last executing test programs: 4.18159251s ago: executing program 0 (id=3921): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x9f) 3.647750146s ago: executing program 2 (id=3926): r0 = socket(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) syz_emit_ethernet(0x22, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000014d500000000849078ac1414bbffffffff"], 0x0) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x400d0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002bbd7000fbdbdf25030000000800020002000000080001000300000008000100000000000800010003000000080001000100000008000200020000000800020002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) 3.381562272s ago: executing program 2 (id=3929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d657461000000001400020000020900010073797a300000000023b36f0c00064000000000000000011400000011000100"/124], 0x7c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e97ae051281d79eaf5b878d1d8c3383e56193aed3b3591cfa1dd0d793811afeed174342e83274b61957bdd6a74363a76f40e338bb54a8b3d8c78e31962c66ffc4a912ebdfe6e55318f039aa3e5091a54bc82c8b1c0d3419d7af115fc0d0470f952233b35de3d89a5124cf41ef4e"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r3, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) 3.044446892s ago: executing program 0 (id=3933): syz_emit_ethernet(0x5a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x1b, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x10, "6f03057a91f875ccf5bd5d0a5b31"}]}]}}}}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27ddd3f8ba80fd173700203c0009", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x2, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x23, 0x4, 0x0, 0x0, 0x123, 0x66, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local, {[@ssrr={0x89, 0xf, 0xe2, [@private=0xa010102, @multicast1, @multicast1]}, @rr={0x7, 0x1b, 0x6f, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xe6, 0x1, 0x1, [{@broadcast, 0xf04}, {@empty, 0x4}, {@loopback, 0x4}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x6}, {@broadcast, 0x7}]}, @noop, @rr={0x7, 0xf, 0x8e, [@private=0xa010100, @remote, @rand_addr=0x64010100]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0xffc1}, @generic={0x0, 0x8, "d588380003c1"}]}}, {"d468148d2385e4b5cbcc4279743f9726ceee0feb564f3cb19995cf6ce3727cb37fb87782487c8f538e4b472f823c3515a524dbe5ee7ab8cdbe8a00795f6082f5a81a97afaa4bd779a51033d2b11c95352e083613bcf8b7850d80bd58edeca3086dc721043bab08e8744f74"}}}}}, 0x131) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) 2.934050522s ago: executing program 1 (id=3935): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.780489247s ago: executing program 2 (id=3936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x100}) 2.388123993s ago: executing program 0 (id=3939): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="0009000100626f6e640000000014000280050001000600000008000b00"/40, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000ef93acf5de5d112cdb1d4561b4f16b61adbe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000ef93acf5de5d112cdb1d4561b4f16b61adbe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 2.387515504s ago: executing program 2 (id=3940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x9, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf8a544}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000df0000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r2, 0xfffffffffffffffc, 0x40000) listen(r1, 0x50) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f00000001c0)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000c93f2300000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e61740024000280080006400000000b0800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32000000001400000011000100"/172], 0xac}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000400)={0x77359400}, 0x10) 2.37049974s ago: executing program 3 (id=3941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100e4ff"], 0x6c}}, 0x0) 2.297873122s ago: executing program 4 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) 2.12051355s ago: executing program 3 (id=3943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 2.030461104s ago: executing program 4 (id=3944): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7, 0x8, 0x3, 0x4, 0xd77e, 0x80, 0x6, 0x7, 0x0, 0x3, 0x3, 0xe9bb, 0x7f9, 0x7, 0x5]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, 0xb861, 0x1}, &(0x7f00000002c0)=0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r0, 0xb81c, 0x2, 0x9, 0x8, 0x9c3, 0xfffe, 0x3085, {r1, @in6={{0xa, 0x4e22, 0x93c5, @remote, 0xffff}}, 0x7e, 0x80000001, 0x3, 0x459, 0x4}}, &(0x7f00000003c0)=0xb0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.955893204s ago: executing program 3 (id=3945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x1f, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0xb8, 0x10000}}, 0x20}}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$tipc(r4, &(0x7f0000001a80)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x1}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000a40)="3e5d2a334b6bd2936bbb0d614a3a8193b4d8943a366265c3a51ac629ec9c538ada1d540aed22bf8ac950eab2a5c1982b887789f714bba498c800b49a771ad8f4cf587108880febc8479a4cb75beab99e3e300e0c5de90fa319caf43877f89ea01b61bf02726967b504ee6d7f57444488172a79635499a23f8dbb310f8a0ac7290f56470acb22901bba0c8b471f1b594b6dc70b50af1a7ddbfb400763ce6bbfd75f84164746996a6931aff850fa5a8a96749790185c4116e19073e1ffa8687e69dde3a2055b28eb22488e4b04fc4f68a35a8252634efbf9afde6772b10edf34c3a3339c9bb4ff472120be6506578ea717ab4767f4da6f1b8e028e5f33344250792b085eabda2b9cbe0eea51e479f3d55aaa9369d1f27d920a18e14b71f14aeff981362a80d984f3b487b0a9d40fc0b379165991370eca468642aec9a27665e1588883899fbdafdb461d82c61d0147d8bc798313f06410145939915b599639240ca702afdb50c9f3851da03e62d06e42a746c729aabd6aa9fa1301ae50fe6bc9f42370beca8fe34c88984ca6a53452e45cd429f13b8fa78dbc08b713808472becb4281d7c93c740a6ad4d3ff527a3c05f5ec3f23338fd6b5b9fe7e0302c03a3878633bd170fdee6d12bdbea2a0475c67dbb67145b1b11b867d1486b310272fb7e922f3ddcb3e176f93ffaaf86e3586362e81c05a81c8e0d4883f7eca70cd1ceb9cec70e6faa96f05897beaa79d87b1818303000914a1c836ce96120917bfc34a15214b640dfc035deed2141a134614d6dc727c9a59f25261075b2d4bfab900b7a857f1e5c5a5e4563978a0e138bb3eb8cdb0f6837628e9c781a507fda9ea0c4f1719a4b75e5b37a3801447f3a69317ccd8e43c3ce53eb68d999fe4ca2bff23f81dc59bd217cd7df4724afeb354129797516cac68d286347c14894de61dc00d46b4b54531794b7a70d557556e6f6a3d10fdfb518e35b34c172334c80c764a18dd2157ab41969cf68bb9a76bfd5a4605c250a2dc9e250aa02dfbceeece2dab0f857731fd7b10d34236408aa0ced32b807b24b12d448de6bbf26ad4070ec7d9f55e96b29707a11a3249063737cfc4cb58b25f347d89423bbf5095fd5cea5005051b5f67a506653c8deb7f5de11606662867a49773afb309f6b23c5644c629f37bd779100f184e58397381c5c133a389601762efbfe6c034c17358c7d8d4157a0cb8e4d50fa15da1c4a8d66bf6ec779dc067faaa8375aadcee41bc625fb9e5f082104e0e0fbc156a316a154948b8daebb29d0e7656d2e1e11403372114a029baf3f01fd5f54b2581617b9997506ae86598c9c037c835968a60d4a967b2ae05a88f4ab8ffaa2ddefea6d235c3722bdce48cc024e98056ff0045f09fbb56bcfcc610f9e5c060a72d095628c5477494027f906c5aa023390bb861fe3ff89d205345e94bbda689f78102f025c73ed3598804dfeb4ad5d6ca9777d0ec47843a3a8ffe04d0159a05ed8730a9d20e54a0fd32ac6de1d1d1ad57b880c20aff0610f13e351e118998753eedca788ab2e74fb2fbb029a9583a6a90e02e2dc1b2008f3201c074fc04d3d5b98f2f3a4bee436f755bc7fc8fbce4df234326d8933ee8750eab3ae7d588450f9071ad39dc13d17d7300f9c65f83cba869ae68cb38c642954371daa35af5005c1c78c5384d7cd7024c5c6872c1a116586c730f49e220a094fa54f5b4afe264ef2791cd2ee0e8f15a58421d75672ff43c906b958c3f71198e9d2b00dda986bfbb97237cf4b83b9d6eaace945e61659229322d61856bb2122e915410c644219fd29d858629375594670c8b9155e7470e34beaacd191359904a4aa3a1e10142f6176c678e028994b382958094c05472f2382bf7275da5a0fd22cda94132e413cf4cbd2bfab70394a0d4e41dbeb142c3b7dc0225a8bde35fb9f5168cf10ebf5bf0420bab137833f9ead054fd5a72d430815c17f54f80d0494b2dbf7a61e25bf761eb445fd01158f120fe7c75d3a18c6cfcf4c29a686076325897a7667bd1406f92e3f7c2e8db4dfe877639cdd1f20649b4e61c503938901554ac17c668215696b0b7b60d38b81f4e178c0c97155dae5966d99a047f0fea4348aa3f49c52ec4763eb152fb9dffa189bad26889dd9eeb20dd919c79377f2cd94f3e9864c2857d375bdd4fb48edc1e02027c17f7ecd9867cead56828e55ad29e07436cb51bdb0ee7f13c13bc519f4fd7ccbc272f306205eac34c166cac7fa244ea6f7f5c908ea615d39966344e5023ed1491254d39ad8c84360858768df8f6fb32c12729060a6ee84caf5d0415ce852132127d1b6bdc599531bad9827bffc0b733245f52012a886e366ee3479f218f24e948606ce842b32ca4b9a3c522da115e02123db293e52b24e23be18d12f2125d810b935790252a7bda23c326efa98e4e8eb977f941cdf6da1f6e754b8a8527d484c907dec2f7dd3b76d4fadce6ccf608c42538467febe6f469f74b483e5c23bcc0bcaa391024b18f1fa75fbac7d6c5e31ffe43432d3893ec7cf90a61b185fb03dc9b9a01d783269490c7515ffe71fdbf97fcd10cab9bbceb6b11663656c643c4f96085892b820b032382a7a8499111696569e7270cdae8c4a55b70936165ba40b3943d14baf2f4383e05c6c8b9b902351ca6e635147ecf2c56d48ede9fc54e8a623f4cb87fee517d1c0b5a2b1e2927166c7db61ffc6d1e4fad9e2167850593733ac9a5f413569d7aa761660ba545c28c46b7f2a19fcc55837962e59d7c266fb133e62ffb63d6a9e201e4608a4bf551cb529897846650801abde6ced79e22a3791ee2b7d16c15fe77363664c5cc5acf7202444468c01eef3f26ba33caed3ebd1707409a0be80c58e2e82c91b3a8b48f7b536723260a519444731769489615d54d5958cb1435338248d2984a439a429a50b0f36202232d1ad74b46d58a171ebf144ba394e76a5af523c40615e64541098c6f39aa4ab8f0f949b4767d45a7ea1acc3bcdf2c5c5f8fac55641d5a7128d3f0a7e4cf9ff99382a4f168dba55a4d8bb05b1339dd30f9bfab902bffc7439726356cdcff567948dd543b92fc8abcb6d00f4d293ade6810257e29cc40acee7284a7ee2b9253682b96b70140d96b45bc832d61e6c052b4f2c518c8cd1d972967322a2725b0f3506d2bff6915fe87658d11784ddd0b30360bfe5b2d597694ad65edad69d7e35b8fcf48434e61a7e03e75b7fb9ba62b12cab744b93f9ca8056a5fe9dbf2944f22ef113303a1dcab9a4a6ba111186e6beb34b35cc6f67373d59f225636307d1520de22c0da1b648e4d4c9c1171f19b7d224fa006990ab4623bb570e26833984ea13d2504e5e1a104e544268fdca481a72ba6f697f19f11331441c6dcd3aca7e101ffe59e477bf60a3862c0e911ba5194ed082c0ccba1667ecb8c7a29753018340496fcc8666ca68f5523a7c375db6535921ea9f90f9c561d8113ddcd6655dbabbb9c16ac7fd3d0c576c34a169fe121fcddf2976f1aa76dbd6506e5dfd4e7d05a219a91e58a8611aaf7938e5fd85e1bf148e24574fdb01eb8a069f80e7840294f0b0707e0f9251f7feef4f6ad214a04372480f996f2b964d252448a9e8c670ac0451f801f7c4f6de68fd7c15b0d0a6584055049af5321e7e54059af88564a91e6b2503cc4f8955360edc7b959e8246bea2be22e1a444d81b0db12f983319645d209343e9408f4bdf1010fa14252dc4d48fd21f2a32378aabc3f608d1e451316c407d0b04aef2305a5cc759f1bb27929693465380a1b61009a43ec9c75e410e081b71fe9d971700ebf204d786b6e3f6956aaaa465ef4b6ce04f3a934408a696619e1111e4e9456f43a67ffb58a81233507f80b2bb2f1d3f12b46afa73abe74a0c1f661754c6073830307b282a62af811bd8b1b4a3d85a675e8ee9eb9b3bcb54d627a81cf99b090bc99755749f74b918af7a71b2c860ac575bc5e61799e8b4cec57af4017a0a83392d0280ed7b80063276d8537d4a8d8396cf51fe709fb7222bb58e4627c390879107f4add6b27d63345d21cbe5e97f2520be80e43b566c3c007b779fb3a7168a5f571ff40caf51ee7c1589cb078e7d3959cc36b60f97d44e71b60281e550645001444f6ab11ae36a38f01f8cb2d77316296db34eecbd55c2f8e4a37673612258fef5de6effe0e677f9e12d1572672d435d23a74912fd0af067e0a93cfaf3c3095bba3492a3910f51c0091b0d7b90fdda59a187c3edc992739043707ed99633ef7ee299e0788b8e510099dda227e40edd6f25e9f71dc07d6433c264477e3b0aa3c35cb0c96523f9f21eaef71248adf2606ae4dad4324b04d274d3693bdc79c59eb8aec8fa878097fbd49ca5a36bf325805e0f7d70deebc9fd0bd48f8272d6f2ee9e454889e36d2498e24044b29e779f92721c0e932dbd367ff7240d924af57cd01c1fadcf4e0d6b0c7f73c3863922d3acd8857c689ef475c29b806682cdff527318c1c9b3ccc0687aa7b10c061bda8282ce564aea63367e8d88a31623590261c84c37492fe38a3f9b809ba3c65817a5fb730ca60d0733f94ad5197470ffb3f779226e34a25e372acec4f7b2c9662d2a4eb51fb13d6487e240bd018627122a832d35b569e1b4a9f02409248ac4ff7a4d43f8232062a8d7cd9d591c0bdb3fbefb0fc96129c07ed3a473fa9d6c09ac6e8676831397440e6eca8f53bcbf08f631f262a41164d52cdb5d3822f3541bf70c9705b16c18c26d3368e207f303bdf732fa5db18f8aa69a419a4b19e48644254a31594d2c2f34251f39786f09e961ac3980ab5b09718232a1774e2f7296c05aaba1d32ce205c56936c139d1f968c50043a60cd9da0569e31efba73874d3e4cc5a83e84369c0395283e2943035f733caac611389c203209ce09ab3eaaa6efb0dd8278187cd1c84864fc74017f73a566d6ea205529201b3bd582275605fe57bfe7dec50455825443a32869c85c6789719cb7e2b93058a625747f21a31dd8e38ff8540ac9be903559e096be909ac9bfd2521d34c38d69120438e4fc77e87327d436d02593370aa3bbe89c30b54a3da66fc7077e231b8a53bd61dc08b986fca3b99f30c4b032bd4519fbe4eee7c93722db22afb16e74b4d914efc85697be5952aa1060f69829b87a86717a6ce0e7e2b058030edf5b6fdf594571e115826671b310f9e9aeb8f35dea4ce3773eb2298ae723a20495981f4dc8d46013195d5779dd3b826c4051c574ae454ad1c077cc8f645babf49212e8cf3a4a7761cc5d474e896ab693fd430975630ded26092d8f83cb8f089a943a1359d6a92f15b46b4da7d7478401a7a8acefa9fa8321bbdf5c7e2b27b51f005120e0cf104a2ad2e4e91cd94729c4d4c81ddefed99d5d47bbe4701e73b604e8de4e418e6e0dea5ec85ac73f315cb1d4658dfe498533dd924e0f2f731313ae624c868130973e9588803076d409426bf2d01e2f509c3b85e7e8c1f97dc651c2141016c0d89fb8fe35812065771a8006ef33908adf6681b9adf8687c1d4e99d15d8cbac5b057b0b8ba06b7a87d87307a671084e42040321ae6514e66f116301013efdf30b0a7f2b6f96df76b4a67ed225fbc69ab649c1aee33989d9349505b2837694a7fee526eff936eb030c1c8fec18964d5dc019c3e0ef8bcebdd694cf2b149adea11a89d255218f046eb99763915cd526a7fa06a1542b2d401ca07eb81f4df4559038debea3da5331c9abae0dfe3a346fd3475e75e737de6446c59741d4b0d70f85fe8bcd3489bf252c430ebf62e2d65a00699f36a71fbce4c002e061b7d070", 0x1000}], 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f0000000280)=')#:\x00', 0x0, &(0x7f00000002c0)={@align=0x5, {0x8001, 0x9, 0x6, 0x8}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4}) write$cgroup_subtree(r8, &(0x7f0000000500)={[{0x2d, 'memory'}, {0x2d, 'devices'}, {0x2d, 'rdma'}]}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 1.820497652s ago: executing program 1 (id=3946): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) (async, rerun: 32) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000038000000700000000000000", @ANYRES32, @ANYBLOB="00000000001affffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000400)={0x0, 0x1000, "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"}) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) (async, rerun: 64) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000003c0)={{[0x6, 0x2, 0x0, 0xffff]}, 0x0, 0x1, 0x80, 0x0, &(0x7f0000000240)=[{{@_ha_fsid={[0x0, 0x3ff]}, {0x2, 0x1ff, 0x1ff}}, 0x7f, 0x0, '\x00'}, {{@align=0x59f, {0x9, 0x0, 0x3, 0x9}}, 0x6, 0x0, ')\x00'}, {{@_ha_fsid={[0x7, 0x1ff]}, {0x3, 0x3, 0x434, 0x4e6}}, 0x58e, 0x0, '\x00'}, {{@_ha_fsid={[0x401, 0x7]}, {0x8e, 0xf9, 0x9}}, 0x3ff, 0x0, '}\x00'}, {{@_ha_fsid={[0xe2b9, 0x1]}, {0x8, 0xfff1, 0xfffffffd, 0x1}}, 0x2, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x8, 0x9d0]}, {0x4, 0x6, 0x43, 0x8000000000000001}}, 0x3, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x7, 0x9]}, {0x93dd, 0x7, 0x2, 0x1}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x10000, 0x8]}, {0x9, 0x4, 0x4, 0x6}}, 0x45c8d419, 0x0, '\\.-L})3$(%*-,\xbd\x00'}, {{@_ha_fsid={[0x3, 0x3]}, {0x9, 0x7ff, 0x7, 0x4}}, 0x1, 0x0, '\x9a+L{\x00'}]}) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000040)={r1, 0x0, 0x10, 0x44, 0x2, 0x4}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r1}, 0xc) 1.751859719s ago: executing program 4 (id=3947): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xaf62}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x0, 0x3, 0x10000, r2}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0xb, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0x6}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x9964}, &(0x7f0000000200)=0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x800) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x0, 0x0, 0x348, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xc}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x9, 0x25, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e20], [0x4e22, 0x4e22], [0x8000, 0x1, 0x101, 0x0, 0x2a5c, 0x5, 0xc7, 0x8, 0x6, 0x200, 0x66, 0x3, 0xfa, 0xc, 0x0, 0x6, 0x2, 0x4, 0x2, 0x1000, 0xfffffff9, 0x9, 0x7f, 0x8, 0xe9, 0x10000, 0x1, 0x38, 0x7, 0x337, 0x2, 0x4, 0x80000000, 0x5, 0x9, 0xfb8, 0x4, 0x3, 0x9, 0x6, 0x8, 0x1, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x3, 0x400, 0x8000, 0x10000, 0xfffffff9, 0xc, 0x9f8, 0x7, 0x8, 0x8, 0x8000, 0xffffffff, 0xff, 0x1, 0x0, 0x1], 0x6, [{0x78, 0x1, 0xf}, {0x7f, 0x94, 0x7f}, {0x9, 0x1, 0xd0}, {0x7f, 0x1, 0x7}], 0x4, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x10, 0x19f, 0x8, 0x0, 0x4, 0x3, 0x1]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0xff000000], 'wlan0\x00', 'bridge_slave_0\x00', {0x99528e83913a4f73}, {0xff}, 0x33, 0xda, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"e67d"}}, @common=@icmp6={{0x28}, {0x5, "1a42"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0xb, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000009c0)={{r1}, 0xfffffffffffffff7, 0x4}) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000a00)={0x5, [0x4010, 0x81, 0x4, 0x6, 0x5]}, &(0x7f0000000a40)=0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x542, 0x73}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ce840884bb840d98ee4be42d3c"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 's7$eA'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000004}, 0x800) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000d40)={r2, 0x7f, 0x2, [0x8, 0x100]}, 0xc) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000d80)={0x4, {0x6, 0x5, 0x3, 0xbd3, 0x7}}) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000dc0)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000e00)={r3}, 0x8) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000e40)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000e80)={r3, 0x2, 0xff, 0x9, 0x3, 0x9}, &(0x7f0000000ec0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000f00)={r7, 0x96f, 0xcd, "d6ee88c5c152123e29e45c8e9fa18c34d00f298a40f674b6d397061b21c9a5a8a5e8f09a96648fa80db9b840c0a35dda1d1113c98d1d4d40dbeeb5dba351eb9c5e70167a6c9430d1fd75410267eab9cac79921e15ff1474a9a595b1455eacd1b885011c4bd6797b012d214d6b3027a305f9a6f8ab11bedc7b5d3205fde1fa5708a7d779957e627eca3880ff232e3a4d5277d4c1c13868d8b889ed01431387f49f4e64337a12f5421f846f60086e8e343916160ae9720a440073b500ec63b07f7bea9974ed356c5b31175f9251e"}, 0xd5) (async) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000001000)=0x9, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, 0x1405, 0x300, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x7d46ab4c1982976}, 0x0) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f00000011c0)={@dev={0xac, 0x14, 0x14, 0x14}, @remote, 0x0, "028835645b51abd44ef99a973128c133745c216e1b04160e89ef89b6cf810046", 0x2, 0x4, 0x7ff}, 0x3c) connect$inet6(r1, &(0x7f0000001200)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x7}, 0x3ff}, 0x1c) 1.585499564s ago: executing program 4 (id=3948): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x10}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000000)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) 1.464685201s ago: executing program 1 (id=3949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4c0cc}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getpeername$qrtr(r3, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000016c0)={0x10, 0x26, 0x1}, 0x10}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) 1.463504889s ago: executing program 3 (id=3950): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000200000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x4081) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbfd, {0xa, 0x3f, 0x9, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r6, 0xaa0f4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x1010, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d0001002dbd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="100008070a000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r9, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) ioctl$FIOCLEX(r6, 0x5451) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000575000/0x5000)=nil, 0x5000, 0x3800001, 0x1010, r5, 0xaee3d000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 1.339161388s ago: executing program 0 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x11c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="00300000000000000c001a80080005800400088000"], 0x2c}}, 0xc0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x58, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0xfff3}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xffeffffb}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x4, 0x8, 0x81, 0x800, 0x45, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8000, 0x0, 0x1}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r13, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x260, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.212855999s ago: executing program 2 (id=3952): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x7, 0x201, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xa, 0x0, 0x12}]}, 0x38}}, 0x3400400c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0xb96f85d84576d333}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f00000000c0)=ANY=[], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r8, @fallback=0x31}, 0x94) 812.537806ms ago: executing program 1 (id=3953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc010}], 0x1, 0x40801) sendmsg$kcm(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)}, 0x25) recvmsg$can_raw(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/179, 0xb3}, {&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/98, 0x62}], 0x4, &(0x7f0000000340)=""/55, 0x37}, 0x2000) 811.883584ms ago: executing program 4 (id=3954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777dee74fc7986cc8df216"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44055) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) close(r6) r7 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@local, @local, 0x0}, &(0x7f0000000600)=0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0xf}]}, {0x0, [0x30]}}, 0x0, 0x27}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r12, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r13}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r13], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', r9, @sk_msg=0x7, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x8001, 0x8, 0x1, 0x400}, 0x10, r12, r14, 0x3, &(0x7f0000000700)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x4, 0x5, 0x9, 0x4}, {0x4, 0x2, 0x9, 0x9}, {0x5, 0x5, 0x3, 0x8}], 0x10, 0x7}, 0x94) ioctl(r7, 0x8b21, &(0x7f0000000040)) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 624.969915ms ago: executing program 1 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000180)=""/101, &(0x7f0000000300)=0x65) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xa97, 0x7, {{0x15, 0x4, 0x2, 0x3a, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x8, [0x9, 0x80000001]}, @timestamp={0x44, 0x20, 0x48, 0x0, 0xe, [0x80000000, 0x7fff, 0x1, 0x0, 0x1000, 0x5, 0xfffffffc]}, @timestamp_addr={0x44, 0x14, 0xce, 0x1, 0x0, [{@local, 0x9}, {@multicast2, 0x5}]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000be2094e64b02463cae00"/25, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8fff3fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r4, 0xb85a7000) 479.273845ms ago: executing program 0 (id=3956): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/35, 0x23, 0x22e8, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x107}}], 0x18}, 0x404c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) 348.67372ms ago: executing program 3 (id=3957): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910487f9548641c63ef00000035000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 310.487849ms ago: executing program 1 (id=3958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) close(r1) 276.791147ms ago: executing program 0 (id=3959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x4}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)="9209aaf51a83a1730c7b8b24e91a0cadade0524580dcc9841068cbb8bef329c630911ce5f2191dea07e3303043b500ce1c8a2fcd76ffb07e56b11fce34589bf74b1b3b36d2b24eaa0dfcdaf7590197c20af896b33d0fa26b9bd481430fb16dc0fe39091bfbedc7e94e933a091501e9c24d5dc28855050740228d0c3730785e7bba6de5b51f7b18f5005a6fcc868d97efdb1c3d", 0x93}, {&(0x7f0000000680)="45ffdcb2c421d86a67cde088054b542be24a74c07c6dcf728f7c075d7763c3effc9f80c012c615103eb13043481987831c94d309f3bcfe0ad42a994ed9b23eb1e76174eefbffaa1622c89282151f9a0b0d734c3005828cf6f26fc1170fd95e907560840e6f7c1d207c266450a23d206fe74409c2ae2ac4b40185a45d97ede3938cb182e3821c42fe0939ed154f4da96110a7fe17e740fad49399808809b8e6434d639e148e4090fe512da907f910848b6daf45e132571c76825a298f52cb9b3093a951ce5856d00e28eadcf2055b8e1f98b85c1115", 0xd5}, {&(0x7f0000000780)="7f40bc438ece6b0c984ce2506e19545ad76b44546432edffca52d8e83eb0bf9653094d5187a55c78d825912e23ff3e6c3c68fbbd452f4c7eea630019f50cb2ee0d87c72dbc69712ff3fe608f4ffedc5acdabce4fe6d2", 0x56}, {&(0x7f0000000880)="d28fb604157a48c8ea43c845463f3637", 0x10}, {&(0x7f00000008c0)="63e1e0e1b2020806ea72959dc42eb1d6fcbe13aae51f94a4db07da97a921425e8900c6219a1c28f8c96095941e7b6aa0bb54d9239bbd14d94133208036511a42c9fd2fab1b33f6b0551b0560e5f2c4322f69f6074bbc71da8a854a70bd96588d811c5b639415d8e00f38", 0x6a}, {&(0x7f0000000940)="47eb00347a2318a82018ae437ae7cf7ddccb2ea1aa603a0a1564d3846c4f3da4a025ddf24271ddbcd5ca2e38853858a4a82027c9d3a7cc1db0d2d82980e889f69f2f1280b1ce5529f3f57421da329e7e2003f7b772085b8e9f2488885a57ab22e6226c267d00d52f46619170823feeea8637815d04be", 0x76}], 0x6, &(0x7f0000000a40)=[{0x58, 0x0, 0x9, "919a996400c51d1a0991d73cd845c933609ced358dd8c48258297d65c2572c37c1ab36ea6e77d18e1e466ab548da9ca1e175f7d5287a77c5a799f03032bde21ee1be"}, {0x48, 0xff, 0x384, "9e3c7c66d06518d4cb005df3c8b73d15095a0efec70703d6b581cf6293ccedc25ae1c031d97f18d0de3e87f9259158e30ac75d"}, {0x28, 0x300, 0x4, "869e7958665e61bfae73fbc16700dbee2684a8fa"}, {0xf8, 0x109, 0x8, "48ffa3c00868c4a83b659e38db900fc435ed95b4bd5311b01f82d3fbee84a5659f4ec301364fd3e98bb5b72e7654238beb5474b47ac3f78c29bf0b3866ecffa1d7a747974d35005a3e606b4e4f9fb5c4ef85fc9200b3edbfd731616e6dc4c53ca397a21b9e4cadcce1e211d4dfcedadd9a7dbd66e5aa7456aadfcc4b6376b734323e9dbbd682aac335013ff36402616026bc42ad31bda8b440016cf160729a166164c3544192e1192d02189446a332ffeea35174bdefdea9ba05dfbc6c42f730901c7330dd7e4483653864821a8ed4bd3a7a2568505dd62ead69fb4ef6474f02e6f7649b12b0"}, {0x30, 0x10c, 0x8001, "2fc9687787117995b65fc817c6c8e6cdb359b312f03c8b368884769fc752a4df"}, {0x90, 0x6, 0x2, "481397a83b7dd895e937762958409b813e696c75e27c19f1a3e0b00df3a0198ab2e3a361308b7a52a6bc34d548fe8a3a70eb24574680c76f6120ddcd78ef334378d0883ebb8eb40e13b28142e9cb26d59048f663bac39b9ad21154085a8006995d3a268500819f2a8d62ab4a86f1405dbbe5b5a61eb9761e18da40c97241c2"}, {0x58, 0x10c, 0x1, "96bd6ed15b0bfdc89d4bdfdf94c45f42771fbaddb05b4111ab668a2c2664fdaba75d567a48242527218ad2cd32fde928b2a7bffb2ae0fe734ac0929f585be434a9d12ccc4fe3"}], 0x2d8}, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r10) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000580)=0x0) (rerun: 32) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x7) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffff7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 60.427195ms ago: executing program 3 (id=3960): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000023c000000100000be2d000000000000000000001c0000000000ea52ca4a42bfbb865b70484a24c90048cb8358b921f43bc35889e31ffe5c1d5aa8"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @dev}, &(0x7f0000000200)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x9, 0xfffffffc, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1, 0x8, 0x200, 0x10001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x0, 0x66b, {{0x5, 0x4, 0x1, 0x20, 0x14, 0x65, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010102}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r4, 0x29, 0x7, 0xae, 0x3, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x20, 0x40, 0x4e}}) r11 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r11, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x3, 0x3, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x700, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x12, 0x0, 0xe, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x80, 0x1, 0x1, 0x7}}) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r18, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r19, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r21, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x6, 0x3ff, 0x844, 0x1, 0x9, 0x10}}, {0x4}}]}]}, 0x48}}, 0x2000c010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0xffffffff, 0x9d, {{0x18, 0x4, 0x1, 0xc, 0x60, 0x68, 0x0, 0xe, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x86, 0x0, 0x2, [0x7, 0x80, 0x1, 0x1, 0x7, 0x8]}, @timestamp={0x44, 0x1c, 0x48, 0x0, 0x9, [0x1, 0x9, 0x6, 0xc, 0x3, 0x100]}, @ssrr={0x89, 0x7, 0x87, [@broadcast]}, @rr={0x7, 0xb, 0x12, [@local, @dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250d0000007800018014000200626f6e6430000000000000000000000008000300010000000800030003000000140002007663616e30000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="03b40000000000000800010034d8e61a80722304feebc152d7c7c19a9aaaadd411c02f5049a34a12c13e2c6dcd703caa04937b1a51f1b4e81475cede3bc61063c766c469d268e6bc2eb8965104c62c42bd6f1308807a69e202464987d8036be8e4ffff08a52026139818c496ae1052715b5f983f0678b84a74df10c864222dcce4431df26f094765cd967397e36addeaae1f5e3153412e11c9b18fc9ef465771b562912aad1846b6881a3082cb48ed6a9dba4cfde91d442b5a50ed", @ANYRES32=r7, @ANYBLOB="080003000200000014000200766c616e3000000000000000000000000800030000000000500001801400020076657468305f746f5f626174616476001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r9, @ANYBLOB="4000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r15, @ANYBLOB="6c0001801400020076657468305f746f5f7465616d00000008000300030000001400020064766d7270300000000000000000000008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="14000200677265300000000000000000000000001400020076657468315f746f5f6873720000000040000180080003000300000008000300030000001400020064766d7270310000000000000000000008000100", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="080003000100000054000180140002007465616d5f736c6176655f31000000001400020063616966300000000000000000000000140002007465616d3000000000000000000000001400020076657468315f746f5f68737200000000"], 0x21c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 59.960752ms ago: executing program 4 (id=3961): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x100, 0x5, &(0x7f0000000200)="74bede6e8e", 0x6, 0xff, 0x5, 0x8, 0x0, 0x1, 0x1, 'syz1\x00'}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fffffff, 0x1, 0x7, 0x80, 0x7fff, "a4aed576a9f4e8048f366d2f85e463ffb6cadc9adfa9644c9f92c5c383db68836c81358197bd8ca6ad24a6718277797141fca9f17b8e0e7b37e478136ca07b2fa53bc2fa28d8401d998abe5538adef084438ee5b05d6c54022a445b195fc63e4009f1ceb56487f930e9779c708d30e427244c4ff9763f8f246dbd443ef25d18e"}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 0s ago: executing program 2 (id=3962): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) (async) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x80) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d4f18fb5e7ac80656ab68f0f446621d9b3136d825baf337608b7debf60f28f87b714b81c319f0b6867bf9932d822997dcb53c6018d7dd80ecf994119906fd8572a7649a47bea52abfec1990602c314855092534360921f13f55e5cf0ecb6589f69e040ff2c76eae2f3986a891b4f0b9a51d65e7a48aa48e0885ad95f350449ede7b58e5f8b03eefcd4c11ee4b3fff05ee5b61c1a608dddee9927288821", 0x9d}], 0x1, &(0x7f0000000200)=[@iv={0x88, 0x117, 0x2, 0x6f, "d691444f17401ccebc5b230acd1e6c8338f3df8cc5c9c10a84c5242597921155dd78c40602e4864be51b20be7a0133a08f03931e0d1dc92f5a20ea529fc425865a7c03c368e0d2e8d5719c2640e16b1460cb4fe8dd1cbd804f3f6b348b5bf6fb44ab3957e5b94bb6448c5352c15c3d"}], 0x88, 0x8000}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="b2c3b1e7375c3fc531fc75e583241a8e8b90decb022be774b0958f7ecc0489ab5af3205f98e5fb6499be34bbd167398205d0e268325f2b05a8d26b90c490f0f0dea385f9528a6a722477bef6a34a7803713098d4041cbf1b79cea53402c23143b9fd2aafb4410c39f2d4002995c1e84d42ccaec0e1550ef76afb271afdf55fd9345ed509790da6eff514f09570e3cf19c7a80cfd09", 0x95}], 0x1, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="069776f209c9289f6fd95651e8b550c0b35b9157f1d7ebbbad776a95d68c22b382c359d84d360041533a10f42f0405f1e35759de73c8ab3af5ba6b7d7391a056c2aa249df4ff61977e9e0564eabdbbef5f784922bdd167c95ab35d09df6c8c9d1458079f358792c44a4ef5ff81d604294efcf4790f737601a6f3865ab63a8dc1", 0x80}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b2876b6d4f63103afa8051dafd0a30371dadcc7587815e05f5d81e0ce38e8e666a5264ce5fee743a90dc89329121a17803615cd0adc247c8d113e00e5402cef5eb758cec9613c0001fff8b9994e025635a19f573847f5c08080925bf8d0b19f9b450fbc4a3b039c94245f792e568d675f0b7e7460ee7587106d7f14976cba377466acc1f0808486b054402852dd3816571f675b1ea604e5b5db77a2d7db604beb0e6216dcc34", 0xa6}, {&(0x7f0000001500)="77a750119fd79a976293bfda7c8c3f64b011c8d56604caab4713425b569669366e30d9718d3712316166206bfae9fd71ae59508af2ac82bc277643660ae51aab72a4bfdd5ee92788e753abe384e32428b1bda97f0b6aad85aa8b315f484155198fcade09f06bd8d8872037e27acd927807903de5b27c48d148a914ec083e0d116a34c39a6d6578f3962cf67c9e2fd707e241231cdba59c65f62d28c5f43b7ce49e864268aad89417f31824ae69bd8965cf207f853a6cf78a812309c44f907259e22b1b8b242407c0cfd77ba5f950c08259615c434865876ec8aa177618ac0d7d1e1b8c98e5d4782de73ff8fd0ac8563e478612", 0xf3}], 0x4, &(0x7f0000001640)=[@op={0x18}], 0x18, 0xc0}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001680)="247f477eb96f82fd4f780d9a62b111d4d13c0bc4279f91b5aafce2beb6545c2583f1a49d86e0279bb93677489b3a9359380d6c0cf8998e48ebbc1c570abbac57e229d4cd7465a13fffe9a4194561982442c3bedf0e66d8dd35d2", 0x5a}, {&(0x7f0000001700)="d1af1997ec8faa774f5b527c4559275eee", 0x11}, {&(0x7f0000001740)="8064ea54fcf91be7283ea47df4a32bf9da9c5a437b8d939de0607807b3c14d1de00979a99c7155775224b34358c70d0c26d11ebff85e9fd8c0bbd7508b1b82616787bea3b709b6aa1e89b5718aa456f7aa8a2254864a77ef0fa9198b8f5a259d366a1933e09d0c8bf37de5c169e8cb9958dabee17d205d2d6f8f67dbbfedbad4d50cbe0be755c9e01af3c054f889ad91dc8ea5b20541fc15f6dedf1387d34e1fc8308147fcb47a9035e0e30f5369f91be02463362e7783fe21c88635fdbe28448cfaed088b242a21e709f9ae0d31080a236dbb675650097668732016baa1cdc4af5e907967dd488f1189", 0xea}], 0x3}], 0x4, 0x8001) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001980)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000019c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}, 0x14) recvmmsg(r1, &(0x7f000000a3c0)=[{{&(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001a80)=""/116, 0x74}, {&(0x7f0000001b00)=""/50, 0x32}, {&(0x7f0000001b40)=""/63, 0x3f}, {&(0x7f0000001b80)=""/144, 0x90}, {&(0x7f0000001c40)=""/248, 0xf8}, {&(0x7f0000001d40)=""/236, 0xec}, {&(0x7f0000001e40)=""/77, 0x4d}, {&(0x7f0000001ec0)=""/246, 0xf6}, {&(0x7f0000001fc0)=""/96, 0x60}, {&(0x7f0000002040)=""/82, 0x52}], 0xa, &(0x7f0000002180)=""/18, 0x12}, 0x7}, {{&(0x7f00000021c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000002240)=""/67, 0x43}, {&(0x7f00000022c0)=""/80, 0x50}, {&(0x7f0000002340)=""/153, 0x99}, {&(0x7f0000002400)=""/208, 0xd0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/201, 0xc9}, {&(0x7f0000004600)=""/241, 0xf1}, {&(0x7f0000004700)=""/137, 0x89}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0xa, &(0x7f0000005880)=""/27, 0x1b}, 0x64b}, {{&(0x7f00000058c0)=@qipcrtr, 0x80, &(0x7f0000007b00)=[{&(0x7f0000005940)=""/22, 0x16}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/198, 0xc6}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/104, 0x68}], 0x5}, 0x400}, {{&(0x7f0000007b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000009f80)=[{&(0x7f0000007c00)}, {&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/23, 0x17}, {&(0x7f0000008c80)=""/109, 0x6d}, {&(0x7f0000008d00)=""/27, 0x1b}, {&(0x7f0000008d40)=""/4096, 0x1000}, {&(0x7f0000009d40)=""/202, 0xca}, {&(0x7f0000009e40)=""/129, 0x81}, {&(0x7f0000009f00)=""/85, 0x55}], 0x9}, 0x9}, {{&(0x7f000000a040)=@nfc={0x27, 0x0}, 0x80, &(0x7f000000a1c0)=[{&(0x7f000000a0c0)=""/208, 0xd0}], 0x1, &(0x7f000000a200)=""/146, 0x92}, 0x367}, {{0x0, 0x0, &(0x7f000000a340)=[{&(0x7f000000a2c0)=""/67, 0x43}], 0x1, &(0x7f000000a380)=""/60, 0x3c}, 0x3}], 0x6, 0x80000040, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f000000a540)=0x40, &(0x7f000000a580)=0x4) close(r3) (async) socket$inet6(0xa, 0x0, 0x8) (async) r6 = accept4$llc(r1, 0x0, &(0x7f000000a5c0), 0x0) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f000000a600), &(0x7f000000a640)=0x10) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f000000a680)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f000000a6c0)={@loopback, @local, r2}, 0xc) (async) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f000000a700)={'ip6erspan0\x00', {0x2, 0x4e23, @broadcast}}) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f000000a780), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f000000a840)={&(0x7f000000a740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000a800)={&(0x7f000000a7c0)={0x30, r9, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x10, 0x1, 0x5, 0x80000000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080d1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f000000a880)={0x4, 0xdfb6}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f000000a8c0)={'vlan0\x00', {0x2, 0x4e20, @multicast2}}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f000000a940), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f000000acc0)={&(0x7f000000a900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000ac80)={&(0x7f000000a980)={0x2f8, r12, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x250, 0x13, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [{0xf, 0x1, 'ip6erspan0\x00'}, {0xb, 0x1, ']&+!,.\''}, {0xa, 0x1, 'vlan0\x00'}, {0x4}, {0x9, 0x1, 'TIPC\x00'}, {0x8, 0x1, '+@$)'}, {0x8, 0x1, 'wg2\x00'}, {0xf, 0x1, 'ip6erspan0\x00'}, {0x9, 0x1, 'TIPC\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x9, 0x1, '+,:.^'}, {0xc, 0x1, '^*)\x12(+:\''}]}, {0x3c, 0x0, 0x0, 0x1, [{0xf, 0x1, 'ip6erspan0\x00'}, {0xb, 0x1, '%}*@:\xd2,'}, {0xa, 0x1, 'vlan0\x00'}, {0x6, 0x1, '&^'}, {0x6, 0x1, '\\&'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x6, 0x1, '^\\'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x1, 'vlan0\x00'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x8, 0x1, ':+/\xec'}, {0xa, 0x1, '^\x01:---'}, {0x5, 0x1, '^'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '\'['}]}, {0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, 'wg2\x00'}, {0xf, 0x1, 'ip6erspan0\x00'}, {0x8, 0x1, 'wg2\x00'}, {0xa, 0x1, 'vlan0\x00'}]}, {0x78, 0x0, 0x0, 0x1, [{0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x9, 0x1, 'TIPC\x00'}, {0x7, 0x1, '!`]'}, {0x6, 0x1, '^\x00'}, {0x9, 0x1, 'TIPC\x00'}, {0xd, 0x1, '\\+/5@+&&\x11'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x74, 0x0, 0x0, 0x1, [{0xa, 0x1, ')\'{\'::'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x4}, {0xf, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x9, 0x1, 'TIPC\x00'}, {0x12, 0x1, '@\'%#.%[!\'\n(,-.'}, {0x6, 0x1, '!