc, 0x98, {0x0, 0x1}}, {0x5, 0xa}, {0x6, 0x3, {0xf48ed0dd75a2633a, 0x7}}, {0x5, 0x5, {0x3, 0x4}}, {0x2, 0x86f7, {0x1, 0x472}}, {0x1, 0xe, {0x0, 0x800}}, {0x4, 0x6, {0x2, 0x8}}, {0x1, 0xc4}, {0x3, 0x4, {0x0, 0x5}}, {0xf5, 0x2, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x3, 0x0, 0x194, 0x0, 0x5, 'syz1\x00', "3ba915fa25cb39bb37732ae7c4f220ef92d187815af0489c9182ae427e189673", "686096c8ffb6cb85d4accbb5c7502b16a0d3022404f2248d492304890e9ab067", [{0x7, 0xbd5e, {0x3, 0xfffffff7}}, {0x4, 0xffff, {0x3, 0x1}}, {0xc, 0xc2, {0x0, 0x8001}}, {0x5, 0x9fd3, {0x0, 0x9}}, {0x5, 0x5, {0x3, 0xd}}, {0x3, 0x3ff, {0x3, 0xfffffffc}}, {0xf, 0xd3, {0x1, 0x8}}, {0x2, 0x9, {0x2, 0xce}}, {0xf, 0x800, {0x2, 0x5}}, {0x3, 0xb0, {0x0, 0x10}}, {0xff, 0x8, {0x3, 0x3}}, {0x80, 0xf000, {0x0, 0x1}}, {0xd04d, 0x4627, {0x3, 0x79}}, {0x5, 0x4, {0x0, 0x9}}, {0x7ff, 0xcc7d, {0x2, 0x42b}}, {0x6, 0x800, {0x1, 0xa37}}, {0x6, 0x8, {0x3, 0x9b}}, {0xa, 0xc0b, {0x3, 0x6}}, {0x8001, 0x6, {0x1}}, {0x40, 0xfffa, {0x2, 0x4}}, {0x0, 0x6, {0x2, 0x10000}}, {0x7, 0x5, {0x2, 0x7f}}, {0x2, 0x25ff, {0x0, 0x81}}, {0x8001, 0x3, {0x1}}, {0xfff4, 0xb, {0x1, 0x7ff}}, {0x9, 0x5, {0x1, 0x80}}, {0xffff, 0xbc, {0x1, 0x6}}, {0x6, 0x7, {0x2, 0x171}}, {0x3542, 0x1000, {0x0, 0x3}}, {0xa, 0x2f, {0x1, 0x9}}, {0x404, 0x9, {0x0, 0x40}}, {0x3, 0xfffa, {0x2, 0x4}}, {0x4076, 0x101, {0x1, 0x3}}, {0x9, 0x3, {0x0, 0x2}}, {0x2, 0x9, {0x3, 0xced4}}, {0x9, 0x6, {0x2, 0x8000}}, {0x0, 0x8000, {0x1}}, {0xc, 0x8, {0x0, 0x3}}, {0x1, 0x9, {0x3, 0x1}}, {0x2, 0x1, {0x1}}]}}}, {{0x254, 0x1, {{0x2, 0xffffffff}, 0xb, 0x5d, 0x118, 0x7f, 0x16, 'syz1\x00', "571bba6a6dfede85d8c760b69159b8f5e5eea53d367522a1bffdcca522e42754", "efd73de464024f2b9a8cbca053e5ae5b69761aaee96c10686955b36e494105e8", [{0x3, 0x40, {0x0, 0x8}}, {0x1, 0x8001, {0x1, 0x9}}, {0x6, 0x4, {0x3, 0x9}}, {0x1, 0x8000, {0x1, 0x5}}, {0x8, 0x3ff, {0x2, 0xc}}, {0x7, 0xf243, {0x0, 0x7}}, {0xffff, 0x5, {0x0, 0x9}}, {0x6, 0x2, {0x0, 0x7}}, {0x100, 0x0, {0x2, 0x3}}, {0x1ff, 0x85, {0x2, 0x3}}, {0x7fff, 0x1, {0x2}}, {0x1000, 0x7, {0x2, 0x6}}, {0x9, 0xe3f1, {0x0, 0x1}}, {0x3ff, 0x3, {0x1, 0x3}}, {0x0, 0x9, {0x0, 0x7}}, {0x5, 0x25b3, {0x0, 0x8}}, {0x7fd, 0x5, {0x3, 0x7fffffff}}, {0xc290, 0xf, {0x1, 0x8}}, {0x4, 0xe, {0x3, 0x7}}, {0x8, 0x2, {0x2, 0x25}}, {0x20a5, 0x1173, {0x1, 0x10001}}, {0x9, 0x4, {0x2, 0x7}}, {0x5b32, 0x2, {0x3, 0x7}}, {0xe, 0xf12, {0x2, 0x2}}, {0x7, 0x4, {0x1, 0x1}}, {0x8b, 0xfbf, {0x0, 0x8000}}, {0x0, 0x4, {0x0, 0x6}}, {0x401, 0x2, {0x1, 0x1}}, {0x3, 0x5, {0x1, 0x9}}, {0x4, 0x7fff, {0x0, 0x3}}, {0x5, 0x1, {0x2, 0x7}}, {0x8000, 0x4800, {0x1, 0x8}}, {0x4, 0x3, {0x0, 0x5}}, {0x10, 0x81, {0x1, 0x9}}, {0x5382, 0xf4f1, {0x0, 0x3}}, {0x7, 0xfff8, {0x1, 0x1000}}, {0x5, 0x3c, {0x2, 0x6}}, {0x0, 0x6, {0x3, 0x3}}, {0x8, 0x1, {0x1, 0x7}}, {0x2, 0xf, {0x3, 0x5}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 1.356037388s ago: executing program 2 (id=4694): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x9, 0x800, 0x1ff, 0xc6, 0x8, 0x3}, 0x9c) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 1.336890392s ago: executing program 3 (id=4695): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r1, 0x111, 0x0, 0x0, 0x90aa62107f0000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000180)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x11, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) 1.335532036s ago: executing program 0 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x80, 0x10, 0x401, 0x24000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4be645cb3903cc24}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x9}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9df3}, @IFLA_VTI_OKEY={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r1}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}]]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 1.246649587s ago: executing program 1 (id=4697): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x2800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'}) 1.060103022s ago: executing program 3 (id=4698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 899.509414ms ago: executing program 0 (id=4699): r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18}}], 0x1, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x1010, 0x453, 0x400, 0x70bd2a, 0x25dfdbff, "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", ["", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24004004) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "a06b171d70393f4b", "04271af92b0c31332218a93c75e45ba3", "ac8fea31", "92a3cf9cb3a151d6"}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r9, 0x0) sendmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x26c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xc4, 0x8, "b6e4e579f4836863e510376f19ca6e5178ccbc2bc7385a6457c92d3d2d6234bffa65c2a8795f97a668682cd8b25658e49496361ac60fcada5313e420413dbb6bfdb25682b49d09bfe76e750569264ab6a7f2ce8e181f5355d4afa3d381170374433fbbf7cdb6462184c45a09b8da3683602d330e727381e1f70fd828ab82bfb3efb59e1b18bc0e17a8151d438ffdd2164f836d03c05b7586fb71e5b1466e20b45df7fe3d538607274acdcbab660499a426019ba25ecdf9fe58b1ba1f587b4a35"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xde, 0x8, "138856b8f8a0fe953edd04097c875fe727e3fdf119efff1085ac2320563e70fec718461f7b208c020aa17d18f1f5941006bd6a5d2c82d274c69412b2a5cb18cef1eaab2db5c6d971835bd1d6c88e1f613f4b29b11fa79dcccef94ddaf892f0e8c22a02a1f56f2d5c1576e3828fc653376294978f58ba28057583ac647b25f6d83042ff1c27d049f5ccd46960a42395976ffca93305401dd78e5ecb8e8eb90462df01d970e21bf524a8c5a8adfb458a41054263f6eb46ba140760cf2210415fd8824cd355c71fddaf718d46d90830471798b3c298bfda567c41ff"}, @NFTA_OBJ_USERDATA={0x78, 0x8, "e7c4147df8591b048a33dd9bcd01e196288582bd4a4a7cab0634890a6d0099767ef1c04d49a2aadd29c5249eab33d3dacae5f298a1cac3c598d427b01df37604981c3d3c0e022c15adc61c4b6270a420e0c18395607c2ffc34122aa7dc26ce220c500e2cc83574c69c2b12e42e434db3c1300f4b"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x21a82735}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16d1a195}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x304}}, 0x0) 898.580456ms ago: executing program 3 (id=4700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000300000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 896.099046ms ago: executing program 0 (id=4701): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d4}, 0x20000800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r5, 0x10, 0x3, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x144, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xdc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000980), &(0x7f00000009c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipv6_newroute={0x44, 0x18, 0x10, 0x70bd29, 0x25dfdbfc, {0xa, 0x80, 0x80, 0xf9, 0x0, 0x2, 0xc8, 0xf, 0x100}, [@RTA_UID={0x8}, @RTA_EXPIRES={0x8, 0x17, 0x80}, @RTA_IIF={0x8, 0x3, r2}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x20000001) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000c00)={&(0x7f0000000b40)=""/181, 0xb5}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8a0}, 0x20000000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000dc0)=@buf={0x15, &(0x7f0000000d80)="eeeb29cae0c624306748719e59d5c0aea24b257edb"}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000e80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080005}, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001100), &(0x7f0000001140)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x40, 0x140e, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 880.165247ms ago: executing program 1 (id=4702): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4080, 0xff0}], 0x4}, 0x8}], 0x3, 0x2, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0}]}, &(0x7f0000000180)=0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 829.676029ms ago: executing program 4 (id=4703): socket$kcm(0x11, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x1000000000000010, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 736.04871ms ago: executing program 1 (id=4704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x198, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x463cc5e0}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0xfe, 0xc, "e6433684ef96b09b6acb60bc2c230e22d308dd968d08b433779b8532d30868b1924eee5a1c59be58d9b97773d6e82f6f30f6ba0357713ba0c3b4e96176eec6d35c5a31889f8ec2f4e6d29858a0b06d101132df38d08ee54b5def09d235746540e511c1d80bac0ec0738bd7fee80785dced3f6f030c437d4dec78ef3ecbb02b67fe2c85fa2f382dec805a660cf15518f604734d7d205f9883d4c73a13981a1d53dfa9cbb343dcc7ee14503abaf5738e7274b6c448699b0450128f3d979b255287234374a45a9612a1b9f05be682f16f09dfebfc8ab356864e73e6988f518c8713752af7bac2b865ff5b4544ccc4a4863817599a781fde40da8fdf"}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd1d3b24}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1c0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 711.844823ms ago: executing program 3 (id=4705): r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ccb32c4446a73d88b24d975e8c048665a14c0b61293b3c0a876d0434c08d6e3afad9c9f214096be5c6d0b311ff068453a0512af52c4e879d2b190bc405da7d402ab9bfc355b3ebbcbc4131c81eff08643d2a527b5860a4791db695", 0x5b}, {&(0x7f00000003c0)="d637b4103b6a141b1b7a7a9dd8f2e42a7b5b028c82bf1ae2f0a84b5c23054dd87e24344c0ec3def0ddad0ac5e0cf6956108d4fae8e4a4473499cede4c57722ffbc643788ae152bd34983a6a0e7b4cee5a3bdecffe050a47a9a1ab36b54ddcbefbb6779136612623e04ed4461069d2f68e3d735d3025e3858447a41a1339dbf4fd977e5891c522498d3cdb171f12b555834daa55bea17ed4eac671dcdc1260584a91c5f48df929042e0d5f4671c76e02bbf08e51b238e1f0be2059de768b3cdb10a829d83f15a80618c71c7e4dee076afc0f33e1ff84bb78d199cd219af8ba46e", 0xe0}, {&(0x7f00000004c0)="b6573da9b65640fa02184957b5ce3717f1792339ef27ea03bf0a8aecd9e23f7d964037d724c142625b8dcf8dbfdffa44f5c1283ae081ac7b981ff87bca9e24cec411f8de1b2124e119b5344b0489aa29aee6658ac9648206078b5e31bc706bd5870f57bd0f392e19393c4931eb93b154e2aea46a2b7ba4e7a49cd0a4b368ada772c221d8420cf015fc156417695c5233a7e2ab201b5fd116", 0x98}, {&(0x7f0000000700)="2be41bb5ca3be218e968046db478bc098359bf2c1e4eff7711520e66c7f90a82bc959d4d3a2163b9e979a50aaf48c8250e0121256a29f2e26a54f70188f3493fd9de620495ae39d6dcd18a0f9cd14d2bd466545e90c71f7213de273b426d98e37f21ce4bad7b5e872ebdd3cab1e1510586fa5119003c3bf6e3b0b145596dff152862119bea4435c0ca7678d9389a1d978f733e838b89f76a72132e48af67904d5cfcfadad40ee8d631a6c6477d2eaa1ffeff1d3e75f8ba3d47", 0xb9}, {&(0x7f0000000140)="3eeddeba0fc944b464e8713c19758521c338d0aa5d3a20ae96270367b8618957e4ae74f429072347c18f4dc2bf86a6f642c09681fa200f6b392932dc04c9ea574c3902633c958e919e416bc19c", 0x4d}], 0x5}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) 670.235054ms ago: executing program 4 (id=4706): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0xa063}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xc) (rerun: 64) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (rerun: 64) close(r1) 556.254175ms ago: executing program 1 (id=4707): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}]}]}}]}, 0x9c}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) 553.602433ms ago: executing program 0 (id=4708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004085) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002d40)={{{@in=@loopback, @in=@multicast1}}, {{@in=@dev}}}, &(0x7f0000000180)=0xe8) r7 = socket(0x8, 0x3, 0x0) getpeername$packet(r7, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) ioctl$SIOCGETVIFCNT(r7, 0x61e3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc, &(0x7f0000006600), 0x0, 0x0, 0x0, 0x40040}, 0x20004010) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) r9 = socket(0x10, 0x2, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r10, 0x1}, 0x14}}, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x2c, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) (async) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000006680)={0x7}, 0x1) (async) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000000), 0x4) 484.393819ms ago: executing program 3 (id=4709): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000540)) connect(r0, &(0x7f00000001c0)=@x25, 0x80) 316.057989ms ago: executing program 1 (id=4710): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}}) r2 = socket(0x2b, 0x80000, 0x8) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)={0x1358, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7d1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1eb7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe8a7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @private1, 0xd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb25b}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f27c33de87da82196fda81b0dbdadd27d588833b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a771ddf261db63ee83dc3a635518e54b379ba1980fb5a517820fc5ed"}}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "f3ff14a27c6e3deb26c7ad15039c1e5c6d9a65e3ab119adeb43ff17a58b9854b8e9107b53662e7d5b963f4505cd4a8df0375f896229684a3456a2094de7a52479545e41b2fc716318ff20211f8f19bab2e6a7eb26fdd3bf1ca0690c4ea890ceb5c49d16f456a807259acde361fd4cd42d2f9e96480f8d16622bd52cbafa6942d210a4e8418a341fbed9d4798eaa0d4196bde0125125355762c80"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "2d5276f5b3bf4fa3dadb6ee010fc3c805e9fb223f6e272"}}]}, @TIPC_NLA_NODE={0x1058, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "e76f7986da3f06498240d66f2afe1b9e589b5cdc0b0df7ebc4eab979cbf2c68b98072ad7310f33b1c4e5e4560d23c07868d359e990e9be72161aa373a498e13b49d350fa47b15f426776fa"}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x2008000}, 0x40) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 314.588256ms ago: executing program 2 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000380)={r1, r1, 0x4c66, 0x1000, &(0x7f0000000680)="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", 0xff, 0x2, 0x6, 0x9, 0xb9, 0x1, 0x6cb2, 'syz0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 235.053334ms ago: executing program 3 (id=4712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000000c0)=""/172, &(0x7f0000000300)=0xac) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x10) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xfffffdb9, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 234.420802ms ago: executing program 0 (id=4713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620", 0x2b0}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 153.827817ms ago: executing program 2 (id=4714): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xfffffffffffffefb}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 142.824854ms ago: executing program 4 (id=4715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000400000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 79.798896ms ago: executing program 1 (id=4716): bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc, 0x84963d6d0e1cae28, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @value=r0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x20000000, @loopback, 0x5}}, {{0xa, 0x4e21, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x30, r6, 0x101, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="9f"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 78.863608ms ago: executing program 0 (id=4717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000eb7e57fd06b6e9d1cf957cf6d48e23473f4a4122f260e7ed9c0256388f57843008496a4f539963370dc82f3d48deba42f8baef7a09a5a154bb9c6f542b0b2b6e77a69308a4594601b03d4f639f163c845b98becb3de47618d37da18c3091c46aedc8caf1a327550000ed2b5d669641b31ce9feacce3a90560b28ff0ff9b51115f76f35f8c3f591f6fa87beefcb8f2916", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0x29, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x88) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2, @ANYRES16=r4], 0x4c}}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x4c, 0x25, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0xfff2}, {0x1, 0xfff3}, {0xfff3, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40880) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"}) 0s ago: executing program 4 (id=4718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x2200, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x2, @loopback}}}, 0x3a) (async) getsockname$packet(r3, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x3) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0xfffefffe) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0x3136}, @mss={0x2, 0x10000}, @window={0x3, 0x0, 0x7fd}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xaed}, @sack_perm], 0x8) sendto$inet(r1, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4", 