last executing test programs: 4.723937309s ago: executing program 3 (id=7247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0xffffffff, 0x2, 0x90bd7d668dce357, 0x5, 0x10, 0x4}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = accept(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000200)=@ethtool_cmd={0x23, 0x8, 0x8, 0xfff, 0x0, 0x4a, 0x0, 0x8, 0x4, 0x80, 0x378, 0x2, 0x1, 0x40, 0x40, 0x3, [0x6, 0x1ff]}}) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20009b00000c0601010000000000200000070000510900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) connect$rose(r1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x11, &(0x7f00000004c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0xba, &(0x7f00000005c0)=""/186, 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0x3, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000700), &(0x7f0000000740)=[{0x0, 0x1, 0x0, 0x6}, {0x5, 0x4, 0x6, 0x2}, {0x5, 0x7, 0x5, 0x1}, {0x1, 0x3, 0xa, 0x9}, {0x1, 0x5, 0xc, 0x3}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r5, 0x0, 0x57, 0x7c, &(0x7f0000000880)="f2777f773556dd30190e17283eb0c64fae05b9581b831c1f90876c7e710f12227107b78851acebc2ff8b7795f98674138357222665f5f0329ee9677b362d6cd133dd94df1d8cd13e59fa58d28197e6630f2808ba121eb2", &(0x7f0000000900)=""/124, 0x2cb, 0x0, 0x27, 0x58, &(0x7f0000000e00)="6bfa889a3dfe80bcfbba72e8e0dd86cbf38e5e600f5da7d5a517e6c84877956cce1ae6fbc5a43e", &(0x7f0000000e40)="e906641add3b99526d75f1e7bfe314290487b8aa9073548ed10d709480e4900e60c4ce12b32c7a6a623714f198d90f12a3f568395f67e7b88a4e367fbfa4602b7b1eedbac62ac5e5cdd219f1071735a8533c1595bf328a06", 0x6, 0x0, 0x9}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x20}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x40) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14"], 0x18, 0x8001}}], 0x1, 0x80) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 4.496412131s ago: executing program 0 (id=7255): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000003400)={0x2, 0x4e22, @broadcast}, 0x10) listen(r0, 0x9) 4.353686904s ago: executing program 0 (id=7256): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r8, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'vlan0\x00'}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.020349762s ago: executing program 0 (id=7261): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.880013064s ago: executing program 1 (id=7264): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 3.763170918s ago: executing program 0 (id=7265): unshare(0x20040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0xb0}}, 0x20000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000100007010000000000000000037c00001800018014000000fe8000000000000000000000000000aaeaadcb63084b2caf013b0202a16608c8c87d559b62a7e0bd95deb9c5830c9a97ee94d63d92118214d1aa16374aa7"], 0x2c}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x0, 0x34f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.761387973s ago: executing program 3 (id=7266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 3.440565785s ago: executing program 3 (id=7269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r2, 0x425, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000000}, 0x88c5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r2, 0x425, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000000}, 0x88c5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) (async) 3.369171606s ago: executing program 4 (id=7271): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.036152355s ago: executing program 4 (id=7273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_stats}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000005911970000000000851000edd959b1d3130402000000850049b8226c2d9f72c3ae8c000000000000950033010000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) close(r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r5, 0x29, 0xd0, &(0x7f0000000040), 0x4) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.019912904s ago: executing program 3 (id=7274): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x200ce0c0) close(0x3) 2.960303516s ago: executing program 1 (id=7275): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) (rerun: 32) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x1000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000380)={r5, 0x1, 0x6, @local}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="28de889c9b9e"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000800) 2.880551543s ago: executing program 2 (id=7276): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}]}]}]}, 0x30}}, 0x0) 2.670343662s ago: executing program 2 (id=7277): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x1128, 0x50, [0x5, 0x2, 0x10000, 0x34f4], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050022bd7000ffdbdf2507000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) 2.66769562s ago: executing program 4 (id=7278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB='\b\x00&'], 0x2c}}, 0x808) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0xbd, 0xffffffff, @vifc_lcl_ifindex=r4, @multicast1}, 0x10) 2.619913644s ago: executing program 1 (id=7279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x59, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0xc044) 2.606239971s ago: executing program 0 (id=7280): r0 = socket$rxrpc(0x21, 0x2, 0xa) unshare(0x40600) (async) tee(r0, r0, 0x66f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r4 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x1ff}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.537557041s ago: executing program 2 (id=7281): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x28}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080011400000000005001500340db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x28}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080011400000000005001500340db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) 2.441602162s ago: executing program 1 (id=7282): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet6(0xa, 0x1, 0x84) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r1, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r0, 0x7) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r3, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000003b40)=[{0x0, 0x0, 0x0, 0xfffffffffffffec9}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="ce4fc2c16b3b2de97f22c0cc756aecf216b4672275a8b322545c71784ece5a1c5e6078d528382ca9a06906c530f5cdbe3c0e59862a3e96f37e18ac2020c65fb3fc328a663215273c5e593095b01064cdf240bf"}, {&(0x7f00000003c0)="5d75b950f173d80820c11905d9d55a3d8d493588c79bc3d16bca7452be55cd0e49cf"}, {&(0x7f0000000400)="09e4aca9c4db214f349c50e3932d20690650212b47589c8a14199a9cc272da21bd665143da7189c4ec538a6861b4461fcfde6d457e1a45c1154068bf29c60b6d0e689e8478da2d95132d6d583463c53ce5602619a06c"}, {&(0x7f0000000480)="673ad30e9874e0c30dc2b69b9d6f948bcc2ce9ea31f9c0157c3e3fe902255c6555ab8eaed8eb115392e1e3d2fc04dba668f0356f0ba8f97554ac09545bf1d7f304b3fba955f8d5539b6c6289db32b96c010eae3fcd85059a30c7de7c2ee66ed639d26bde8e7ad33e3c3b911377b1f5cfe527ec5b1eef6a5fc4060b3c20"}, {&(0x7f0000000500)="b3f8d87ea4aa94c81686db5b578f71b8ea01661be5e4721ad1c7a8aa0e57a5221bb310f96e64"}], 0x0, &(0x7f0000000640)=[@assoc={0x0, 0x117, 0x4, 0x298a}, @iv, @assoc={0x0, 0x117, 0x4, 0x8001}, @op, @op, @iv={0x0, 0x117, 0x2, 0x0, "680539de8484cdea3dbf88e37657dfbd01afa0ffbab1d01620008e783b4686c4ee278042e93b7336d04859450671c0e74e79f00b3897d30b4050b898ad926464c85e0968d9d33fb471b02c473274c25dc927ff51b7e5876369d2838ef56fcd325f167d7c2cba252db02127e746f739b7bc15d32609015d0e96535439e149f8ed21a5c767e480a55ae190b6489fb5e5107d846f1dd04e5f2f92ade7909dfa523cfbf66957299adda80446dcc4417656f6418105aa2020d30e55d8ce54f306da60ec59"}], 0x0, 0x20040001}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)="23bb78565dc1e92be3070a862cce5a485cb0637529acb4fcc5962f82c39cfe17dd8dde1e30c366d3adde090c51ee84f8fec2d52ec66f182635f8799df1bff047b379d8d5ea2fe7dec2c8a6d8900b0da36a351640d60a5830b99cd3003e08817fa040399c10566d901255115a6d3424eed37dd901b4e3859010b7a6f3eeedda5134230769f0da13a1a3988916a43812ccca86caadc44d3b78de31c33e42fa"}, {&(0x7f0000000900)="e832555560d83c34f000bc1d2eca66cab61975c6aa1f07c1111deb61e7e02ef0282b2962c3a8c61921deb15c1a8b197ddee151b277907be4f98fb48fef8837b21ec8d5940837d9147d0a86c689c443c5e4774d695a876a41b5cc62d67e365d8a375076b81176958d5425c82bb3f60fdef1407df18e88c7a812ee795d65a0c527eb2b36b466e8460f3d472452a9c4eb73fc7c497df5c9720fcd97213304e75d77a36c69f6ddf6f4828d87eb56dcc15663985e4befbbf79088d1204cfbacbf1e9dd99992ff0411b251e3d945c0c0f28f461250dd3c83504f679440"}, {&(0x7f0000000a00)="f78869d1ae9809764b8bc9ee3b2bc1d82a99d918995e48aedcc242a3533ae7bb59125a43c11134883c62f9201afeb178cbd64620eea4163cae522c4029"}, {&(0x7f0000000a40)="6e1b1f6264acd92b737e102aebf02a1659905a385b9febc08ccfc66bd9c439c0845d9d0bd3501fe5"}, {&(0x7f0000000a80)="61264adabda0aa5e9a65bf0f4cc44dad3a870be4d41f1797fec5c146577c2c31a9994c083160c714d3d6055cc88ffa05aa2573285b45a4f66e8f3bcf2d8a7f31003c8856056ae7a2eb2da18caaa86a4bba5d68f860ff9dbac7ef8323dee1234d9bb011a494e5c9b51809e27329e070e6914c38d3b77ae512dbeebb0cd8e7da9893574d1a55f51ccf004ec33eb300d64881669de2bfd8cf1c253081a0a357fe2e70a192bc4e36f64b3e007408219d8183438c2ceab120dd12b2ed848e308c9f8be87ce445f55fc4487083971b8cb9f6fecc21590733f86c1680bcfefb83cdc0a73e9b96ccb3174299f863188f5fbb8335b71ddade04678db4"}, {&(0x7f0000000b80)="7afe6230684f827dfc4b8c4fe468b9979d5a5db4d8bc9f684568aa7a9291efba20e888f93eaef7a43aaf3ae9ceb0738c6c665e3d3e4e94fb34e85f50f03ffc39c8048fa91ce45c828eb374c3"}], 0x0, &(0x7f0000000c80)=[@assoc, @assoc={0x0, 0x117, 0x4, 0x6}, @op={0x0, 0x117, 0x3, 0x1}, @op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x28008890}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)="ebcac658d75258df4a95a08fed860db4b3bb1b1c07fb37032927fa101390a6b847a7ab4bcb996eae766a1567ccc691d497a4abad99b8a8f752fe161f0f0a2fe208ac08837670fddd3f85c11570ac3477900513fc9de203839c2c3e0ad9d812e21af9c33e7e675df9824bd33455e80c64d4c43c811447906d"}, {&(0x7f0000000dc0)="857270e2dfb3089e40a54ec0e9fa56c1a4d3bb896938565de693a579ee20dabc57d5f3ba51e1103ef19a803606f7cf3bb53a674686cda8ca594c325c4db7dfe46f672a3fbe118d79ba884cdee7fa55d35615f5a89542131111ce5527df288807a1d09e0b8f8818899bb76b2ad10e6f1232f76f6226f810d43cc247f45bb05ad779cc726606b9f0a20643d70aeb8a84e4c418ea7f82d3316ebcc7668e280dd514d290290f64ba1da2bd08359dc3aed19145cb70f89e1946446612bb1c918c588d63027dd736697d6d60c6a29a1c21326efcb15c43039982921a5f642c09b6266059a9c8f94fcc8521e3fc"}, {&(0x7f0000000ec0)="379d03878b3f76f4a1f2c9df63aee8fe9cda4a02a5f77ac9b30aba87c014bc998e2c5c6ec8fe9dcd90d3e6b1f293d24e1a87f64d8d4f9fcf5e971aa657173d947a"}, {&(0x7f0000000f40)="23f64cc185da7c5572577f3189c48fe3f3d5fe133ae4eb6352af4aecac72631a2685041dc3781b2d1c2a9858e65c853ba59772a4e0cf63f57988ecc539853ddf5d700750f733921b2da7264aba966951e0ee149cd533faa3ed36d360c10e9715c8606d9bee194192453f10d3f01a2e00a8746c0e3648f5f09387a94088b5448d9345f58743f73aa928c9f74788328e799c0d94e95abd0ac5982814fb3cd57b667d000467105bed6e6656648f06e0a033080cd42fcd5fdb696db844"}, {&(0x7f0000001000)="b64de0b67dac0ae8a229de33f0ce6931ae161731f8bd9b4d3e9579d25d5e68b24116c837cc126d5eb8543f680c0e97a54c6c78f8e1a67999575c22ef7011d4db9c66f9c1c730d47294b8885a9ad9c1b9e4a99335d867bb"}], 0x0, 0x0, 0x0, 0x41}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="8b0864b72661b8c17bdd1493afa80159f72f00abfb3eb6f69af2760c9ff6dd12d217c2e96136252d9c63ae1e19f54ca3b82775e1459f8c46d54a838b3fa67dff3f071f7e2868d4c9de23270b29c37043f55009af214759c446bb67d1c88f57142c9ed47e9fcc93f214529b05b79b6485e8fe338df92ff9cd0d8c83c555134e48d8e406be57b26230457141ef14eba5b81e888ea8613c1ba2d0fbe0514cb3294677ef1b37caada6aa5e7bf79ea0fa76798710d01204dfb351509664e9b6f6154493a06d358fdabf7ef6da852d4106a1fec8bcfb7a29"}, {&(0x7f0000001200)="c14ff926373435462ff31094b6f65691a52d9cd177c4416fe90a2a7a5984277da9a5ceeddcc7609fdc46c9eddd92fe2614677cac062406c0d428d5f58a0c13ab544d2c2e1aa5f58fa997fe5f4315e40d0dd887f1e66fb100081fd947c4dd8c97841b9437e2a9d84078b73aafc63103dff5203630fea2c0a4844324e3f74396f1f4777c0d68aeff15db68f5e97e843dd34c3280a157066fb48534efccb132e7c09a3b9d559c20ec4573fc9b08c0f3d2e603e0ec45d4ed28"}], 0x0, &(0x7f0000001300)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "45320942ec4d2c8b96c5f0562caf2a793b69079040bd8b6c775e2f0556ce7355c380d02e7313861cf92bcf0fa54b796591a0be325c934498077e917c4826d45b6a8c0ee13aaa0a9debc8da0475216f06c6987dee8216"}, @assoc={0x0, 0x117, 0x4, 0x1}], 0x0, 0x20008010}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000013c0)="4c95e63d8e2076145153907eb8b5ce4f8ee269359bc45f000ab70cef5070c7d3d2d7ce6c68a8b148abca184536e186958fddd84967d51d"}, {&(0x7f0000001400)="8ea340b28912262c30aec213fafdc8f6784bace9fb4a44b00512ce080a2bb66908f644dc13f027347bd8c6c33f1f98341842cc471e5003d65f84244859b74ae8c3a56ce9dee0a74d39a830876c2ceb51ec681ec8c5a75dac6223cb97616ef57986e29e363ab80c4a1a736a924b04f95ea56d5b60ea162ac3f86b210e5b7a1c35b35b11b9a9f35ac9dcb2d8fc2be6b40d7a35774a575e31f4ac8e97164a7e78b39a593399454c04f6a7461d5058124ba734fa0618e36ac822027db0bd339d00799e626972f4cca57ae96b37b4f0bb2db56271c944dee7120c14dd1714"}, {&(0x7f0000001500)="f251593bb330f75b43992b8494eb973540fe3be361047ec92868"}, {&(0x7f0000001540)="7a290dec3a"}, {&(0x7f0000001580)="5be01ab75b82ef36c2f9d8f67b6be90a9f67a4245245163ebf0122ceb64c7482de8557575b5960fa3625d1abf8b28e433b57060b4289b04eb4268f4a352162a68ee22e8f6ee49fb9803c6122293b5ca698a411ab2c2fc967b76acfacf671ac42"}, {&(0x7f0000001600)="f49d569b48a4c91cf58f614b941fb93d491d67a5eb33a20b68132aa14b2d9c48128492a6be63f79a097b2758acc26ae72db0df93c542ffd3dd23237bf63f2ff7769b1ce4dc4853c16401c7e4ca5e36a331a5d1c059ba5fa38c64c0677d76136f1ff176d3743d04cb738c257f629dc4db4bc662d0c854afed8a48a709d0c26f645b32e93882a05c99559d5cf7267c0bfcd16409314a2c6985b756fbe7837d81d6e85c2d09970b7c4ee845dce4182622783458ab89f36d6118b61f52134241ebfd8a61e1668c521054b34d6e0243d26d68c18df61ebffa41dddd9b492356160d2ed578ab3162975ff0a88f6b"}], 0x0, &(0x7f0000001780)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "1618f0c669ede6b9bfd14259ef43c465806047f8a25aa78df06cf0066c5ea5745a3325ecd33d5f8546eeb922e42ae50bcbd723abdf71bf9b3173a796a8db0076aee05daee710368d6ab721d6e16600f12e51c04542ec409e9ddc599a67b3454a3ecd4747a0fd1f826b81bea410630b5eb3be48f9c0215294a1d6678a12842eef5a3a7fcf9edf2856f88db8fd9f5ffcaf08bc68bfc0f1602ef36311e9ca008300180f33aed0f53d738101a318825a895d7810bab15d13cbed45a4d9660deb3c340cf6ed4bae4ed8e4cc9d619f905f7aaf9a177a27e896f12954f7116779f5b4436d03a60c8822333a2eb002ec118b0a562f81db187fab27d4e035974813b0ab8ba44b2aaadfcc5dc955d51b89c90b7bb7a30c945bb0748c4e5de323886f2d02c5874e17946c25392de548c84a666695cb45062cd77a1779b68b523042d232de0b9a150c440d8600a2c9c1e18b36615c3cd7d109990b8ea9db9f15e4519f481e6ac1da4731f18498fd89917ab035b0580f67345ca892341cd8c0b49f254afb97ae691cd1729b0b4feedcb45afa31d1e8268963b5a7274ba1933d263e979164a1fb83e5e08c3bb631902669ff2ecda649d7c17d11fb939b537317b2a775d8db14e90005747a19da8ade5d65954f3a82284100808212ca10ec9dc01764c47059b3299d245f2131b859618eaf2afba0fb9511ddc2a00204af9e3e3600150b1e5cb873dce7d8d7ff0228a9abc992c452abbc28d98c90078ef7f38042892ec713bd78dccf5a2be76ff2b6784be84505eefb80121a3a9c8696aff8a795a7d6bf682661d7a922a275fbd02e87e461cbdb7434c93efc42a57746f6c11e62d09ab644f32c7255c7987386f24768ace26ed39464ad9ecb08d3ea8c9912896a7a98e60fdb24b3428d2030e6f2b963c679d6834f300663858cc7b1e45aa78061844b03d531479706e7129cb85ed80b4a5ffc1ffe9156d04d432b22797c54cf6c7f0367e213f188a408c4b1f8b21ebef5d557b7d9e439c7a749ff359c6b6f2bb5c4f0a8d36971837b804f21f2f367e42a781503236c08bce605e41f1392e74cc59f98f4fb23fcae21117171f84122203fd9189865a7ba3184969935eacaef6e4d8430a0b08ee0c81ec6d73f5567dcbf1ea429be268d6c13f34a82137e601c0a705d4fbffaa33fee15c14724a8c9ea26589894e84a737c9058843b212122a40ebd7baadf8c20bf6d8a26ec8544a4c017f47e5a63c2c0aacf7eea2248e71340a54ccf6ade01962935ede29d4010c6c6f8d232c5fe4ca5a669ba6e659a4760a845b6f7bca9b52e3ca07991d1d537e5fd704143108164316e1e680f801d2b613978202eb09c681dfc17ab94751da71179de60e63039173a2259bc00b157e5158bde7394faa2b37093a3e478bc9a40eb594be00fbf2179bc8ffbe63127776c9386a40a6910a668c5688ca2c7921fd645220db6c4cd669a45fabd2b320c040c4cb43ad3e64ff1747a90bb36f911b21075a94dd3e3d36a22d8d0e148a1d9a25041049cd782689917dab70937536cb3cbd7c2aab99a58f0ba90b41cb1b6c34bd3470821266ea3b24403e65978305c3a244acc50d85040fc8b494899fa1a2e7b7d372403a122456d203b9c7a2aaad1913b9d8b8b8d92d459da81a84470896834f0086e5c9fa8f22e25ad7c508c5ce4606b76e78da682d330dd7f6c38e31f0917cbf9046041dcfa557590a4c3e50083071072cae55a8f01450016bcc7207e7f02b6ba9be459f9cc3f143bee64e6dc3198499f7952584a174ad2b9d41830ab2aa0f5e76cbbd02b129453c05496e2f8cddfd6459fd10407890f38be95b5d0cee90b9b2a148f8dba2caf798ccd9ec6f0e305b72b0ba90f2a9e28d6ad413804352ead1d7fa15e11c38ba7d3945c4b6198c3cc95b7262f15ed868c0520969e0f1b738046b324874a528e5413b73ed52d2327bc8df66747fb3f060959ff346bef1165460513b819d408f0f08b6b126760d25a83e35af743a7cae06cfb8d4e90c4acbd4ff257a8fbe8dc51cffc1970be05b8ae11feda2ec6f433903da1a13ed4d5c77e05831084a40951625f509decf75fd0a44dbc8c11f8de9b40bc15206023ae08496a1a501717b5c56d03db294ca9aabdbe8fc97cb26e171ef719e4bba5a8d34c7679f8f2e5304914f4cd780f5a4daa01806286f258adfee1ad77c6c1dfbca66316f9410fbdc0ffb4a3f22c34d6404a45eb911d15097575bdf343ea9ce5899f7847c91a430a7f3e09cd5198695126b1c1d06e9977cb816ed0e50464638f427c88102f601c5c31992594ee526eac3965a23b49c568c0da4c17b928990d7569073927340841303a2e4a317a83eaba6b6401c475bcae618cfca77213c95b4c5b093974aac5e8f6cfc51063f846b39786e330608