-'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x84, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x8, 0x1, 'wg2\x00'}, {0x6, 0x1, '{@'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0xa, 0x1, 'vlan0\x00'}, {0xa, 0x1, 'vlan0\x00'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xf, 0x1, 'ip6erspan0\x00'}, {0x4}, {0xa, 0x1, 'vlan0\x00'}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000010}, 0x5001) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r13, &(0x7f000000adc0)={&(0x7f000000ad00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000ad80)={&(0x7f000000ad40)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f000000af80)={&(0x7f000000ae00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000af40)={&(0x7f000000ae40)={0xe0, r12, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xbb, 0x19, "ea85999e01a75d96ccfe716e2f5da257d3b9d5c8113bd184ee806b5410f6200dd31dbacda05ac8a34d294727c8405af39a010de610d76ad735f65233ebf81ac038d62639c3ac348101f33a68b423593752e8d69e0bf50f2993972304e38a2faf4fff76761046a40df6a56070cb03cce25e274931653aaf7c858f5711b77d84698488fc5343e21543bb3f19a615e2274d240578c9023c26e72ca32f9fddb7d80a63c110887203699ad4239622f898710c8a053eb0c9f088"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40084) (async) socket(0x2c, 0x1, 0x8) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.4.2192'. [ 270.781735][T14355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2192'. [ 271.187790][T14374] validate_nla: 1 callbacks suppressed [ 271.187806][T14374] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 271.664314][T14374] bond13: entered promiscuous mode [ 271.686442][T14374] 8021q: adding VLAN 0 to HW filter on device bond13 [ 271.765109][T14410] syzkaller1: entered promiscuous mode [ 271.782549][T14410] syzkaller1: entered allmulticast mode [ 271.994844][T14417] geneve3: entered promiscuous mode [ 272.021815][T14417] geneve3: entered allmulticast mode [ 272.346440][T14442] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 272.496096][T14434] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 272.683549][T14434] : entered promiscuous mode [ 272.923228][T14474] 8021q: VLANs not supported on sit0 [ 272.936226][T14481] Unsupported ieee802154 address type: 0 [ 273.577417][T14520] netlink: 'syz.4.2238': attribute type 2 has an invalid length. [ 273.607982][T14520] netlink: 'syz.4.2238': attribute type 2 has an invalid length. [ 274.055808][T14552] netlink: 'syz.2.2244': attribute type 4 has an invalid length. [ 274.306345][T14567] netlink: 'syz.1.2251': attribute type 83 has an invalid length. [ 274.694827][T14591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.764734][T14600] tipc: Enabling of bearer rejected, failed to enable media [ 274.848208][T14603] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 275.045167][T14620] __nla_validate_parse: 12 callbacks suppressed [ 275.045186][T14620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 275.054623][T14617] syzkaller0: entered promiscuous mode [ 275.068784][T14617] syzkaller0: entered allmulticast mode [ 275.126422][T14622] tipc: Enabled bearer , priority 0 [ 275.239177][T14613] syzkaller0: entered promiscuous mode [ 275.245621][T14613] syzkaller0: entered allmulticast mode [ 275.253571][T14613] tipc: Resetting bearer [ 275.262017][T14617] tipc: Enabled bearer , priority 0 [ 275.262965][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 275.280681][T14615] tipc: Resetting bearer [ 275.302947][T14615] tipc: Disabling bearer [ 275.318826][T14618] bond0: entered allmulticast mode [ 275.324879][T14618] bond_slave_0: entered allmulticast mode [ 275.331434][T14618] bond_slave_1: entered allmulticast mode [ 275.363804][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2267'. [ 275.469505][T10061] tipc: Resetting bearer [ 275.531029][T14611] tipc: Resetting bearer [ 277.678429][T14611] tipc: Disabling bearer [ 277.842904][T14655] x_tables: duplicate underflow at hook 2 [ 277.964766][T14668] netlink: 'syz.4.2281': attribute type 2 has an invalid length. [ 277.981543][T14669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2281'. [ 278.248798][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2288'. [ 278.261526][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 278.272145][T14690] netlink: 'syz.0.2288': attribute type 29 has an invalid length. [ 278.276650][T14686] syzkaller0: entered promiscuous mode [ 278.288148][T14686] syzkaller0: entered allmulticast mode [ 278.292722][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 278.336460][T14692] netlink: 'syz.4.2289': attribute type 2 has an invalid length. [ 278.344959][T14692] netlink: 'syz.4.2289': attribute type 2 has an invalid length. [ 278.456036][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 278.469148][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 278.478593][T14700] netlink: 'syz.2.2290': attribute type 1 has an invalid length. [ 278.631307][T14698] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 278.826766][T14728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 278.839742][T14704] syzkaller0: entered promiscuous mode [ 278.862161][T14704] syzkaller0: entered allmulticast mode [ 278.872166][T14723] team0: entered promiscuous mode [ 278.877990][T14723] team_slave_0: entered promiscuous mode [ 278.891119][T14723] team_slave_1: entered promiscuous mode [ 278.902382][T14723] geneve1: entered promiscuous mode [ 281.930697][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 281.957123][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 281.976953][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 281.995624][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 282.006631][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 282.038011][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 282.067823][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 282.266292][T14790] xt_ipcomp: unknown flags 1D [ 282.596791][ T5752] IPVS: starting estimator thread 0... [ 282.692024][T14813] IPVS: using max 26 ests per chain, 62400 per kthread [ 282.707341][T14815] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2321'. [ 282.747365][T14819] netlink: zone id is out of range [ 282.771295][T14819] netlink: del zone limit has 4 unknown bytes [ 282.915720][T14830] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2329'. [ 282.952335][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2328'. [ 283.167206][T14845] netlink: 'syz.1.2332': attribute type 4 has an invalid length. [ 283.195604][T14845] netlink: 'syz.1.2332': attribute type 4 has an invalid length. [ 283.243089][T14850] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 283.253914][T14850] netlink: 'syz.4.2334': attribute type 2 has an invalid length. [ 283.264024][T14852] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 283.273235][T14852] netlink: 'syz.4.2334': attribute type 2 has an invalid length. [ 283.536477][T14868] netlink: 'syz.3.2340': attribute type 17 has an invalid length. [ 283.574267][T14868] gretap0: entered promiscuous mode [ 283.651347][T14868] gretap0: left promiscuous mode [ 283.784598][T14876] siw: device registration error -23 [ 284.855554][T14938] IPVS: Scheduler module ip_vs_sip not found [ 286.195037][T14999] dvmrp1: entered allmulticast mode [ 286.220043][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 286.245215][T15009] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 287.076246][T15051] pim6reg: entered allmulticast mode [ 287.116446][T15055] __nla_validate_parse: 15 callbacks suppressed [ 287.116467][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 287.133642][T15054] pim6reg: left allmulticast mode [ 287.155392][T15056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'. [ 287.522408][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2398'. [ 287.542000][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 287.565076][T15082] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2399'. [ 287.626479][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 287.777101][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 288.161731][ T5630] xfrm0 speed is unknown, defaulting to 1000 [ 288.306773][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 288.414778][T15140] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.483854][T15141] netlink: 'syz.1.2413': attribute type 83 has an invalid length. [ 288.533750][T15136] lo: entered promiscuous mode [ 288.562721][T15136] tunl0: entered promiscuous mode [ 288.597675][T15136] gre0: entered promiscuous mode [ 288.604144][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2416'. [ 288.647511][T15148] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 288.677573][T15136] 0ªX¹¦Dö»: left allmulticast mode [ 288.871796][T15136] ip_vti0: entered promiscuous mode [ 289.038904][T15166] tipc: New replicast peer: 0.0.0.0 [ 289.047159][T15166] tipc: Enabled bearer , priority 10 [ 289.064020][T15172] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 289.080183][T15172] netlink: 'syz.1.2424': attribute type 7 has an invalid length. [ 289.087973][T15172] netlink: 'syz.1.2424': attribute type 8 has an invalid length. [ 289.096548][T15172] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2424'. [ 289.106985][T15172] NCSI netlink: No device for ifindex 65584 [ 289.119484][T15173] netlink: 'syz.1.2424': attribute type 9 has an invalid length. [ 289.267090][T15180] openvswitch: netlink: VXLAN extension 1536 out of range max 1 [ 289.304738][T15183] block nbd3: not configured, cannot reconfigure [ 289.464629][T15196] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 290.263905][T15252] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 290.375137][T15252] bond28: entered promiscuous mode [ 290.402345][T15252] 8021q: adding VLAN 0 to HW filter on device bond28 [ 290.658333][T15271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.694622][T15277] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 290.977466][T15298] pim6reg1: entered promiscuous mode [ 291.000570][T15298] pim6reg1: entered allmulticast mode [ 291.413587][T15317] dvmrp1: left allmulticast mode [ 291.520805][T15326] sctp: [Deprecated]: syz.4.2472 (pid 15326) Use of int in max_burst socket option deprecated. [ 291.520805][T15326] Use struct sctp_assoc_value instead [ 291.765280][T15340] tipc: Enabled bearer , priority 0 [ 291.775029][T15338] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 291.851889][T15340] syzkaller0: entered promiscuous mode [ 291.859245][T15340] syzkaller0: entered allmulticast mode [ 291.867544][T15340] tipc: Resetting bearer [ 291.951340][T15334] tipc: Resetting bearer [ 292.194336][T15364] __nla_validate_parse: 9 callbacks suppressed [ 292.194355][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2479'. [ 294.410975][T15334] tipc: Disabling bearer [ 294.423712][ T5630] tipc: Node number set to 2886997039 [ 294.430579][T15381] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 294.899460][T15408] netlink: 'syz.4.2491': attribute type 30 has an invalid length. [ 295.194638][T15424] bond7: entered promiscuous mode [ 295.224611][T15424] bond7: entered allmulticast mode [ 295.234523][T15424] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.326891][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 295.364453][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2499'. [ 295.375469][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2499'. [ 295.385522][T15441] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2500'. [ 295.707685][T15461] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.826991][T15461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 296.124583][ T5745] IPVS: starting estimator thread 0... [ 296.220663][T15490] IPVS: using max 29 ests per chain, 69600 per kthread [ 296.354482][T15499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2514'. [ 296.373044][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2516'. [ 296.395637][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2512'. [ 296.409413][T15502] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.493411][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'. [ 297.219725][T15520] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 297.256652][T15519] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 297.300811][T15520] 8021q: adding VLAN 0 to HW filter on device bond16 [ 297.318768][T15519] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 297.319184][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 297.445236][T15528] bond10: Invalid ad_actor_system MAC address. [ 297.469372][T15528] bond10: option ad_actor_system: invalid value (1) [ 297.483234][T15528] bond10 (unregistering): Released all slaves [ 297.623437][T15550] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 297.739040][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2528'. [ 297.756662][T15553] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 297.770844][T15554] openvswitch: netlink: EtherType 0 is less than min 600 [ 297.985513][T15573] openvswitch: netlink: Flow key attr not present in new flow. [ 298.071574][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 298.084572][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2534'. [ 298.490915][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2540'. [ 298.500420][T15595] block nbd3: Unsupported socket: should be TCP or UNIX. [ 298.681905][T15602] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 298.812136][T15602] : entered promiscuous mode [ 298.823827][T15602] : entered allmulticast mode [ 298.829350][ T30] audit: type=1804 audit(1783037621.133:5): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2543" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2420 res=1 errno=0 [ 298.854022][T15602] team0: Port device  added [ 298.874621][ T30] audit: type=1800 audit(1783037621.133:6): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2543" name="cgroup.controllers" dev="tmpfs" ino=2420 res=0 errno=0 [ 299.117571][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 299.249159][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2551'. [ 299.257331][T15619] syzkaller0: entered promiscuous mode [ 299.274194][T15619] syzkaller0: entered allmulticast mode [ 299.675296][ T5745] IPVS: starting estimator thread 0... [ 299.681153][T15647] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.695547][T15647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2555'. [ 299.799155][T15652] IPVS: using max 36 ests per chain, 86400 per kthread [ 299.964290][T15656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.966252][T15661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.054209][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 302.066740][T15667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2559'. [ 302.358942][T15686] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 302.465074][T15695] xt_l2tp: missing protocol rule (udp|l2tpip) [ 302.619354][T15708] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 302.643024][T15710] netlink: 'syz.2.2573': attribute type 13 has an invalid length. [ 302.653421][T15708] __nla_validate_parse: 2 callbacks suppressed [ 302.653437][T15708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2571'. [ 302.682204][T15710] veth1_macvtap: left promiscuous mode [ 302.695048][T15710] macsec0: entered allmulticast mode [ 302.715584][T15708] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 302.778282][T15717] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.936967][T15719] bridge7: entered promiscuous mode [ 302.943191][T15719] bridge7: entered allmulticast mode [ 302.967162][T15721] syzkaller0: entered promiscuous mode [ 302.973380][T15721] syzkaller0: entered allmulticast mode [ 302.995093][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 303.102756][T15733] ip6t_srh: unknown srh invflags 4000 [ 303.627855][T15765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2591'. [ 303.752669][T15774] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2595'. [ 303.876029][T15780] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003 [ 304.019335][T15788] bridge6: entered allmulticast mode [ 304.509474][T15824] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2610'. [ 304.534790][T15822] openvswitch: netlink: IP tunnel dst address not specified [ 304.612562][T15822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2608'. [ 304.655945][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 304.681173][T15822] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2608'. [ 304.709502][T15829] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2612'. [ 304.726831][T15822] netlink: 'syz.3.2608': attribute type 3 has an invalid length. [ 304.727427][T15833] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 304.745243][T15833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2614'. [ 304.758076][T15822] netlink: 'syz.3.2608': attribute type 2 has an invalid length. [ 304.780349][T15831] netlink: 'syz.1.2613': attribute type 12 has an invalid length. [ 304.798548][T15831] netlink: 'syz.1.2613': attribute type 11 has an invalid length. [ 305.704490][T15896] vlan5: entered promiscuous mode [ 305.709711][T15896] bridge0: entered promiscuous mode [ 305.913660][T15901] netlink: 'syz.3.2635': attribute type 49 has an invalid length. [ 305.924870][T15909] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 306.017711][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058a8c800: rx timeout, send abort [ 306.031227][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805976f800: rx timeout, send abort [ 306.040263][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805976f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.247904][T15927] netlink: 'syz.0.2642': attribute type 3 has an invalid length. [ 306.289712][T15928] macsec0: entered allmulticast mode [ 306.305342][T15928] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 306.529139][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058a8c800: abort rx timeout. Force session deactivation [ 306.581431][T15946] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 306.607821][T15948] tipc: Enabling of bearer rejected, media not registered [ 306.669098][T15950] erspan0: entered promiscuous mode [ 307.041142][T15974] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 307.264436][T15991] netlink: 'syz.0.2655': attribute type 5 has an invalid length. [ 307.392933][T16002] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.752495][T16022] netlink: 'syz.2.2663': attribute type 12 has an invalid length. [ 307.983026][T16022] bond29: option primary_reselect: invalid value (255) [ 307.993702][T16022] bond29 (unregistering): Released all slaves [ 308.080542][T16040] __nla_validate_parse: 20 callbacks suppressed [ 308.080554][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 308.294123][T16050] syzkaller0: entered promiscuous mode [ 308.305303][T16050] syzkaller0: entered allmulticast mode [ 308.313560][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'. [ 308.332110][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2672'. [ 308.356375][T16059] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 308.532289][T16070] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 308.678244][T16074] netlink: 'syz.0.2678': attribute type 13 has an invalid length. [ 309.168331][T16094] syzkaller1: left promiscuous mode [ 309.185909][T16094] syzkaller1: left allmulticast mode [ 309.202892][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 309.262184][T16094] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2681'. [ 309.299457][T16094] bridge7: entered promiscuous mode [ 309.478120][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 309.604013][T16120] netlink: 'syz.1.2691': attribute type 1 has an invalid length. [ 309.635936][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 309.661634][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 309.775730][T16116] syzkaller1: entered promiscuous mode [ 309.807652][T16116] syzkaller1: entered allmulticast mode [ 309.927302][T16140] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2695'. [ 310.058072][T16147] xt_hl: Unknown Hop Limit match mode: 206 [ 310.084421][T16144] veth0_macvtap: entered allmulticast mode [ 310.125997][T16144] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 310.156817][T16152] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 310.308331][T16152] bond10: entered promiscuous mode [ 310.332510][T16152] 8021q: adding VLAN 0 to HW filter on device bond10 [ 310.346161][T16169] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 310.362586][T16156] vcan0: entered allmulticast mode [ 310.407994][T16167] ipvlan2: entered allmulticast mode [ 310.413497][T16167] bond10: entered allmulticast mode [ 310.458974][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 310.493232][T16152] bond10: (slave bridge8): making interface the new active one [ 310.513167][T16152] bridge8: entered promiscuous mode [ 310.518842][T16152] bridge8: entered allmulticast mode [ 310.527155][T16152] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 