0x1c, 0xe044, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) ioctl(r0, 0x75, &(0x7f0000000200)="7466ff02faf8b40e7bca0cd3e6c45cde289c98a8aa9ba8c46fb7dafe34720cf3b80673fdea2ab50d3faa5d95195afb4ff4d3613fedcc73c5a496e740745145855d2002a516be8710f3979694bcd897bc61fda2ba415fcaa942e9176c12439fed0dde279a264f60ee2ddc736c52b2a4bad95e4f7613304d6a078762bf958af6ae4a538bc1013997a32b4d16614f5f8c0354d41caf7ddd7396baf8c0c55d56175a69e10fe4f670be9a3bff2f4cde44472826e9d2c68737f39faf911ecd743137a2b3c610e7260b3b0d9ed623c47265b0e5902044d2d5082fb7d6888c701f79a370d4bb9d5cefdc39") (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): de [ 332.941217][T14968] veth1_macvtap: entered promiscuous mode [ 333.036308][T14968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.079329][T14968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.152171][T10099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.161919][T10101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.197957][T10096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.224787][T10096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.234570][T15246] C speed is unknown, defaulting to 1000 [ 333.291294][T15246] lo speed is unknown, defaulting to 1000 [ 334.017184][ T7464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.045227][ T7464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.084650][T15272] syzkaller0: entered promiscuous mode [ 334.090185][T15272] syzkaller0: entered allmulticast mode [ 334.224980][T15277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 334.412264][T15268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.429410][T10096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.456127][T10096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.604170][T15294] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 334.672077][ T5873] Bluetooth: hci5: command tx timeout [ 335.640074][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.652642][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.660612][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.671105][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.680358][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.861208][T15346] __nla_validate_parse: 7 callbacks suppressed [ 335.861227][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 335.897614][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 335.917369][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 335.980561][T15341] C speed is unknown, defaulting to 1000 [ 335.995912][T15341] lo speed is unknown, defaulting to 1000 [ 336.111946][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 336.209931][T15360] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2975'. [ 336.795299][T15384] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 336.829923][T15384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.849286][T15384] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2984'. [ 336.878794][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 336.980502][T15398] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2990'. [ 337.115695][T15341] chnl_net:caif_netlink_parms(): no params data found [ 337.241656][T15405] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.275317][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2992'. [ 337.296689][T15410] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 337.308531][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2991'. [ 337.511503][T15402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2991'. [ 337.666551][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.682112][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.701032][T15341] bridge_slave_0: entered allmulticast mode [ 337.718035][T15341] bridge_slave_0: entered promiscuous mode [ 337.725633][ T5880] Bluetooth: hci0: command tx timeout [ 337.743751][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.751066][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.759245][T15341] bridge_slave_1: entered allmulticast mode [ 337.767283][T15341] bridge_slave_1: entered promiscuous mode [ 337.872684][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.906035][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.965858][T15341] team0: Port device team_slave_0 added [ 337.976081][T15341] team0: Port device team_slave_1 added [ 338.059445][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.067604][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.095461][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.109387][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.117105][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.143597][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.207767][T15341] hsr_slave_0: entered promiscuous mode [ 338.215355][T15341] hsr_slave_1: entered promiscuous mode [ 338.221555][T15341] debugfs: 'hsr0' already exists in 'hsr' [ 338.227442][T15341] Cannot create hsr debugfs directory [ 338.377263][T15341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.388998][T15341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.466300][T15341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.476877][T15341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.571615][T15341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.582432][T15341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.637533][T15341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.648573][T15341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.779088][T15341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.790142][T15341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.800370][T15341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.811251][T15341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.899894][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.923184][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.937686][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.944991][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.960913][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.968142][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.116082][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.313234][ T55] block nbd2: Possible stuck request ffff8880258d5080: control (read@0,1024B). Runtime 150 seconds [ 339.330275][ T55] block nbd2: Possible stuck request ffff8880258d5240: control (read@1024,1024B). Runtime 150 seconds [ 339.341938][ T55] block nbd2: Possible stuck request ffff8880258d5400: control (read@2048,1024B). Runtime 150 seconds [ 339.354447][ T55] block nbd2: Possible stuck request ffff8880258d55c0: control (read@3072,1024B). Runtime 150 seconds [ 339.649809][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.667807][T15459] netlink: 'syz.0.3005': attribute type 11 has an invalid length. [ 339.794223][ T5880] Bluetooth: hci0: command tx timeout [ 339.837375][T15341] veth0_vlan: entered promiscuous mode [ 339.894454][T15341] veth1_vlan: entered promiscuous mode [ 339.972830][T15478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.004708][T15341] veth0_macvtap: entered promiscuous mode [ 340.020357][T15477] ip6_vti0: entered promiscuous mode [ 340.024155][T15480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.026831][T15477] ip6_vti0: entered allmulticast mode [ 340.068472][T15475] C speed is unknown, defaulting to 1000 [ 340.088084][T15475] lo speed is unknown, defaulting to 1000 [ 340.089790][T15341] veth1_macvtap: entered promiscuous mode [ 340.135779][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.206061][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.257876][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.278647][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.311185][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.332492][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.415616][T15491] netlink: 'syz.4.3014': attribute type 8 has an invalid length. [ 340.478990][T15491] netlink: 'syz.4.3014': attribute type 10 has an invalid length. [ 340.734792][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.756296][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.934596][T15504] __nla_validate_parse: 9 callbacks suppressed [ 340.934614][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3018'. [ 340.941030][T10101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.956708][T15510] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3019'. [ 340.998132][T10101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.128010][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 341.395080][T15529] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3026'. [ 341.395150][T15527] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 341.518658][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 341.712610][T15539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 341.885117][ T5880] Bluetooth: hci0: command tx timeout [ 342.178353][T15570] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3038'. [ 342.401195][T15580] unknown channel width for channel at 909000KHz? [ 342.438966][T15580] unknown channel width for channel at 909000KHz? [ 342.616478][T15591] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3046'. [ 342.678012][T15594] netlink: zone id is out of range [ 342.705536][T15594] netlink: del zone limit has 4 unknown bytes [ 342.853949][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 342.990105][T15604] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3050'. [ 343.074173][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.083044][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.084055][T15611] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3051'. [ 343.104105][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.130275][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.149631][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.214252][T15619] netlink: 'syz.2.3053': attribute type 3 has an invalid length. [ 343.357934][T15610] C speed is unknown, defaulting to 1000 [ 343.381286][T15610] lo speed is unknown, defaulting to 1000 [ 343.838731][T15645] xt_limit: Overflow, try lower: 604147548/4200216962 [ 343.952730][ T5880] Bluetooth: hci0: command tx timeout [ 344.002275][T15650] netlink: 'syz.4.3064': attribute type 16 has an invalid length. [ 344.064610][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.085544][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.209954][T15651] bridge6: entered promiscuous mode [ 344.238822][T15651] bridge6: entered allmulticast mode [ 344.631020][T15610] chnl_net:caif_netlink_parms(): no params data found [ 344.770560][T10464] IPVS: starting estimator thread 0... [ 344.779746][T15677] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 344.872522][T15679] IPVS: using max 25 ests per chain, 60000 per kthread [ 344.970321][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.993014][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.012313][T15610] bridge_slave_0: entered allmulticast mode [ 345.031211][T15610] bridge_slave_0: entered promiscuous mode [ 345.188549][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.214839][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.235166][ T5880] Bluetooth: hci1: command tx timeout [ 345.247400][T15610] bridge_slave_1: entered allmulticast mode [ 345.277993][T15610] bridge_slave_1: entered promiscuous mode [ 345.447244][T10097] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 345.466990][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.485799][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.569371][T15610] team0: Port device team_slave_0 added [ 345.626652][T15610] team0: Port device team_slave_1 added [ 345.703002][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.718449][T15724] Bluetooth: MGMT ver 1.23 [ 345.722946][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.722981][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.727492][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.802094][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.861565][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.959557][T15729] __nla_validate_parse: 2 callbacks suppressed [ 345.959578][T15729] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3087'. [ 346.071305][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 346.085975][T15610] hsr_slave_0: entered promiscuous mode [ 346.097294][T15734] netlink: 'syz.0.3088': attribute type 5 has an invalid length. [ 346.106588][T15610] hsr_slave_1: entered promiscuous mode [ 346.113821][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 346.124086][T15610] debugfs: 'hsr0' already exists in 'hsr' [ 346.129852][T15610] Cannot create hsr debugfs directory [ 346.145515][T15734] geneve2: entered promiscuous mode [ 346.151604][T15734] geneve2: entered allmulticast mode [ 346.182822][T10099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 346.207285][ T7449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 346.228963][ T7449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 346.326780][ T7449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 346.363228][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 346.380654][T15738] tipc: Started in network mode [ 346.387300][T15738] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 346.403903][T15738] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 346.413244][T15738] tipc: Enabled bearer , priority 10 [ 346.419748][T15741] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3092'. [ 346.730786][T15756] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 347.251160][T15610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.282268][T15610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.284134][T15780] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 347.313689][ T5880] Bluetooth: hci1: command tx timeout [ 347.449465][T15610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.467511][T15610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.496234][T15788] team0: Device gtp0 is of different type [ 347.543371][T10464] tipc: Node number set to 1 [ 347.620770][T15610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.634333][T15610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.723808][T15610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.749044][T15610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.760370][T15796] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3104'. [ 348.029435][T15610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.049559][T15610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 348.079349][T15610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 348.100819][T15610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.415258][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.469659][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.487630][T15820] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 348.531791][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.539021][T10099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.570050][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.577297][T10099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.691186][T15610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.799199][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 348.893784][T15834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.952653][T15835] vlan2: entered allmulticast mode [ 348.960288][T15835] bond1: entered allmulticast mode [ 348.968996][T15844] netlink: 604 bytes leftover after parsing attributes in process `syz.4.3118'. [ 349.028449][T15842] netlink: 'syz.4.3118': attribute type 29 has an invalid length. [ 349.091147][T15850] netlink: 'syz.3.3120': attribute type 1 has an invalid length. [ 349.122447][T15851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.142275][T15850] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3120'. [ 349.224582][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 349.312676][T15862] 8021q: VLANs not supported on ip_vti0 [ 349.377102][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.395599][ T5880] Bluetooth: hci1: command tx timeout [ 349.584955][T15610] veth0_vlan: entered promiscuous mode [ 349.627925][T15610] veth1_vlan: entered promiscuous mode [ 349.760355][T15610] veth0_macvtap: entered promiscuous mode [ 349.790260][T15879] tipc: Enabling of bearer rejected, failed to enable media [ 349.837032][T15610] veth1_macvtap: entered promiscuous mode [ 349.862930][T15885] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 349.925862][T15887] openvswitch: netlink: Flow key attr not present in new flow. [ 350.014865][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.131474][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.139291][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.192233][ T96] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 180 seconds [ 350.203618][ T96] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 180 seconds [ 350.219715][ T96] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 180 seconds [ 350.233012][ T96] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 180 seconds [ 350.270131][T15900] sctp: [Deprecated]: syz.3.3134 (pid 15900) Use of int in max_burst socket option. [ 350.270131][T15900] Use struct sctp_assoc_value instead [ 350.317443][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.335331][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.493551][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.507453][ T7464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.518042][ T7464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.543946][ T7464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.556389][ T7464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.586314][ T7464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.606350][ T7464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.691259][ T7464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.703988][ T7464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.025224][T15925] __nla_validate_parse: 2 callbacks suppressed [ 351.025246][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 351.031468][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 351.050356][T10097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.064461][T10097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.142741][T10101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.150633][T10101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.166638][T15937] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 351.223408][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3146'. [ 351.244799][T15937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.389786][T15947] tipc: Started in network mode [ 351.396393][ T1212] IPVS: starting estimator thread 0... [ 351.403401][T15947] tipc: Node identity ac1414aa, cluster identity 4711 [ 351.411124][T15947] tipc: Enabled bearer , priority 10 [ 351.472155][ T5880] Bluetooth: hci1: command tx timeout [ 351.502536][T15948] IPVS: using max 26 ests per chain, 62400 per kthread [ 351.602285][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'. [ 352.073322][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3153'. [ 352.194401][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 352.322367][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3156'. [ 352.362864][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.372701][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.380518][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.390300][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.400482][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.413072][T10464] tipc: Node number set to 2886997162 [ 352.762854][T15986] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.783093][T15986] gretap1: entered promiscuous mode [ 352.794116][T15986] gretap1: entered allmulticast mode [ 352.954625][T15992] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3161'. [ 352.966273][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3161'. [ 352.977698][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3161'. [ 352.996857][ T1160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.025796][ T1160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.060250][T15994] tap0: tun_chr_ioctl cmd 1074025677 [ 353.074718][T15994] tap0: linktype set to 65534 [ 353.085959][T15999] syz_tun: entered allmulticast mode [ 353.091513][ T1160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.109285][ T1160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.126984][T15982] C speed is unknown, defaulting to 1000 [ 353.166504][T15995] syz_tun: left allmulticast mode [ 353.176805][T15982] lo speed is unknown, defaulting to 1000 [ 353.194863][T16008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 353.253679][T16008] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 353.278350][T16008] gretap3: entered promiscuous mode [ 353.288442][T16008] gretap3: entered allmulticast mode [ 353.397697][T16014] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 353.423353][T16013] tipc: Started in network mode [ 353.428279][T16013] tipc: Node identity 2279c7c601d9, cluster identity 4711 [ 353.457651][T16013] tipc: Enabled bearer , priority 0 [ 353.493994][T16019] netlink: 'syz.2.3169': attribute type 1 has an invalid length. [ 353.633764][T16019] bond3: entered promiscuous mode [ 353.644625][T16019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.669599][T16013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.679462][T16013] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 353.691952][T16013] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 353.709155][T16013] bond3: (slave wireguard0): making interface the new active one [ 353.717841][T16013] wireguard0: entered promiscuous mode [ 353.725522][T16013] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 353.750334][T16023] geneve2: entered promiscuous mode [ 353.755946][T16023] geneve2: entered allmulticast mode [ 353.785323][T16019] syzkaller0: entered promiscuous mode [ 353.790942][T16019] syzkaller0: entered allmulticast mode [ 353.817996][T10097] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 353.848180][T16023] tipc: Enabling of bearer rejected, failed to enable media [ 353.873011][T10097] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 353.893029][T10097] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 353.912070][T16026] tipc: Enabling of bearer rejected, failed to enable media [ 353.948225][T10097] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 353.989035][T16010] tipc: Resetting bearer [ 354.016845][T16010] tipc: Disabling bearer [ 354.396106][T16058] syzkaller0: entered allmulticast mode [ 354.498857][T15982] chnl_net:caif_netlink_parms(): no params data found [ 354.535232][ T7464] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 354.753648][ T5873] Bluetooth: hci2: command tx timeout [ 356.591152][T16105] __nla_validate_parse: 11 callbacks suppressed [ 356.591173][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3192'. [ 356.642764][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 356.643565][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.663476][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.670894][T15982] bridge_slave_0: entered allmulticast mode [ 356.679627][T15982] bridge_slave_0: entered promiscuous mode [ 356.688986][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.697194][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.704883][T15982] bridge_slave_1: entered allmulticast mode [ 356.713472][T15982] bridge_slave_1: entered promiscuous mode [ 356.733599][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 356.784184][T10099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.795359][T10099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.810381][T10099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.820426][T10099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.833652][ T5873] Bluetooth: hci2: command tx timeout [ 356.903180][T10462] hid-generic 0005:0106:5505.0001: item fetching failed at offset 0/1 [ 356.916686][T10462] hid-generic 0005:0106:5505.0001: probe with driver hid-generic failed with error -22 [ 356.935880][T15982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.997096][T16107] syzkaller0: entered promiscuous mode [ 357.004680][T16107] syzkaller0: entered allmulticast mode [ 357.038844][T15982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.058596][T16113] tipc: Enabled bearer , priority 0 [ 357.086460][T16107] tipc: Resetting bearer [ 357.094633][T16122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.160629][T16106] tipc: Resetting bearer [ 358.674611][T16106] tipc: Disabling bearer [ 358.778341][T15982] team0: Port device team_slave_0 added [ 358.801227][T15982] team0: Port device team_slave_1 added [ 358.868146][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 358.914606][T15982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.921601][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.923220][ T5873] Bluetooth: hci2: command tx timeout [ 358.989543][T15982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.003126][T15982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.010143][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.037334][T15982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.126849][T16156] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3207'. [ 359.166318][T15982] hsr_slave_0: entered promiscuous mode [ 359.174218][T15982] hsr_slave_1: entered promiscuous mode [ 359.180650][T15982] debugfs: 'hsr0' already exists in 'hsr' [ 359.188529][T15982] Cannot create hsr debugfs directory [ 359.244193][T16166] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3209'. [ 359.280239][T16166] openvswitch: netlink: Actions may not be safe on all matching packets [ 359.634400][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'. [ 359.781319][T15982] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.818063][T15982] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.842582][T15982] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.848325][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 359.938141][T15982] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.963346][T15982] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.982817][T15982] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.060447][T15982] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.072745][T15982] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.101789][T15982] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.179066][T15982] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.216255][T15982] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.246014][T15982] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.276486][T16205] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.298672][T16206] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.566836][T15982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.617263][T15982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.660009][T15982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.707945][T15982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.923780][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3227'. [ 361.000208][ T5873] Bluetooth: hci2: command tx timeout [ 361.165496][T15982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.250794][T15982] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.268925][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.276150][ T7449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.340968][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.348237][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.527255][T16247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3232'. [ 361.646354][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'. [ 361.889414][T15982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.991418][T15982] veth0_vlan: entered promiscuous mode [ 362.027135][T15982] veth1_vlan: entered promiscuous mode [ 362.129087][T15982] veth0_macvtap: entered promiscuous mode [ 362.147536][T15982] veth1_macvtap: entered promiscuous mode [ 362.175177][T15982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.201414][T15982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.247900][ T7464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.280920][ T7464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.322553][ T7464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.345576][ T7464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.504641][ T7464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.518571][ T7464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.578146][T16286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3244'. [ 362.650376][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.677516][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.684665][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3244'. [ 362.694971][T16286] bridge_slave_1: left allmulticast mode [ 362.700926][T16286] bridge_slave_1: left promiscuous mode [ 362.706957][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.718868][T16286] bridge_slave_0: left allmulticast mode [ 362.726211][T16286] bridge_slave_0: left promiscuous mode [ 362.733634][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.946233][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3246'. [ 363.132337][T16306] tipc: Enabled bearer , priority 0 [ 363.166617][T16306] syzkaller0: entered promiscuous mode [ 363.222008][T16306] syzkaller0: entered allmulticast mode [ 363.259006][T16306] tipc: Resetting bearer [ 363.286459][T16305] tipc: Resetting bearer [ 363.371109][T16305] tipc: Disabling bearer [ 363.422783][T16313] netlink: 'syz.4.3250': attribute type 1 has an invalid length. [ 363.446747][T16313] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.485945][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.520610][T16311] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.542461][T16311] netlink: 242 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.551550][T16311] netlink: 74 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.582442][T16311] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3250'. [ 363.682039][ T5874] syz_tun (unregistering): left promiscuous mode [ 363.724054][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.737715][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.747497][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.769846][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.799595][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.917345][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.952695][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.068302][T16320] C speed is unknown, defaulting to 1000 [ 364.123876][T16320] lo speed is unknown, defaulting to 1000 [ 364.213833][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.240733][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.272917][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.489360][T16347] hsr_slave_1 (unregistering): left promiscuous mode [ 364.577997][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.601820][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.676607][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.712282][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.741929][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.758303][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.768305][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.778560][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.787392][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.795541][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.803677][T16358] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 364.857862][T16365] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 364.910765][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.930088][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 365.811169][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 365.837608][ T13] bond16 (unregistering): (slave gretap2): Releasing active interface [ 365.880949][ T5873] Bluetooth: hci3: command tx timeout [ 365.947991][ T13] team0: Port device geneve0 removed [ 366.474966][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.484403][ T13] bond_slave_0: left allmulticast mode [ 366.491513][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.500658][ T13] bond_slave_1: left allmulticast mode [ 366.508129][ T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 366.519563][ T13] bridge_slave_1: left allmulticast mode [ 366.527357][ T13] bond0 (unregistering): Released all slaves [ 366.544830][ T13] bond1 (unregistering): Released all slaves [ 366.562172][ T13] bond2 (unregistering): Released all slaves [ 366.579835][ T13] bond3 (unregistering): Released all slaves [ 366.607827][ T13] bond4 (unregistering): Released all slaves [ 366.627190][ T13] bond5 (unregistering): Released all slaves [ 366.644048][ T13] bond6 (unregistering): Released all slaves [ 366.759841][ T13] bond7 (unregistering): (slave bond8): Releasing backup interface [ 366.771622][ T13] bond7 (unregistering): (slave bond9): Releasing backup interface [ 366.780952][ T13] bond7 (unregistering): Released all slaves [ 366.890134][ T13] bond8 (unregistering): Released all slaves [ 366.994835][ T13] bond9 (unregistering): Released all slaves [ 367.010962][ T13] bond10 (unregistering): Released all slaves [ 367.027595][ T13] bond11 (unregistering): Released all slaves [ 367.046474][ T13] bond12 (unregistering): Released all slaves [ 367.066599][ T13] bond13 (unregistering): Released all slaves [ 367.087456][ T13] bond14 (unregistering): Released all slaves [ 367.108153][ T13] bond15 (unregistering): Released all slaves [ 367.127715][ T13] bond16 (unregistering): Released all slaves [ 367.281000][T16389] C speed is unknown, defaulting to 1000 [ 367.330938][T16389] lo speed is unknown, defaulting to 1000 [ 367.388645][T16413] __nla_validate_parse: 10 callbacks suppressed [ 367.388665][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 367.603693][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3277'. [ 367.687971][T16320] chnl_net:caif_netlink_parms(): no params data found [ 367.698497][T16422] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3278'. [ 367.743100][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'. [ 367.782124][T16422] nbd4: detected capacity change from 0 to 127 [ 367.790544][ T5873] block nbd4: Receive control failed (result -32) [ 367.957790][ T5873] Bluetooth: hci3: command tx timeout [ 368.188174][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.220049][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.243011][T16320] bridge_slave_0: entered allmulticast mode [ 368.270988][T16320] bridge_slave_0: entered promiscuous mode [ 368.294580][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.311185][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.329782][T16320] bridge_slave_1: entered allmulticast mode [ 368.349710][T16320] bridge_slave_1: entered promiscuous mode [ 368.465722][T16452] Bluetooth: MGMT ver 1.23 [ 368.576741][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.650717][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.673674][T16461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3291'. [ 368.881142][T16459] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3292'. [ 369.041499][T16320] team0: Port device team_slave_0 added [ 369.095636][T16320] team0: Port device team_slave_1 added [ 369.118335][ T13] : left promiscuous mode [ 369.243739][T16474] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 369.266196][T16474] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 369.291235][ T13] tipc: Disabling bearer [ 369.302843][ T13] tipc: Left network mode [ 369.395652][T16487] validate_nla: 48 callbacks suppressed [ 369.395672][T16487] netlink: 'syz.1.3298': attribute type 2 has an invalid length. [ 369.410799][ T55] block nbd2: Possible stuck request ffff8880258d5080: control (read@0,1024B). Runtime 180 seconds [ 369.422664][ T55] block nbd2: Possible stuck request ffff8880258d5240: control (read@1024,1024B). Runtime 180 seconds [ 369.436103][ T55] block nbd2: Possible stuck request ffff8880258d5400: control (read@2048,1024B). Runtime 180 seconds [ 369.447733][ T55] block nbd2: Possible stuck request ffff8880258d55c0: control (read@3072,1024B). Runtime 180 seconds [ 369.497485][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.515164][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.558330][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.578863][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.585958][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.612730][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.947522][T16320] hsr_slave_0: entered promiscuous mode [ 369.976258][T16320] hsr_slave_1: entered promiscuous mode [ 369.998801][T16320] debugfs: 'hsr0' already exists in 'hsr' [ 370.012068][T16320] Cannot create hsr debugfs directory [ 370.032912][ T5873] Bluetooth: hci3: command tx timeout [ 370.044572][T16503] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3302'. [ 370.811654][T16537] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3315'. [ 371.001382][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3320'. [ 371.335269][T16565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3324'. [ 371.586419][T16581] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 371.633713][T16571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 371.683373][T16585] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 371.743468][T16581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.115224][ T5873] Bluetooth: hci3: command tx timeout [ 372.295958][T16320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.361122][T16320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.399924][T16619] netlink: 'syz.1.3343': attribute type 3 has an invalid length. [ 372.484043][T16622] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 372.496922][T16320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.566528][T16320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.765145][T16638] __nla_validate_parse: 4 callbacks suppressed [ 372.765164][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 372.803726][T16642] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3351'. [ 372.976852][T16659] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 373.001601][T16660] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 373.234158][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'. [ 373.247361][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.418618][ T13] batadv_slave_0: left promiscuous mode [ 373.501229][ T13] hsr_slave_0: left promiscuous mode [ 373.518836][ T13] hsr_slave_1: left promiscuous mode [ 373.540115][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.569169][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.630486][ T13] pim6reg (unregistering): left allmulticast mode [ 373.664192][ T13] pim6reg527 (unregistering): left allmulticast mode [ 374.137096][ T13] team0 (unregistering): Port device team_slave_1 removed [ 374.186085][ T13] team0 (unregistering): Port device team_slave_0 removed [ 374.648364][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.680022][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.687271][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.763608][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.770848][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.333060][ T13] IPVS: stop unused estimator thread 0... [ 375.534693][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.639504][T16723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.818201][T16320] veth0_vlan: entered promiscuous mode [ 375.870852][T16732] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3379'. [ 375.898678][T16320] veth1_vlan: entered promiscuous mode [ 376.057038][T16320] veth0_macvtap: entered promiscuous mode [ 376.137964][T16320] veth1_macvtap: entered promiscuous mode [ 376.226439][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.241544][T16747] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3383'. [ 376.299236][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.367486][T10101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.400052][T10101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.454264][T10101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.467890][T10101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.495732][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3386'. [ 376.662298][ T10] IPVS: starting estimator thread 0... [ 376.772509][T16763] IPVS: using max 27 ests per chain, 64800 per kthread [ 376.800881][T10101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.819984][T10101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.917259][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.944965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.056306][T16774] netlink: 'syz.2.3392': attribute type 15 has an invalid length. [ 377.068844][T16774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3392'. [ 377.092785][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 377.105390][T16774] block nbd0: reconnected socket [ 377.110383][T16774] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.135731][ T5873] block nbd0: Receive control failed (result -32) [ 377.271159][T16788] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3395'. [ 377.304772][T16786] bond1: entered promiscuous mode [ 377.319229][T16786] bond1: entered allmulticast mode [ 377.325127][T16786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.495347][T16786] bond1 (unregistering): Released all slaves [ 377.770121][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 377.849145][T16799] bond1: entered allmulticast mode [ 377.866283][T16799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.047159][T16815] bridge_slave_0: left allmulticast mode [ 378.090850][T16815] bridge_slave_0: left promiscuous mode [ 378.121994][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.180876][T16815] bridge_slave_1: left allmulticast mode [ 378.196917][T16815] bridge_slave_1: left promiscuous mode [ 378.220231][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.256119][T16815] bond0: (slave bond_slave_0): Releasing backup interface [ 378.297901][T16815] bond0: (slave bond_slave_1): Releasing backup interface [ 378.375792][T16815] team0: Port device team_slave_0 removed [ 378.394406][T16815] team0: Port device team_slave_1 removed [ 378.401096][T16815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.422468][T16815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.431226][T16815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.440414][T16815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.473648][T16818] bridge_slave_0: left allmulticast mode [ 378.479610][T16818] bridge_slave_0: left promiscuous mode [ 378.486983][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.499735][T16818] bridge_slave_1: left allmulticast mode [ 378.507368][T16818] bridge_slave_1: left promiscuous mode [ 378.514800][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.532005][T16818] bond0: (slave bond_slave_0): Releasing backup interface [ 378.550016][T16818] bond0: (slave bond_slave_1): Releasing backup interface [ 378.569683][T16818] team0: Port device team_slave_0 removed [ 378.580728][T16818] team0: Port device team_slave_1 removed [ 378.587481][T16818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.598620][T16818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.623601][T16818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.631076][T16818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.666561][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 378.686799][T16828] tc_dump_action: action bad kind [ 378.790552][T16841] netlink: 1108 bytes leftover after parsing attributes in process `syz.1.3408'. [ 378.923972][T16849] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3409'. [ 378.962370][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 379.101207][T16857] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3414'. [ 379.502784][T16879] netlink: 'syz.0.3425': attribute type 1 has an invalid length. [ 379.538285][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 379.656446][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3427'. [ 380.274037][ T96] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 210 seconds [ 380.285269][ T96] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 210 seconds [ 380.296842][ T96] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 210 seconds [ 380.309720][ T96] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 210 seconds [ 380.323505][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3438'. [ 380.361124][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'. [ 380.372137][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3438'. [ 380.410636][T16920] netlink: 'syz.4.3438': attribute type 10 has an invalid length. [ 380.479586][T16929] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 380.513785][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.532693][T16920] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.730504][T16941] syzkaller0: entered promiscuous mode [ 380.762915][T16941] syzkaller0: entered allmulticast mode [ 380.808686][T16947] tipc: Enabled bearer , priority 0 [ 380.854095][T16941] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 381.009539][T16957] tipc: Resetting bearer [ 381.022477][T16938] tipc: Resetting bearer [ 381.114271][T16938] tipc: Disabling bearer [ 381.275295][T16967] netlink: 'syz.3.3455': attribute type 58 has an invalid length. [ 381.373611][T16973] netlink: 'syz.1.3458': attribute type 11 has an invalid length. [ 381.788085][T16994] tc_dump_action: action bad kind [ 381.788287][T16997] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDR3âëp( [ 382.070324][T17015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.391031][T17036] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 383.001266][T17065] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 383.231643][T17073] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 383.762872][T17114] __nla_validate_parse: 12 callbacks suppressed [ 383.762893][T17114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3499'. [ 383.784972][T17110] syzkaller0: entered promiscuous mode [ 383.790491][T17110] syzkaller0: entered allmulticast mode [ 383.800722][T17112] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3501'. [ 383.834332][T17110] tipc: Enabled bearer , priority 0 [ 383.851293][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'. [ 383.886578][T17110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 383.949624][T17110] tipc: Resetting bearer [ 383.992339][T17110] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3498'. [ 384.053417][T17102] tipc: Resetting bearer [ 384.132398][T17102] tipc: Disabling bearer [ 384.259934][T17138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3509'. [ 384.377108][T17140] IPVS: ip_vs_edit_dest(): server weight less than zero [ 384.411071][ T5956] IPVS: starting estimator thread 0... [ 384.466332][T17145] IPv6: sit1: Disabled Multicast RS [ 384.493013][T17145] sit1: entered allmulticast mode [ 384.518183][T17142] IPVS: using max 28 ests per chain, 67200 per kthread [ 384.617654][T17148] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3512'. [ 384.765865][T17163] netlink: 'syz.1.3515': attribute type 1 has an invalid length. [ 384.847756][T17163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.858990][T17166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'. [ 384.889022][T17168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.892605][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 384.905625][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'. [ 384.916548][T17168] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.929876][T17168] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 384.954825][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3515'. [ 385.014262][T17171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.034635][T17175] netlink: 'syz.4.3519': attribute type 1 has an invalid length. [ 385.489280][T17197] netlink: 'syz.4.3525': attribute type 21 has an invalid length. [ 385.994305][T17219] syzkaller0: entered promiscuous mode [ 386.007288][T17219] syzkaller0: entered allmulticast mode [ 386.026935][T17218] tipc: Started in network mode [ 386.046670][T17218] tipc: Node identity 7edb2f42d14, cluster identity 4711 [ 386.068373][T17218] tipc: Enabled bearer , priority 0 [ 386.128601][T10101] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.166419][T10101] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.216906][T10101] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.253593][T10101] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.292851][T17218] tipc: Resetting bearer [ 386.360285][T17218] tipc: Disabling bearer [ 386.610385][T17253] netlink: 'syz.0.3542': attribute type 8 has an invalid length. [ 386.947015][T17272] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 387.046844][T17274] bond1 (unregistering): Released all slaves [ 387.156705][T17272] bond1: entered promiscuous mode [ 387.166470][T17272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.793701][T17311] nbd: couldn't find a device at index -373156329 [ 387.995775][T17324] "syz.2.3565" (17324) uses obsolete ecb(arc4) skcipher [ 388.102724][T17330] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 