927b402629541cd0c5fb0362174c804825906fc553597e5d54088fbb6053102a24f4f605cf54a4deda99936e7128d4c2285e090b21b240960f8b29a8acd7f9a8408a5dca5a9891e4784846dbc3313f2ae9737d85117094c1cc6610b3205b7ace1efdf7f8cb21d45d14ce5473e6db3194c5c8a529a89f83722076b85c5bd296a266b0cf4184f01f9a308e8fcf6bfc948a14bb8fa626e42fd087fd800cc65d0119169949662c95554a00a6c8281d1db62c55605329cac816538c5b8fa723a4a68e675ffed60382234ccace8237c074eadd774daf84e9478c732b566ac3b5aeb3fdf5f13eb4065cc720728c522bfa192afe1f55d0d7250884f46a825a7adf3cc060a61ec180cbc4b9d6918dd51a7a256b0a63d4b3c4cb42396e0c39e8663449c859178c04df7953ca13fd475f3eac86a7807b608693464e63bd858bb0196ba6c11307c7c24387dfb9105ee47425f378bcf8cdcb0a0c581fa591a61f5437274e124f089c6fecd85a747edbe0535e0f984bd30f2748488dd147c966e39dca60e1201d5d96d833135c9b54d43688e33cd069484768323aadebc05d5cd5592a6b47e58111efd271180665be2c32581d418dc4909844ec4df77bd23cdaf65ba2d82523de8b8afb3317d5af82cfaa574a0d55143aaf533bfed15dc14610183286ec2f2e0caed7d4f6d0c88bcb1cf9af04cb4a1b559236992294a331d0b7179ebd38071014858c0de7b43358cb3a93768243603fc6627be1db1315039efd7c416b649dd9f760ffe2688646e4c2fee38088d9d6cd18dd3a9fb7c41c6b6242a8fe157eb8ce034b6179566dcd7f90433a5160bd02f16d618734be948e0f4d7b885cd25909715f741de1236064e06b8cb9716b73b79637df6861b33656a7d8775b9bc3a11fc260d7f52d179d22a022630a521ee345a3486b6691f9e563f2aaeffdef25cb3688a9c2a5328cc33fc04895a3a11c5b9a62df048f74f3e1bcd832243cf57868bc5be39e903db77fdbc8f70b3f6a327e19b9e9a720b493c2ab47c0098806a32ca4077afb6ea4b0eef0f7f1d49fd79e8370a942b83e7e0beb009903b8ad067551dc5331eeeb9cc5c7f9ed32778f3fbbdafe237584e8b5c8bfca96e526ba4a9a36e9fe97166141e56d3661ce6d7fb401d05f6b51450074cbb012ca001969b746279dc4c31a1bee96148b4cddfea4d4e82e99b6ed691c38ae5ee2b1da12ada530ad8d63978c3307f0735e64a0cb40a2c707c413e52427d2bc75a9c2fca5651fa5b54c10adc3e447db16f06aa52fd68a484a58903dd15e987365f0d035ae1323bdb5b458bb103daa19c9ae74519f5413d29e883f4664ccb18aac78c17657f9dad86a6de96b6b646c4d4e662bb422779af510b48f5b0ad6e8cb88b7a53fea9909db139e2707807f63d7f06e001c06826b438385ec4ed33da9429cbf4e54c72dba42e66901bb328abf861240cec54600ba47f3266cfb76db299441aa26b828d32207d0fedcbf00701bddae5f5d669f7e0457ff4b249dfa425013432e8c71d6900690210e6c1a291a0755943bddd709c86e729042e366f9b34e8339465bf3e59d621cff3ebe3c796703fce1b7bdfc7d993fe8a0dd43d6036e1e2b1576fd522d0cac1754e1cb74d5169069035a6cc1d035edf98c7254fdd853ac0bf77262bd4e2dec0901186bdbaf5ab4f630d59123700f73d0c0a711ba3254ec4ea7d8ebffe9ec267cec1fe7a36455f011ff9ce45e2fc9555e9ff095c8d3cd27a293f63ea30fbe3b3c14d325675027fe85fe38ea083a3cb7fd10c6e6927e1279494be318e019e5b8367a0c3faef405ba6c826cf7e3f8784a15ed5938064ab77e9142ea82e2f23b8922f44f0a0b8bb48299600aa131e79305a0219ae873efc503ee88e62f56eea62120fbf6b62ffcaf034f143b205101ae3e8a10ca5114589715e2663d4f8674004dc04ee374c2428679168d2688d37325493d0b12b433253f3fb3c788acd4b6b82366d29f746a3755537b5177456ad1e11e8c76c033008559d2407bcd6a863b877c058751456f09c6f9c0873450615213060aa2b7f5c4f7e7f903d8f2bfb3d12540116e244e9ded4a456f9d1c89a7308cb33e40fff51bdb371275bbc28989c33f7f1a9aa09e59ad1ba83e930e9b6e799a068594b510f6c5e89b5486ce6e981b6dfa6da16971f6c0183c42e7c034a8343dc856bea952a47ba59066e553d35fddd350a473c6c4a36ab704ccf76e9ea56a8d2099d783aa04e264700b51054a8bcae17e294e48a268e343acf45c890235e959e9a4b6e845995d95e1a00e528fe78ecbf124f3128583af082d283324f285973e4840e6bbdefb9d7c2abab0b3eeb1a6a53d2a2be7c1c4a3310cde1324ff3c52bb0022b2073d7eac877896a9ede91c0ad8713f9ad2ea5c2a8cbf668c4994745eaa0a0c486ac83f12585a3316e33845feb420054950f46f3bfbd4eabb86ff2d4d110de0fea1fa520bfb656ad69a6eb6b3eca418100c74da226b9015d0288469bfb128fb9cef9e76bd5927afb0f5bbe98c6593079e0080b0417adedc3a17f1de979f4ebb14b323b44bac56e42bc3b01e946aaaa476a65cb6fa7bc78ff3c9a1f3193321e0a5198f9870925998b33601ae63a5c9457cfceafa3cd0fa6e443b0d84c882de8ef024eb108b6c8ce8e765691c1ba19063a0f69739af1802640d0636885fc8d1de7e3b28c03b1d996012b617e4b110514c9ff0b76aa010158ac561e5c654bc555eb5045ba189a72f85b4427bdde273ec0c1978373a1dbfd68cd1ca4efaca39629209ebe732f3407f1593cbd018749c6a48ffcd3d0ac59b6ed7599fb6ab6b47f13b280d94199e6bbfac63586ba5e57077e080730c31a75f76c6d22bf53097c2791ad8430cfa33f4ac0bd34aaebff13bc6a05cd24ea83da719aed401571dfc926045cf93c588a84a7eb7cee9dbd2f3d7b0acef5351110e911bf3f0a57af0ab5798eba46bb227ee0cf173428d537532984dbc9143733cb428c0eca74e948b386a3b6dfa8df3b0d2d825713ca2c318e2b2e08ff8622bab38c7af74b92c1dad49e3f85f0cf39b02ef3f7ef7c7e056145ba06d559532ee93873fda90dea15b8271e1ba38d039f599df202b76800fedb0b7c2d593a7577d4ef526ab7c1ec6786537cc18a2e46f0184dfff5fd4ef61b1cdc6cb5e65a49f7f864b1068a24a96416756ccdd5104dec8da86e0462f9b38516d50a8621d12f9c2375aab39c2c15294be60f59339f7bde1b8c92ff620b4bb47f019190203edc2af2786f36b384577bf0d6a0b481f1b1511610097ea30821c4755d22c97b996b3f2f1747d253a3ece1728e401c8af4ee9a56d0c73fbf28e6f6c2eed4f6fa8f81945d4838e22d1abd6f713266b93daac2fba2095ebc871e2532820e0db71c96"}, @iv={0x0, 0x117, 0x2, 0x0, "52bb1a45f992e816ab8217e05331c2677579fabcb48794ab207f4886ef559ba958ea6cf72c169e37f477d91027f24db5f25d0d88dc6d04fbf284b273735cb24326ac98e6fa19d94b6339651d5c88277f8ab721f82e177e29406c82fc9997b98b0ace2636cdb25ea1186a899dc90dd6faaa3e4808b58628b0287b8096d41bc3968faac7b1b81710ea619a60727217e9b4bee7a20fe054d3087324cf1bca22ef80f689facc7eaf3b602398bab0bffd4f59267f6190ef4259033a9c44437dc582fe6fc7f6f33c048c7b29dc367bfb72add916d242988929a640ca96bf249225b1b5cbc834"}, @op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x20004010}, {0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000028c0)="eed1be0bcfad7f7d7bf8aac73497124b34111316d3403e67f9a6973496501854268ce5d68942d25086383ac70b379e60990e03cdaa7819892801a020024ef2607953a2245e2619f87e6bd8fdc6b5b882963a911c5297bf70a903acb1274b6777924164a47e43da0b04ae6c8af0f153c780f273ccd248e87f02bda3b5d313a35b1e3fe3f1f7"}, {&(0x7f0000002980)="a8e755f2cb3e4fce441e0d9a74756088916130b2b7f31c668ff49ae8e9ebd907289f63fb48da268434affe61bb3b3c7fec8748c299cb17cdd97e14f9b6f6b40b2d0a85395458ce6f0872549169522a6d7429efa7c21a6186b0fe08aa98962283c96f6eaeb3758c4f23c95ea07141"}, {&(0x7f0000002a00)="2a3ff895683c90cf37a580a8b2c9a6d3467df6ddb57f0f396fc26f5ce5bd88fc1e01cb8ca9f53515b0ab7f550357863a4d49831509de5970b181d471df139990456121bdce257357949d846107c0516b551b5e8f73805819b7fe6520012f77b4068afd2f48c3c639b2d179d035e97a8aeefc3f9a3ef6ea8e73959666e6b85306c162f31e9b12d21007e1c9677ca1d2ebf9eaba530a081b352f66d53fade86b7c31c3c3f7c731d480b791694cb79c0c21785c498b025756ccac5023106876902821ce7b7a711b9307314896"}, {&(0x7f0000002b00)="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"}], 0x0, 0x0, 0x0, 0x11}], 0x1, 0x40800) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000d00)={[{0x2b, 'net_prio'}]}, 0xa) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000200)={0x2, 0x0, 0x1ff, 0xa5, 0xd, 0x9}) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003d00)=ANY=[@ANYBLOB="3c0000ebff000000", @ANYRES32=0x0, @ANYBLOB="00000000000006001c001205d2d5620ffd48e964670100000c0002800800140000000000d6fc88c1592be408399d0dc616dadbced320f1a9b15fd617b51ef06f030a18b7ef40bfbd8224b54bd7d6692fe7a9aacfc3395921f40b5eea7d6500f3b2ad2f3c541583c4d9feab7b42f1badde9f87bc5059830a171b1dab6549fc4bbb373d6a321b26d763ebb6d85b5dd2795b5ecfc151efa0105cc37587486dd9f17"], 0x3c}}, 0xd0) 2.439375681s ago: executing program 3 (id=7283): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), 0x0}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)=""/21, 0x15}], 0x2}, 0x4}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xf0ff7f}, 0xb}], 0x12, 0x40000021, 0x0) 2.283860057s ago: executing program 0 (id=7284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b9ff03076804268c989e14f088a847", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x4c3, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd25, 0x25dfd3fe, {0x2, 0x0, 0x0, r8, 0x80, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r11, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x194, r12, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xf9, 0x4c}}}}, [@NL80211_ATTR_TESTDATA={0xb3, 0x45, "b2028d558c762bbfe906b7a3409dddc04b150cb610e0dfbfe532156b3dba645fabf5cd93d989e9976f35448d4b80e3e19732ff5532c952d57912bda213d661a173567236803f628ed449b8e0532c166e130fff767ec1494e598c81006a1f3e811c5b30e1784c74adf216fad2b22aabded19703f9075610c9fbda05bf8750a1f9484c8bdaefcd3c4ffbb31598523be7dbffbf67d3845028ba548bf009df5c158bd49a6dbffe33c888ac1d811f8b8a20"}, @NL80211_ATTR_TESTDATA={0xa7, 0x45, "901900353cf6edee46a43bddc2bda865d2ada1c4759ff3956ba171b2de66f7c5cd9fb9c68b570b83f62c1f7254175a8baf6298719f398a6264c812c5268b693b6e973b5aae4bcef5be73930cb34ae1b8908f497f015ae75ba246b6ed78a6455a460b1ff23000999b8d66ee336f9f47560168f302439b59500d6077d5c82b0ef00dce0f03f82f829602e08fb62f56aae4762bd6202557547c457b926e7a592d5ad29c01"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "bb68"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, "fd"}]}, 0x194}, 0x1, 0x0, 0x0, 0x50011}, 0x4) setsockopt$inet_int(r10, 0x0, 0x19, 0x0, 0x0) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ifreq(r14, 0x8931, &(0x7f0000002700)={'dummy0\x00', @ifru_ivalue}) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) 2.283155779s ago: executing program 2 (id=7285): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x1, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000083}, 0x10) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000180)={{r0}, "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"}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001180), 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000011c0)) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000001200)={0x8, 0x100000000, 0x99, 0xb07, 0x2}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2010081}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xa0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcd4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1873}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd83f030abff9c9b4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x884) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000013c0), 0x4) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000001400)=""/4096, &(0x7f0000002400)=0x1000) recvmsg$unix(r0, &(0x7f00000026c0)={&(0x7f0000002440), 0x6e, &(0x7f0000002640)=[{&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/223, 0xdf}, {&(0x7f0000002600)=""/9, 0x9}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}], 0x20}, 0x40004001) sendmsg$nl_route(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)=@getnetconf={0x14, 0x52, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000002b80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002840)={0x2f0, 0x2, 0x5, 0x201, 0x70bd2c, 0x25dfdbff, {0x3, 0x0, 0x7}, [@nested={0x46, 0x154, 0x0, 0x1, [@generic="47fc512ad33d4db18541ad751a912d86a9fdb10bbbe2c715e38575b96885968babe39e2c7ae049abb163", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x4d}]}, @generic="2d7664a721d5ec05bc182f4ee2d2305b722cc034e090c7c3754cfd098d64ed5321d84eb5f22d92ea55fd2ea97f0e63ae1fe53ab9b7b17af7609998eee971cacb0607be7abfc865b8108f9b742670", @generic="4fa2c9af32b4194f7d6bf847993a37dfb3494603e0d11c90e7f0e75f4c8fb03d28b469eef94c76a18d18b37ac036b28cfe4b4b6c0f942b28ddde9ae33321d9bbff8325cf3deb65fc6d2d849b9ed89c5bc0902c5b5c183d311d3d2bbef91ef2140055ea65cff15c1e766d109be7bce0d6ea25a60a24891a379197d2508ee74bd0d5ee96a63ecd0f823def987b20c7a283ab68d40d4ab81105fa05aaf731b50385c2d343be8e275e4d9d126c80fe19b7f1e4136331ad038c26e7149979c97b8c992e69fc41f9e0c53d5b009f18bf1f1b647f2f56586c4c3d8221a6", @typed={0x8, 0x123, 0x0, 0x0, @fd=r1}, @nested={0x164, 0x87, 0x0, 0x1, [@generic="163568db0f5aed60b42b3f45ac96bd89ae8b1720ff10e6fe6762eee447d9dc71111ad759df9eebedbb4359d7007f5c9bd7a00cfeab672106f8084b391dc13286bc051a8402d1997bec0db7c4e37bfcd05d56356954e2d4ffec4a08caa4f6", @typed={0x8, 0xfe, 0x0, 0x0, @str=',%]\x00'}, @nested={0x4, 0x38}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@remote}, @generic="a79af65e8aa5ee926971b2a98bd8a9afc2119261ca24ca6428346e8ad8a05b0a952a658633376e9a80299e6f68603de29c178329a18fce16cc81ac9c15185bf5ffde51ba51e72a4ebc3a0e49fb29c8a2de764816e2672da3a5911ee8b4ece31730dbae9b87d6f38b6ef0309a99022fc8d4000d8d4a1fbb38ad83869847283b7f14752f9e6378b2aee2a1a4edcd6ba98f6aa3466ee1e3175ada8eaf192769a3358666d4626c03d840dc1ba78df3acef852c9e3aa82b7685b518ed86f3d572ac7e1c9fb272eb436346f215753fa34461886de5d0dd7b53f4b4c79aab945428", @nested={0x4, 0x61}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c00), r0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x420480}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x48, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c010}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002d40)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c080}, 0x40) write$cgroup_subtree(r0, &(0x7f0000002f00)={[{0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2b, 'devices'}, {0x2d, 'pids'}, {0x2d, 'cpuset'}]}, 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002f40)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x4}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x5, @remote, 0x9}, @in={0x2, 0x4e21, @remote}], 0x78) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x44, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003140), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x64, r5, 0x10, 0x70bd29, 0xd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x240000a5}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x40, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbf5, 0x5a}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xff}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x44, r2, 0x304, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}]}, 0x44}}, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003500)='./cgroup/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000035c0)={0x0, 0xf4, "bdb7b742d8242844671ad4d39c358aeba4fe94e9e597ed32220e0ec710e03b4f351f4731cd03ce22d8f976e61adf35ff2ca8f174a6b8dac222b13c8634daa7ca15fe4ed6398ebfe447dd8631dcfd937266dc4c0b8713dbeb2052e0f3ee1f8f6011b169029bf37d9b6cab99f15a64e0caf19e1b265cf69cef21284da2917b83f8eb0ed06b7d2fa38d681fbb35efdbdc757aef5a7b1535d3ba8dc164df153d15fe8e1812532e9697b173bfbef15bbbf3353aa15c50c9c52ac2c0e9c7a45a2d68eb239e0cbf7b7f024615ac862b700e770fa8586f6f948f83571a4f344897714396bd186a90406886e0d60e9f4dd783c14034a3321c"}, &(0x7f00000036c0)=0xfc) 2.282742197s ago: executing program 4 (id=7286): bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/154, 0x134, 0x9a, 0x1, 0x5, 0x10000}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0002, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000000c0)=""/18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800713b3ac4b70000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) 2.249949392s ago: executing program 1 (id=7287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) 2.164316467s ago: executing program 4 (id=7288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) (rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x7, 0xffffffffffffffff, 0xb01}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x7e89f6d2dfb005ed, 0x200000000000013a, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r5}, 0x94) 2.120807904s ago: executing program 2 (id=7289): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0x18) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) 2.009295509s ago: executing program 4 (id=7290): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.931854969s ago: executing program 2 (id=7291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000c000000000009500"/32], &(0x7f0000000080)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0xffffffff, 0x5, 0xce, 0x108, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000300)="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", &(0x7f0000000400)=@udp=r2, 0x2}, 0x20) (async) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.828835734s ago: executing program 1 (id=7292): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x800, 0x210, 0x4}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x0, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x104, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x8000, 0x6, 0x0, 0x3672, 0x2, 0x9, 0x6, 0x7, 0x10, 0x0, 0x3, 0x3, 0x6, 0xf, 0x6, 0x4], 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='hbh\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x4a2, 0x1]}, {0x4, 0x8, 0x5, 0x81}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0xc}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r2, 0xfffffffffefffffc, {0x2, 0xff, 0x4}, 0xfe}, 0xffffffffffffff5b) 0s ago: executing program 3 (id=7293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 64) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="140000000000000029001000084000000000000e000004009b94f20973897b4ed8c9744e10f971b25c511099ff36c7337c59c201e558446b8e40a3e5492845b5c84c00e384c0c3bce4a9d76df8fec7affd230d53c7b1a8c76f11c521e98b837240a3ef74a178e3a19d52f7b882b84952b47419780c08c7423b6cf65da722cba059a8bfc7ed70cc5c8ed60fb1e064609d795fa85e67f0e7a6a1637b557f617c46"], 0x18}}], 0x1, 0x40000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r2 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'gre0\x00', r3, 0x700, 0x700, 0x4cd6faf0, 0x60000000, {{0x17, 0x4, 0x0, 0x1b, 0x5c, 0x65, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x41, 0x3, [{0x7, 0xd, "807ac592069afe3e003871"}, {0x2, 0xf, "9fa33c1ebf0644909b00da0740"}, {0x1, 0x6, "5601e442"}, {0x6, 0x8, "b40678bce2e7"}, {0x0, 