310.572593][T16180] netlink: 'syz.2.2706': attribute type 8 has an invalid length. [ 310.777302][T16191] netlink: 'syz.3.2710': attribute type 1 has an invalid length. [ 310.802233][T16192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.851740][T16191] 8021q: adding VLAN 0 to HW filter on device bond12 [ 310.876633][T16194] bond12: (slave veth0_to_bond): making interface the new active one [ 310.886837][T16194] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 310.912054][T16196] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 310.925325][T16196] netlink: 'syz.4.2713': attribute type 2 has an invalid length. [ 310.972243][T16191] 8021q: adding VLAN 0 to HW filter on device bond13 [ 310.998718][T16191] bond12: (slave bond13): Enslaving as an active interface with a down link [ 313.147034][T16307] __nla_validate_parse: 3 callbacks suppressed [ 313.147055][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 313.158840][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 313.243172][T16315] netlink: 'syz.2.2743': attribute type 10 has an invalid length. [ 313.267147][T16316] netlink: 'syz.2.2743': attribute type 10 has an invalid length. [ 313.682273][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 313.993358][T16356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2756'. [ 314.018878][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2756'. [ 314.195326][T16367] netlink: 'syz.3.2758': attribute type 1 has an invalid length. [ 314.284606][T16367] 8021q: adding VLAN 0 to HW filter on device bond14 [ 314.406566][T16376] gre1: entered promiscuous mode [ 314.467127][T16388] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 314.476097][T16388] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2764'. [ 314.504601][T16379] bond9: (slave ip6gretap1): making interface the new active one [ 314.514330][T16379] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 314.523959][T16392] netlink: 'syz.1.2763': attribute type 2 has an invalid length. [ 314.567251][T16386] macvlan0: entered promiscuous mode [ 314.586850][T16386] macvlan0: entered allmulticast mode [ 314.627161][T16386] bond14: entered promiscuous mode [ 314.631026][T16397] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 314.648138][T16386] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 314.675565][T16386] bond14: left promiscuous mode [ 315.186298][T16431] veth0: entered promiscuous mode [ 315.195002][T16431] batadv_slave_1: entered promiscuous mode [ 315.203068][T16429] bridge0: port 3(gretap0) entered blocking state [ 315.213831][T16429] bridge0: port 3(gretap0) entered disabled state [ 315.222676][T16429] gretap0: entered allmulticast mode [ 315.234119][T16429] gretap0: entered promiscuous mode [ 315.241266][T16429] bridge0: port 3(gretap0) entered blocking state [ 315.247876][T16429] bridge0: port 3(gretap0) entered forwarding state [ 315.257536][T16430] batadv_slave_1: left promiscuous mode [ 315.263504][T16430] veth0: left promiscuous mode [ 315.460533][T16443] openvswitch: netlink: Message has 12 unknown bytes. [ 315.487460][T16443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.591337][T16452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2783'. [ 315.685852][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 315.894067][T16467] syzkaller0: entered promiscuous mode [ 315.926243][T16467] syzkaller0: entered allmulticast mode [ 315.941476][T16467] netlink: 'syz.0.2789': attribute type 19 has an invalid length. [ 316.099296][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 316.160793][T16484] bond0: entered promiscuous mode [ 316.178146][T16484] bond_slave_0: entered promiscuous mode [ 316.190915][T16484] bond_slave_1: entered promiscuous mode [ 316.212689][T16480] netlink: 684 bytes leftover after parsing attributes in process `syz.1.2792'. [ 316.214375][T16484] bond0: left promiscuous mode [ 316.275125][T16484] bond_slave_0: left promiscuous mode [ 316.304763][T16484] bond_slave_1: left promiscuous mode [ 316.505667][T16509] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 316.638136][T10061] bond0: (slave bond_slave_0): interface is now down [ 316.648756][T10061] bond0: (slave bond_slave_1): interface is now down [ 316.736877][T16518] bond17: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 316.838000][T16509] veth7: entered promiscuous mode [ 316.855418][T16518] Cannot find add_set index 4 as target [ 316.883341][T16509] bond17: (slave veth7): Enslaving as a backup interface with a down link [ 316.919213][T10061] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.938119][T16515] 8021q: adding VLAN 0 to HW filter on device bond17 [ 317.080948][T10073] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 317.107925][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115305][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 317.155215][T16537] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 317.201710][T16540] netlink: 'syz.4.2808': attribute type 61 has an invalid length. [ 317.371139][T16546] netlink: 'syz.2.2811': attribute type 2 has an invalid length. [ 317.619564][T16567] syzkaller0: entered promiscuous mode [ 317.642842][T16567] syzkaller0: entered allmulticast mode [ 317.703759][T16573] xt_hashlimit: invalid rate [ 317.789057][T16576] syzkaller1: left promiscuous mode [ 317.806413][T16576] syzkaller1: left allmulticast mode [ 317.978276][T16588] xt_hashlimit: size too large, truncated to 1048576 [ 318.384403][T16608] bond_slave_0: mtu greater than device maximum [ 318.596618][T16620] __nla_validate_parse: 8 callbacks suppressed [ 318.596636][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2832'. [ 318.626226][T16619] openvswitch: netlink: Key type 153 is out of range max 32 [ 318.942638][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.962299][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.972441][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.989149][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.999659][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.155355][T16630] syzkaller1: entered promiscuous mode [ 319.181795][ T6271] bond0: (slave bond_slave_0): interface is now down [ 319.190198][T16630] syzkaller1: entered allmulticast mode [ 319.243376][ T6271] bond0: (slave bond_slave_1): interface is now down [ 319.286022][T16646] netlink: 'syz.3.2840': attribute type 12 has an invalid length. [ 319.313533][T16647] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 319.399405][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2839'. [ 319.511996][T16652] netlink: 'syz.3.2840': attribute type 12 has an invalid length. [ 319.648076][T16664] xt_l2tp: v2 doesn't support IP mode [ 319.705685][T16667] sctp: [Deprecated]: syz.4.2843 (pid 16667) Use of int in max_burst socket option deprecated. [ 319.705685][T16667] Use struct sctp_assoc_value instead [ 319.857650][T16661] openvswitch: netlink: IPv4 tunnel dst address is zero [ 320.379415][T16688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2847'. [ 320.400187][T16661] xfrm0 speed is unknown, defaulting to 1000 [ 320.786962][T16696] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 320.889543][T16631] xfrm0 speed is unknown, defaulting to 1000 [ 321.101592][ T5627] Bluetooth: hci5: command tx timeout [ 321.482605][T16717] bond0: (slave bond_slave_1): Releasing backup interface [ 321.524224][T16717] bond_slave_1: left allmulticast mode [ 321.694274][T16726] netlink: 'syz.1.2858': attribute type 10 has an invalid length. [ 321.830030][T10043] bond0: (slave bond_slave_0): interface is now down [ 321.853730][T10043] bond0: (slave bond_slave_1): interface is now down [ 323.180030][ T5627] Bluetooth: hci5: command tx timeout [ 324.322620][T16726] veth1_macvtap: left promiscuous mode [ 324.332356][T16726] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 324.380673][ T36] bond0: (slave bond_slave_0): interface is now down [ 324.411078][ T36] bond0: (slave bond_slave_1): interface is now down [ 324.591858][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2862'. [ 324.601754][T16745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2862'. [ 324.627871][T16744] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 324.845408][T16756] sock: sock_set_timeout: `syz.2.2865' (pid 16756) tries to set negative timeout [ 324.861375][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 324.894540][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 325.056798][T16765] ipt_REJECT: ECHOREPLY no longer supported. [ 325.137519][T16768] xt_connbytes: Forcing CT accounting to be enabled [ 325.175595][T16768] Cannot find set identified by id 65534 to match [ 325.260370][ T5627] Bluetooth: hci5: command tx timeout [ 325.343138][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.358744][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.369068][T16631] bridge_slave_0: entered allmulticast mode [ 325.382351][T16631] bridge_slave_0: entered promiscuous mode [ 325.423030][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.438639][T16781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2872'. [ 325.457570][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.483805][T16631] bridge_slave_1: entered allmulticast mode [ 325.519148][T16631] bridge_slave_1: entered promiscuous mode [ 325.695662][T16631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.788525][T16631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.808259][T16797] openvswitch: netlink: Missing valid actions attribute. [ 325.841440][T16802] syzkaller0: entered promiscuous mode [ 325.842795][T16797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.849828][T16802] syzkaller0: entered allmulticast mode [ 325.975704][T16631] team0: Port device team_slave_0 added [ 325.992524][T16631] team0: Port device team_slave_1 added [ 326.124447][T16631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.158193][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.223859][T16631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.250006][T16631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.257964][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.314182][T16631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.542246][T16631] hsr_slave_0: entered promiscuous mode [ 326.562183][T16631] hsr_slave_1: entered promiscuous mode [ 326.590505][T16631] debugfs: 'hsr0' already exists in 'hsr' [ 326.604399][T16631] Cannot create hsr debugfs directory [ 326.727600][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 326.762699][T16832] openvswitch: netlink: Message has 1 unknown bytes. [ 326.790716][T16832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.941238][T10073] bond0: (slave bond_slave_0): interface is now down [ 326.959659][T10073] bond0: (slave bond_slave_1): interface is now down [ 327.016331][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2889'. [ 327.343576][ T5627] Bluetooth: hci5: command tx timeout [ 327.702245][T16631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.751964][T16631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.122705][T16631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.135944][T16631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.377206][T16631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.426158][T16631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.548675][T16901] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 328.628268][T16631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.641830][T16631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.923077][T16916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2912'. [ 329.330756][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 329.392489][T16631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.414892][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.432666][T16631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.452714][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.478605][T16631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.510338][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.580695][T10043] bond0: (slave bond_slave_0): interface is now down [ 329.587034][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'. [ 329.597046][T10043] bond0: (slave bond_slave_1): interface is now down [ 329.628634][T16631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.685494][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.886376][T16957] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2923'. [ 329.925709][T16956] syzkaller1: entered promiscuous mode [ 329.945105][T16956] syzkaller1: entered allmulticast mode [ 330.117002][T16964] netlink: 'syz.4.2924': attribute type 2 has an invalid length. [ 330.158574][T16964] netlink: 'syz.4.2924': attribute type 2 has an invalid length. [ 330.195913][T16631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.204624][T16964] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2924'. [ 330.294180][T16631] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.344290][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.351504][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.412080][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.419287][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.484997][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 330.533724][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2929'. [ 330.582352][T16982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2928'. [ 331.154266][T17003] netlink: 'syz.3.2932': attribute type 4 has an invalid length. [ 331.276186][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 331.530541][T17017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2936'. [ 331.951354][T17037] IPv4: Oversized IP packet from 127.202.26.0 [ 332.152270][T10048] bond0: (slave bond_slave_0): interface is now down [ 332.174208][T10048] bond0: (slave bond_slave_1): interface is now down [ 332.228087][T10048] bond0: now running without any active interface! [ 332.344630][T16631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.516496][T16631] veth0_vlan: entered promiscuous mode [ 332.591714][T17064] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 332.596121][T16631] veth1_vlan: entered promiscuous mode [ 332.656842][T17070] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2951'. [ 332.733843][T10048] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 332.761383][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 332.777377][T16631] veth0_macvtap: entered promiscuous mode [ 332.823024][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2952'. [ 332.843387][T16631] veth1_macvtap: entered promiscuous mode [ 332.936092][T16631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.961209][T17080] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 332.965995][T16631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.002362][T10050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.021403][T10050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.060460][T10050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.079548][T10050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.603342][T17066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.893173][T17093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2957'. [ 335.893550][ T6281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.931625][ T6281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.017534][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 336.038315][T17096] bond18 (unregistering): Released all slaves [ 336.098194][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.146303][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.443339][T17115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2834'. [ 336.858012][T17130] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2968'. [ 336.922751][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.937745][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2968'. [ 336.943404][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.963464][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.975883][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.986354][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.148437][T17138] ieee802154 phy0 wpan0: encryption failed: -126 [ 337.488810][T17154] netlink: 'syz.1.2973': attribute type 1 has an invalid length. [ 337.501041][T17152] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2971'. [ 337.673920][ T5626] syz_tun (unregistering): left promiscuous mode [ 337.689013][ T5626] syz_tun (unregistering): left allmulticast mode [ 337.705662][ T5626] team0: Port device syz_tun removed [ 337.854105][T17154] 8021q: adding VLAN 0 to HW filter on device bond11 [ 337.906990][T17157] veth13: entered promiscuous mode [ 337.926022][T17157] bond11: (slave veth13): Enslaving as an active interface with a down link [ 337.962184][T17159] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 338.192184][T10073] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.255615][T10073] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.597171][T10073] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.647289][T10073] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.685106][T17188] netlink: 61 bytes leftover after parsing attributes in process `syz.0.2982'. [ 338.753488][T10073] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.799863][T10073] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.829956][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 338.975054][T17195] SET target dimension over the limit! [ 339.028287][ T5627] Bluetooth: hci1: command tx timeout [ 339.140252][T10073] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.196648][T10073] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.217744][T17209] netlink: 'syz.2.2985': attribute type 21 has an invalid length. [ 339.344050][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 339.442151][T17185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.547459][T17219] netlink: 'syz.2.2988': attribute type 5 has an invalid length. [ 339.718615][T17230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2991'. [ 340.158502][T17132] xfrm0 speed is unknown, defaulting to 1000 [ 340.215108][T10073] team0: left promiscuous mode [ 340.243683][T10073] team_slave_0: left promiscuous mode [ 340.267146][T10073] team_slave_1: left promiscuous mode [ 340.279750][T10073] : left promiscuous mode [ 340.323563][T10073] bridge0: port 3(team0) entered disabled state [ 340.384192][T10073] bridge_slave_1: left allmulticast mode [ 340.397290][T10073] bridge_slave_1: left promiscuous mode [ 340.411176][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.100928][ T5627] Bluetooth: hci1: command tx timeout [ 341.209559][T10073] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 341.449215][T10073] bond10 (unregistering): (slave geneve4): Releasing active interface [ 341.495212][T10073] team0: Port device bridge1 removed [ 341.569663][T10073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.579117][T10073] bond_slave_0: left allmulticast mode [ 341.586583][T10073] bond0 (unregistering): Released all slaves [ 341.597041][T10073] bond1 (unregistering): Released all slaves [ 341.614398][T10073] bond2 (unregistering): Released all slaves [ 341.628789][T10073] bond3 (unregistering): Released all slaves [ 341.646923][T10073] bond4 (unregistering): Released all slaves [ 341.662375][T10073] bond5 (unregistering): Released all slaves [ 341.685265][T10073] bond6 (unregistering): Released all slaves [ 341.700706][T10073] bond7 (unregistering): Released all slaves [ 341.715237][T10073] bond8 (unregistering): Released all slaves [ 341.728731][T10073] bond9 (unregistering): Released all slaves [ 341.754441][T10073] bond10 (unregistering): Released all slaves [ 341.770316][T10073] bond11 (unregistering): Released all slaves [ 341.786315][T10073] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 341.798759][T10073] bond12 (unregistering): (slave bond13): Releasing active interface [ 