388.780284][T10097] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.780355][T17365] __nla_validate_parse: 23 callbacks suppressed [ 388.780368][T17365] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.3577'. [ 388.801020][T10097] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.831202][T17365] openvswitch: netlink: Message has 5 unknown bytes. [ 388.870503][T10097] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.900393][T10097] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.068469][T17382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3581'. [ 389.082675][T17382] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 389.175803][T17387] netlink: 'syz.0.3584': attribute type 11 has an invalid length. [ 389.194397][T17387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3584'. [ 389.305596][T17396] vlan2: entered allmulticast mode [ 389.327978][T17396] hsr0: entered allmulticast mode [ 389.335868][T17396] hsr_slave_0: entered allmulticast mode [ 389.341579][T17396] hsr_slave_1: entered allmulticast mode [ 389.397729][T17407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3590'. [ 389.424358][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 389.434850][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 389.457343][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 389.457366][T10097] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.468330][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 389.491066][T10097] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.523763][T10097] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.553397][T10096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.608835][T17407] delete_channel: no stack [ 389.730191][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 389.749577][T17421] bridge1: entered promiscuous mode [ 389.796828][T17421] bridge1: entered allmulticast mode [ 389.810527][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 389.838311][T17425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 390.183969][T17440] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 390.362985][T17452] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 390.371227][T17452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.895748][T17490] openvswitch: netlink: IP tunnel dst address not specified [ 390.959233][T17487] macvtap1: entered allmulticast mode [ 390.972131][T17487] veth0_macvtap: entered allmulticast mode [ 391.566875][T17524] gretap0: entered promiscuous mode [ 391.630847][T17526] block nbd0: NBD_DISCONNECT [ 391.637077][T17526] block nbd0: Send disconnect failed -32 [ 391.651992][T17526] block nbd0: shutting down sockets [ 391.712623][T17536] netlink: 'syz.3.3628': attribute type 13 has an invalid length. [ 391.773268][T17538] tipc: Enabling of bearer rejected, failed to enable media [ 391.984215][T17547] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 392.057241][T17547] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 392.081431][T17547] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 392.141473][T17550] gretap2: entered promiscuous mode [ 392.163277][T17550] bond3: (slave gretap2): making interface the new active one [ 392.171354][T17550] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 392.189015][T17547] macvlan2: entered promiscuous mode [ 392.196499][T17547] macvlan2: entered allmulticast mode [ 392.203359][T17547] bond3: entered promiscuous mode [ 392.209483][T17547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.230633][T17547] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 392.253194][T17547] bond3: left promiscuous mode [ 392.716072][T17576] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 392.863487][T10096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.887707][T10096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.914274][ T5880] Bluetooth: hci3: command 0x0405 tx timeout [ 392.914957][T17591] unknown channel width for channel at 909000KHz? [ 392.972711][T17591] unknown channel width for channel at 909000KHz? [ 393.339657][T17606] bond0: (slave bond_slave_0): Releasing backup interface [ 393.371142][T17615] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 393.426043][T17606] bond0: (slave bond_slave_1): Releasing backup interface [ 393.488761][T17606] team0: Port device team_slave_0 removed [ 393.540244][T17606] team0: Port device team_slave_1 removed [ 393.566002][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.600630][T17606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.611540][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.629004][T17606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.675014][T17606] bond3: (slave gretap2): Releasing active interface [ 393.724625][T17604] syzkaller1: entered promiscuous mode [ 393.730148][T17604] syzkaller1: entered allmulticast mode [ 393.871335][T17638] __nla_validate_parse: 18 callbacks suppressed [ 393.871356][T17638] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3660'. [ 393.978189][T17643] tipc: Enabling of bearer rejected, already enabled [ 394.064604][T17651] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 394.474152][T17677] netlink: 'syz.0.3669': attribute type 1 has an invalid length. [ 394.677909][T17686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3673'. [ 394.992898][ T5880] Bluetooth: hci3: command 0x0405 tx timeout [ 395.514164][ T30] audit: type=1800 audit(1756575485.709:2): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3684" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=781 res=0 errno=0 [ 395.564315][T17716] netlink: 'syz.3.3682': attribute type 3 has an invalid length. [ 395.665432][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 395.685549][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'. [ 395.731093][T17720] syz.4.3685 uses old SIOCAX25GETINFO [ 395.734891][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 397.101615][T17728] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 397.297398][T17744] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3692'. [ 397.357523][T17744] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3692'. [ 397.368862][T17744] 0ªî{X¹¦: renamed from gretap0 [ 397.404378][T17744] 0ªî{X¹¦: left promiscuous mode [ 397.419551][T17744] 0ªî{X¹¦: entered allmulticast mode [ 397.439986][T17744] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 397.556996][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3697'. [ 397.557216][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 397.634846][T17762] bridge3: entered promiscuous mode [ 397.640308][T17762] bridge3: entered allmulticast mode [ 397.724055][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 397.927274][T17778] netlink: 'syz.3.3704': attribute type 2 has an invalid length. [ 398.205723][T17798] netlink: 'syz.2.3710': attribute type 1 has an invalid length. [ 398.328945][T17798] bond6: (slave bridge1): making interface the new active one [ 398.356250][T17798] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 398.473703][T17816] netlink: 'syz.2.3717': attribute type 4 has an invalid length. [ 398.956872][T17845] netlink: 'syz.4.3726': attribute type 4 has an invalid length. [ 398.967932][T17845] __nla_validate_parse: 13 callbacks suppressed [ 398.989555][T17845] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3726'. [ 399.074553][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3726'. [ 399.350182][T17857] netlink: 'syz.4.3730': attribute type 16 has an invalid length. [ 399.383478][T17857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 399.470803][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 399.480590][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.502852][ T55] block nbd2: Possible stuck request ffff8880258d5080: control (read@0,1024B). Runtime 210 seconds [ 399.515040][ T55] block nbd2: Possible stuck request ffff8880258d5240: control (read@1024,1024B). Runtime 210 seconds [ 399.535770][ T55] block nbd2: Possible stuck request ffff8880258d5400: control (read@2048,1024B). Runtime 210 seconds [ 399.547429][ T55] block nbd2: Possible stuck request ffff8880258d55c0: control (read@3072,1024B). Runtime 210 seconds [ 399.786333][T17876] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3735'. [ 399.849034][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 400.143838][T17892] netlink: 'syz.2.3741': attribute type 9 has an invalid length. [ 400.266128][T17897] veth0: entered promiscuous mode [ 400.332485][T17894] veth3: entered promiscuous mode [ 400.378239][T17896] veth0: left promiscuous mode [ 400.503152][T17912] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3749'. [ 400.578151][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'. [ 400.812818][T17937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3753'. [ 400.835361][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3754'. [ 400.901137][T17942] netlink: 'syz.4.3756': attribute type 8 has an invalid length. [ 400.992145][T17948] netlink: 'syz.4.3757': attribute type 21 has an invalid length. [ 401.001470][T17948] netlink: 'syz.4.3757': attribute type 4 has an invalid length. [ 401.011036][T17948] netlink: 'syz.4.3757': attribute type 5 has an invalid length. [ 401.021232][T17948] netlink: 'syz.4.3757': attribute type 21 has an invalid length. [ 401.030269][T17948] netlink: 'syz.4.3757': attribute type 4 has an invalid length. [ 401.512025][T10099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.539341][T10099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.568350][T10099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.595505][T10099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.767652][T17984] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 401.786082][T17986] tipc: Enabling of bearer rejected, already enabled [ 402.099138][T18000] macsec0: entered promiscuous mode [ 402.110057][T18000] macsec0: entered allmulticast mode [ 402.166564][T18007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.174359][T18007] IPv6: NLM_F_CREATE should be set when creating new route [ 402.373580][T18020] tipc: Enabled bearer , priority 12 [ 402.528108][T18024] tipc: Enabled bearer , priority 0 [ 402.565347][T18024] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 402.624382][T18031] xt_socket: unknown flags 0xd0 [ 402.632016][T18025] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 402.685177][T18023] tipc: Resetting bearer [ 402.806309][T18023] tipc: Disabling bearer [ 402.824468][T18035] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 402.902014][T18042] IPVS: length: 214 != 8 [ 403.081328][T18055] sctp: [Deprecated]: syz.1.3794 (pid 18055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.081328][T18055] Use struct sctp_sack_info instead [ 403.392316][T10462] tipc: Node number set to 597739462 [ 403.488626][T18072] dummy0: entered promiscuous mode [ 403.535950][T18072] batadv_slave_1: entered promiscuous mode [ 403.560639][T18076] validate_nla: 4 callbacks suppressed [ 403.560657][T18076] netlink: 'syz.3.3801': attribute type 72 has an invalid length. [ 403.666144][T18080] tipc: Enabled bearer , priority 10 [ 403.743295][T18082] netlink: 'syz.3.3806': attribute type 7 has an invalid length. [ 403.982532][T18099] netlink: 'syz.2.3810': attribute type 1 has an invalid length. [ 404.000132][T18101] syzkaller1: entered promiscuous mode [ 404.007805][T18101] syzkaller1: entered allmulticast mode [ 404.017064][T18100] __nla_validate_parse: 26 callbacks suppressed [ 404.017090][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3808'. [ 404.073730][T18103] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3811'. [ 404.117678][T18105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3810'. [ 404.127737][T18099] veth5: entered promiscuous mode [ 404.135799][T18099] veth5: entered allmulticast mode [ 404.303838][T18113] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 404.328069][T18113] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 404.340722][T18113] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3814'. [ 404.360705][T18113] unsupported nla_type 58 [ 404.438379][T18118] C speed is unknown, defaulting to 1000 [ 404.465497][T18118] lo speed is unknown, defaulting to 1000 [ 404.565138][T18126] vlan2: entered promiscuous mode [ 404.576147][T18126] vlan2: entered allmulticast mode [ 404.588117][T18126] hsr_slave_1: entered allmulticast mode [ 404.604140][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3820'. [ 404.624016][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 404.676521][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3819'. [ 404.682680][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3820'. [ 404.712053][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 404.937320][T18137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3823'. [ 405.349335][T18155] netlink: 'syz.3.3829': attribute type 2 has an invalid length. [ 405.572719][T18157] tipc: Enabled bearer , priority 0 [ 405.586296][T18157] syzkaller0: entered promiscuous mode [ 405.592660][T18157] syzkaller0: entered allmulticast mode [ 405.688122][T18157] tipc: Resetting bearer [ 405.768261][T18153] tipc: Resetting bearer [ 405.830787][T18153] tipc: Disabling bearer [ 406.033634][T18185] netlink: 'syz.4.3837': attribute type 1 has an invalid length. [ 406.112997][T18189] nft_compat: unsupported protocol 0 [ 406.130211][T18191] nft_compat: unsupported protocol 0 [ 406.145384][T18185] gretap1: entered promiscuous mode [ 406.155636][T18185] bond4: (slave gretap1): making interface the new active one [ 406.165260][T18185] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 406.471651][T18206] netem: unknown loss type 0 [ 406.498690][T18206] netem: change failed [ 406.715767][T18223] openvswitch: netlink: Missing key (keys=40, expected=100) [ 406.838209][T18222] delete_channel: no stack [ 406.878743][T18230] ip6gre1: entered allmulticast mode [ 406.919875][T18226] netlink: 'syz.0.3850': attribute type 2 has an invalid length. [ 407.332563][T18251] netlink: 'syz.2.3861': attribute type 1 has an invalid length. [ 407.519886][T18265] netem: change failed [ 408.005033][T18291] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 408.192418][T18301] netlink: 'syz.4.3875': attribute type 7 has an invalid length. [ 409.140100][T18347] __nla_validate_parse: 31 callbacks suppressed [ 409.140122][T18347] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3894'. [ 409.192742][T18347] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3894'. [ 409.362344][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'. [ 409.590767][T18386] validate_nla: 2 callbacks suppressed [ 409.590788][T18386] netlink: 'syz.2.3907': attribute type 5 has an invalid length. [ 409.628143][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 409.715327][T18396] netlink: 'syz.0.3910': attribute type 10 has an invalid length. [ 409.720575][T18399] netlink: 'syz.0.3910': attribute type 10 has an invalid length. [ 409.724295][T18396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3910'. [ 409.724329][T18396] batadv0: entered promiscuous mode [ 409.724346][T18396] batadv0: entered allmulticast mode [ 409.725094][T18396] bridge0: port 1(batadv0) entered blocking state [ 409.725215][T18396] bridge0: port 1(batadv0) entered disabled state [ 409.728398][T18396] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 409.839465][T18399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3910'. [ 409.850619][T18399] bridge0: port 1(batadv0) entered blocking state [ 409.912234][T18399] bridge0: port 1(batadv0) entered disabled state [ 409.922627][T18399] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 409.953204][T18402] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3911'. [ 410.159245][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 410.219037][T18413] batadv0: left allmulticast mode [ 410.356530][ T96] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 240 seconds [ 410.367479][ T96] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 240 seconds [ 410.378979][ T96] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 240 seconds [ 410.390836][ T96] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 240 seconds [ 410.434324][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'. [ 410.469933][T18424] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3922'. [ 410.656993][T18445] netlink: 'syz.2.3926': attribute type 6 has an invalid length. [ 410.691825][T18445] netlink: 'syz.2.3926': attribute type 5 has an invalid length. [ 410.740897][T18449] netlink: 'syz.1.3928': attribute type 4 has an invalid length. [ 