0x11, "16bbfcd5a5a5bdc6f6c2fa3f25adc7"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r8, 0x8b32, &(0x7f0000000040)) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r12, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_GET_WOWLAN(r11, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="10002bbd703af6c41af1b317d0000800010048000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40804) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7004040000008900000008000300", @ANYRES32=r10, @ANYBLOB="04001d80346247dc06028fbc87dca65712a89848f4b888e40956ec77e8ae3e3e090da3e5292de5944be326ac027af36dd51d0e210004313c10f5108e4a67785cf0746ac6403c3a3c8cafc7fc694513cc5202950599c49bcfc6e47be3107b79a3c1519549ecbfd854886e77d455a6411be867bec5b936f81409cf1dde8e308ea46ee5b3d7f5adb82baf896253965be080bd418d60f20872fa97ac7897b43e4e27fb99d416c4ce3129a7031cc9fdc7c2586ed9"], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="08002bbd7000fbdbdf2514000000050029000c0000003c008100050002000200000005000200c00000000500020003000000050001000d000000050001000d00000005000200080000000500020001000000050029000a00000006001201070000005400810005000100060000000500020009000000050001000900000005000100070000000500010000000000050002000900000005000200050000000500020007000000050002000100000005000200090000000800130081980c18240081000500010048000000050001000700000005000100000000000500020000000000050029000a00000008001400", @ANYRES32=r5, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x94f50c2323df7966) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01042abd7000ff0c00256c00000008000300", @ANYRES32=r5, @ANYBLOB="0800a10009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) (async, rerun: 32) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async, rerun: 32) recvmmsg$unix(r2, &(0x7f00000029c0), 0x0, 0x10000, 0x0) kernel console output (not intermixed with test programs): 31] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 550.019948][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.027394][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.036320][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.045388][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 550.060425][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 550.201511][T27198] veth0: entered promiscuous mode [ 550.210209][T27199] Cannot find del_set index 49151 as target [ 550.250775][T27198] veth0 (unregistering): left promiscuous mode [ 550.635280][T27183] lo speed is unknown, defaulting to 1000 [ 550.661675][T27183] vxcan1 speed is unknown, defaulting to 1000 [ 550.985801][T27225] sctp: [Deprecated]: syz.0.5867 (pid 27225) Use of int in maxseg socket option. [ 550.985801][T27225] Use struct sctp_assoc_value instead [ 551.074590][T27230] syzkaller0: entered promiscuous mode [ 551.090833][T27230] syzkaller0: entered allmulticast mode [ 551.145536][T27235] openvswitch: netlink: Key type 30 is not supported [ 551.487603][T27183] chnl_net:caif_netlink_parms(): no params data found [ 551.628646][T27263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.706357][T27275] x_tables: duplicate underflow at hook 1 [ 551.764139][T27265] netlink: 'syz.0.5879': attribute type 1 has an invalid length. [ 551.948462][T27291] netlink: 'syz.4.5883': attribute type 1 has an invalid length. [ 551.972614][T27291] netlink: 'syz.4.5883': attribute type 1 has an invalid length. [ 551.990884][T27183] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.998156][T27183] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.006267][T27183] bridge_slave_0: entered allmulticast mode [ 552.015321][T27183] bridge_slave_0: entered promiscuous mode [ 552.024120][T27183] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.031473][T27183] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.038806][T27183] bridge_slave_1: entered allmulticast mode [ 552.048902][T27183] bridge_slave_1: entered promiscuous mode [ 552.114622][T27183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.132880][T27183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.152030][T27299] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 552.170800][ T5837] Bluetooth: hci2: command tx timeout [ 552.203577][T27301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 552.238207][T27183] team0: Port device team_slave_0 added [ 552.263903][T27183] team0: Port device team_slave_1 added [ 552.373342][T27183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.380831][T27183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.415168][T27183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.428928][T27183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.437133][T27183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.464993][T27183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.713001][T27320] team2: entered promiscuous mode [ 552.718142][T27320] team2: entered allmulticast mode [ 552.785916][T27183] hsr_slave_0: entered promiscuous mode [ 552.819890][T27183] hsr_slave_1: entered promiscuous mode [ 552.883886][T27330] netlink: 'syz.1.5894': attribute type 10 has an invalid length. [ 552.902626][T27332] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 552.964147][T27332] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 553.027643][T27332] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 553.044760][T27342] netlink: 'syz.0.5898': attribute type 1 has an invalid length. [ 553.071065][T27332] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 553.086355][T27338] policy can only be matched on NF_INET_PRE_ROUTING [ 553.086380][T27338] unable to load match [ 553.109291][T27344] netlink: 'syz.0.5898': attribute type 1 has an invalid length. [ 553.265667][T27183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.305304][T27183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 59806 - 0 [ 553.329758][T27183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 553.424235][T27359] __nla_validate_parse: 13 callbacks suppressed [ 553.424259][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5902'. [ 553.452879][T27183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.469585][T27183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 59806 - 0 [ 553.482948][T27183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 553.583609][T27183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.595063][T27183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 59806 - 0 [ 553.609092][T27183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 553.715370][T27183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.729543][T27183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 59806 - 0 [ 553.740962][T27183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 553.932425][T27361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5903'. [ 553.971057][T27381] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5907'. [ 554.008450][T27183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 554.034771][T27183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.057970][T27183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 554.103784][T27183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.125131][T27183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 554.158254][T27183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.197291][T27183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 554.245015][T27183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.262735][ T5837] Bluetooth: hci2: command tx timeout [ 554.498889][T27183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.555067][T27183] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.577326][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.584638][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.610515][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.617771][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.738636][T27427] IPv6: Can't replace route, no match found [ 555.071749][T27183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.090338][T27444] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5923'. [ 555.154692][T27183] veth0_vlan: entered promiscuous mode [ 555.169502][T27183] veth1_vlan: entered promiscuous mode [ 555.218237][T27183] veth0_macvtap: entered promiscuous mode [ 555.233210][T27183] veth1_macvtap: entered promiscuous mode [ 555.289109][T27183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.322698][T27183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.341713][T27452] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20002 [ 555.360713][ T6058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.370064][ T1753] block nbd3: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 150 seconds [ 555.384138][ T6058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.411034][ T6058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.420681][ T6058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.493618][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.517793][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.546725][T27462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.558702][T27460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.608678][T27468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5929'. [ 555.688029][T27468] netlink: 396 bytes leftover after parsing attributes in process `syz.4.5929'. [ 555.705466][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.737627][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.799573][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.811197][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.219948][T27492] ip6tnl4: entered promiscuous mode [ 556.330711][ T5837] Bluetooth: hci2: command tx timeout [ 556.373654][T27498] 8021q: adding VLAN 0 to HW filter on device bond10 [ 556.730760][T27505] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5938'. [ 556.943721][T27522] validate_nla: 33 callbacks suppressed [ 556.943743][T27522] netlink: 'syz.0.5943': attribute type 1 has an invalid length. [ 557.014775][T27527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5945'. [ 557.093869][T27522] bond11: entered promiscuous mode [ 557.099771][T27522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 557.121180][T27501] lo speed is unknown, defaulting to 1000 [ 557.127620][T27533] netlink: 'syz.4.5946': attribute type 1 has an invalid length. [ 557.142631][T27501] vxcan1 speed is unknown, defaulting to 1000 [ 557.318464][T27540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5949'. [ 557.340974][T27533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5946'. [ 558.171800][T27575] syzkaller0: entered promiscuous mode [ 558.177370][T27575] syzkaller0: entered allmulticast mode [ 558.374286][T27591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.400497][ T5837] Bluetooth: hci2: command tx timeout [ 558.558208][T27599] __nla_validate_parse: 5 callbacks suppressed [ 558.558231][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5968'. [ 558.732612][T27605] netlink: 'syz.2.5971': attribute type 1 has an invalid length. [ 558.794427][T27605] bond10: entered promiscuous mode [ 558.809544][T27613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5974'. [ 558.823664][T27605] 8021q: adding VLAN 0 to HW filter on device bond10 [ 558.876761][T27605] syzkaller0: entered promiscuous mode [ 558.904256][T27605] syzkaller0: entered allmulticast mode [ 558.994121][T10259] IPVS: starting estimator thread 0... [ 559.105420][T27630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5978'. [ 559.130245][T27620] IPVS: using max 28 ests per chain, 67200 per kthread [ 559.159207][T27630] bridge0: port 1(gretap0) entered disabled state [ 559.171266][T27634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.505021][T27652] netlink: 'syz.4.5984': attribute type 1 has an invalid length. [ 559.559476][T27658] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5988'. [ 559.571483][T27655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5986'. [ 559.582881][T27659] netlink: 'syz.1.5985': attribute type 63 has an invalid length. [ 559.585638][T27654] bond17: entered promiscuous mode [ 559.596089][T27654] bond17: entered allmulticast mode [ 559.603761][T27654] 8021q: adding VLAN 0 to HW filter on device bond17 [ 559.657678][T27652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 559.703920][T27670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5989'. [ 559.737719][T27670] bridge: RTM_NEWNEIGH with invalid ether address [ 559.875462][T27673] syzkaller0: entered promiscuous mode [ 559.882010][T27673] syzkaller0: entered allmulticast mode [ 560.012146][T27200] udevd[27200]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 560.024664][T27680] netlink: 'syz.2.5992': attribute type 1 has an invalid length. [ 560.086146][T27690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5992'. [ 560.103223][T27680] 8021q: adding VLAN 0 to HW filter on device bond11 [ 560.122066][T27690] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 560.139342][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5995'. [ 560.177075][T27690] bond11: entered allmulticast mode [ 560.187114][T27694] netlink: 'syz.0.5996': attribute type 1 has an invalid length. [ 560.195712][T27692] netlink: 'syz.1.5997': attribute type 1 has an invalid length. [ 560.204165][T27692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5997'. [ 560.227297][T27680] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 560.304095][T27695] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 560.316001][T27695] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 560.373664][T27700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5998'. [ 560.626790][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.641010][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.659457][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.673889][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.682989][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.496934][T16146] syz_tun (unregistering): left allmulticast mode [ 561.757575][T27760] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 561.783262][T27760] bond1 (unregistering): Released all slaves [ 561.817849][T27711] lo speed is unknown, defaulting to 1000 [ 561.838984][T27787] syzkaller0: entered promiscuous mode [ 561.848669][T27787] syzkaller0: entered allmulticast mode [ 561.936283][T27711] vxcan1 speed is unknown, defaulting to 1000 [ 562.109067][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.114842][T27792] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 562.128511][T27792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.140157][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.170684][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58838 - 0 [ 562.184053][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 562.348286][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.358839][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.377817][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58838 - 0 [ 562.392921][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 562.573452][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.598157][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.624218][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58838 - 0 [ 562.646633][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 562.671517][T27816] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 562.793133][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.816318][ T5831] Bluetooth: hci1: command tx timeout [ 562.838793][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.867374][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58838 - 0 [ 562.910316][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 563.027316][T27796] lo speed is unknown, defaulting to 1000 [ 563.074666][T27796] vxcan1 speed is unknown, defaulting to 1000 [ 563.505749][T27838] netlink: 'syz.3.6026': attribute type 1 has an invalid length. [ 563.528359][ T6074] macvlan1: left allmulticast mode [ 563.536727][ T6074] veth1_vlan: left allmulticast mode [ 563.554454][ T6074] macvlan1: left promiscuous mode [ 563.574315][ T6074] bridge0: port 2(macvlan1) entered disabled state [ 563.623858][ T6074] bridge_slave_0: left promiscuous mode [ 563.630396][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.235546][ T6074] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 564.265224][ T6074] bond11 (unregistering): (slave ip6gretap2): Releasing active interface [ 564.414464][ T6074] dvmrp1 (unregistering): left allmulticast mode [ 564.696776][ T6074] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 564.705110][ T6074] bridge3 (unregistering): left promiscuous mode [ 564.807955][ T6074]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.820197][ T6074]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.831291][ T6074]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 564.842640][ T6074]  (unregistering): Released all slaves [ 564.853680][ T6074] bond1 (unregistering): Released all slaves [ 564.873824][ T6074] bond2 (unregistering): Released all slaves [ 564.880213][ T5831] Bluetooth: hci1: command tx timeout [ 564.916959][ T6074] bond3 (unregistering): Released all slaves [ 564.948639][ T6074] bond0 (unregistering): (slave C): Releasing backup interface [ 564.962476][ T6074] bond0 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 564.976254][ T6074] bond0 (unregistering): Released all slaves [ 564.991638][ T6074] bond4 (unregistering): Released all slaves [ 565.006897][ T6074] bond5 (unregistering): Released all slaves [ 565.026872][ T6074] bond6 (unregistering): Released all slaves [ 565.048761][ T6074] bond7 (unregistering): Released all slaves [ 565.063905][ T6074] bond8 (unregistering): Released all slaves [ 565.079511][ T6074] bond9 (unregistering): Released all slaves [ 565.100685][ T6074] bond10 (unregistering): Released all slaves [ 565.116182][ T6074] bond11 (unregistering): Released all slaves [ 565.300486][T27852] netlink: 'syz.3.6026': attribute type 1 has an invalid length. [ 565.320739][T27852] netlink: 'syz.3.6026': attribute type 2 has an invalid length. [ 565.457093][T27878] syzkaller0: entered promiscuous mode [ 565.504418][T27878] syzkaller0: entered allmulticast mode [ 565.542613][ T6074] 9: left promiscuous mode [ 565.740810][T27899] __nla_validate_parse: 6 callbacks suppressed [ 565.740834][T27899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6036'. [ 565.928765][T27908] netlink: zone id is out of range [ 565.937225][T27908] netlink: zone id is out of range [ 565.950109][T27908] netlink: zone id is out of range [ 565.955410][T27908] netlink: zone id is out of range [ 565.971827][T27908] netlink: zone id is out of range [ 565.977282][T27908] netlink: zone id is out of range [ 565.999415][T27908] netlink: zone id is out of range [ 566.006397][T27908] netlink: zone id is out of range [ 566.028515][T27908] netlink: zone id is out of range [ 566.041197][T27908] netlink: zone id is out of range [ 566.062932][T27908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6038'. [ 566.972709][ T5831] Bluetooth: hci1: command tx timeout [ 567.522750][T27711] chnl_net:caif_netlink_parms(): no params data found [ 567.537355][ T6074] tipc: Disabling bearer [ 567.544269][ T6074] tipc: Left network mode [ 567.978502][T27941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 568.065034][T27941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6043'. [ 568.397527][T27711] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.425284][T27711] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.450071][T27711] bridge_slave_0: entered allmulticast mode [ 568.472401][T27711] bridge_slave_0: entered promiscuous mode [ 568.498877][T27711] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.508270][T27711] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.531344][T27711] bridge_slave_1: entered allmulticast mode [ 568.585813][T27711] bridge_slave_1: entered promiscuous mode [ 568.815690][T27711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.891747][T27711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.979172][T27711] team0: Port device team_slave_0 added [ 569.025671][T27711] team0: Port device team_slave_1 added [ 569.054244][ T5831] Bluetooth: hci1: command tx timeout [ 569.074260][T27988] xt_HMARK: proto mask must be zero with L3 mode [ 569.166049][T27711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.186361][T27711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.234447][T27711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.350575][T27711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.377931][T27711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.447211][T27711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.488183][T28003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6056'. [ 569.497657][T28003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6056'. [ 569.531583][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 569.779123][T27711] hsr_slave_0: entered promiscuous mode [ 569.787307][T27711] hsr_slave_1: entered promiscuous mode [ 569.796839][T27711] debugfs: 'hsr0' already exists in 'hsr' [ 569.805597][T27711] Cannot create hsr debugfs directory [ 569.854842][T28017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6059'. [ 569.864244][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6059'. [ 569.874168][T28017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'. [ 570.094527][ T6074] hsr_slave_0: left promiscuous mode [ 570.120124][ T6074] hsr_slave_1: left promiscuous mode [ 570.130389][ T6074] veth1_macvtap: left promiscuous mode [ 570.136322][ T6074] veth1_vlan: left promiscuous mode [ 570.142016][ T6074] veth0_vlan: left promiscuous mode [ 570.535276][T28041] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6064'. [ 570.680113][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 570.705260][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 570.888241][ T290] smc: removing ib device syz2 [ 571.170004][T10247] vxcan1 speed is unknown, defaulting to 1000 [ 571.176270][T10247] syz2: Port: 1 Link DOWN [ 571.239230][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 572.564889][ T29] audit: type=1107 audit(1776234593.550:7): pid=28100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ø rejected, failed to enable media [ 573.573728][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6093'. [ 573.683794][T28163] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6093'. [ 573.715179][T28160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6093'. [ 573.861472][T28170] netlink: 640 bytes leftover after parsing attributes in process `syz.0.6097'. [ 573.871028][T28170] net_ratelimit: 133 callbacks suppressed [ 573.871048][T28170] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 574.049495][T28174] openvswitch: netlink: IP tunnel dst address not specified [ 574.350103][T27711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.377110][T27711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.387263][T28193] netlink: 'syz.4.6101': attribute type 1 has an invalid length. [ 574.397835][T28187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6102'. [ 574.420406][T27711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.495268][T27711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.513522][T27711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.543831][T27711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.556023][T27711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.576634][T27711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.696190][ T6074] IPVS: stop unused estimator thread 0... [ 575.011235][T27711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.044851][T28226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6108'. [ 575.064439][T27711] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.134148][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.141390][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.223588][T28237] xt_ecn: cannot match TCP bits for non-tcp packets [ 575.242427][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.249779][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.265261][T28233] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 575.287974][T28233] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 575.296957][T28233] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 575.582290][T28255] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 575.620031][T28255] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6116'. [ 575.629186][T28255] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6116'. [ 575.733172][T28260] tipc: Started in network mode [ 575.759456][T28260] tipc: Node identity aa3bc1eed2d8, cluster identity 4711 [ 575.787627][T28260] tipc: Enabled bearer , priority 0 [ 575.864031][T27711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.977124][T28232] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 576.003552][T28232] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 576.030939][T28232] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 576.054487][T27711] veth0_vlan: entered promiscuous mode [ 576.109575][T28256] tipc: Disabling bearer [ 576.158400][T27711] veth1_vlan: entered promiscuous mode [ 576.176799][T28276] sctp: [Deprecated]: syz.1.6123 (pid 28276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.176799][T28276] Use struct sctp_sack_info instead [ 576.298164][T27711] veth0_macvtap: entered promiscuous mode [ 576.405838][T27711] veth1_macvtap: entered promiscuous mode [ 576.452768][T27711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.485645][T27711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.520933][ T6073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.479472][ T6073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.498468][ T6073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.547883][ T6073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.753297][T28347] xt_socket: unknown flags 0x50 [ 577.870001][T28356] netlink: 'syz.3.6132': attribute type 2 has an invalid length. [ 578.618853][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.651123][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.800089][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.810624][T28378] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 578.829916][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.308197][T28380] lo speed is unknown, defaulting to 1000 [ 579.535467][T28392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6001'. [ 579.585621][T28392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6001'. [ 579.613329][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6136'. [ 580.478521][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.502188][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.520079][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.529149][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 580.551781][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.793336][T28418] netlink: 'syz.2.6143': attribute type 2 has an invalid length. [ 580.847023][T10246] IPVS: starting estimator thread 0... [ 580.898347][T28419] IPVS: sh: FWM 3 0x00000003 - no destination available [ 580.905656][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 581.000141][T28423] IPVS: using max 25 ests per chain, 60000 per kthread [ 581.247903][T28432] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 581.666506][T28449] team0: Device gtp0 is up. Set it down before adding it as a team port [ 581.716713][T28415] lo speed is unknown, defaulting to 1000 [ 582.066608][T28462] netlink: 'syz.0.6155': attribute type 1 has an invalid length. [ 582.075082][T28462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6155'. [ 582.129073][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6156'. [ 582.233851][T28468] Unsupported ieee802154 address type: 0 [ 582.267470][T28468] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6156'. [ 582.517339][T28415] chnl_net:caif_netlink_parms(): no params data found [ 582.559632][T28478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6158'. [ 582.570813][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6158'. [ 582.806508][ T5831] Bluetooth: hci5: command tx timeout [ 582.842552][T28415] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.850530][T28415] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.857855][T28415] bridge_slave_0: entered allmulticast mode [ 582.876250][T28415] bridge_slave_0: entered promiscuous mode [ 582.916736][T28415] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.939858][T28415] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.968268][T28415] bridge_slave_1: entered allmulticast mode [ 582.998504][T28415] bridge_slave_1: entered promiscuous mode [ 583.105050][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6161'. [ 583.126862][T28415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.182785][T28415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.202860][T28495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.210264][T28495] IPv6: NLM_F_CREATE should be set when creating new route [ 583.238786][T28495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6162'. [ 583.389529][T28415] team0: Port device team_slave_0 added [ 583.404336][T28415] team0: Port device team_slave_1 added [ 583.494492][T28415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.527263][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.643119][T28415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.667171][T28415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.685857][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.715699][T28415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.953226][T28415] hsr_slave_0: entered promiscuous mode [ 583.967213][T28415] hsr_slave_1: entered promiscuous mode [ 583.990782][T28415] debugfs: 'hsr0' already exists in 'hsr' [ 584.014856][T28415] Cannot create hsr debugfs directory [ 584.615965][T28415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.637469][T28415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.657844][T28415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 584.787911][T28415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.799437][T28415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.825260][T28415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 584.882701][ T5831] Bluetooth: hci5: command tx timeout [ 585.000910][T28584] __nla_validate_parse: 4 callbacks suppressed [ 585.000932][T28584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6190'. [ 585.019352][T28415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.041975][T28415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.060415][T28415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 585.179577][T28580] sctp: [Deprecated]: syz.2.6189 (pid 28580) Use of int in max_burst socket option deprecated. [ 585.179577][T28580] Use struct sctp_assoc_value instead [ 585.225165][T28415] bond0: (slave netdevsim0): Releasing backup interface [ 585.259268][T28415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.276344][T28415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.287877][T28415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 585.431888][T28601] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 585.444322][ T1753] block nbd3: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 180 seconds [ 585.602625][T28415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.628391][T28604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6198'. [ 585.653223][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.675338][T28415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.703891][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.723261][T28415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.741763][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.754068][T28609] netlink: 'syz.4.6201': attribute type 2 has an invalid length. [ 585.794184][T28415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.810233][T28415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.932054][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 586.137419][T28415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.184540][T28415] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.244484][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.251865][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.301542][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.308788][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.358702][T28642] syzkaller0: entered promiscuous mode [ 586.365184][T28642] syzkaller0: entered allmulticast mode [ 586.382382][T28604] netlink: 'syz.0.6198': attribute type 4 has an invalid length. [ 586.714443][T28661] vcan0: tx address claim with dest, not broadcast [ 586.968171][ T5831] Bluetooth: hci5: command tx timeout [ 587.012056][T28415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.087989][T28415] veth0_vlan: entered promiscuous mode [ 587.114358][T28415] veth1_vlan: entered promiscuous mode [ 587.232439][T28415] veth0_macvtap: entered promiscuous mode [ 587.245257][T28415] veth1_macvtap: entered promiscuous mode [ 587.252326][T28684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6213'. [ 587.266075][T28690] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6215'. [ 587.292509][T28692] netlink: 'syz.2.6214': attribute type 1 has an invalid length. [ 587.373909][T28694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6217'. [ 587.395341][T28415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.410373][T28415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.468452][ T6071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.482533][ T6071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.504102][ T6071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.519593][ T6071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.645518][T28700] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 587.819187][ T290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.851905][ T290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.912158][ T290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.924712][ T290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.974061][T28714] netlink: 'syz.0.6223': attribute type 21 has an invalid length. [ 587.990436][T28714] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.168556][T28721] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6226'. [ 588.210382][T28721] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6226'. [ 588.237211][T28729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 588.507321][T28734] syzkaller0: entered