341.808497][T10073] bond12 (unregistering): Released all slaves [ 341.825064][T10073] bond13 (unregistering): Released all slaves [ 341.844996][T10073] bond14 (unregistering): Released all slaves [ 341.935780][ T5823] xfrm0 speed is unknown, defaulting to 1000 [ 341.950157][ T5823] syz2: Port: 1 Link DOWN [ 341.984525][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 342.251974][T17295] netlink: 'syz.1.2998': attribute type 12 has an invalid length. [ 342.543920][ T6271] smbdirect: ib_dev[syz2] removed [ 342.773963][T17315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3001'. [ 343.095942][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 343.180503][ T5627] Bluetooth: hci1: command tx timeout [ 343.406239][T10073] IPVS: stopping master sync thread 13127 ... [ 343.613427][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 343.987023][T17132] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.998515][T17132] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.009609][T17132] bridge_slave_0: entered allmulticast mode [ 344.024542][T17132] bridge_slave_0: entered promiscuous mode [ 344.087264][T17132] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.123663][T17132] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.138759][T17132] bridge_slave_1: entered allmulticast mode [ 344.138959][T17362] xt_hashlimit: size too large, truncated to 1048576 [ 344.153667][T17364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3013'. [ 344.164463][T17132] bridge_slave_1: entered promiscuous mode [ 344.344363][T17366] syzkaller0: entered promiscuous mode [ 344.391028][T17366] syzkaller0: entered allmulticast mode [ 344.473653][T17132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.507266][T17375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 344.543480][T17388] veth0: entered promiscuous mode [ 344.822482][T17132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.841776][T17388] veth0: left promiscuous mode [ 344.965944][T17399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3020'. [ 345.191235][T17132] team0: Port device team_slave_0 added [ 345.238199][T17132] team0: Port device team_slave_1 added [ 345.267088][ T5627] Bluetooth: hci1: command tx timeout [ 345.583988][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 345.621407][T17132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.644916][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.696249][T17132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.705932][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 345.710815][T17132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.724347][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.757065][T17132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.780223][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 346.008365][T17451] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 346.039615][T17132] hsr_slave_0: entered promiscuous mode [ 346.047605][T17132] hsr_slave_1: entered promiscuous mode [ 346.054700][T17132] debugfs: 'hsr0' already exists in 'hsr' [ 346.061909][T17132] Cannot create hsr debugfs directory [ 346.098470][T17451] 8021q: adding VLAN 0 to HW filter on device bond18 [ 346.162698][T17445] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.309183][T17451] macvlan3: entered promiscuous mode [ 346.329535][T17451] macvlan3: entered allmulticast mode [ 346.360826][T17451] bond18: entered promiscuous mode [ 346.383957][T17451] veth0_to_bond: entered promiscuous mode [ 346.418955][T17451] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 346.482830][T17451] bond18: left promiscuous mode [ 346.499297][T17451] veth0_to_bond: left promiscuous mode [ 346.886582][T17492] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 347.809097][T17544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3052'. [ 347.842988][T10073] hsr_slave_0: left promiscuous mode [ 347.853493][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.865364][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.881823][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.900360][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.928856][T10073] veth1_macvtap: left promiscuous mode [ 347.937035][T10073] veth0_macvtap: left promiscuous mode [ 348.146028][T10073] team_slave_1 (unregistering): left allmulticast mode [ 348.154881][T10073] team0 (unregistering): Port device team_slave_1 removed [ 348.169051][T10073] team_slave_0 (unregistering): left allmulticast mode [ 348.178161][T10073] team0 (unregistering): Port device team_slave_0 removed [ 348.259109][T10073]  (unregistering): left allmulticast mode [ 348.268144][T10073] team0 (unregistering): Port device  removed [ 348.331396][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 348.772273][T17552] netlink: 'syz.0.3053': attribute type 22 has an invalid length. [ 348.784978][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 348.844937][T17565] batadv_slave_1: entered promiscuous mode [ 348.903700][T17552] netlink: 'syz.0.3053': attribute type 22 has an invalid length. [ 348.929030][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 348.963578][T17558] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 348.992300][T17558] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.015959][T17558] gretap3: entered promiscuous mode [ 349.042168][T17558] gretap3: entered allmulticast mode [ 349.073288][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 349.173849][T17582] openvswitch: netlink: IPv4 tunnel dst address is zero [ 349.185939][T17557] batadv_slave_1: left promiscuous mode [ 349.211246][T10073] IPVS: stop unused estimator thread 0... [ 349.328769][T17585] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3060'. [ 349.372634][T17591] netlink: 'syz.1.3061': attribute type 10 has an invalid length. [ 349.396879][T17591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.405423][T17591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.416457][T17591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.439347][T17591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.474189][T17591] batman_adv: batadv0: Removing interface: gretap1 [ 349.617159][T17600] netlink: 'syz.2.3064': attribute type 2 has an invalid length. [ 349.631042][T17600] netlink: 'syz.2.3064': attribute type 2 has an invalid length. [ 349.641997][T17600] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3064'. [ 350.784839][ T5639] Bluetooth: hci1: command 0x0405 tx timeout [ 352.644069][ T5288] veth1_vlan: left promiscuous mode [ 352.892392][T17651] openvswitch: netlink: VXLAN extension 1536 out of range max 1 [ 352.955415][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 353.118152][T17665] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.170386][T17132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.198326][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.213937][T17132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.247952][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.332303][T17132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.367208][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.395951][T17132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.438218][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.667157][T17695] syzkaller1: entered promiscuous mode [ 353.681659][T17696] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 353.695807][T17695] syzkaller1: entered allmulticast mode [ 353.884976][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 353.888173][T17132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.099649][T17132] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.146506][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.155458][T10073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.219708][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.226959][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.266723][T17718] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 355.024836][T17132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.094756][T17132] veth0_vlan: entered promiscuous mode [ 355.112790][T17132] veth1_vlan: entered promiscuous mode [ 355.156783][T17132] veth0_macvtap: entered promiscuous mode [ 355.173987][T17132] veth1_macvtap: entered promiscuous mode [ 355.199736][T17132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.218856][T17132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.239464][T10051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.253594][T10051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.274220][T10051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.284777][T10051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.596821][T17691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.773102][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.809297][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.917513][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.942743][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.193763][T17852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3093'. [ 357.506849][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.523312][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.532914][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.547542][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.558142][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.948801][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 357.965360][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 358.282751][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 358.318510][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 358.349883][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3101'. [ 358.451973][T17905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3103'. [ 358.719242][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 358.757598][T17926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.803828][T17929] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3107'. [ 358.823310][T17926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.011190][T17936] pim6reg: entered allmulticast mode [ 359.039059][T17938] pim6reg: left allmulticast mode [ 359.072715][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3110'. [ 359.660002][ T5627] Bluetooth: hci3: command tx timeout [ 359.794073][T17983] netlink: 'syz.3.3118': attribute type 3 has an invalid length. [ 360.358769][T17981] bridge10: entered promiscuous mode [ 360.373430][T17981] bridge10: entered allmulticast mode [ 360.714869][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3127'. [ 360.857531][T18011] netlink: 'syz.3.3127': attribute type 11 has an invalid length. [ 360.890036][T18011] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3127'. [ 360.901627][T18011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.937848][T18011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.298745][T17863] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.306351][T17863] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.315101][T17863] bridge_slave_0: entered allmulticast mode [ 361.325070][T17863] bridge_slave_0: entered promiscuous mode [ 361.334866][T17863] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.343052][T17863] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.351117][T17863] bridge_slave_1: entered allmulticast mode [ 361.361983][T17863] bridge_slave_1: entered promiscuous mode [ 361.452348][T17863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.482935][T17863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.614068][T17863] team0: Port device team_slave_0 added [ 361.645392][T17863] team0: Port device team_slave_1 added [ 361.741565][ T5627] Bluetooth: hci3: command tx timeout [ 361.756881][T17863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.765988][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.794911][T17863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.813260][T17863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.822303][T17863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.849622][T17863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.031714][T17863] hsr_slave_0: entered promiscuous mode [ 362.038907][T17863] hsr_slave_1: entered promiscuous mode [ 362.059038][T17863] debugfs: 'hsr0' already exists in 'hsr' [ 362.073003][T17863] Cannot create hsr debugfs directory [ 362.110790][T18060] bond0: (slave gre0): refused to change device type [ 362.298937][T18068] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 362.357382][T18072] tipc: Started in network mode [ 362.364806][T18072] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 362.373358][T18072] tipc: Enabled bearer , priority 24 [ 362.751597][T18095] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 362.796296][T18098] netlink: 'syz.1.3153': attribute type 21 has an invalid length. [ 362.852503][T17863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.886966][T17863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.026846][T18098] __nla_validate_parse: 5 callbacks suppressed [ 363.026953][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 363.153034][T17863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.164296][T17863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.255600][T17863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.283518][T17863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.330799][T18119] netlink: 'syz.1.3157': attribute type 4 has an invalid length. [ 363.353302][T18121] sctp: [Deprecated]: syz.2.3158 (pid 18121) Use of int in max_burst socket option deprecated. [ 363.353302][T18121] Use struct sctp_assoc_value instead [ 363.418712][T17863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.457003][T17863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.493873][ T188] tipc: Node number set to 10005162 [ 363.708912][T18135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3161'. [ 363.748775][T17863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.767849][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 363.796934][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.806297][T17863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.817058][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.830879][ T5627] Bluetooth: hci3: command tx timeout [ 363.854443][T18139] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 363.894481][T18142] netlink: 'syz.3.3163': attribute type 3 has an invalid length. [ 363.895089][T17863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.912790][T18142] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3163'. [ 363.941707][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.954823][T17863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.961158][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 363.972095][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 363.976105][T17863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.045780][T18139] bond1 (unregistering): Released all slaves [ 364.236942][T17863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.327402][T17863] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.376587][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.383825][T10043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.419412][T18170] netlink: 'syz.2.3169': attribute type 23 has an invalid length. [ 364.459435][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.466739][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.028795][T18205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3176'. [ 365.037364][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.060837][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3175'. [ 365.064066][T18205] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3176'. [ 365.090304][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3177'. [ 365.136560][T18208] netlink: 'syz.3.3177': attribute type 3 has an invalid length. [ 365.186898][T18208] netlink: 'syz.3.3177': attribute type 1 has an invalid length. [ 365.264986][T18213] IPv4: Oversized IP packet from 127.202.26.0 [ 365.514249][T17863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.793677][T18250] netlink: 'syz.2.3184': attribute type 1 has an invalid length. [ 365.901763][ T5627] Bluetooth: hci3: command tx timeout [ 366.014533][T18262] vlan2: entered promiscuous mode [ 366.020728][T18262] bridge0: entered promiscuous mode [ 366.028965][T18262] netlink: 'syz.0.3188': attribute type 64 has an invalid length. [ 366.047376][T18258] smc: removing ib device syz0 [ 366.254036][T18258] smbdirect: ib_dev[syz0] removed [ 366.342823][T17863] veth0_vlan: entered promiscuous mode [ 366.403742][T17863] veth1_vlan: entered promiscuous mode [ 366.457115][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.472339][T18279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.491344][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.505673][T17863] veth0_macvtap: entered promiscuous mode [ 366.556014][T17863] veth1_macvtap: entered promiscuous mode [ 366.612732][T17863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.655903][T17863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.686374][T18281] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 366.723370][ T6272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.750488][ T6272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.771352][ T6272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.793703][ T6272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.996275][T18285] openvswitch: netlink: Missing valid actions attribute. [ 367.003793][T18285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.148520][T10050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.179414][T10050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.406676][T18287] syzkaller0: entered promiscuous mode [ 367.414525][T18287] syzkaller0: entered allmulticast mode [ 367.427455][T18297] tipc: MTU too low for tipc bearer [ 367.434302][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.444536][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.152322][T18348] netlink: 'syz.2.3210': attribute type 4 has an invalid length. [ 371.269425][T18351] __nla_validate_parse: 5 callbacks suppressed [ 371.269444][T18351] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3211'. [ 371.351608][T18351] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 371.364322][T18355] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 371.448393][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.465376][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.474922][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.499257][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.511408][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.083881][T18392] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3218'. [ 372.472138][ T30] audit: type=1804 audit(1783037694.773:7): pid=18413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3222" name="/newroot/3/cgroup.controllers" dev="tmpfs" ino=33 res=1 errno=0 [ 372.493933][T18418] netlink: 'syz.0.3223': attribute type 17 has an invalid length. [ 372.546009][ T30] audit: type=1800 audit(1783037694.773:8): pid=18413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3222" name="cgroup.controllers" dev="tmpfs" ino=33 res=0 errno=0 [ 372.546105][T18418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 372.620577][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3223'. [ 372.700000][T18418] gretap0: entered promiscuous mode [ 372.733160][T18418] gretap0: left promiscuous mode [ 373.047303][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 373.155049][T18440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3226'. [ 373.200567][T18440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3226'. [ 373.394449][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 373.456733][T18445] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 373.507091][ T29] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 