410.776214][T18449] `: renamed from bond0 (while UP) [ 412.116761][T18486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.181804][T10099] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.216990][T10099] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.233366][T18499] netlink: 'syz.1.3938': attribute type 1 has an invalid length. [ 412.351353][T10099] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.361893][T10099] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.370857][T10099] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.381253][T10099] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.390289][T10099] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.399785][T10099] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.480148][T18504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.493397][T18504] bond0: (slave bond4): making interface the new active one [ 412.501323][T18504] bond0: (slave bond4): Enslaving as an active interface with an up link [ 412.537794][T18505] veth3: entered allmulticast mode [ 412.599347][T18509] bond0: (slave gretap3): Enslaving as a backup interface with an up link [ 412.616529][T18499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.935321][T18537] netlink: 'syz.0.3950': attribute type 33 has an invalid length. [ 413.791570][T18576] tipc: Enabled bearer , priority 0 [ 413.803936][T18576] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 413.814030][T18576] tipc: Resetting bearer [ 413.897481][T18581] syzkaller0: entered promiscuous mode [ 413.903379][T18581] syzkaller0: entered allmulticast mode [ 413.914177][T18574] tipc: Resetting bearer [ 413.941243][T18574] tipc: Disabling bearer [ 414.542635][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068980400: rx timeout, send abort [ 414.553141][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888068980400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 415.303036][T18589] __nla_validate_parse: 45 callbacks suppressed [ 415.303058][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 415.329031][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3968'. [ 415.344524][T18600] veth0: entered promiscuous mode [ 415.357700][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3968'. [ 415.364708][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 415.430527][T18594] veth0: left promiscuous mode [ 415.543241][T18606] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 415.556879][T18606] team0: Port device dummy0 added [ 415.601230][T18613] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3973'. [ 415.690413][T18615] wg1: entered promiscuous mode [ 415.699605][T18615] wg1: entered allmulticast mode [ 415.905049][T18628] netlink: 'syz.2.3978': attribute type 7 has an invalid length. [ 415.931098][T18628] : entered promiscuous mode [ 415.995132][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3980'. [ 416.018453][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 416.108650][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 416.148148][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 416.159520][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 416.499467][T18663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.513949][T18669] netlink: 'syz.3.3994': attribute type 13 has an invalid length. [ 416.594593][T18660] wg1: left allmulticast mode [ 416.650322][T18660] gretap1: left allmulticast mode [ 416.656144][T18660] geneve2: left allmulticast mode [ 416.678511][T18666] vlan2: entered allmulticast mode [ 416.685123][T18666] bond5: entered allmulticast mode [ 416.707731][T18669] lo: entered promiscuous mode [ 416.713036][T18669] lo: entered allmulticast mode [ 416.724208][T18669] tunl0: entered promiscuous mode [ 416.738530][T18669] tunl0: entered allmulticast mode [ 416.749250][T18669] gre0: entered promiscuous mode [ 416.756684][T18669] gre0: entered allmulticast mode [ 416.774604][T18669] gretap0: entered promiscuous mode [ 416.795721][T18669] gretap0: entered allmulticast mode [ 416.815209][T18669] gretap0: refused to change device tx_queue_len [ 416.825128][T18669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 416.875833][T18683] tipc: Enabled bearer , priority 0 [ 416.895350][T18682] tipc: Enabling of bearer rejected, already enabled [ 416.932565][T18683] syzkaller0: entered promiscuous mode [ 416.948277][T18683] syzkaller0: entered allmulticast mode [ 417.013874][T18679] tipc: Resetting bearer [ 417.106188][T18679] tipc: Disabling bearer [ 417.695716][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.713458][T18731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.021950][T18751] bridge_slave_1: left allmulticast mode [ 418.043445][T18751] bridge_slave_1: left promiscuous mode [ 418.059489][T18751] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.088719][T18751] bridge_slave_0: left allmulticast mode [ 418.106164][T18751] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.199276][T18762] netlink: 'syz.3.4023': attribute type 83 has an invalid length. [ 418.644485][T18788] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 418.835154][T18791] syzkaller0: entered promiscuous mode [ 418.840793][T18791] syzkaller0: entered allmulticast mode [ 419.032844][T18803] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 419.274583][T18817] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.951958][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 421.472330][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.912586][T18811] Set syz1 is full, maxelem 65536 reached [ 423.310222][T18834] __nla_validate_parse: 20 callbacks suppressed [ 423.310244][T18834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4047'. [ 423.467231][T18844] netlink: 'syz.1.4049': attribute type 9 has an invalid length. [ 423.536495][T18844] netlink: 'syz.1.4049': attribute type 9 has an invalid length. [ 423.564100][T18845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4047'. [ 423.697703][ T1160] wlan0: failed to finalize CSA on link 0, disconnecting [ 423.817027][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'. [ 423.841901][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 423.954334][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'. [ 423.967946][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 424.055145][T18868] netlink: 'syz.3.4057': attribute type 1 has an invalid length. [ 424.119731][T18868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.138826][T18878] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4059'. [ 424.213173][T18880] bond3: (slave geneve3): making interface the new active one [ 424.228032][T18880] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 424.297846][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4062'. [ 424.715733][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 424.788849][T18917] netlink: 'syz.4.4072': attribute type 1 has an invalid length. [ 424.799724][T18917] netlink: 'syz.4.4072': attribute type 4 has an invalid length. [ 424.827991][T18917] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4072'. [ 424.868833][T18917] NCSI netlink: No device for ifindex 458760 [ 424.933257][T18932] xt_HMARK: spi-set and port-set can't be combined [ 425.561341][T18973] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 425.947155][T18993] netlink: 'syz.1.4091': attribute type 10 has an invalid length. [ 425.993508][T18997] nft_compat: unsupported protocol 0 [ 426.037432][T18993] team0: Port device dummy0 added [ 426.044666][ T7449] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 426.058275][T19003] netlink: 'syz.1.4091': attribute type 10 has an invalid length. [ 426.109804][T19003] team0: Port device dummy0 removed [ 426.150635][T19003] `: (slave dummy0): Enslaving as an active interface with an up link [ 426.386901][T19018] syzkaller0: entered promiscuous mode [ 426.399314][T19018] syzkaller0: entered allmulticast mode [ 426.467012][T19024] netlink: 'syz.4.4099': attribute type 10 has an invalid length. [ 426.496109][T19024] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 426.540897][T19024] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 426.936058][T19031] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 427.029084][T19039] netlink: 'syz.1.4105': attribute type 5 has an invalid length. [ 427.183801][T19051] netlink: 'syz.0.4106': attribute type 33 has an invalid length. [ 428.505535][T19128] __nla_validate_parse: 20 callbacks suppressed [ 428.505556][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4132'. [ 428.592705][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 428.910582][T19151] validate_nla: 1 callbacks suppressed [ 428.910603][T19151] netlink: 'syz.1.4140': attribute type 17 has an invalid length. [ 428.921889][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 428.927468][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 428.943798][T19151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4140'. [ 428.966614][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4139'. [ 428.982088][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4139'. [ 428.991100][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4139'. [ 429.056437][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4139'. [ 429.180027][T19157] IPVS: set_ctl: invalid protocol: 2 172.30.1.2:20000 [ 429.479663][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 429.521791][T19170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.553846][ T55] block nbd2: Possible stuck request ffff8880258d5080: control (read@0,1024B). Runtime 240 seconds [ 429.565050][ T55] block nbd2: Possible stuck request ffff8880258d5240: control (read@1024,1024B). Runtime 240 seconds [ 429.578100][ T55] block nbd2: Possible stuck request ffff8880258d5400: control (read@2048,1024B). Runtime 240 seconds [ 429.590177][ T55] block nbd2: Possible stuck request ffff8880258d55c0: control (read@3072,1024B). Runtime 240 seconds [ 429.769796][T19185] netlink: 'syz.0.4151': attribute type 1 has an invalid length. [ 429.896537][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 429.911999][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 429.923143][T19185] netlink: 'syz.0.4151': attribute type 3 has an invalid length. [ 429.962008][T19185] netlink: 'syz.0.4151': attribute type 3 has an invalid length. [ 431.058560][T19250] geneve3: entered promiscuous mode [ 431.601093][T19275] batadv_slave_0: entered promiscuous mode [ 431.788828][T19282] vlan2: entered allmulticast mode [ 431.802826][T19282] bond0: entered allmulticast mode [ 431.814948][T19282] team0: entered allmulticast mode [ 431.820625][T19282] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 431.849284][T19272] batadv_slave_0: left promiscuous mode [ 432.269288][T19310] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 432.346595][T19310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 432.407780][T19316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 432.416736][T19316] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.428612][T19316] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 432.484847][T19315] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 432.527599][T19315] tipc: Enabled bearer , priority 0 [ 432.656199][T19315] syzkaller0: entered promiscuous mode [ 432.665173][T19315] syzkaller0: entered allmulticast mode [ 432.688838][T19331] tipc: Resetting bearer [ 432.703316][T19328] syzkaller1: entered promiscuous mode [ 432.709039][T19328] syzkaller1: entered allmulticast mode [ 432.717912][T19313] tipc: Resetting bearer [ 432.770559][T19313] tipc: Disabling bearer [ 433.301827][T19356] netlink: 'syz.3.4207': attribute type 1 has an invalid length. [ 433.370977][T19363] netlink: 'syz.0.4209': attribute type 1 has an invalid length. [ 433.564540][T19367] __nla_validate_parse: 25 callbacks suppressed [ 433.564561][T19367] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4212'. [ 433.621439][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4213'. [ 433.906186][T19391] netlink: 'syz.0.4221': attribute type 10 has an invalid length. [ 433.920887][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4221'. [ 433.935204][T19391] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 434.019087][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 434.035524][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'. [ 434.059688][T19394] netlink: 'syz.1.4220': attribute type 15 has an invalid length. [ 434.070979][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 434.082030][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 434.251071][T19411] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 434.314597][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4225'. [ 434.358010][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 434.487223][T19421] tipc: Enabling of bearer rejected, failed to enable media [ 434.666803][T19431] dvmrp0: entered allmulticast mode [ 434.683703][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'. [ 434.712768][T19431] dvmrp0: left allmulticast mode [ 434.784461][T19438] netlink: 'syz.0.4234': attribute type 30 has an invalid length. [ 434.792900][T19438] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 434.802483][T19438] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 435.158871][T19454] netlink: 'syz.1.4240': attribute type 5 has an invalid length. [ 435.392423][T19469] (unnamed net_device) (uninitialized): option use_carrier: invalid value (129) [ 435.417255][T19472] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 435.763028][T19492] openvswitch: netlink: Message has 5 unknown bytes. [ 435.775764][T19486] veth5: entered allmulticast mode [ 435.908844][T19503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.444831][T19531] netlink: 'syz.3.4265': attribute type 5 has an invalid length. [ 436.505005][T19537] veth0: entered promiscuous mode [ 436.593484][T19537] veth0 (unregistering): left promiscuous mode [ 436.620492][T19544] netlink: 'syz.3.4271': attribute type 21 has an invalid length. [ 436.630575][T19544] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.638730][T19544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.646079][T19544] IPv6: NLM_F_CREATE should be set when creating new route [ 436.653562][T19544] IPv6: NLM_F_CREATE should be set when creating new route [ 436.660804][T19544] IPv6: NLM_F_CREATE should be set when creating new route [ 436.671212][T19542] veth0: entered promiscuous mode [ 436.705481][T19544] netlink: 'syz.3.4271': attribute type 1 has an invalid length. [ 436.720803][T19544] netlink: 'syz.3.4271': attribute type 3 has an invalid length. [ 436.732109][T19544] NCSI netlink: No device for ifindex 131080 [ 436.739339][T19541] veth0: left promiscuous mode [ 436.869236][T19559] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 436.951559][T19556] sit0: entered promiscuous mode [ 436.956982][T19556] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 437.138129][T19570] netlink: 'syz.1.4278': attribute type 29 has an invalid length. [ 437.277433][T19584] netlink: 'syz.4.4279': attribute type 11 has an invalid length. [ 438.373123][T19649] tipc: Enabled bearer , priority 0 [ 438.394556][T19649] syzkaller0: entered promiscuous mode [ 438.400106][T19649] syzkaller0: entered allmulticast mode [ 438.538265][T19667] tipc: Resetting bearer [ 438.672380][T19646] tipc: Resetting bearer [ 438.721201][T19646] tipc: Disabling bearer [ 439.540439][T19728] __nla_validate_parse: 22 callbacks suppressed [ 439.540461][T19728] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4326'. [ 439.559701][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'. [ 439.904026][T19746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 440.035321][T19754] netlink: 'syz.0.4334': attribute type 3 has an invalid length. [ 440.048323][T19754] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4334'. [ 440.352852][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4337'. [ 440.379489][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4337'. [ 440.433185][ T96] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 270 seconds [ 440.448192][ T96] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 270 seconds [ 440.459538][ T96] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 270 seconds [ 440.470772][ T96] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 270 seconds [ 440.676684][T19780] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4342'. [ 440.689795][T19780] tipc: Bearer : already 2 bearers with priority 10 [ 440.698057][T19780] tipc: Bearer : trying with adjusted priority [ 440.705795][T19780] tipc: Enabled bearer , priority 9 [ 