allmulticast mode [ 588.525681][T28739] sctp: [Deprecated]: syz.0.6232 (pid 28739) Use of int in max_burst socket option deprecated. [ 588.525681][T28739] Use struct sctp_assoc_value instead [ 588.582558][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.596945][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.610607][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.618930][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.635680][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.044187][ T5837] Bluetooth: hci5: command tx timeout [ 589.247415][T28741] lo speed is unknown, defaulting to 1000 [ 589.341291][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.380122][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.412813][T28769] netlink: 'syz.1.6242': attribute type 10 has an invalid length. [ 589.444326][T28769] veth0_macvtap: left promiscuous mode [ 589.454861][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.473938][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.550052][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.570132][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.611723][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.627893][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.657534][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.675399][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.942688][T28786] xt_recent: Unsupported userspace flags (000000b1) [ 589.981456][ T6073] bridge_slave_0: left allmulticast mode [ 589.987185][ T6073] bridge_slave_0: left promiscuous mode [ 590.021014][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.163963][ T6073] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 590.656261][ T6073] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 590.664718][ T6073] bridge8 (unregistering): left promiscuous mode [ 590.720010][ T5837] Bluetooth: hci3: command tx timeout [ 590.797063][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.807632][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.818602][ T6073] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 590.828397][ T6073] bond0 (unregistering): Released all slaves [ 590.840995][ T6073] bond1 (unregistering): Released all slaves [ 590.856514][ T6073] bond2 (unregistering): Released all slaves [ 590.871719][ T6073] bond3 (unregistering): Released all slaves [ 590.888432][ T6073] bond4 (unregistering): Released all slaves [ 590.907733][ T6073] bond5 (unregistering): Released all slaves [ 590.924981][ T6073] bond6 (unregistering): Released all slaves [ 590.939319][ T6073] bond7 (unregistering): Released all slaves [ 590.953863][ T6073] bond8 (unregistering): Released all slaves [ 590.973915][ T6073] bond9 (unregistering): Released all slaves [ 590.989615][ T6073] bond10 (unregistering): Released all slaves [ 591.004607][ T6073] bond11 (unregistering): Released all slaves [ 591.019985][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'. [ 591.029195][T28786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6248'. [ 591.151051][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'. [ 591.162292][T28786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6248'. [ 591.224395][ T6060] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.266762][ T6073] tipc: Left network mode [ 591.325103][ T6060] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.371932][ T1146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.392829][ T1146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.420220][T28815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6252'. [ 591.453017][T28817] netlink: 'syz.2.6252': attribute type 2 has an invalid length. [ 591.483584][T28817] netlink: 'syz.2.6252': attribute type 1 has an invalid length. [ 591.588181][ T6073] IPVS: stopping master sync thread 20119 ... [ 591.602847][T28741] chnl_net:caif_netlink_parms(): no params data found [ 591.629513][T28820] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6255'. [ 591.813878][T28839] netlink: 'syz.3.6259': attribute type 2 has an invalid length. [ 592.164060][T28741] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.171489][T28741] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.178903][T28741] bridge_slave_0: entered allmulticast mode [ 592.187286][T28741] bridge_slave_0: entered promiscuous mode [ 592.257201][T28741] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.289884][T28741] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.298661][T28741] bridge_slave_1: entered allmulticast mode [ 592.363770][T28741] bridge_slave_1: entered promiscuous mode [ 592.693166][T28741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.742657][T28741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.801645][ T5837] Bluetooth: hci3: command tx timeout [ 592.953934][T28906] syz.0.6269: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 593.026065][T28906] CPU: 1 UID: 0 PID: 28906 Comm: syz.0.6269 Not tainted syzkaller #0 PREEMPT(full) [ 593.026105][T28906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 593.026120][T28906] Call Trace: [ 593.026130][T28906] [ 593.026141][T28906] dump_stack_lvl+0xe8/0x150 [ 593.026181][T28906] warn_alloc+0x249/0x340 [ 593.026212][T28906] ? stack_trace_save+0xa9/0x100 [ 593.026242][T28906] ? __pfx_warn_alloc+0x10/0x10 [ 593.026284][T28906] ? kasan_save_track+0x4f/0x80 [ 593.026309][T28906] ? kasan_save_track+0x3e/0x80 [ 593.026333][T28906] ? __kasan_kmalloc+0x93/0xb0 [ 593.026358][T28906] ? __kmalloc_cache_noprof+0x31c/0x660 [ 593.026384][T28906] ? xskq_create+0x56/0x170 [ 593.026413][T28906] ? xsk_setsockopt+0x54c/0x990 [ 593.026438][T28906] ? do_sock_setsockopt+0x17c/0x1b0 [ 593.026467][T28906] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 593.026496][T28906] ? do_syscall_64+0x14d/0xf80 [ 593.026532][T28906] __vmalloc_node_range_noprof+0x132/0x1730 [ 593.026605][T28906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 593.026640][T28906] ? __kasan_kmalloc+0x93/0xb0 [ 593.026676][T28906] vmalloc_user_noprof+0xad/0xe0 [ 593.026702][T28906] ? xskq_create+0xbf/0x170 [ 593.026734][T28906] xskq_create+0xbf/0x170 [ 593.026773][T28906] xsk_init_queue+0x8a/0xe0 [ 593.026804][T28906] xsk_setsockopt+0x54c/0x990 [ 593.026835][T28906] ? __pfx_xsk_setsockopt+0x10/0x10 [ 593.026862][T28906] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.026902][T28906] ? aa_sock_opt_perm+0xff/0x1a0 [ 593.026928][T28906] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 593.026956][T28906] ? __pfx_xsk_setsockopt+0x10/0x10 [ 593.026985][T28906] do_sock_setsockopt+0x17c/0x1b0 [ 593.027021][T28906] __x64_sys_setsockopt+0x13d/0x1b0 [ 593.027058][T28906] do_syscall_64+0x14d/0xf80 [ 593.027089][T28906] ? trace_irq_disable+0x3b/0x150 [ 593.027110][T28906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.027134][T28906] ? clear_bhb_loop+0x40/0x90 [ 593.027163][T28906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.027187][T28906] RIP: 0033:0x7f9ce4d9c819 [ 593.027208][T28906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.027228][T28906] RSP: 002b:00007f9ce5c81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 593.027252][T28906] RAX: ffffffffffffffda RBX: 00007f9ce5016090 RCX: 00007f9ce4d9c819 [ 593.027270][T28906] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 593.027285][T28906] RBP: 00007f9ce4e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 593.027300][T28906] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.027315][T28906] R13: 00007f9ce5016128 R14: 00007f9ce5016090 R15: 00007ffde1a27758 [ 593.027351][T28906] [ 593.027596][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 593.047322][T28906] Mem-Info: [ 593.319721][T28906] active_anon:6122 inactive_anon:0 isolated_anon:0 [ 593.319721][T28906] active_file:2699 inactive_file:40447 isolated_file:0 [ 593.319721][T28906] unevictable:768 dirty:95 writeback:0 [ 593.319721][T28906] slab_reclaimable:13324 slab_unreclaimable:122006 [ 593.319721][T28906] mapped:29653 shmem:1362 pagetables:1546 [ 593.319721][T28906] sec_pagetables:0 bounce:0 [ 593.319721][T28906] kernel_misc_reclaimable:0 [ 593.319721][T28906] free:1279840 free_pcp:24964 free_cma:0 [ 593.366086][T28906] Node 0 active_anon:24488kB inactive_anon:0kB active_file:10796kB inactive_file:161584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:57172kB dirty:380kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16268kB pagetables:6008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.400103][T28906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.445889][T28906] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 593.477291][T28906] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 593.485978][T28906] Node 0 DMA32 free:1375180kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24388kB inactive_anon:0kB active_file:10796kB inactive_file:161584kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:39412kB local_pcp:19044kB free_cma:0kB [ 593.538263][T28906] lowmem_reserve[]: 0 0 0 0 0 [ 593.543942][T28906] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 593.605273][T28741] team0: Port device team_slave_0 added [ 593.613907][T28741] team0: Port device team_slave_1 added [ 593.625269][T28906] lowmem_reserve[]: 0 0 0 0 0 [ 593.639838][T28906] Node 1 Normal free:3732932kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60804kB local_pcp:27732kB free_cma:0kB [ 593.681823][T28906] lowmem_reserve[]: 0 0 0 0 0 [ 593.697387][T28906] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 593.724517][T28919] netlink: 'syz.2.6273': attribute type 13 has an invalid length. [ 593.741085][T28906] Node 0 DMA32: 7837*4kB (UME) 6665*8kB (UM) 3917*16kB (UM) 351*32kB (UME) 188*64kB (UM) 842*128kB (UME) 772*256kB (UME) 562*512kB (UME) 331*1024kB (UME) 131*2048kB (UM) 1*4096kB (M) = 1375084kB [ 593.764776][T28906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.778044][T28906] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 9*16kB (UM) 9*32kB (UM) 6*64kB (UM) 9*128kB (UM) 6*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 908*4096kB (UM) = 3732984kB [ 593.800704][T28906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.811390][T28906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.820865][T28906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.842377][T28906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.858531][T28741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.875353][T28741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.889650][T28906] 44504 total pagecache pages [ 593.906861][T28741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.923644][T28906] 0 pages in swap cache [ 593.928215][T28919] veth0_macvtap: left promiscuous mode [ 593.929113][T28906] Free swap = 124996kB [ 593.939299][T28919] macvtap0: entered allmulticast mode [ 593.942954][T28906] Total swap = 124996kB [ 593.950234][T28906] 2097051 pages RAM [ 593.954582][T28906] 0 pages HighMem/MovableOnly [ 593.959500][T28906] 427077 pages reserved [ 593.964635][T28906] 0 pages cma reserved [ 593.971158][T28919] macvtap0: refused to change device tx_queue_len [ 593.994753][T28741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.017737][T28741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.078338][T28741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.356318][T28741] hsr_slave_0: entered promiscuous mode [ 594.389236][T28741] hsr_slave_1: entered promiscuous mode [ 594.401127][T10255] net_ratelimit: 32 callbacks suppressed [ 594.401148][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.411417][T28741] debugfs: 'hsr0' already exists in 'hsr' [ 594.439433][T28741] Cannot create hsr debugfs directory [ 594.535175][T28944] netlink: 188048 bytes leftover after parsing attributes in process `syz.1.6280'. [ 594.637697][ T6073] hsr_slave_0: left promiscuous mode [ 594.659713][ T6073] hsr_slave_1: left promiscuous mode [ 594.666521][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.720227][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.869002][ T6073] vlan1 (unregistering): left allmulticast mode [ 594.879953][ T6073] veth0_vlan (unregistering): left allmulticast mode [ 594.892708][ T5837] Bluetooth: hci3: command tx timeout [ 595.065780][ T6073] team0 (unregistering): Port device 26±ÿ removed [ 595.096989][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 595.415382][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 595.554258][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6287'. [ 595.762550][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.879637][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'. [ 595.932583][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'. [ 596.213511][T29005] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 596.242423][ T6073] IPVS: stop unused estimator thread 0... [ 596.595983][T29039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6298'. [ 596.800074][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.960275][ T5837] Bluetooth: hci3: command tx timeout [ 596.968302][T29045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6298'. [ 596.979449][T29045] nbd: device at index 64 is going down [ 597.331813][T27200] udevd[27200]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 597.375473][T28741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 597.413882][T27200] udevd[27200]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 597.429192][T29068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6305'. [ 597.440505][T10247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.473895][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.516676][T28741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 597.527420][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.545110][T28741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 597.558841][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.625827][T29073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.650839][T28741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 597.664549][T28741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.705845][T29076] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 597.793739][T29073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.841022][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.979095][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'. [ 598.005854][T29073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.015966][T29100] netlink: 'syz.0.6312': attribute type 12 has an invalid length. [ 598.045606][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'. [ 598.156126][T29073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.175641][T29110] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6315'. [ 598.186244][T29110] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6315'. [ 598.207873][T29110] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6315'. [ 598.344836][ T6073] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.415466][ T6073] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.468758][ T6073] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.498388][T28741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.582553][ T290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.622090][T28741] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.740743][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.747937][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.847996][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.855278][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.904300][T10247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.913533][T10247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.006152][ T6073] gretap0: left allmulticast mode [ 599.029811][ T6073] gretap0: left promiscuous mode [ 599.035081][ T6073] bridge0: port 1(gretap0) entered disabled state [ 599.396180][T29164] netlink: 'syz.0.6328': attribute type 9 has an invalid length. [ 599.411568][ T6073] bond7 (unregistering): (slave ip6gretap0): Releasing active interface [ 599.423476][ T6073] ip6gretap0 (unregistering): left allmulticast mode [ 599.523118][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.532113][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.666585][ T6073] dvmrp0 (unregistering): left allmulticast mode [ 599.930279][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.984485][ T6073] bond10 (unregistering): (slave bridge6): Releasing backup interface [ 599.993004][ T6073] bridge6 (unregistering): left promiscuous mode [ 599.999424][ T6073] bridge6 (unregistering): left allmulticast mode [ 600.053966][ T6073] bond14 (unregistering): (slave bridge7): Releasing backup interface [ 600.064431][ T6073] bridge7 (unregistering): left promiscuous mode [ 600.103853][ T6073] bond15 (unregistering): (slave bridge8): Releasing backup interface [ 600.112285][ T6073] bond15 (unregistering): (slave bridge8): the permanent HWaddr of slave - 66:db:b8:4d:0e:65 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 600.174276][ T6073] bond15 (unregistering): (slave bridge9): Releasing backup interface [ 600.269105][ T6073] bond0 (unregistering): Released all slaves [ 600.280083][ T6073] bond1 (unregistering): Released all slaves [ 600.295472][ T6073] bond2 (unregistering): Released all slaves [ 600.312383][ T6073] bond3 (unregistering): Released all slaves [ 600.329326][ T6073] bond4 (unregistering): Released