373.582465][ T5627] Bluetooth: hci0: command tx timeout [ 373.628949][T18461] syzkaller1: entered promiscuous mode [ 373.646279][T18461] syzkaller1: entered allmulticast mode [ 373.670283][T18456] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 373.793351][T18456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.817652][T18461] vlan3: entered allmulticast mode [ 373.825006][T18461] bond2: entered allmulticast mode [ 374.020733][T18461] bond2: (slave geneve2): making interface the new active one [ 374.028569][T18461] geneve2: entered allmulticast mode [ 374.042423][T18461] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 374.052134][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 374.356233][T18494] netlink: 'syz.4.3238': attribute type 2 has an invalid length. [ 374.416231][T18495] netlink: 'syz.4.3238': attribute type 2 has an invalid length. [ 374.743969][T18510] bond1 (unregistering): Released all slaves [ 374.872051][T18520] syzkaller0: entered promiscuous mode [ 374.896025][T18520] syzkaller0: entered allmulticast mode [ 375.028652][T18520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3243'. [ 375.187426][T18538] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 375.223637][T18538] netlink: 'syz.0.3246': attribute type 7 has an invalid length. [ 375.265523][T18538] netlink: 'syz.0.3246': attribute type 8 has an invalid length. [ 375.274819][T18538] NCSI netlink: No device for ifindex 65584 [ 375.533103][T18556] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 375.661786][ T5627] Bluetooth: hci0: command tx timeout [ 376.146098][T18547] ip6gre1: entered allmulticast mode [ 376.153594][T18550] batadv_slave_0: entered promiscuous mode [ 376.200713][T18557] veth3: entered allmulticast mode [ 376.307196][T18550] batadv_slave_0: left promiscuous mode [ 376.337303][T18359] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.345321][T18359] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.355599][T18359] bridge_slave_0: entered allmulticast mode [ 376.365595][T18359] bridge_slave_0: entered promiscuous mode [ 376.378698][T18359] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.386599][T18359] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.394928][T18359] bridge_slave_1: entered allmulticast mode [ 376.403368][T18359] bridge_slave_1: entered promiscuous mode [ 376.502160][T18359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.512882][T18570] __nla_validate_parse: 1 callbacks suppressed [ 376.512898][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 376.535259][T18359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.539571][T18572] tipc: Failed to remove unknown binding: 66,0,0/0:4180452398/4180452399 [ 376.545401][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3255'. [ 376.571132][T18572] tipc: Failed to remove unknown binding: 66,0,0/0:4180452398/4180452399 [ 376.656289][ T6272] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.679439][T18575] x_tables: duplicate entry at hook 1 [ 376.687013][T18359] team0: Port device team_slave_0 added [ 376.693856][ T6272] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.704478][ T6272] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.730812][T18359] team0: Port device team_slave_1 added [ 376.752468][ T6272] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.781521][T18576] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 376.801631][T18584] netlink: 'syz.2.3259': attribute type 30 has an invalid length. [ 376.815917][T18571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3255'. [ 376.842144][T18359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.849153][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.868586][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 376.876762][T18359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.901675][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'. [ 376.911924][T18586] netlink: 'syz.0.3260': attribute type 14 has an invalid length. [ 376.920947][T18586] netlink: 'syz.0.3260': attribute type 13 has an invalid length. [ 376.963460][T18584] bond31: option arp_missed_max: invalid value (0) [ 376.970887][T18584] bond31: option arp_missed_max: allowed values 1 - 255 [ 376.993923][T18584] bond31 (unregistering): Released all slaves [ 377.005849][T18592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3260'. [ 377.036094][T18359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.052044][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3259'. [ 377.055000][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.109548][T18359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.219367][T18359] hsr_slave_0: entered promiscuous mode [ 377.227016][T18359] hsr_slave_1: entered promiscuous mode [ 377.237223][T18359] debugfs: 'hsr0' already exists in 'hsr' [ 377.243807][T18359] Cannot create hsr debugfs directory [ 377.751123][ T5627] Bluetooth: hci0: command tx timeout [ 377.759117][T18359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.773798][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.784926][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 377.805979][T18359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.835468][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.852516][T18359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.865429][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.912677][T18633] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 378.056582][T18359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.066605][T18359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.076168][T18633] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR [ 378.183973][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3272'. [ 378.280024][T18650] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3273'. [ 378.405193][T18359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.467926][T18359] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.503509][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.510751][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.545628][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.553081][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.582375][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.589580][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.659040][T18666] openvswitch: netlink: EtherType 0 is less than min 600 [ 379.824319][ T5627] Bluetooth: hci0: command tx timeout [ 382.653769][T18359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.765874][T18757] syzkaller0: entered promiscuous mode [ 382.783562][T18757] syzkaller0: entered allmulticast mode [ 383.060895][T18359] veth0_vlan: entered promiscuous mode [ 383.071142][T18772] __nla_validate_parse: 10 callbacks suppressed [ 383.071161][T18772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3304'. [ 383.098214][T18359] veth1_vlan: entered promiscuous mode [ 383.188464][T18776] sctp: [Deprecated]: syz.2.3304 (pid 18776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.188464][T18776] Use struct sctp_sack_info instead [ 383.277592][T18359] veth0_macvtap: entered promiscuous mode [ 383.317429][T18359] veth1_macvtap: entered promiscuous mode [ 383.425768][T18359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.545886][T18359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.588930][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.619611][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.705982][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.751459][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.088051][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.120622][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.218102][T10050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.251320][T10050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.284539][T18817] syzkaller1: entered promiscuous mode [ 384.294048][T18817] syzkaller1: entered allmulticast mode [ 384.392803][T18819] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3316'. [ 384.404436][T18819] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3316'. [ 384.443016][T18819] 8021q: VLANs not supported on ip_vti0 [ 384.586525][T18832] netlink: 'syz.1.3209': attribute type 10 has an invalid length. [ 384.599568][T18834] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 384.614202][T18832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.650551][T18832] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 384.758456][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 384.812352][T18844] bond1 (unregistering): Released all slaves [ 384.963954][T18856] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 385.004405][T18857] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 385.024808][T18857] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.3326'. [ 385.147515][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'. [ 385.178962][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.199400][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.211452][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.223588][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.234349][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.460157][T18875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3330'. [ 385.465161][T18877] x_tables: duplicate underflow at hook 1 [ 385.653835][T18886] netlink: 'syz.4.3333': attribute type 21 has an invalid length. [ 385.662498][T18886] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.907893][T18898] pim6reg527: entered allmulticast mode [ 386.333346][T18913] syzkaller1: entered promiscuous mode [ 386.339075][T18913] syzkaller1: entered allmulticast mode [ 386.445484][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'. [ 386.464691][T18919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.488879][T18919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.541585][T18921] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 386.561815][T18921] syzkaller0: entered promiscuous mode [ 386.569923][T18921] syzkaller0: entered allmulticast mode [ 386.682444][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 386.942423][T18935] netlink: 'syz.0.3351': attribute type 2 has an invalid length. [ 386.963199][T18935] netlink: 'syz.0.3351': attribute type 2 has an invalid length. [ 386.976274][T18937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3352'. [ 387.144755][T18861] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.167830][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.175652][T18861] bridge_slave_0: entered allmulticast mode [ 387.187713][T18861] bridge_slave_0: entered promiscuous mode [ 387.209555][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.215164][T18945] netlink: 'syz.0.3354': attribute type 63 has an invalid length. [ 387.219500][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.232916][T18861] bridge_slave_1: entered allmulticast mode [ 387.241552][T18861] bridge_slave_1: entered promiscuous mode [ 387.340440][ T5627] Bluetooth: hci4: command tx timeout [ 387.358015][T18861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.372103][T18861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.411668][T18861] team0: Port device team_slave_0 added [ 387.422708][T18861] team0: Port device team_slave_1 added [ 387.458763][T18861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.478899][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.553339][T18861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.571192][T18861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.602098][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.703739][T18861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.888710][T18861] hsr_slave_0: entered promiscuous mode [ 387.898277][T18861] hsr_slave_1: entered promiscuous mode [ 387.906991][T18861] debugfs: 'hsr0' already exists in 'hsr' [ 387.915580][T18861] Cannot create hsr debugfs directory [ 388.008564][T18984] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 388.048779][T18993] netlink: 'syz.3.3367': attribute type 1 has an invalid length. [ 388.068770][T18984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.195674][T18993] __nla_validate_parse: 4 callbacks suppressed [ 388.195694][T18993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3367'. [ 388.215051][T18996] bond1: (slave geneve2): making interface the new active one [ 388.227692][T18996] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 388.253325][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.264319][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.276297][T18993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.323032][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.403781][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.482633][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 388.642414][T18861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.655789][T18861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.770160][ T6272] syzkaller0: tun_net_xmit 76 [ 388.778575][ T6272] syzkaller0: tun_net_xmit 48 [ 388.790779][ T5725] syzkaller0: tun_net_xmit 76 [ 388.805756][T19014] syzkaller0: create flow: hash 1965236593 index 1 [ 388.827766][ T5725] syzkaller0: tun_net_xmit 76 [ 388.886256][T18861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.901993][T18861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.083279][T19012] syzkaller0: delete flow: hash 1965236593 index 1 [ 389.473861][ T5627] Bluetooth: hci4: command tx timeout [ 391.500735][ T5627] Bluetooth: hci4: command tx timeout [ 392.095664][T18861] bond0: (slave netdevsim1): Releasing backup interface [ 392.108151][T18861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.118931][T18861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.318633][T18861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.353726][T18861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.960392][T19056] validate_nla: 1 callbacks suppressed [ 392.960435][T19056] netlink: 'syz.4.3384': attribute type 12 has an invalid length. [ 393.329651][T18861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.379711][T18861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.391534][T18861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.415703][T18861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.441512][T18861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.487395][T18861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.532120][T18861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.568167][T18861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.580937][ T5627] Bluetooth: hci4: command tx timeout [ 393.836020][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 393.875367][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'. [ 393.896779][T19091] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 393.927450][T19091] bond2 (unregistering): Released all slaves [ 393.995573][T19099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3396'. [ 394.223681][T18861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.266562][T19105] veth0: entered promiscuous mode [ 394.311385][T19099] batadv_slave_1: entered promiscuous mode [ 394.403126][T18861] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.437217][T19110] pim6reg1: entered promiscuous mode [ 394.461519][T19110] pim6reg1: entered allmulticast mode [ 394.489541][T19097] batadv_slave_1: left promiscuous mode [ 394.491566][T19110] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.506265][T19097] veth0: left promiscuous mode [ 394.532601][T10045] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.539873][T10045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.718049][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.725289][T10038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.918406][T19122] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 395.030368][ T6272] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 395.195380][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 395.495837][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'. [ 395.516953][T19155] lo: entered allmulticast mode [ 395.656052][T19155] Cannot find add_set index 0 as target [ 395.666994][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'. [ 395.683657][T19158] lo: left allmulticast mode [ 395.755495][T18861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.810764][T18861] veth0_vlan: entered promiscuous mode [ 395.832274][T18861] veth1_vlan: entered promiscuous mode [ 395.871294][T18861] veth0_macvtap: entered promiscuous mode [ 395.883867][T18861] veth1_macvtap: entered promiscuous mode [ 395.904914][T18861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.924261][T18861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.938528][T10061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.950514][ T6281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.964281][ T6281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.973945][ T6281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.565669][T19174] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 396.572279][T19174] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 396.582851][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 396.592483][T19174] hsr_slave_0: left promiscuous mode [ 396.598529][T19174] hsr_slave_1: left promiscuous mode [ 397.918292][T19126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.151899][T10045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.185665][T10045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.315049][T10038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.339747][T10038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.543362][T19207] xt_cgroup: path and classid specified [ 398.558794][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3322'. [ 398.961643][T19227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3427'. [ 399.118397][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3429'. [ 399.145741][T19232] hsr_slave_0: left promiscuous mode [ 399.164295][T19232] hsr_slave_1: left promiscuous mode [ 399.277993][T19236] netlink: 'syz.2.3430': attribute type 3 has an invalid length. [ 399.310472][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3430'. [ 399.409670][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 399.439178][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3434'. [ 399.464753][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 399.507852][T19249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.701859][T19268] netlink: 'syz.4.3438': attribute type 9 has an invalid length. [ 399.722105][T19268] netlink: 'syz.4.3438': attribute type 6 has an invalid length. [ 400.055325][T19280] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 400.102219][T19283] syzkaller0: entered promiscuous mode [ 400.108390][T19283] syzkaller0: entered allmulticast mode [ 400.126922][T19285] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3444'. [ 400.176641][T19283] tipc: Enabled bearer , priority 0 [ 400.196303][T19281] tipc: Resetting bearer [ 400.239351][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'. [ 400.277321][T19281] tipc: Disabling bearer [ 400.353681][T19295] Bluetooth: MGMT ver 1.23 [ 400.369109][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 400.583555][T19303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3450'. [ 400.617104][ T5745] IPVS: starting estimator thread 0... [ 400.730530][T19307] IPVS: using max 31 ests per chain, 74400 per kthread [ 400.856024][T19323] syz_tun: entered allmulticast mode [ 400.902101][T19320] syz_tun: left allmulticast mode [ 401.184801][T19327] syzkaller0: entered promiscuous mode [ 401.217044][T19327] syzkaller0: entered allmulticast mode [ 401.259190][T19327] netlink: 'syz.1.3458': attribute type 32 has an invalid length. [ 401.312522][T19343] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 401.315466][T19327] bond1: option coupled_control: invalid value (192) [ 