440.951413][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4346'. [ 441.066113][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4349'. [ 441.106620][T19801] netlink: 'syz.3.4349': attribute type 3 has an invalid length. [ 441.139056][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 441.158315][T19806] dummy0: entered promiscuous mode [ 441.193349][T19806] dummy0: left promiscuous mode [ 441.785507][T19848] netlink: 'syz.2.4361': attribute type 10 has an invalid length. [ 441.889989][T19856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4364'. [ 441.903518][T19853] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 442.014559][T19853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 442.645976][T19894] netlink: 'syz.2.4373': attribute type 1 has an invalid length. [ 442.710169][T19894] veth7: entered promiscuous mode [ 443.632363][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.664883][T19945] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 443.710717][T19947] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.091348][T19972] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 444.137516][T19975] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 444.410948][T19990] netlink: 'syz.4.4400': attribute type 9 has an invalid length. [ 444.444476][T19990] macvlan3: entered promiscuous mode [ 444.598890][T19996] bpq0: entered promiscuous mode [ 444.606330][T19996] bpq0: entered allmulticast mode [ 444.864307][T20013] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 444.890635][T20017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.033499][T20026] netlink: 'syz.1.4413': attribute type 2 has an invalid length. [ 445.054828][T20031] openvswitch: netlink: IPv4 tun info is not correct [ 445.086625][T20026] netlink: 'syz.1.4413': attribute type 2 has an invalid length. [ 445.126430][T20026] netlink: 'syz.1.4413': attribute type 1 has an invalid length. [ 445.166128][T20026] netlink: 'syz.1.4413': attribute type 1 has an invalid length. [ 445.497302][T20055] __nla_validate_parse: 6 callbacks suppressed [ 445.497322][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 445.526796][T20053] netlink: 'syz.2.4420': attribute type 1 has an invalid length. [ 445.544506][T20053] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 445.583812][T20055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4421'. [ 445.805146][T20078] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 445.975520][T20078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 445.983283][T20085] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 445.990957][T20078] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 446.005467][T20078] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 446.010498][T20087] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 446.233583][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 446.250426][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4432'. [ 446.408162][T20117] netlink: 'syz.2.4434': attribute type 32 has an invalid length. [ 446.467327][T20123] netlink: 'syz.2.4434': attribute type 12 has an invalid length. [ 446.592101][T20116] bond10: entered promiscuous mode [ 446.597396][T20116] bond10: entered allmulticast mode [ 446.604984][T20116] 8021q: adding VLAN 0 to HW filter on device bond10 [ 446.903354][T20144] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4439'. [ 446.929330][T20146] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.704944][T20195] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4459'. [ 448.149805][T20227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4471'. [ 448.238797][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4471'. [ 448.368362][T20233] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4474'. [ 448.508754][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4475'. [ 448.609984][T20245] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 448.660364][ T7449] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 448.692078][ T7449] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 448.750737][ T7449] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 448.796378][ T7449] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 449.047125][T20268] wg1: entered promiscuous mode [ 449.058953][T20268] wg1: entered allmulticast mode [ 449.687212][T20288] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 449.715954][T20288] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 450.291955][T20311] netlink: 'syz.3.4498': attribute type 15 has an invalid length. [ 450.726211][T20335] __nla_validate_parse: 5 callbacks suppressed [ 450.726233][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 450.771421][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 450.810565][T20337] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 450.822826][T20337] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 450.842382][T20337] netlink: zone id is out of range [ 450.875628][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4506'. [ 451.046293][T20350] netlink: 'syz.1.4509': attribute type 4 has an invalid length. [ 451.055410][T20346] sctp: [Deprecated]: syz.3.4508 (pid 20346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.055410][T20346] Use struct sctp_sack_info instead [ 451.301620][T20362] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4513'. [ 451.311234][T20362] gretap0: entered promiscuous mode [ 451.329919][T20362] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4513'. [ 451.373714][T20362] 0ªî{X¹¦: renamed from gretap0 [ 451.385780][T20362] 0ªî{X¹¦: left promiscuous mode [ 451.390938][T20362] 0ªî{X¹¦: entered allmulticast mode [ 451.399291][T20362] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 451.556855][T20377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4520'. [ 451.567289][T20378] openvswitch: netlink: IP tunnel dst address not specified [ 451.817500][T20391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.828067][T20390] netlink: 'syz.0.4518': attribute type 4 has an invalid length. [ 452.097887][T20410] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 452.136696][T20410] syzkaller0: entered promiscuous mode [ 452.155514][T20410] syzkaller0: entered allmulticast mode [ 452.218801][T20410] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 452.307643][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4535'. [ 452.353550][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 452.644133][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'. [ 452.655587][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'. [ 453.096555][T20471] openvswitch: netlink: Flow key attr not present in new flow. [ 453.976111][T20523] netlink: 'syz.4.4567': attribute type 10 has an invalid length. [ 453.976116][T20521] netlink: 'syz.0.4566': attribute type 21 has an invalid length. [ 454.154078][T20523] bond0: (slave team0): Releasing backup interface [ 454.161829][T20523] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 454.208257][T20523] team0: left allmulticast mode [ 454.220273][T20523] batman_adv: batadv0: Adding interface: team0 [ 454.231915][T20523] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.273689][T20523] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 454.837709][T20566] netlink: 'syz.0.4578': attribute type 72 has an invalid length. [ 455.406121][T20591] veth0: entered promiscuous mode [ 455.669843][T20604] netlink: 'syz.2.4589': attribute type 72 has an invalid length. [ 455.862345][T20606] nbd0: detected capacity change from 0 to 127 [ 455.917842][T20612] __nla_validate_parse: 21 callbacks suppressed [ 455.917861][T20612] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4593'. [ 455.962068][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4594'. [ 456.006217][ T5880] block nbd0: Receive control failed (result -32) [ 456.141910][T20620] Bluetooth: MGMT ver 1.23 [ 456.236040][T20624] veth0_to_bridge: entered promiscuous mode [ 456.284838][T20624] veth0_to_bridge: left promiscuous mode [ 456.527802][T20640] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4602'. [ 456.916575][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4608'. [ 456.943095][T20667] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4607'. [ 456.956460][T20667] openvswitch: netlink: Flow key attr not present in new flow. [ 456.966322][T20667] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4607'. [ 456.978978][T20667] openvswitch: netlink: Flow key attr not present in new flow. [ 457.348026][T20686] netlink: 'syz.2.4614': attribute type 10 has an invalid length. [ 457.418754][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 457.444629][T20689] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4615'. [ 457.452275][T20691] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 457.476916][T20694] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 457.546282][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 457.561016][T20694] 8021q: adding VLAN 0 to HW filter on device bond12 [ 457.649661][T20699] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 457.675860][T20704] FAULT_INJECTION: forcing a failure. [ 457.675860][T20704] name failslab, interval 1, probability 0, space 0, times 0 [ 457.696848][T20704] CPU: 0 UID: 0 PID: 20704 Comm: syz.4.4620 Not tainted syzkaller #0 PREEMPT(full) [ 457.696878][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.696894][T20704] Call Trace: [ 457.696903][T20704] [ 457.696911][T20704] dump_stack_lvl+0x189/0x250 [ 457.696941][T20704] ? __pfx____ratelimit+0x10/0x10 [ 457.696969][T20704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.696993][T20704] ? __pfx__printk+0x10/0x10 [ 457.697028][T20704] ? __pfx___might_resched+0x10/0x10 [ 457.697053][T20704] should_fail_ex+0x414/0x560 [ 457.697085][T20704] should_failslab+0xa8/0x100 [ 457.697116][T20704] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 457.697145][T20704] ? __alloc_skb+0x112/0x2d0 [ 457.697170][T20704] __alloc_skb+0x112/0x2d0 [ 457.697194][T20704] netlink_sendmsg+0x5c6/0xb30 [ 457.697224][T20704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.697247][T20704] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.697268][T20704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.697290][T20704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.697310][T20704] __sock_sendmsg+0x219/0x270 [ 457.697341][T20704] ____sys_sendmsg+0x505/0x830 [ 457.697370][T20704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.697403][T20704] ? import_iovec+0x74/0xa0 [ 457.697439][T20704] ___sys_sendmsg+0x21f/0x2a0 [ 457.697465][T20704] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.697529][T20704] ? __fget_files+0x2a/0x420 [ 457.697559][T20704] ? __fget_files+0x3a0/0x420 [ 457.697602][T20704] __x64_sys_sendmsg+0x19b/0x260 [ 457.697627][T20704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.697661][T20704] ? __pfx_ksys_write+0x10/0x10 [ 457.697685][T20704] ? rcu_is_watching+0x15/0xb0 [ 457.697711][T20704] ? do_syscall_64+0xbe/0x3b0 [ 457.697734][T20704] do_syscall_64+0xfa/0x3b0 [ 457.697751][T20704] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.697780][T20704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.697800][T20704] ? clear_bhb_loop+0x60/0xb0 [ 457.697825][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.697850][T20704] RIP: 0033:0x7f7a18d8ebe9 [ 457.697869][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.697887][T20704] RSP: 002b:00007f7a19c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.697909][T20704] RAX: ffffffffffffffda RBX: 00007f7a18fc5fa0 RCX: 00007f7a18d8ebe9 [ 457.697924][T20704] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 457.697936][T20704] RBP: 00007f7a19c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.697949][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.697960][T20704] R13: 00007f7a18fc6038 R14: 00007f7a18fc5fa0 R15: 00007fffdcea3e18 [ 457.697995][T20704] [ 457.999393][ T5880] Bluetooth: hci5: command 0x0406 tx timeout [ 458.185144][T20703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4618'. [ 458.408534][T20731] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 458.450938][T20731] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 458.487728][T20732] batman_adv: batadv0: Removing interface: team0 [ 458.507632][T20737] netlink: 'syz.3.4629': attribute type 17 has an invalid length. [ 458.520977][T20732] team0: Device vti0 is up. Set it down before adding it as a team port [ 459.641308][ T55] block nbd2: Possible stuck request ffff8880258d5080: control (read@0,1024B). Runtime 270 seconds [ 459.654337][ T55] block nbd2: Possible stuck request ffff8880258d5240: control (read@1024,1024B). Runtime 270 seconds [ 459.666180][ T55] block nbd2: Possible stuck request ffff8880258d5400: control (read@2048,1024B). Runtime 270 seconds [ 459.677577][ T55] block nbd2: Possible stuck request ffff8880258d55c0: control (read@3072,1024B). Runtime 270 seconds [ 459.855225][T20768] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 460.058466][T20800] FAULT_INJECTION: forcing a failure. [ 460.058466][T20800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.144270][T20800] CPU: 0 UID: 0 PID: 20800 Comm: syz.4.4648 Not tainted syzkaller #0 PREEMPT(full) [ 460.144300][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.144314][T20800] Call Trace: [ 460.144322][T20800] [ 460.144331][T20800] dump_stack_lvl+0x189/0x250 [ 460.144360][T20800] ? __pfx____ratelimit+0x10/0x10 [ 460.144392][T20800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.144416][T20800] ? __pfx__printk+0x10/0x10 [ 460.144445][T20800] ? __might_fault+0xb0/0x130 [ 460.144486][T20800] should_fail_ex+0x414/0x560 [ 460.144519][T20800] _copy_from_iter+0x1de/0x1790 [ 460.144547][T20800] ? rcu_is_watching+0x15/0xb0 [ 460.144570][T20800] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 460.144600][T20800] ? __pfx__copy_from_iter+0x10/0x10 [ 460.144623][T20800] ? __build_skb_around+0x257/0x3e0 [ 460.144660][T20800] ? netlink_sendmsg+0x642/0xb30 [ 460.144676][T20800] ? skb_put+0x11b/0x210 [ 460.144700][T20800] netlink_sendmsg+0x6b2/0xb30 [ 460.144729][T20800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.144752][T20800] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.144774][T20800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.144796][T20800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.144815][T20800] __sock_sendmsg+0x219/0x270 [ 460.144846][T20800] ____sys_sendmsg+0x505/0x830 [ 460.144874][T20800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.144907][T20800] ? import_iovec+0x74/0xa0 [ 460.144946][T20800] ___sys_sendmsg+0x21f/0x2a0 [ 460.144971][T20800] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.145050][T20800] ? __fget_files+0x2a/0x420 [ 460.145084][T20800] ? __fget_files+0x3a0/0x420 [ 460.145126][T20800] __x64_sys_sendmsg+0x19b/0x260 [ 460.145153][T20800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.145186][T20800] ? __pfx_ksys_write+0x10/0x10 [ 460.145217][T20800] ? rcu_is_watching+0x15/0xb0 [ 460.145243][T20800] ? do_syscall_64+0xbe/0x3b0 [ 460.145266][T20800] do_syscall_64+0xfa/0x3b0 [ 460.145284][T20800] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.145313][T20800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.145333][T20800] ? clear_bhb_loop+0x60/0xb0 [ 460.145359][T20800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.145378][T20800] RIP: 0033:0x7f7a18d8ebe9 [ 460.145397][T20800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.145414][T20800] RSP: 002b:00007f7a19c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.145436][T20800] RAX: ffffffffffffffda RBX: 00007f7a18fc5fa0 RCX: 00007f7a18d8ebe9 [ 460.145451][T20800] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 460.145464][T20800] RBP: 00007f7a19c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 460.145476][T20800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.145487][T20800] R13: 00007f7a18fc6038 R14: 00007f7a18fc5fa0 R15: 00007fffdcea3e18 [ 460.145520][T20800] [ 460.938916][T20831] netlink: 'syz.3.4658': attribute type 4 has an invalid length. [ 460.996866][T20835] tap0: tun_chr_ioctl cmd 2148553947 [ 461.300458][T20849] FAULT_INJECTION: forcing a failure. [ 461.300458][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 461.321528][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.2.4663 Not tainted syzkaller #0 PREEMPT(full) [ 461.321557][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.321570][T20849] Call Trace: [ 461.321578][T20849] [ 461.321587][T20849] dump_stack_lvl+0x189/0x250 [ 461.321616][T20849] ? __pfx____ratelimit+0x10/0x10 [ 