all slaves [ 600.347132][ T6073] bond5 (unregistering): Released all slaves [ 600.365247][ T6073] bond6 (unregistering): Released all slaves [ 600.382075][ T6073] bond7 (unregistering): Released all slaves [ 600.397128][ T6073] bond8 (unregistering): Released all slaves [ 600.413451][ T6073] bond9 (unregistering): (slave veth7): Releasing active interface [ 600.424141][ T6073] bond9 (unregistering): Released all slaves [ 600.451731][ T6073] bond10 (unregistering): Released all slaves [ 600.466724][ T6073] bond11 (unregistering): Released all slaves [ 600.489566][ T6073] bond12 (unregistering): (slave vxcan1): Releasing backup interface [ 600.501327][ T6073] bond12 (unregistering): (slave vxcan3): Releasing backup interface [ 600.510859][ T6073] bond12 (unregistering): Released all slaves [ 600.527230][ T6073] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 600.537924][ T6073] bond13 (unregistering): Released all slaves [ 600.554263][ T6073] bond14 (unregistering): Released all slaves [ 600.569078][ T6073] bond15 (unregistering): Released all slaves [ 600.584598][ T6073] bond16 (unregistering): Released all slaves [ 600.607234][ T6073] bond17 (unregistering): Released all slaves [ 600.699519][T28741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.745042][T29182] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6330'. [ 600.800698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.950279][ T6073] tipc: Disabling bearer [ 600.970962][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.037295][ T6073] tipc: Left network mode [ 601.107328][ T6073] IPVS: stopping master sync thread 17491 ... [ 601.124551][ T6073] IPVS: stopping backup sync thread 28378 ... [ 601.231860][T29210] netlink: 'syz.0.6335': attribute type 39 has an invalid length. [ 601.446735][T10242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.755741][T28741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.002725][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.673149][ T6073] hsr_slave_0: left promiscuous mode [ 602.732126][ T6073] hsr_slave_1: left promiscuous mode [ 602.745614][ T6073] veth1_macvtap: left promiscuous mode [ 602.760282][ T6073] veth0_macvtap: left promiscuous mode [ 602.776319][ T6073] veth1_vlan: left promiscuous mode [ 602.801156][ T6073] veth0_vlan: left promiscuous mode [ 602.997011][T29283] netlink: 'syz.0.6352': attribute type 2 has an invalid length. [ 603.040320][T10242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.102139][T29292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6355'. [ 603.171920][T29295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6355'. [ 603.598430][T28741] veth0_vlan: entered promiscuous mode [ 603.637814][T28741] veth1_vlan: entered promiscuous mode [ 603.855070][T28741] veth0_macvtap: entered promiscuous mode [ 603.923137][ T5837] Bluetooth: hci3: command tx timeout [ 603.978852][T29316] xt_nat: multiple ranges no longer supported [ 603.996558][T28741] veth1_macvtap: entered promiscuous mode [ 604.038523][T28741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.080461][T10242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.092978][T28741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.155828][T29043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.166497][T29043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.186212][ T6073] IPVS: stop unused estimator thread 0... [ 604.197393][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6363'. [ 604.206536][T29043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.206585][T29043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.227908][T10255] IPVS: starting estimator thread 0... [ 604.263659][T29325] tipc: Started in network mode [ 604.268781][T29320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6363'. [ 604.309810][T29325] tipc: Node identity ac14140f, cluster identity 4711 [ 604.328994][T29325] tipc: Enabled bearer , priority 10 [ 604.350077][T29321] IPVS: using max 26 ests per chain, 62400 per kthread [ 604.388304][T29328] sctp: [Deprecated]: syz.2.6365 (pid 29328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.388304][T29328] Use struct sctp_sack_info instead [ 604.468440][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.476609][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.500278][T10247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.567560][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.577576][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.620844][T29313] gre0: entered promiscuous mode [ 604.625883][T29313] gre0: entered allmulticast mode [ 604.826142][T29346] netlink: 'syz.4.6370': attribute type 29 has an invalid length. [ 604.950315][T29351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6370'. [ 605.110284][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.132655][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.150995][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.160290][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.168749][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.177456][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.440332][T10247] tipc: Node number set to 2886997007 [ 605.465122][T29365] netlink: 'syz.1.6376': attribute type 1 has an invalid length. [ 605.489852][T29365] netlink: 760 bytes leftover after parsing attributes in process `syz.1.6376'. [ 605.534857][T29365] ip6tnl2: entered allmulticast mode [ 605.735512][T29367] vlan2: entered allmulticast mode [ 605.769966][T29367] bond0: entered allmulticast mode [ 605.775268][T29367] bond_slave_0: entered allmulticast mode [ 605.788106][T29367] bond_slave_1: entered allmulticast mode [ 605.794014][T29373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6377'. [ 605.882453][T29373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.911082][T29373] bond_slave_0: left allmulticast mode [ 605.926412][T29373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.936841][T29373] bond_slave_1: left allmulticast mode [ 605.952773][T29373] bond0 (unregistering): Released all slaves [ 605.970778][T29394] netlink: 'syz.2.6383': attribute type 1 has an invalid length. [ 605.979108][T29394] netlink: 'syz.2.6383': attribute type 2 has an invalid length. [ 606.160456][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.216865][T29403] atomic_op ffff88807e3a2998 conn xmit_atomic 0000000000000000 [ 606.448980][T29412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.750249][T29359] chnl_net:caif_netlink_parms(): no params data found [ 607.072324][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6393'. [ 607.091966][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6393'. [ 607.101462][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6393'. [ 607.134936][T29359] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.147451][T29359] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.161253][T29359] bridge_slave_0: entered allmulticast mode [ 607.178679][T29359] bridge_slave_0: entered promiscuous mode [ 607.203676][T29359] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.211133][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.223049][T29359] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.239522][T29359] bridge_slave_1: entered allmulticast mode [ 607.258775][T29359] bridge_slave_1: entered promiscuous mode [ 607.282188][ T5831] Bluetooth: hci0: command tx timeout [ 607.337666][T29359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.364198][T29359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.521157][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.582655][T29359] team0: Port device team_slave_0 added [ 607.661679][T29359] team0: Port device team_slave_1 added [ 607.746207][T29467] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 607.778543][T29467] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 607.778564][T29359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.778582][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.863302][T29359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.881421][T29359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.889712][T29359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.967502][T29359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.091994][T29359] hsr_slave_0: entered promiscuous mode [ 608.106661][T29359] hsr_slave_1: entered promiscuous mode [ 608.113971][T29359] debugfs: 'hsr0' already exists in 'hsr' [ 608.119890][T29359] Cannot create hsr debugfs directory [ 608.240432][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.495909][T29359] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.637846][T29514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.647687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.770725][T29503] __nla_validate_parse: 4 callbacks suppressed [ 608.770749][T29503] netlink: 512 bytes leftover after parsing attributes in process `syz.2.6411'. [ 608.935258][T29359] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.045659][T29359] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.141340][T29359] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.323956][T29538] ip6tnl2: entered allmulticast mode [ 609.369461][ T5831] Bluetooth: hci0: command tx timeout [ 610.332768][ T5887] net_ratelimit: 3 callbacks suppressed [ 610.332785][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.565612][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.277303][T29572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6429'. [ 611.286996][T29572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6429'. [ 611.300006][T29572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6429'. [ 611.365862][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.380549][T29579] netlink: 'syz.3.6431': attribute type 8 has an invalid length. [ 611.388759][T29580] netlink: 'syz.3.6431': attribute type 8 has an invalid length. [ 611.440792][ T5831] Bluetooth: hci0: command tx timeout [ 611.449049][T29580] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6431'. [ 611.488433][T29584] netlink: 'syz.2.6433': attribute type 3 has an invalid length. [ 611.502305][T29584] netlink: 'syz.2.6433': attribute type 3 has an invalid length. [ 612.322403][T29546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.332324][T29559] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6426'. [ 612.380439][T29359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 612.409253][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.433098][T29359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.480821][T29359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 612.523207][T29359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.542564][T29359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 612.574871][T29359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.600719][T29359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 612.641277][T29359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.751295][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6441'. [ 612.774138][T29359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.811921][T29359] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.822092][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6442'. [ 612.846079][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.853378][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.883430][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.890750][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.295361][T29644] netlink: 'syz.3.6447': attribute type 1 has an invalid length. [ 613.304089][T29644] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6447'. [ 613.313751][T29644] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6447'. [ 613.337770][T29359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.451075][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.471383][T29359] veth0_vlan: entered promiscuous mode [ 613.511688][T29359] veth1_vlan: entered promiscuous mode [ 613.525788][ T5831] Bluetooth: hci0: command tx timeout [ 613.569496][T29359] veth0_macvtap: entered promiscuous mode [ 613.582003][T29359] veth1_macvtap: entered promiscuous mode [ 613.604136][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.613822][T29359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.694894][T29359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.735033][ T6071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.746728][ T6071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.775179][ T6071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.786377][T29655] Bluetooth: MGMT ver 1.23 [ 613.807780][T29655] __nla_validate_parse: 5 callbacks suppressed [ 613.807803][T29655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6451'. [ 613.826875][ T6071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.860141][T29662] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6451'. [ 614.046718][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.067951][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.135014][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.173769][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.184415][T29678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.241484][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.438039][T29685] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6373'. [ 614.480600][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.531669][T29693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6459'. [ 614.547978][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6459'. [ 614.647831][T29695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.698864][T29697] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 614.707105][T29697] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6462'. [ 614.720237][T29695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6461'. [ 614.747198][T29697] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6462'. [ 614.781747][T29697] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 614.789958][T29697] netlink: 'syz.2.6462': attribute type 8 has an invalid length. [ 614.797823][T29697] netlink: 582 bytes leftover after parsing attributes in process `syz.2.6462'. [ 614.990175][T29704] No such timeout policy "syz0" [ 615.265209][T29726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6468'. [ 615.520129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.533016][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.541315][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.549601][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.559128][ T1753] block nbd3: Possible stuck request ffff888026bd0000: control (read@0,1024B). Runtime 210 seconds [ 615.759462][T29747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.769442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.843562][ T5831] Bluetooth: hci0: command tx timeout [ 616.227935][T29773] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 616.557526][T29771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.569861][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.633952][T29763] geneve2: entered promiscuous mode [ 616.646729][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 45702 - 0 [ 616.655816][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 45702 - 0 [ 616.673288][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 45702 - 0 [ 616.685963][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 45702 - 0 [ 616.696606][T29757] only policy match revision 0 supported [ 616.696627][T29757] unable to load match [ 616.734341][T29771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.827578][T29771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.932569][T29771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.185713][ T6060] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.210451][T29812] netlink: zone id is out of range [ 617.222280][T29812] netlink: zone id is out of range [ 617.234085][T29812] netlink: zone id is out of range [ 617.254195][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.293349][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.343637][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.052003][T29891] bond2: entered promiscuous mode [ 619.059830][T29891] bond2: entered allmulticast mode [ 619.065505][T29891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.125446][T29900] Bluetooth: MGMT ver 1.23 [ 619.195915][T29902] netlink: 'syz.1.6514': attribute type 1 has an invalid length. [ 619.203801][T29902] __nla_validate_parse: 9 callbacks suppressed [ 619.203820][T29902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6514'. [ 620.927412][T29896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6510'. [ 621.018040][T29898] netlink: 'syz.4.6513': attribute type 11 has an invalid length. [ 621.027974][T29898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6513'. [ 621.071215][T29911] gre0: entered promiscuous mode [ 621.076204][T29911] gre0: entered allmulticast mode [ 621.097758][ T6071] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.110630][T29898] netlink: 'syz.4.6513': attribute type 11 has an invalid length. [ 621.118511][T29898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6513'. [ 621.135522][ T6071] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.155343][ T6071] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.180677][ T6071] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.555982][T29928] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 621.621609][T29923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6518'. [ 621.643128][T29928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.849116][T29935] netlink: 'syz.1.6522': attribute type 3 has an invalid length. [ 621.865006][T29935] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6522'. [ 621.875265][T29935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6522'. [ 622.204963][T29948] syzkaller1: entered promiscuous mode [ 622.210743][T29948] syzkaller1: entered allmulticast mode [ 622.536148][T29965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6531'. [ 622.672020][T29970] netlink: 'syz.1.6533': attribute type 32 has an invalid length. [ 622.691584][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6533'. [ 622.771935][T29970] bond3: Setting coupled_control to off (0) [ 622.791429][T29970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6533'. [ 622.968374][T29977] netlink: 'syz.3.6535': attribute type 1 has an invalid length. [ 623.082469][T29977] bond0: entered promiscuous mode [ 623.087983][T29977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.638319][T29996] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 623.651735][T29996] bond1 (unregistering): Released all slaves [ 623.963213][T30008] ±ÿ: renamed from team_slave_1 (while UP) [ 624.687969][T30011] netlink: 'syz.0.6546': attribute type 2 has an invalid length. [ 624.703226][T30011] netlink: 'syz.0.6546': attribute type 8 has an invalid length. [ 624.738973][T30011] __nla_validate_parse: 2 callbacks suppressed [ 624.738997][T30011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6546'. [ 625.208146][T30059] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 625.220683][T30059] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 625.560165][T30081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6564'. [ 625.581524][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'. [ 625.711306][T30089] netem: incorrect ge model size [ 625.718510][T30089] netem: change failed [ 626.234561][T30111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6572'. [ 626.289548][T30115] syzkaller0: entered promiscuous mode [ 626.295218][T30115] syzkaller0: entered allmulticast mode [ 626.591091][T30130] syzkaller0: entered promiscuous mode [ 626.597713][T30130] syzkaller0: entered allmulticast mode [ 626.947465][ T6073] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.958265][T30136] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 627.274050][T30146] net_ratelimit: 143 callbacks suppressed [ 627.274071][T30146] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 627.508859][T30156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6583'. [ 627.631779][T30159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6585'. [ 627.641188][T30159] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6585'. [ 627.651473][T30159] netlink: 'syz.0.6585': attribute type 5 has an invalid length. [ 627.659292][T30159] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6585'. [ 627.674606][T30159] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6585'. [ 627.701518][T30161] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 627.720863][T30162] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 627.876336][T30166] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 627.913354][T30166] bond4 (unregistering): Released all slaves [ 628.024240][T30180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'. [ 628.971483][T30215] ip6gre1: entered promiscuous mode [ 628.976764][T30215] ip6gre1: entered allmulticast mode [ 629.432708][T30234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.483737][T30234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.571930][T30236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.786821][T30252] __nla_validate_parse: 4 callbacks suppressed [ 629.786844][T30252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6613'. [ 629.987024][T30259] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6615'. [ 630.099990][T30266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6611'. [ 630.136830][T30266] nbd: couldn't find a device at index 2 [ 630.379887][ T5193] udevd[5193]: worker [20204] /devices/virtual/block/nbd3 timeout; kill it [ 630.406148][ T5193] udevd[5193]: seq 24270 '/devices/virtual/block/nbd3' killed [ 630.624092][T30278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6619'. [ 630.974696][T30307] netlink: zone id is out of range [ 630.992118][T30307] netlink: zone id is out of range [ 630.997344][T30307] netlink: zone id is out of range [ 631.008422][T30307] netlink: zone id is out of range [ 631.014524][T30307] netlink: zone id is out of range [ 631.025510][T30307] netlink: zone id is out of range [ 631.031067][T30307] netlink: zone id is out of range [ 631.036310][T30307] netlink: zone id is out of range [ 631.047473][T30307] netlink: zone id is out of range [ 631.388387][T30329] ipt_REJECT: ECHOREPLY no longer supported. [ 631.440491][T30332] syzkaller1: entered promiscuous mode [ 631.450310][T30332] syzkaller1: entered allmulticast mode [ 631.597322][T30344] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6644'. [ 631.765031][T30353] netlink: 'syz.0.6647': attribute type 10 has an invalid length. [ 632.009766][T30374] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6652'. [ 632.123269][T30381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6653'. [ 632.164226][T30382] ip6erspan0: entered promiscuous mode [ 632.330886][T30393] netlink: 'syz.3.6658': attribute type 29 has an invalid length. [ 632.340127][T30394] netlink: 'syz.3.6658': attribute type 29 has an invalid length. [ 632.372999][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6658'. [ 632.382447][T30393] netlink: 'syz.3.6658': attribute type 32 has an invalid length. [ 632.391326][T30393] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6658'. [ 632.423182][T30396] ipt_REJECT: TCP_RESET invalid for non-tcp [ 632.467118][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6661'. [ 633.605085][ T5831] block nbd7: Receive control failed (result -32) [ 634.353072][T30496] team0 (unregistering): Port device team_slave_0 removed [ 634.401267][T30496] team0 (unregistering): Port device 26±ÿ removed [ 634.448981][T30504] netlink: 'syz.2.6690': attribute type 1 has an invalid length. [ 634.459861][T30504] netlink: 'syz.2.6690': attribute type 2 has an invalid length. [ 634.488273][T30495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.552701][T30510] netlink: 'syz.0.6691': attribute type 1 has an invalid length. [ 635.034196][T30548] __nla_validate_parse: 8 callbacks suppressed [ 635.034218][T30548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6706'. [ 635.039301][T30547] block nbd3: NBD_DISCONNECT [ 635.055018][T30547] block nbd3: Send disconnect failed -32 [ 635.074740][ C1] blk_print_req_error: 138 callbacks suppressed [ 635.074766][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.090711][ C1] buffer_io_error: 138 callbacks suppressed [ 635.090735][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 635.132296][T20204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.145477][T20204] Buffer I/O error on dev nbd3, logical block 0, async page read [ 635.154419][T20204] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.166545][T20204] Buffer I/O error on dev nbd3, logical block 1, async page read [ 635.175856][T20204] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.185574][T20204] Buffer I/O error on dev nbd3, logical block 2, async page read [ 635.217592][T20204] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.238669][T20204] Buffer I/O error on dev nbd3, logical block 3, async page read [ 635.255589][T20204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.265424][T20204] Buffer I/O error on dev nbd3, logical block 0, async page read [ 635.273827][T20204] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.288368][T20204] Buffer I/O error on dev nbd3, logical block 1, async page read [ 635.312889][T20204] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.330351][T20204] Buffer I/O error on dev nbd3, logical block 2, async page read [ 635.348384][T20204] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.373290][T20204] Buffer I/O error on dev nbd3, logical block 3, async page read [ 635.388333][T20204] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 635.408239][T20204] Buffer I/O error on dev nbd3, logical block 0, async page read [ 635.434788][T20204] ldm_validate_partition_table(): Disk read failed. [ 635.442747][T20204] Dev nbd3: unable to read RDB block 0 [ 635.449154][T20204] nbd3: unable to read partition table [ 635.470751][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6710'. [ 635.552647][ T5193] udevd[5193]: worker [20204] terminated by signal 9 (Killed) [ 635.576020][ T5193] udevd[5193]: worker [20204] failed while handling '/devices/virtual/block/nbd3' [ 635.671766][T30569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6712'. [ 635.799337][T30577] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6715'. [ 635.981276][T30585] netlink: 'syz.4.6718': attribute type 1 has an invalid length. [ 636.170390][T30587] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 636.195066][T30587] bond1 (unregistering): Released all slaves [ 636.496294][T30600] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 636.507437][T30602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6723'. [ 636.528253][T30600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6724'. [ 636.648810][T30608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6725'. [ 636.775860][T30619] bond4: entered promiscuous mode [ 636.781074][T30619] bond4: entered allmulticast mode [ 636.787208][T30617] net_ratelimit: 134 callbacks suppressed [ 636.787227][T30617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.914115][T30623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6727'. [ 637.160906][T30634] x_tables: duplicate underflow at hook 3 [ 637.367921][T30651] netlink: 'syz.4.6735': attribute type 1 has an invalid length. [ 637.487265][T30651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.514981][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6737'. [ 637.549202][T30655] bond1: (slave geneve2): making interface the new active one [ 637.558132][T30655] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 637.573324][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6737'. [ 637.590906][ T49] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 637.639950][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.648837][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.699563][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 637.841649][T30674] netlink: Unknown conntrack attr (0) [ 637.945114][T30685] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.990995][T30691] netlink: 'syz.3.6747': attribute type 4 has an invalid length. [ 638.153777][T30704] netlink: 'syz.4.6750': attribute type 1 has an invalid length. [ 638.245454][T30704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.266799][T30713] bond2: entered allmulticast mode [ 638.337134][T30704] bond2: (slave ip6gretap1): making interface the new active one [ 638.376287][T30704] ip6gretap1: entered allmulticast mode [ 638.411919][T30704] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 638.450594][T30726] s5ÿÿø: renamed from vlan1 (while UP) [ 638.653493][T30739] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 638.669836][T30739] syzkaller1: Refused to change device type [ 638.723705][T30733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.740108][T30733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.755828][T30733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.779854][T30733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.974379][T30746] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 639.142018][T30765] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20000 [ 639.424704][T30777] netlink: 'syz.3.6773': attribute type 1 has an invalid length. [ 640.926876][T30778] netlink: 'syz.3.6773': attribute type 1 has an invalid length. [ 640.945617][T30778] __nla_validate_parse: 13 callbacks suppressed [ 640.945641][T30778] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6773'. [ 640.968699][T30778] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6773'. [ 640.979806][T30778] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6773'. [ 641.170067][T10255] IPVS: starting estimator thread 0... [ 641.259890][T30792] IPVS: using max 29 ests per chain, 69600 per kthread [ 641.276082][T30796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6779'. [ 641.289982][T30797] netlink: 516 bytes leftover after parsing attributes in process `syz.3.6777'. [ 641.323024][T30802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6779'. [ 641.397223][T30806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6779'. [ 641.812221][T30818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6785'. [ 641.881198][T30822] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6786'. [ 641.931074][T30818] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6785'. [ 642.239568][T30850] x_tables: unsorted underflow at hook 3 [ 644.968222][T30829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.993145][T30862] netlink: 'syz.0.6793': attribute type 2 has an invalid length. [ 645.213095][T30887] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 645.261490][T30888] xt_TCPMSS: Only works on TCP SYN packets [ 645.882860][T30930] netlink: 'syz.3.6810': attribute type 14 has an invalid length. [ 645.911048][T30930] netlink: 'syz.3.6810': attribute type 13 has an invalid length. [ 646.102283][T30915] pimreg: entered allmulticast mode [ 646.113905][T30915] lo: entered allmulticast mode [ 646.161135][T30939] __nla_validate_parse: 17 callbacks suppressed [ 646.161157][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6813'. [ 646.236957][T30914] pimreg: left allmulticast mode [ 646.588445][T30964] netlink: 'syz.3.6822': attribute type 1 has an invalid length. [ 646.613824][T30964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.621398][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.650611][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.667177][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.691240][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.711212][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.724070][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.733893][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.743344][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.760100][T30972] sctp: [Deprecated]: syz.2.6825 (pid 30972) Use of int in max_burst socket option deprecated. [ 646.760100][T30972] Use struct sctp_assoc_value instead [ 646.767542][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 646.799332][T30971] ipt_ECN: cannot use operation on non-tcp rule [ 647.160260][T30989] netlink: 'syz.2.6832': attribute type 1 has an invalid length. [ 647.752445][T31018] xt_hashlimit: size too large, truncated to 1048576 [ 648.084046][T31037] tc_dump_action: action bad kind [ 648.291819][T31043] IPVS: set_ctl: invalid protocol: 2 172.20.20.66:20001 [ 648.433366][T31055] netlink: 'syz.4.6850': attribute type 1 has an invalid length. [ 648.448266][T31055] netlink: 'syz.4.6850': attribute type 1 has an invalid length. [ 648.469803][T31055] netlink: 'syz.4.6850': attribute type 8 has an invalid length. [ 648.621006][T31063] ipvlan2: entered allmulticast mode [ 648.626627][T31063] syz_tun: entered allmulticast mode [ 649.761882][T31103] netlink: 'syz.1.6865': attribute type 4 has an invalid length. [ 649.793341][T31103] syzkaller0: entered promiscuous mode [ 649.798887][T31103] syzkaller0: entered allmulticast mode [ 650.113079][T31095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.164562][T31112] netlink: 'syz.4.6870': attribute type 9 has an invalid length. [ 664.251226][T31114] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.270699][T31114] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.405477][T31136] openvswitch: netlink: Missing valid actions attribute. [ 664.440911][T31136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.598400][T31144] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 664.611002][T31144] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 664.754161][T31154] __nla_validate_parse: 37 callbacks suppressed [ 664.754182][T31154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6878'. [ 665.177804][T31174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6884'. [ 665.490774][ T6073] bridge_slave_1: left allmulticast mode [ 665.499204][ T6073] bridge_slave_1: left promiscuous mode [ 665.512918][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.542208][ T6073] ¾x9ÿ: left allmulticast mode [ 665.547059][ T6073] ¾x9ÿ: left promiscuous mode [ 665.581112][ T6073] bridge0: port 1(1¾x9ÿ) entered disabled state [ 665.722853][ T6073] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 665.916945][T31215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6895'. [ 665.963775][ T6073] team0: Port device gretap2 removed [ 666.036862][ T6073] bond9 (unregistering): (slave