401.332201][T19327] bond1 (unregistering): Released all slaves [ 401.357161][T19344] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 401.366074][T19344] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 401.374975][T19344] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 401.412879][T19344] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 401.466874][T19343] bond1: entered promiscuous mode [ 401.473428][T19343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.498993][T19346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.517176][T19346] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 401.528617][T19346] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 401.545138][T19346] bond1: (slave ip6gre1): making interface the new active one [ 401.554122][T19346] ip6gre1: entered promiscuous mode [ 401.562164][T19346] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 404.393814][T19363] vlan3: entered allmulticast mode [ 404.399220][T19363] bond0: entered allmulticast mode [ 404.406038][T19363] bond_slave_0: entered allmulticast mode [ 404.420461][T19363] bond_slave_1: entered allmulticast mode [ 404.643336][T19380] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.676003][T19381] __nla_validate_parse: 8 callbacks suppressed [ 404.676021][T19381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3474'. [ 404.725752][T19381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3474'. [ 404.772449][T19383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3479'. [ 404.791342][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 404.800609][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'. [ 404.859424][T19389] x_tables: duplicate underflow at hook 1 [ 404.898302][T19387] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3481'. [ 405.073831][T19397] IPVS: dh: FWM 3 0x00000003 - no destination available [ 405.086466][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3483'. [ 405.093625][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 405.111734][T19394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3483'. [ 405.140873][T19394] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3483'. [ 405.162742][T19394] nbd: illegal input index -8454144 [ 405.905503][T19434] atomic_op ffff888037ad5198 conn xmit_atomic 0000000000000000 [ 405.955167][T19426] bond2 (unregistering): Released all slaves [ 406.306629][T19456] netlink: 'syz.1.3501': attribute type 17 has an invalid length. [ 406.377146][T19456] gretap0: entered promiscuous mode [ 406.409015][T19456] gretap0: left promiscuous mode [ 406.523017][T19465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 407.004624][ T30] audit: type=1804 audit(1783037729.313:9): pid=19496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3512" name="/newroot/92/cgroup.controllers" dev="tmpfs" ino=485 res=1 errno=0 [ 407.045367][ T30] audit: type=1800 audit(1783037729.313:10): pid=19496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3512" name="cgroup.controllers" dev="tmpfs" ino=485 res=0 errno=0 [ 407.369343][T19515] syzkaller0: entered promiscuous mode [ 407.395060][T19515] syzkaller0: entered allmulticast mode [ 408.561968][T19559] xt_CT: No such helper "snmp_trap" [ 411.138035][T19570] netlink: 'syz.2.3530': attribute type 3 has an invalid length. [ 411.172656][T19570] netlink: 'syz.2.3530': attribute type 3 has an invalid length. [ 411.203298][T19575] __nla_validate_parse: 8 callbacks suppressed [ 411.203315][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'. [ 411.232765][T19570] netlink: 'syz.2.3530': attribute type 3 has an invalid length. [ 411.341727][T19570] nbd: must specify an index to disconnect [ 411.366870][T19587] netlink: 'syz.1.3536': attribute type 6 has an invalid length. [ 411.517719][T19595] Bluetooth: MGMT ver 1.23 [ 411.560955][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3539'. [ 411.587313][T19600] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3541'. [ 411.664960][T19595] 8021q: VLANs not supported on ip_vti0 [ 411.777457][T19604] bridge2: entered promiscuous mode [ 411.797421][T19604] bridge2: entered allmulticast mode [ 411.821712][T19604] team0: Port device bridge2 added [ 411.833671][T19610] bridge0: port 3(team0) entered blocking state [ 411.848359][T19610] bridge0: port 3(team0) entered disabled state [ 411.873356][T19610] team0: entered allmulticast mode [ 411.901790][T19610] team_slave_0: entered allmulticast mode [ 411.915761][T19610] team_slave_1: entered allmulticast mode [ 411.932073][T19610] team0: entered promiscuous mode [ 411.937315][T19610] team_slave_0: entered promiscuous mode [ 411.945016][T19610] team_slave_1: entered promiscuous mode [ 411.955159][T19610] bridge0: port 3(team0) entered blocking state [ 411.961706][T19610] bridge0: port 3(team0) entered forwarding state [ 411.970880][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3547'. [ 411.982419][T19606] veth1_to_bond: entered allmulticast mode [ 412.083066][T19606] veth1_to_bond: left allmulticast mode [ 412.090741][T19618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3547'. [ 412.648857][T10073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.659604][T10073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.829651][T19664] vlan2: entered promiscuous mode [ 412.837079][T19664] hsr0: entered promiscuous mode [ 412.843462][T19664] vlan2: entered allmulticast mode [ 412.848798][T19664] hsr0: entered allmulticast mode [ 412.854921][T19664] hsr_slave_0: entered allmulticast mode [ 412.862356][T19664] hsr_slave_1: entered allmulticast mode [ 412.885985][T19670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3563'. [ 412.922038][T19670] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3563'. [ 412.993158][T19677] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3564'. [ 413.026368][T19677] 0·: renamed from hsr0 (while UP) [ 413.105915][T19677] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 413.363722][T19699] xt_ecn: cannot match TCP bits for non-tcp packets [ 413.585157][T19711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3576'. [ 413.655043][T19713] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3577'. [ 414.036537][ T5818] IPVS: starting estimator thread 0... [ 414.141006][T19729] IPVS: using max 30 ests per chain, 72000 per kthread [ 414.264858][ T5818] IPVS: starting estimator thread 0... [ 414.370423][T19741] IPVS: using max 33 ests per chain, 79200 per kthread [ 415.261309][ T5639] Bluetooth: hci4: command 0x0405 tx timeout [ 415.310933][T19804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.318231][T19804] IPv6: NLM_F_CREATE should be set when creating new route [ 415.325570][T19804] IPv6: NLM_F_CREATE should be set when creating new route [ 415.332864][T19804] IPv6: NLM_F_CREATE should be set when creating new route [ 415.372206][T19809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.265058][T19826] batman_adv: batadv0: Adding interface: dummy0 [ 416.289642][T19826] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.341055][T19826] batman_adv: batadv0: Interface activated: dummy0 [ 416.447380][T19830] batadv0: mtu less than device minimum [ 416.477567][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.491522][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.503225][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.515040][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.526807][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.538518][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.550326][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.562101][T19830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.998742][T19857] __nla_validate_parse: 5 callbacks suppressed [ 416.998775][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 417.096414][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 417.243811][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'. [ 417.287504][T19868] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3617'. [ 417.358689][T19868] netlink: 'syz.1.3617': attribute type 5 has an invalid length. [ 417.462223][T19879] netlink: 'syz.0.3619': attribute type 1 has an invalid length. [ 417.481253][T19879] nbd: error processing sock list [ 417.658207][T19888] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3621'. [ 417.711957][T19885] syzkaller0: entered promiscuous mode [ 417.718602][T19888] netlink: 'syz.2.3621': attribute type 21 has an invalid length. [ 417.753270][T19885] syzkaller0: entered allmulticast mode [ 417.805805][T19888] netlink: 'syz.2.3621': attribute type 1 has an invalid length. [ 417.857556][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 417.896457][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 418.142135][T19899] sctp: [Deprecated]: syz.1.3624 (pid 19899) Use of int in maxseg socket option. [ 418.142135][T19899] Use struct sctp_assoc_value instead [ 418.729637][T19924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.825943][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3631'. [ 419.195086][T19942] nbd: nbd0 already in use [ 419.223860][T19947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3638'. [ 419.293056][T19942] netlink: 'syz.0.3635': attribute type 1 has an invalid length. [ 419.306596][T19953] netlink: 'syz.3.3636': attribute type 1 has an invalid length. [ 419.752254][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3643'. [ 420.045158][T19973] bond5: entered promiscuous mode [ 420.052433][T19973] bond5: entered allmulticast mode [ 420.058320][T19973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.144297][T19981] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 421.632776][T20041] net_ratelimit: 13 callbacks suppressed [ 421.632900][T20041] netlink: zone id is out of range [ 421.696791][T20041] netlink: zone id is out of range [ 421.716455][T20041] netlink: zone id is out of range [ 421.765088][T20041] netlink: zone id is out of range [ 421.804020][T20041] netlink: zone id is out of range [ 421.840562][T20041] netlink: zone id is out of range [ 421.880836][T20041] netlink: zone id is out of range [ 421.916027][T20041] netlink: zone id is out of range [ 421.959697][T20041] netlink: zone id is out of range [ 421.966004][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.055456][T20041] netlink: zone id is out of range [ 422.515053][T20078] Cannot find set identified by id 65534 to match [ 422.553222][T20078] __nla_validate_parse: 4 callbacks suppressed [ 422.553238][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 422.669334][T20077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3669'. [ 423.408121][T20106] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 423.492651][T20108] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 423.618138][T20117] xt_hashlimit: overflow, rate too high: 0 [ 423.646501][T20115] vlan4: entered promiscuous mode [ 423.677591][T20115] geneve1: entered promiscuous mode [ 423.698058][T20115] vlan4: entered allmulticast mode [ 423.713885][T20115] geneve1: entered allmulticast mode [ 423.735678][T20114] netlink: 'syz.1.3678': attribute type 12 has an invalid length. [ 423.795581][T20114] netlink: 'syz.1.3678': attribute type 29 has an invalid length. [ 423.842420][T20114] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3678'. [ 423.861802][T20114] netlink: 'syz.1.3678': attribute type 3 has an invalid length. [ 423.884178][T20114] netlink: 'syz.1.3678': attribute type 2 has an invalid length. [ 423.888945][T20128] netlink: 'syz.3.3682': attribute type 7 has an invalid length. [ 423.902975][T20114] netlink: 'syz.1.3678': attribute type 3 has an invalid length. [ 423.902999][T20114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3678'. [ 423.937638][T20127] netlink: 'syz.0.3683': attribute type 16 has an invalid length. [ 424.005245][T20132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 424.026934][T20132] netlink: 'syz.0.3683': attribute type 7 has an invalid length. [ 424.049094][T20132] netlink: 'syz.0.3683': attribute type 8 has an invalid length. [ 424.058903][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3683'. [ 424.106182][T20127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.763736][T20159] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 425.167076][T20180] bond0: (slave gre0): refused to change device type [ 427.367090][T20139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.615200][T20188] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3698'. [ 427.955068][T20202] x_tables: unsorted underflow at hook 2 [ 428.464983][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.475085][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.483526][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.491951][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.500414][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.508764][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.517152][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.526053][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.534404][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.542761][T20224] tc action pedit unable to extract header offset for header type (0x4) [ 428.551117][T20224] net_ratelimit: 69 callbacks suppressed [ 428.551130][T20224] 0: reclassify loop, rule prio 0, protocol 800 [ 428.944945][T20228] validate_nla: 1 callbacks suppressed [ 428.944963][T20228] netlink: 'syz.0.3711': attribute type 1 has an invalid length. [ 429.046006][T20228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.159010][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'. [ 429.256973][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3710'. [ 429.284469][T20235] bond6: (slave dummy0): making interface the new active one [ 429.337955][T20235] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 429.465028][T20228] : renamed from dummy0 (while UP) [ 429.688088][T20256] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3715'. [ 430.560572][T20293] netlink: 'syz.1.3724': attribute type 1 has an invalid length. [ 430.686133][T20302] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 431.018550][ T5627] Bluetooth: hci4: link tx timeout [ 431.034060][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.205502][T20293] bond1: option mode: invalid value (8) [ 431.209898][T20317] netlink: 'syz.3.3728': attribute type 6 has an invalid length. [ 431.224645][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3727'. [ 431.226684][T20293] bond1 (unregistering): Released all slaves [ 431.378287][T20305] bond2: (slave gretap2): making interface the new active one [ 431.388820][T20305] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 431.527480][ T5627] Bluetooth: hci4: link tx timeout [ 431.533332][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.685200][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 431.712672][T20330] rdma_op ffff88803792f1f0 conn xmit_rdma 0000000000000000 [ 431.785525][T20340] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 431.842795][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3731'. [ 431.879517][T20338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.978586][T20331] team0: Port device team_slave_0 removed [ 432.133243][T20340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.145246][ T5627] Bluetooth: hci4: link tx timeout [ 432.151396][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 432.288948][T20344] bond7: (slave geneve3): making interface the new active one [ 432.312525][T20344] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 432.337564][T20336] ip6tnl1: entered allmulticast mode [ 432.848166][T20370] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3739'. [ 432.883677][T20367] tipc: Started in network mode [ 432.894406][T20367] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 432.934693][T20367] tipc: Enabling of bearer rejected, failed to enable media [ 433.104271][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 433.111465][T20380] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3742'. [ 433.118638][T20380] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.129547][T20380] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.147856][T20381] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3741'. [ 433.267290][T20389] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3744'. [ 433.671720][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3747'. [ 433.721855][T20398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3747'. [ 433.918935][T20408] bond2 (unregistering): Released all slaves [ 434.024300][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3752'. [ 434.314139][T20430] netlink: 'syz.1.3756': attribute type 83 has an invalid length. [ 434.997296][T20452] sctp: [Deprecated]: syz.0.3763 (pid 20452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.997296][T20452] Use struct sctp_sack_info instead [ 435.207850][T20452] ieee802154 phy0 wpan0: encryption failed: -126 [ 435.247561][T20467] xt_hashlimit: size too large, truncated to 1048576 [ 435.378407][T20466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 435.476259][T20475] syzkaller0: entered promiscuous mode [ 435.507727][T20475] syzkaller0: entered allmulticast mode [ 436.708109][T20514] Cannot find add_set index 65532 as target [ 436.857082][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.857082][T20529] Use struct sctp_sack_info instead [ 436.926111][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.926111][T20529] Use struct sctp_sack_info instead [ 436.948139][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.948139][T20529] Use struct sctp_sack_info instead [ 437.005979][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.005979][T20529] Use struct sctp_sack_info instead [ 437.050060][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.050060][T20529] Use struct sctp_sack_info instead [ 437.069492][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.069492][T20529] Use struct sctp_sack_info instead [ 437.091738][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.091738][T20529] Use struct sctp_sack_info instead [ 437.122537][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.122537][T20529] Use struct sctp_sack_info instead [ 437.152848][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.152848][T20529] Use struct sctp_sack_info instead [ 437.215064][T20529] sctp: [Deprecated]: syz.2.3780 (pid 20529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.215064][T20529] Use struct sctp_sack_info instead [ 437.452728][T20554] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3786'. [ 437.474218][T20554] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3786'. [ 437.492256][T20554] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3786'. [ 438.073350][T20574] __nla_validate_parse: 62 callbacks suppressed [ 438.073372][T20574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3790'. [ 439.735563][T20523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.984046][T20578] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3793'. [ 439.998539][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007045][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.041048][T20578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3793'. [ 440.068411][T20581] bridge0: port 3(ipvlan2) entered blocking state [ 440.078560][T20581] bridge0: port 3(ipvlan2) entered disabled state [ 440.088565][T20581] ipvlan2: entered allmulticast mode [ 440.103473][T20581] bridge0: entered allmulticast mode [ 440.122636][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 440.148175][T20581] ipvlan2: left allmulticast mode [ 440.162619][T20581] bridge0: left allmulticast mode [ 440.177688][T20587] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 440.213834][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 440.237170][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 440.253302][T20583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3793'. [ 440.400578][T20593] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3796'. [ 