461.321644][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.321671][T20849] ? __pfx__printk+0x10/0x10 [ 461.321701][T20849] ? __pfx___might_resched+0x10/0x10 [ 461.321720][T20849] ? fs_reclaim_acquire+0x7d/0x100 [ 461.321756][T20849] should_fail_ex+0x414/0x560 [ 461.321788][T20849] should_failslab+0xa8/0x100 [ 461.321820][T20849] __kmalloc_noprof+0xcb/0x4f0 [ 461.321853][T20849] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 461.321883][T20849] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 461.321916][T20849] genl_family_rcv_msg_doit+0xb8/0x300 [ 461.321947][T20849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.321981][T20849] ? apparmor_capable+0x137/0x1b0 [ 461.322007][T20849] ? bpf_lsm_capable+0x9/0x20 [ 461.322033][T20849] ? security_capable+0x7e/0x2e0 [ 461.322070][T20849] genl_rcv_msg+0x60e/0x790 [ 461.322100][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.322122][T20849] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 461.322159][T20849] netlink_rcv_skb+0x208/0x470 [ 461.322186][T20849] ? __lock_acquire+0xab9/0xd20 [ 461.322214][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.322238][T20849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.322289][T20849] ? down_read+0x1ad/0x2e0 [ 461.322312][T20849] genl_rcv+0x28/0x40 [ 461.322332][T20849] netlink_unicast+0x82f/0x9e0 [ 461.322369][T20849] ? __pfx_netlink_unicast+0x10/0x10 [ 461.322397][T20849] ? netlink_sendmsg+0x642/0xb30 [ 461.322409][T20849] ? skb_put+0x11b/0x210 [ 461.322429][T20849] netlink_sendmsg+0x805/0xb30 [ 461.322451][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.322468][T20849] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.322485][T20849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.322502][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.322517][T20849] __sock_sendmsg+0x219/0x270 [ 461.322541][T20849] ____sys_sendmsg+0x505/0x830 [ 461.322563][T20849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.322588][T20849] ? import_iovec+0x74/0xa0 [ 461.322610][T20849] ___sys_sendmsg+0x21f/0x2a0 [ 461.322629][T20849] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.322677][T20849] ? __fget_files+0x2a/0x420 [ 461.322700][T20849] ? __fget_files+0x3a0/0x420 [ 461.322733][T20849] __x64_sys_sendmsg+0x19b/0x260 [ 461.322752][T20849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.322778][T20849] ? __pfx_ksys_write+0x10/0x10 [ 461.322797][T20849] ? rcu_is_watching+0x15/0xb0 [ 461.322817][T20849] ? do_syscall_64+0xbe/0x3b0 [ 461.322835][T20849] do_syscall_64+0xfa/0x3b0 [ 461.322854][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.322877][T20849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.322893][T20849] ? clear_bhb_loop+0x60/0xb0 [ 461.322912][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.322928][T20849] RIP: 0033:0x7f1a28b8ebe9 [ 461.322943][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.322956][T20849] RSP: 002b:00007f1a29a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.322973][T20849] RAX: ffffffffffffffda RBX: 00007f1a28dc5fa0 RCX: 00007f1a28b8ebe9 [ 461.322985][T20849] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 461.322995][T20849] RBP: 00007f1a29a47090 R08: 0000000000000000 R09: 0000000000000000 [ 461.323005][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.323014][T20849] R13: 00007f1a28dc6038 R14: 00007f1a28dc5fa0 R15: 00007fff821f0b38 [ 461.323040][T20849] [ 461.785265][T20853] siw: device registration error -23 [ 461.871646][T20856] __nla_validate_parse: 4 callbacks suppressed [ 461.896022][T20856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4665'. [ 461.929410][T20858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4665'. [ 461.940212][T20863] netlink: 'syz.4.4666': attribute type 33 has an invalid length. [ 462.120472][T20874] sch_fq: defrate 0 ignored. [ 462.180337][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4672'. [ 462.250000][T20888] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4673'. [ 462.298549][T20887] netlink: 'syz.2.4674': attribute type 24 has an invalid length. [ 462.362636][T20891] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 462.435854][T20891] netlink: 'syz.3.4675': attribute type 2 has an invalid length. [ 462.456073][T20891] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 462.600765][T20900] FAULT_INJECTION: forcing a failure. [ 462.600765][T20900] name failslab, interval 1, probability 0, space 0, times 0 [ 462.613803][T20900] CPU: 0 UID: 0 PID: 20900 Comm: syz.0.4677 Not tainted syzkaller #0 PREEMPT(full) [ 462.613833][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.613846][T20900] Call Trace: [ 462.613854][T20900] [ 462.613863][T20900] dump_stack_lvl+0x189/0x250 [ 462.613893][T20900] ? __pfx____ratelimit+0x10/0x10 [ 462.613923][T20900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.613948][T20900] ? __pfx__printk+0x10/0x10 [ 462.613980][T20900] ? __pfx___might_resched+0x10/0x10 [ 462.614000][T20900] ? fs_reclaim_acquire+0x7d/0x100 [ 462.614045][T20900] should_fail_ex+0x414/0x560 [ 462.614077][T20900] should_failslab+0xa8/0x100 [ 462.614109][T20900] __kmalloc_noprof+0xcb/0x4f0 [ 462.614135][T20900] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 462.614168][T20900] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 462.614202][T20900] genl_family_rcv_msg_doit+0xb8/0x300 [ 462.614235][T20900] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 462.614269][T20900] ? apparmor_capable+0x137/0x1b0 [ 462.614295][T20900] ? bpf_lsm_capable+0x9/0x20 [ 462.614321][T20900] ? security_capable+0x7e/0x2e0 [ 462.614359][T20900] genl_rcv_msg+0x60e/0x790 [ 462.614391][T20900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.614414][T20900] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 462.614453][T20900] netlink_rcv_skb+0x208/0x470 [ 462.614481][T20900] ? __lock_acquire+0xab9/0xd20 [ 462.614510][T20900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.614536][T20900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.614588][T20900] ? down_read+0x1ad/0x2e0 [ 462.614611][T20900] genl_rcv+0x28/0x40 [ 462.614633][T20900] netlink_unicast+0x82f/0x9e0 [ 462.614671][T20900] ? __pfx_netlink_unicast+0x10/0x10 [ 462.614702][T20900] ? netlink_sendmsg+0x642/0xb30 [ 462.614718][T20900] ? skb_put+0x11b/0x210 [ 462.614742][T20900] netlink_sendmsg+0x805/0xb30 [ 462.614771][T20900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.614795][T20900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.614817][T20900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.614838][T20900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.614857][T20900] __sock_sendmsg+0x219/0x270 [ 462.614888][T20900] ____sys_sendmsg+0x505/0x830 [ 462.614928][T20900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.614960][T20900] ? import_iovec+0x74/0xa0 [ 462.614987][T20900] ___sys_sendmsg+0x21f/0x2a0 [ 462.615011][T20900] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.615079][T20900] ? __fget_files+0x2a/0x420 [ 462.615108][T20900] ? __fget_files+0x3a0/0x420 [ 462.615150][T20900] __x64_sys_sendmsg+0x19b/0x260 [ 462.615174][T20900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.615207][T20900] ? __pfx_ksys_write+0x10/0x10 [ 462.615231][T20900] ? rcu_is_watching+0x15/0xb0 [ 462.615257][T20900] ? do_syscall_64+0xbe/0x3b0 [ 462.615280][T20900] do_syscall_64+0xfa/0x3b0 [ 462.615296][T20900] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.615324][T20900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.615344][T20900] ? clear_bhb_loop+0x60/0xb0 [ 462.615368][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.615387][T20900] RIP: 0033:0x7f8199d8ebe9 [ 462.615405][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.615423][T20900] RSP: 002b:00007f819acd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.615445][T20900] RAX: ffffffffffffffda RBX: 00007f8199fc5fa0 RCX: 00007f8199d8ebe9 [ 462.615459][T20900] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 462.615471][T20900] RBP: 00007f819acd9090 R08: 0000000000000000 R09: 0000000000000000 [ 462.615483][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.615494][T20900] R13: 00007f8199fc6038 R14: 00007f8199fc5fa0 R15: 00007ffc720dbe48 [ 462.615527][T20900] [ 463.215626][T20910] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4682'. [ 463.228755][T20910] veth0: entered promiscuous mode [ 463.234717][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4682'. [ 463.298968][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4682'. [ 464.145964][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4695'. [ 464.227086][T20966] team1: entered promiscuous mode [ 464.232670][T20966] team1: entered allmulticast mode [ 464.285607][T20976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4697'. [ 464.510128][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4700'. [ 464.745098][T20997] netlink: 'syz.1.4704': attribute type 178 has an invalid length. [ 465.244467][T21017] bpq0: left promiscuous mode [ 465.269688][T21017] bpq0: left allmulticast mode [ 465.417286][T21031] [ 465.419673][T21031] ====================================================== [ 465.426835][T21031] WARNING: possible circular locking dependency detected [ 465.433966][T21031] syzkaller #0 Not tainted [ 465.438382][T21031] ------------------------------------------------------ [ 465.445396][T21031] syz.3.4712/21031 is trying to acquire lock: [ 465.451723][T21031] ffffffff8f68e058 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 465.461061][T21031] [ 465.461061][T21031] but task is already holding lock: [ 465.468422][T21031] ffff888046393e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 465.477753][T21031] [ 465.477753][T21031] which lock already depends on the new lock. [ 465.477753][T21031] [ 465.488157][T21031] [ 465.488157][T21031] the existing dependency chain (in reverse order) is: [ 465.497167][T21031] [ 465.497167][T21031] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 465.505253][T21031] lock_acquire+0x120/0x360 [ 465.510287][T21031] _raw_spin_lock_bh+0x36/0x50 [ 465.515579][T21031] nr_rt_device_down+0x12a/0x720 [ 465.521036][T21031] nr_device_event+0x137/0x150 [ 465.526321][T21031] notifier_call_chain+0x1b6/0x3e0 [ 465.531955][T21031] __dev_notify_flags+0x18d/0x2e0 [ 465.537516][T21031] netif_change_flags+0xe8/0x1a0 [ 465.542974][T21031] dev_change_flags+0x130/0x260 [ 465.548360][T21031] dev_ioctl+0x7b4/0x1150 [ 465.553220][T21031] sock_do_ioctl+0x22c/0x300 [ 465.558343][T21031] sock_ioctl+0x576/0x790 [ 465.563206][T21031] __se_sys_ioctl+0xf9/0x170 [ 465.568325][T21031] do_syscall_64+0xfa/0x3b0 [ 465.573352][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.579785][T21031] [ 465.579785][T21031] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 465.587616][T21031] lock_acquire+0x120/0x360 [ 465.592673][T21031] _raw_spin_lock_bh+0x36/0x50 [ 465.597962][T21031] nr_rt_device_down+0xa9/0x720 [ 465.603337][T21031] nr_device_event+0x137/0x150 [ 465.608626][T21031] notifier_call_chain+0x1b6/0x3e0 [ 465.614262][T21031] __dev_notify_flags+0x18d/0x2e0 [ 465.619806][T21031] netif_change_flags+0xe8/0x1a0 [ 465.625266][T21031] dev_change_flags+0x130/0x260 [ 465.630638][T21031] dev_ioctl+0x7b4/0x1150 [ 465.635493][T21031] sock_do_ioctl+0x22c/0x300 [ 465.640616][T21031] sock_ioctl+0x576/0x790 [ 465.645474][T21031] __se_sys_ioctl+0xf9/0x170 [ 465.650602][T21031] do_syscall_64+0xfa/0x3b0 [ 465.655631][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.662052][T21031] [ 465.662052][T21031] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 465.669963][T21031] validate_chain+0xb9b/0x2140 [ 465.675267][T21031] __lock_acquire+0xab9/0xd20 [ 465.680479][T21031] lock_acquire+0x120/0x360 [ 465.685523][T21031] _raw_spin_lock_bh+0x36/0x50 [ 465.690853][T21031] nr_remove_neigh+0x25/0xe0 [ 465.695987][T21031] nr_add_node+0x1d9f/0x2570 [ 465.701123][T21031] nr_rt_ioctl+0xc12/0xd50 [ 465.706079][T21031] sock_do_ioctl+0xdc/0x300 [ 465.711116][T21031] sock_ioctl+0x576/0x790 [ 465.715978][T21031] __se_sys_ioctl+0xf9/0x170 [ 465.721201][T21031] do_syscall_64+0xfa/0x3b0 [ 465.726234][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.732653][T21031] [ 465.732653][T21031] other info that might help us debug this: [ 465.732653][T21031] [ 465.742903][T21031] Chain exists of: [ 465.742903][T21031] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 465.742903][T21031] [ 465.756841][T21031] Possible unsafe locking scenario: [ 465.756841][T21031] [ 465.764380][T21031] CPU0 CPU1 [ 465.769756][T21031] ---- ---- [ 465.775118][T21031] lock(&nr_node->node_lock); [ 465.779891][T21031] lock(nr_node_list_lock); [ 465.787008][T21031] lock(&nr_node->node_lock); [ 465.794301][T21031] lock(nr_neigh_list_lock); [ 465.798985][T21031] [ 465.798985][T21031] *** DEADLOCK *** [ 465.798985][T21031] [ 465.807126][T21031] 1 lock held by syz.3.4712/21031: [ 465.812240][T21031] #0: ffff888046393e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 465.822019][T21031] [ 465.822019][T21031] stack backtrace: [ 465.827912][T21031] CPU: 1 UID: 0 PID: 21031 Comm: syz.3.4712 Not tainted syzkaller #0 PREEMPT(full) [ 465.827933][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.827944][T21031] Call Trace: [ 465.827952][T21031] [ 465.827961][T21031] dump_stack_lvl+0x189/0x250 [ 465.827986][T21031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.828006][T21031] ? __pfx__printk+0x10/0x10 [ 465.828028][T21031] ? stack_trace_save+0x9c/0xe0 [ 465.828054][T21031] print_circular_bug+0x2ee/0x310 [ 465.828074][T21031] check_noncircular+0x134/0x160 [ 465.828095][T21031] validate_chain+0xb9b/0x2140 [ 465.828110][T21031] ? do_syscall_64+0xfa/0x3b0 [ 465.828135][T21031] __lock_acquire+0xab9/0xd20 [ 465.828163][T21031] ? nr_remove_neigh+0x25/0xe0 [ 465.828185][T21031] lock_acquire+0x120/0x360 [ 465.828207][T21031] ? nr_remove_neigh+0x25/0xe0 [ 465.828232][T21031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.828252][T21031] ? nr_remove_neigh+0x25/0xe0 [ 465.828273][T21031] _raw_spin_lock_bh+0x36/0x50 [ 465.828295][T21031] ? nr_remove_neigh+0x25/0xe0 [ 465.828316][T21031] nr_remove_neigh+0x25/0xe0 [ 465.828339][T21031] nr_add_node+0x1d9f/0x2570 [ 465.828361][T21031] ? dev_get_by_name+0x21/0x200 [ 465.828381][T21031] ? dev_get_by_name+0x21/0x200 [ 465.828400][T21031] ? dev_get_by_name+0x21/0x200 [ 465.828418][T21031] ? nr_call_to_digi+0x136/0x1b0 [ 465.828440][T21031] nr_rt_ioctl+0xc12/0xd50 [ 465.828465][T21031] ? kasan_quarantine_put+0xdd/0x220 [ 465.828488][T21031] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 465.828514][T21031] ? apparmor_capable+0x137/0x1b0 [ 465.828538][T21031] ? capable+0x89/0xe0 [ 465.828554][T21031] ? nr_ioctl+0x1b1/0x3b0 [ 465.828571][T21031] sock_do_ioctl+0xdc/0x300 [ 465.828594][T21031] ? __pfx_sock_do_ioctl+0x10/0x10 [ 465.828614][T21031] ? __lock_acquire+0xab9/0xd20 [ 465.828645][T21031] sock_ioctl+0x576/0x790 [ 465.828665][T21031] ? __pfx_sock_ioctl+0x10/0x10 [ 465.828685][T21031] ? __fget_files+0x2a/0x420 [ 465.828709][T21031] ? __fget_files+0x3a0/0x420 [ 465.828738][T21031] ? __fget_files+0x2a/0x420 [ 465.828763][T21031] ? bpf_lsm_file_ioctl+0x9/0x20 [ 465.828784][T21031] ? __pfx_sock_ioctl+0x10/0x10 [ 465.828803][T21031] __se_sys_ioctl+0xf9/0x170 [ 465.828824][T21031] do_syscall_64+0xfa/0x3b0 [ 465.828838][T21031] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.828862][T21031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.828879][T21031] ? clear_bhb_loop+0x60/0xb0 [ 465.828897][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.828914][T21031] RIP: 0033:0x7fb4d118ebe9 [ 465.828930][T21031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.828946][T21031] RSP: 002b:00007fb4d1fbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.828964][T21031] RAX: ffffffffffffffda RBX: 00007fb4d13c6090 RCX: 00007fb4d118ebe9 [ 465.828976][T21031] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 465.828988][T21031] RBP: 00007fb4d1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 465.828999][T21031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.829010][T21031] R13: 00007fb4d13c6128 R14: 00007fb4d13c6090 R15: 00007fff97174958 [ 465.829030][T21031] [ 466.149337][T21028] !€ÿ: renamed from bond_slave_0 [ 468.191898][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 470.512175][ T96] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 300 seconds [ 470.522986][ T96] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 300 seconds [ 470.534025][ T96] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 300 seconds [ 470.545024][ T96] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 300 seconds [ 473.711862][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!