440.435372][T20589] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 440.446056][T20589] bond2: option packets_per_slave: allowed values 0 - 65535 [ 440.481401][T20589] bond2 (unregistering): Released all slaves [ 440.534063][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3797'. [ 440.811706][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 440.938622][T20606] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 441.007496][T20611] netlink: 'syz.2.3799': attribute type 49 has an invalid length. [ 441.314030][T20632] netlink: 'syz.2.3804': attribute type 4 has an invalid length. [ 441.708280][T20656] netlink: 'syz.1.3811': attribute type 8 has an invalid length. [ 442.571764][T20685] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 442.816064][T20681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.974275][T20695] macvlan3: entered promiscuous mode [ 442.980378][T20695] macvlan3: entered allmulticast mode [ 443.146410][T20681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.234816][T20713] __nla_validate_parse: 6 callbacks suppressed [ 443.234902][T20713] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3831'. [ 443.255035][T20712] team0: entered allmulticast mode [ 443.261732][T20712] team_slave_0: entered allmulticast mode [ 443.267752][T20712] team_slave_1: entered allmulticast mode [ 443.475365][T20681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.695286][T20681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.723171][T20724] smc: removing ib device syz1 [ 443.742083][T20729] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 443.754131][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 443.824846][T20732] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3836'. [ 443.951861][T20724] smbdirect: ib_dev[syz1] removed [ 443.965474][T20735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 444.023426][T20737] openvswitch: netlink: IP tunnel dst address not specified [ 444.257529][T20747] xt_ecn: cannot match TCP bits for non-tcp packets [ 444.265185][T20737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.790516][ T1100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.956806][ T1100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.138907][T10061] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.499739][ T1100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.751589][T20787] netlink: 'syz.2.3852': attribute type 2 has an invalid length. [ 445.776648][T20788] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3853'. [ 445.817812][T20788] netlink: 'syz.4.3853': attribute type 1 has an invalid length. [ 445.873581][T20793] netlink: 'syz.1.3854': attribute type 39 has an invalid length. [ 445.887769][T20791] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 445.943987][T20796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.951430][T20796] IPv6: NLM_F_CREATE should be set when creating new route [ 445.976082][T20797] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 446.244250][T20788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.431462][T20799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3857'. [ 446.539351][T20804] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 446.554442][T20805] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3859'. [ 446.567302][T20804] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 446.628758][T20809] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3860'. [ 446.728847][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3861'. [ 446.741265][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3860'. [ 446.943186][T20807] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 446.968312][T20807] bond4 (unregistering): Released all slaves [ 447.181573][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 448.923974][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 449.223013][T20880] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 449.447719][T20885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3879'. [ 449.732708][T20899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.858121][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3883'. [ 450.356503][T20916] netlink: 'syz.4.3887': attribute type 9 has an invalid length. [ 450.547297][T20921] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3889'. [ 450.584032][T20923] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3889'. [ 451.244580][T20941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3894'. [ 451.279210][T20941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3894'. [ 451.290014][T20946] netlink: 'syz.3.3897': attribute type 30 has an invalid length. [ 451.468490][T20941] gretap3: entered promiscuous mode [ 451.478535][T20941] gretap3: entered allmulticast mode [ 451.868919][T20964] bridge_slave_1: left allmulticast mode [ 451.894702][T20964] bridge_slave_1: left promiscuous mode [ 451.918123][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.975252][T20964] bridge_slave_0: left allmulticast mode [ 451.983022][T20964] bridge_slave_0: left promiscuous mode [ 451.999431][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.015783][T20983] netlink: 'syz.4.3906': attribute type 1 has an invalid length. [ 452.532353][T20983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.590759][T20985] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 452.618307][T21006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3908'. [ 453.013431][T21018] netlink: 'syz.0.3911': attribute type 12 has an invalid length. [ 453.453407][T21037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3916'. [ 453.487920][T21028] syzkaller0: entered promiscuous mode [ 453.524785][T21028] syzkaller0: entered allmulticast mode [ 453.617053][T21045] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3919'. [ 453.956749][T21059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3922'. [ 454.371741][T21071] block nbd0: reconnected socket [ 454.378599][ T5639] block nbd0: Receive control failed (result -107) [ 454.378671][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 454.378694][T21072] openvswitch: netlink: Key type 8710 is out of range max 32 [ 454.379541][T21072] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3927'. [ 454.752215][T21082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3929'. [ 454.818803][T21093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.194092][T21109] veth0: entered promiscuous mode [ 455.225140][T21109] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 455.613975][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3939'. [ 455.643250][T21130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3941'. [ 455.664855][T21130] nbd: illegal input index 65508 [ 455.786462][T21133] netlink: 'syz.2.3940': attribute type 22 has an invalid length. [ 455.825256][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3940'. [ 455.841261][T21133] netlink: 'syz.2.3940': attribute type 22 has an invalid length. [ 455.853603][T21135] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3940'. [ 455.873026][T21105] veth0: left promiscuous mode [ 455.883622][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3940'. [ 456.393304][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3948'. [ 456.523807][T21165] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 456.665564][T21159] hsr_slave_1 (unregistering): left promiscuous mode [ 456.741128][ T30] audit: type=1804 audit(1783037779.053:11): pid=21164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3950" name="/newroot/191/cgroup.controllers" dev="tmpfs" ino=996 res=1 errno=0 [ 456.831013][ T30] audit: type=1800 audit(1783037779.053:12): pid=21164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3950" name="cgroup.controllers" dev="tmpfs" ino=996 res=0 errno=0 [ 456.836567][T21165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.946300][ T9] hid-generic 0005:0005:0008.0002: item fetching failed at offset 4/5 [ 457.968012][ T9] hid-generic 0005:0005:0008.0002: probe with driver hid-generic failed with error -22 [ 457.981864][ T9] [ 457.984239][ T9] ====================================================== [ 457.991345][ T9] WARNING: possible circular locking dependency detected [ 457.998438][ T9] syzkaller #0 Not tainted [ 458.002870][ T9] ------------------------------------------------------ [ 458.010244][ T9] kworker/0:0/9 is trying to acquire lock: [ 458.016058][ T9] ffff88801c28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 458.026394][ T9] [ 458.026394][ T9] but task is already holding lock: [ 458.033853][ T9] ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 458.044344][ T9] [ 458.044344][ T9] which lock already depends on the new lock. [ 458.044344][ T9] [ 458.054768][ T9] [ 458.054768][ T9] the existing dependency chain (in reverse order) is: [ 458.063793][ T9] [ 458.063793][ T9] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 458.071940][ T9] down_write+0x96/0x200 [ 458.076877][ T9] kernfs_add_one+0x41/0x5e0 [ 458.082012][ T9] kernfs_create_dir_ns+0x1a1/0x230 [ 458.087743][ T9] internal_create_group+0x440/0x1180 [ 458.093738][ T9] cpuhp_invoke_callback+0x434/0x810 [ 458.099628][ T9] cpuhp_issue_call+0x3f0/0x750 [ 458.105023][ T9] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 458.111630][ T9] __cpuhp_setup_state+0x3f/0x60 [ 458.117111][ T9] do_one_initcall+0x250/0x870 [ 458.122466][ T9] do_initcall_level+0x10a/0x1a0 [ 458.128075][ T9] do_initcalls+0x59/0xa0 [ 458.133038][ T9] kernel_init_freeable+0x29d/0x3e0 [ 458.138783][ T9] kernel_init+0x1d/0x1d0 [ 458.143732][ T9] ret_from_fork+0x514/0xb70 [ 458.148889][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.154190][ T9] [ 458.154190][ T9] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 458.162030][ T9] [ 458.162030][ T9] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 458.169780][ T9] cpus_read_lock+0x42/0x160 [ 458.175084][ T9] static_key_slow_inc+0x12/0x30 [ 458.180619][ T9] nbd_genl_reconfigure+0x1301/0x1e80 [ 458.186643][ T9] genl_family_rcv_msg_doit+0x233/0x340 [ 458.192819][ T9] genl_rcv_msg+0x614/0x7a0 [ 458.197954][ T9] netlink_rcv_skb+0x226/0x4a0 [ 458.203259][ T9] genl_rcv+0x28/0x40 [ 458.207787][ T9] netlink_unicast+0x7bb/0x940 [ 458.213110][ T9] netlink_sendmsg+0x813/0xb40 [ 458.218413][ T9] sock_sendmsg_nosec+0x13a/0x180 [ 458.224129][ T9] ____sys_sendmsg+0x54e/0x850 [ 458.229434][ T9] ___sys_sendmsg+0x2a5/0x360 [ 458.234650][ T9] __x64_sys_sendmsg+0x1b1/0x290 [ 458.240128][ T9] do_syscall_64+0x174/0x580 [ 458.245348][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.251799][ T9] [ 458.251799][ T9] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 458.259443][ T9] __mutex_lock+0x19d/0x1550 [ 458.264552][ T9] nbd_queue_rq+0x373/0x1150 [ 458.269665][ T9] blk_mq_dispatch_rq_list+0x499/0x1990 [ 458.275821][ T9] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 458.282733][ T9] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.289275][ T9] blk_mq_run_work_fn+0x16c/0x300 [ 458.294833][ T9] process_scheduled_works+0xa8e/0x14e0 [ 458.300948][ T9] worker_thread+0xa47/0xfb0 [ 458.306070][ T9] kthread+0x388/0x470 [ 458.310664][ T9] ret_from_fork+0x514/0xb70 [ 458.315868][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.321244][ T9] [ 458.321244][ T9] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 458.330298][ T9] __mutex_lock+0x19d/0x1550 [ 458.335427][ T9] nbd_queue_rq+0xc1/0x1150 [ 458.340542][ T9] blk_mq_dispatch_rq_list+0x499/0x1990 [ 458.346621][ T9] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 458.353471][ T9] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.360055][ T9] blk_mq_run_work_fn+0x16c/0x300 [ 458.365601][ T9] process_scheduled_works+0xa8e/0x14e0 [ 458.371662][ T9] worker_thread+0xa47/0xfb0 [ 458.376787][ T9] kthread+0x388/0x470 [ 458.381371][ T9] ret_from_fork+0x514/0xb70 [ 458.386478][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.391760][ T9] [ 458.391760][ T9] -> #4 (set->srcu){.+.+}-{0:0}: [ 458.398882][ T9] __synchronize_srcu+0xc9/0x2f0 [ 458.404397][ T9] elevator_switch+0x1e8/0x7b0 [ 458.409740][ T9] elevator_change+0x2fa/0x480 [ 458.415018][ T9] elevator_set_default+0x375/0x440 [ 458.420734][ T9] blk_register_queue+0x3f3/0x4e0 [ 458.426362][ T9] __add_disk+0x6cb/0xe30 [ 458.431214][ T9] add_disk_fwnode+0xfb/0x4b0 [ 458.436405][ T9] nbd_dev_add+0x733/0xb60 [ 458.441346][ T9] nbd_init+0x15f/0x1e0 [ 458.446140][ T9] do_one_initcall+0x250/0x870 [ 458.451421][ T9] do_initcall_level+0x10a/0x1a0 [ 458.456873][ T9] do_initcalls+0x59/0xa0 [ 458.461714][ T9] kernel_init_freeable+0x29d/0x3e0 [ 458.467425][ T9] kernel_init+0x1d/0x1d0 [ 458.472269][ T9] ret_from_fork+0x514/0xb70 [ 458.477378][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.482652][ T9] [ 458.482652][ T9] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 458.490472][ T9] __mutex_lock+0x19d/0x1550 [ 458.495589][ T9] elevator_change+0x1af/0x480 [ 458.500874][ T9] elevator_set_none+0xb5/0x140 [ 458.506236][ T9] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 458.512595][ T9] nbd_start_device+0x189/0xb30 [ 458.517963][ T9] nbd_genl_connect+0x1597/0x1c10 [ 458.523675][ T9] genl_family_rcv_msg_doit+0x233/0x340 [ 458.529733][ T9] genl_rcv_msg+0x614/0x7a0 [ 458.534755][ T9] netlink_rcv_skb+0x226/0x4a0 [ 458.540048][ T9] genl_rcv+0x28/0x40 [ 458.544566][ T9] netlink_unicast+0x7bb/0x940 [ 458.549858][ T9] netlink_sendmsg+0x813/0xb40 [ 458.555139][ T9] sock_sendmsg_nosec+0x13a/0x180 [ 458.560680][ T9] ____sys_sendmsg+0x54e/0x850 [ 458.565960][ T9] ___sys_sendmsg+0x2a5/0x360 [ 458.571148][ T9] __x64_sys_sendmsg+0x1b1/0x290 [ 458.576599][ T9] do_syscall_64+0x174/0x580 [ 458.581709][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.588124][ T9] [ 458.588124][ T9] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 458.596753][ T9] blk_alloc_queue+0x544/0x690 [ 458.602130][ T9] __blk_mq_alloc_disk+0x194/0x390 [ 458.607757][ T9] nbd_dev_add+0x494/0xb60 [ 458.612696][ T9] nbd_init+0x15f/0x1e0 [ 458.617362][ T9] do_one_initcall+0x250/0x870 [ 458.622641][ T9] do_initcall_level+0x10a/0x1a0 [ 458.628102][ T9] do_initcalls+0x59/0xa0 [ 458.632942][ T9] kernel_init_freeable+0x29d/0x3e0 [ 458.638655][ T9] kernel_init+0x1d/0x1d0 [ 458.643505][ T9] ret_from_fork+0x514/0xb70 [ 458.648620][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.653900][ T9] [ 458.653900][ T9] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 458.661104][ T9] fs_reclaim_acquire+0x71/0x100 [ 458.666600][ T9] kmem_cache_alloc_noprof+0x64/0x5f0 [ 458.672580][ T9] __kernfs_iattrs+0xdd/0x380 [ 458.677775][ T9] kernfs_iop_setattr+0xe6/0x3f0 [ 458.683253][ T9] notify_change+0xbba/0xea0 [ 458.688383][ T9] do_truncate+0x1c2/0x250 [ 458.693338][ T9] path_openat+0x2fed/0x3830 [ 458.698666][ T9] do_file_open+0x23e/0x4a0 [ 458.703690][ T9] do_sys_openat2+0x115/0x200 [ 458.708885][ T9] __x64_sys_openat+0x138/0x170 [ 458.714253][ T9] do_syscall_64+0x174/0x580 [ 458.719352][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.725756][ T9] [ 458.725756][ T9] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 458.734260][ T9] __lock_acquire+0x1520/0x2cf0 [ 458.739692][ T9] lock_acquire+0x106/0x350 [ 458.744709][ T9] down_write+0x96/0x200 [ 458.749498][ T9] __kernfs_remove+0x174/0x8e0 [ 458.754791][ T9] kernfs_remove_by_name_ns+0xc0/0x140 [ 458.760853][ T9] really_probe+0x36e/0xae0 [ 458.765976][ T9] __driver_probe_device+0x1e8/0x360 [ 458.771776][ T9] driver_probe_device+0x4f/0x240 [ 458.777317][ T9] __device_attach_driver+0x270/0x410 [ 458.783290][ T9] bus_for_each_drv+0x258/0x2f0 [ 458.788653][ T9] __device_attach+0x2c4/0x450 [ 458.793945][ T9] device_initial_probe+0xa1/0xd0 [ 458.799500][ T9] bus_probe_device+0x12a/0x220 [ 458.804870][ T9] device_add+0x7d7/0xb80 [ 458.809801][ T9] hid_add_device+0x272/0x3e0 [ 458.815054][ T9] hidp_session_dev_work+0x45/0x160 [ 458.820831][ T9] process_scheduled_works+0xa8e/0x14e0 [ 458.826974][ T9] worker_thread+0xa47/0xfb0 [ 458.832078][ T9] kthread+0x388/0x470 [ 458.836755][ T9] ret_from_fork+0x514/0xb70 [ 458.841863][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.847185][ T9] [ 458.847185][ T9] other info that might help us debug this: [ 458.847185][ T9] [ 458.857399][ T9] Chain exists of: [ 458.857399][ T9] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 458.857399][ T9] [ 458.871907][ T9] Possible unsafe locking scenario: [ 458.871907][ T9] [ 458.879365][ T9] CPU0 CPU1 [ 458.884771][ T9] ---- ---- [ 458.890125][ T9] lock(&root->kernfs_rwsem); [ 458.894892][ T9] lock(cpuhp_state_mutex); [ 458.902001][ T9] lock(&root->kernfs_rwsem); [ 458.909296][ T9] lock(&root->kernfs_iattr_rwsem); [ 458.914572][ T9] [ 458.914572][ T9] *** DEADLOCK *** [ 458.914572][ T9] [ 458.922810][ T9] 5 locks held by kworker/0:0/9: [ 458.927728][ T9] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 458.938958][ T9] #1: ffffc900000e7c40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 458.951399][ T9] #2: ffff88805a0e1a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 458.960651][ T9] #3: ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 458.972065][ T9] #4: ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 458.982769][ T9] [ 458.982769][ T9] stack backtrace: [ 458.988670][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 458.988688][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.988699][ T9] Workqueue: events hidp_session_dev_work [ 458.988733][ T9] Call Trace: [ 458.988805][ T9] [ 458.988872][ T9] dump_stack_lvl+0xe8/0x150 [ 458.988948][ T9] print_circular_bug+0x2e1/0x300 [ 458.988966][ T9] check_noncircular+0x12e/0x150 [ 458.988992][ T9] __lock_acquire+0x1520/0x2cf0 [ 458.989016][ T9] ? __lock_acquire+0x683/0x2cf0 [ 458.989070][ T9] ? __lock_acquire+0x683/0x2cf0 [ 458.989093][ T9] ? __kernfs_remove+0x174/0x8e0 [ 458.989114][ T9] lock_acquire+0x106/0x350 [ 458.989133][ T9] ? __kernfs_remove+0x174/0x8e0 [ 458.989159][ T9] down_write+0x96/0x200 [ 458.989177][ T9] ? __kernfs_remove+0x174/0x8e0 [ 458.989199][ T9] ? __pfx_down_write+0x10/0x10 [ 458.989217][ T9] ? kernfs_root+0x1c/0x230 [ 458.989235][ T9] ? kernfs_root+0x1c/0x230 [ 458.989254][ T9] ? kernfs_root+0x1ea/0x230 [ 458.989272][ T9] __kernfs_remove+0x174/0x8e0 [ 458.989295][ T9] ? kernfs_find_ns+0x59f/0x600 [ 458.989317][ T9] kernfs_remove_by_name_ns+0xc0/0x140 [ 458.989340][ T9] really_probe+0x36e/0xae0 [ 458.989365][ T9] __driver_probe_device+0x1e8/0x360 [ 458.989388][ T9] driver_probe_device+0x4f/0x240 [ 458.989412][ T9] __device_attach_driver+0x270/0x410 [ 458.989434][ T9] bus_for_each_drv+0x258/0x2f0 [ 458.989453][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 458.989475][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 458.989492][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.989508][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 458.989566][ T9] __device_attach+0x2c4/0x450 [ 458.989588][ T9] ? __pfx___device_attach+0x10/0x10 [ 458.989611][ T9] ? _raw_spin_unlock+0x28/0x50 [ 458.989633][ T9] device_initial_probe+0xa1/0xd0 [ 458.989656][ T9] bus_probe_device+0x12a/0x220 [ 458.989676][ T9] device_add+0x7d7/0xb80 [ 458.989694][ T9] hid_add_device+0x272/0x3e0 [ 458.989711][ T9] ? hidp_session_dev_work+0x1e/0x160 [ 458.989731][ T9] hidp_session_dev_work+0x45/0x160 [ 458.989753][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 458.989770][ T9] process_scheduled_works+0xa8e/0x14e0 [ 458.989797][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.989818][ T9] ? assign_work+0x3cf/0x5d0 [ 458.989837][ T9] worker_thread+0xa47/0xfb0 [ 458.989866][ T9] kthread+0x388/0x470 [ 458.989890][ T9] ? __pfx_worker_thread+0x10/0x10 [ 458.989909][ T9] ? __pfx_kthread+0x10/0x10 [ 458.989932][ T9] ret_from_fork+0x514/0xb70 [ 458.989960][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 458.989984][ T9] ? __switch_to+0xc89/0x1420 [ 458.990006][ T9] ? __pfx_kthread+0x10/0x10 [ 458.990029][ T9] ret_from_fork_asm+0x1a/0x30 [ 458.990059][ T9] [ 459.054054][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 459.112967][T21230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3960'. [ 462.540690][ T5627] Bluetooth: hci1: command 0x0405 tx timeout