geneve4): Releasing active interface [ 666.062967][ T6073] bond1 (unregistering): (slave geneve2): Releasing active interface [ 666.195055][ T6073] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 666.294809][ T6073] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 666.420635][ T6071] smc: removing ib device sy‡1 [ 666.426056][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.436849][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.446927][ T6073] bond0 (unregistering): Released all slaves [ 666.458631][ T6073] bond1 (unregistering): Released all slaves [ 666.481254][ T6073] bond2 (unregistering): Released all slaves [ 666.496263][ T6073] bond3 (unregistering): Released all slaves [ 666.528387][ T6073] bond4 (unregistering): Released all slaves [ 666.558291][ T6073] bond5 (unregistering): Released all slaves [ 666.582157][ T6073] bond6 (unregistering): Released all slaves [ 666.597677][ T6073] bond7 (unregistering): Released all slaves [ 666.627337][ T6073] bond8 (unregistering): Released all slaves [ 666.651159][ T6073] bond9 (unregistering): Released all slaves [ 666.668913][ T6073] bond10 (unregistering): Released all slaves [ 666.688915][T31222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 666.703901][ T6073] bond11 (unregistering): Released all slaves [ 666.726566][ T6073] bond12 (unregistering): Released all slaves [ 666.754739][ T6073] bond13 (unregistering): Released all slaves [ 666.774974][ T6073] bond14 (unregistering): (slave veth7): Releasing active interface [ 666.789002][ T6073] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 666.806037][ T6073] bond14 (unregistering): (slave veth9): Releasing active interface [ 666.815645][ T6073] bond14 (unregistering): Released all slaves [ 666.836866][ T6073] bond15 (unregistering): Released all slaves [ 667.116440][T31237] xt_hashlimit: size too large, truncated to 1048576 [ 667.143577][T31240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6902'. [ 667.455176][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6907'. [ 667.461024][T31254] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6905'. [ 667.812989][T31273] netlink: 'syz.4.6910': attribute type 1 has an invalid length. [ 667.830083][T31273] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6910'. [ 667.844574][T31277] ip6t_rpfilter: unknown options [ 667.860158][T31273] NCSI netlink: No device for ifindex 0 [ 667.922280][T31278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6911'. [ 667.936404][T31271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6909'. [ 668.023628][T31283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6914'. [ 668.046910][T31279] netlink: 'syz.0.6911': attribute type 8 has an invalid length. [ 668.940704][T31334] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 669.068593][T31336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.145745][T31340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 669.387981][T31354] netlink: 'syz.3.6934': attribute type 1 has an invalid length. [ 669.514861][T31354] bond1: entered promiscuous mode [ 669.520531][T31354] bond1: entered allmulticast mode [ 669.526374][T31354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.558365][T31357] macvlan2: entered promiscuous mode [ 669.564245][T31357] macvlan2: entered allmulticast mode [ 669.576759][T31357] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 669.964429][T31371] xt_hashlimit: size too large, truncated to 1048576 [ 670.106697][T31374] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.198245][T31377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.229712][T31374] bridge_slave_0 (unregistering): left allmulticast mode [ 670.289884][T31374] bridge_slave_0 (unregistering): left promiscuous mode [ 670.330158][T31374] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.499688][ T6073] : left promiscuous mode [ 670.632919][T31397] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 670.849516][ T6073] vþ: left promiscuous mode [ 670.884752][T31405] __nla_validate_parse: 7 callbacks suppressed [ 670.884773][T31405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6947'. [ 670.931216][T31405] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6947'. [ 670.973716][T31414] bond3: entered promiscuous mode [ 670.991926][T31405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6947'. [ 671.032163][ T6073] tipc: Disabling bearer [ 671.093002][ T6073] tipc: Left network mode [ 671.222118][T31425] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6953'. [ 671.244814][T31429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6954'. [ 671.264180][T31429] netlink: 'syz.0.6954': attribute type 4 has an invalid length. [ 671.514307][ T6073] hsr_slave_0: left promiscuous mode [ 671.521635][ T6073] hsr_slave_1: left promiscuous mode [ 671.528000][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.798121][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 671.821373][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 672.336474][ T6073] IPVS: stop unused estimator thread 0... [ 672.642124][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 674.031318][T31418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.231490][T31525] wireguard0: entered allmulticast mode [ 674.243116][T31525] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6961'. [ 674.258563][T31528] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6963'. [ 674.272303][T31533] netem: incorrect gi model size [ 674.278351][T31533] netem: change failed [ 674.331875][T31525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.354127][T31525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.366867][T31525] bond0 (unregistering): Released all slaves [ 674.451716][T31544] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 674.542660][T31544] syzkaller1: entered promiscuous mode [ 674.575636][T31544] syzkaller1: entered allmulticast mode [ 674.737750][T31559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6971'. [ 674.765343][T31560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6970'. [ 676.377194][T31577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6974'. [ 676.392721][T31578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6974'. [ 676.466967][T31581] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 676.492953][T31586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6978'. [ 676.696339][T31596] syzkaller0: entered promiscuous mode [ 676.755088][T31604] netlink: 'syz.2.6984': attribute type 1 has an invalid length. [ 676.828509][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6984'. [ 676.923716][T31618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6988'. [ 678.382334][T31618] bond2: entered promiscuous mode [ 678.388010][T31618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.416515][T31619] bridge4: entered promiscuous mode [ 678.422963][T31619] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 678.454975][T31627] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 678.590697][T31634] sctp: [Deprecated]: syz.0.6991 (pid 31634) Use of int in maxseg socket option. [ 678.590697][T31634] Use struct sctp_assoc_value instead [ 678.805357][T31658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6996'. [ 678.934237][T31656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6998'. [ 679.359071][T31686] sctp: [Deprecated]: syz.3.7004 (pid 31686) Use of int in max_burst socket option deprecated. [ 679.359071][T31686] Use struct sctp_assoc_value instead [ 679.605826][T31696] netlink: 'syz.3.7006': attribute type 1 has an invalid length. [ 679.876064][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7014'. [ 680.024271][T31721] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7018'. [ 680.122419][T31730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7020'. [ 680.153875][T31730] netlink: 'syz.0.7020': attribute type 1 has an invalid length. [ 680.317821][T31739] IPVS: Error joining to the multicast group [ 680.362409][T31746] netlink: 'syz.3.7025': attribute type 8 has an invalid length. [ 680.371833][T31746] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.379457][T31746] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.879827][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 683.010317][T31719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.217140][T31775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.358030][T31787] __nla_validate_parse: 3 callbacks suppressed [ 683.358052][T31787] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7038'. [ 683.536178][T31803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.696234][T31815] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7045'. [ 683.809912][T31818] netlink: 252 bytes leftover after parsing attributes in process `syz.3.7046'. [ 684.106762][T31835] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 684.181878][T31835] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 684.256401][T31846] veth1_macvtap: left promiscuous mode [ 684.427084][T31857] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7054'. [ 684.915829][T31879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7062'. [ 684.948538][T31879] netlink: 'syz.0.7062': attribute type 23 has an invalid length. [ 685.029171][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7065'. [ 685.039755][T31886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7065'. [ 685.049511][T31886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7065'. [ 685.166352][T31898] sctp: [Deprecated]: syz.2.7066 (pid 31898) Use of int in max_burst socket option. [ 685.166352][T31898] Use struct sctp_assoc_value instead [ 685.359143][T31909] netlink: 'syz.1.7071': attribute type 10 has an invalid length. [ 685.856281][ T6074] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 686.224131][T31946] gre0: entered promiscuous mode [ 686.229226][T31946] gre0: entered allmulticast mode [ 686.425816][T31964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7081'. [ 688.597437][T31925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.918779][T31995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7089'. [ 688.935920][T31996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7089'. [ 689.045917][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7088'. [ 689.055173][T31986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.073039][T31986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.183168][T32008] netlink: 13 bytes leftover after parsing attributes in process `syz.3.7093'. [ 689.224253][T32010] netlink: 'syz.2.7094': attribute type 6 has an invalid length. [ 689.242310][T32011] netlink: 'syz.2.7094': attribute type 6 has an invalid length. [ 689.355899][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7097'. [ 689.507303][T32027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7100'. [ 689.607480][T32036] tunl0: entered promiscuous mode [ 689.616017][T32036] netlink: 'syz.4.7103': attribute type 3 has an invalid length. [ 689.624767][T32036] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7103'. [ 689.915075][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7106'. [ 689.947259][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7106'. [ 689.976026][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7108'. [ 690.033824][T32047] team0: Port device team_slave_0 removed [ 690.378439][T32085] netlink: 'syz.3.7117': attribute type 15 has an invalid length. [ 690.418179][ T6058] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 690.427197][T32085] netlink: 'syz.3.7117': attribute type 15 has an invalid length. [ 690.435989][ T6058] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 690.446881][ T6058] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 690.458657][ T6058] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 690.520478][T32090] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 690.678563][T32103] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 691.211653][T32143] veth0: entered promiscuous mode [ 691.306155][T32148] veth0: left promiscuous mode [ 691.549560][T32164] netlink: 'syz.0.7139': attribute type 62 has an invalid length. [ 691.565133][T32164] netlink: 'syz.0.7139': attribute type 62 has an invalid length. [ 691.799902][T32183] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 691.920874][T32198] x_tables: duplicate underflow at hook 3 [ 692.080773][T32205] syzkaller1: entered promiscuous mode [ 692.099014][T32205] syzkaller1: entered allmulticast mode [ 692.194847][T32213] sctp: [Deprecated]: syz.4.7152 (pid 32213) Use of int in max_burst socket option. [ 692.194847][T32213] Use struct sctp_assoc_value instead [ 692.284628][T32215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.335111][T32218] sctp: [Deprecated]: syz.2.7154 (pid 32218) Use of int in max_burst socket option. [ 692.335111][T32218] Use struct sctp_assoc_value instead [ 692.458623][T32229] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 692.922699][T32250] netlink: 'syz.2.7167': attribute type 1 has an invalid length. [ 692.975388][T32253] xt_hashlimit: size too large, truncated to 1048576 [ 693.014463][T32253] gre1: entered promiscuous mode [ 693.019497][T32253] gre1: entered allmulticast mode [ 693.155746][T32257] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 693.193086][T32257] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 693.214181][T32257] bond3: (slave vxcan3): making interface the new active one [ 693.223315][T32257] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 693.246157][T32250] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 693.263309][T32250] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 693.292310][T32250] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 693.322545][T32250] bond3: (slave vxcan7): Enslaving as a backup interface with an up link [ 693.346156][T32250] bond3: (slave vxcan9): The slave device specified does not support setting the MAC address [ 693.372648][T32250] bond3: (slave vxcan9): Enslaving as a backup interface with an up link [ 693.412926][T32250] bond3: (slave vxcan11): The slave device specified does not support setting the MAC address [ 693.434784][T32250] bond3: (slave vxcan11): Enslaving as a backup interface with an up link [ 693.546322][T32250] bond3: (slave vxcan13): The slave device specified does not support setting the MAC address [ 693.573533][T32250] bond3: (slave vxcan13): Enslaving as a backup interface with an up link [ 693.625131][T32250] bond3: (slave vxcan15): The slave device specified does not support setting the MAC address [ 693.653307][T32250] bond3: (slave vxcan15): Enslaving as a backup interface with an up link [ 693.674623][T32250] bond3: (slave vxcan17): The slave device specified does not support setting the MAC address [ 693.688496][T32250] bond3: (slave vxcan17): Enslaving as a backup interface with an up link [ 693.729312][T32250] bond3: (slave vxcan19): The slave device specified does not support setting the MAC address [ 693.782407][T32250] bond3: (slave vxcan19): Enslaving as a backup interface with an up link [ 693.850845][T32306] veth0: entered promiscuous mode [ 693.995298][T32313] __nla_validate_parse: 29 callbacks suppressed [ 693.995322][T32313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7182'. [ 694.075446][T32312] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7183'. [ 694.089484][T32312] netlink: Unknown conntrack attr (0) [ 694.107512][T32319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7185'. [ 694.126278][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7184'. [ 694.149500][T32319] netlink: 'syz.2.7185': attribute type 7 has an invalid length. [ 694.166226][T32319] netlink: 'syz.2.7185': attribute type 8 has an invalid length. [ 694.191406][T32319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7185'. [ 694.222258][T32321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7186'. [ 694.403542][T32332] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 694.603234][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7192'. [ 694.804780][T32348] netlink: 'syz.1.7196': attribute type 10 has an invalid length. [ 694.840937][T32359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7198'. [ 695.024119][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7203'. [ 695.267558][T32393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7206'. [ 695.482995][T32406] netlink: 'syz.4.7209': attribute type 16 has an invalid length. [ 695.501189][T32406] netlink: 'syz.4.7209': attribute type 31 has an invalid length. [ 695.945330][T32439] netlink: 'syz.3.7219': attribute type 26 has an invalid length. [ 696.121950][T32446] sctp: [Deprecated]: syz.1.7222 (pid 32446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.121950][T32446] Use struct sctp_sack_info instead [ 696.148830][T32446] sctp: [Deprecated]: syz.1.7222 (pid 32446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.148830][T32446] Use struct sctp_sack_info instead [ 696.587361][T32425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.144273][T32502] netlink: 'syz.4.7237': attribute type 21 has an invalid length. [ 698.190936][T32508] x_tables: duplicate underflow at hook 1 [ 698.277542][T32506] bond2: option lp_interval: invalid value (0) [ 698.285783][T32506] bond2: option lp_interval: allowed values 1 - 2147483647 [ 698.297450][T32506] bond2 (unregistering): Released all slaves [ 698.315284][T10247] IPVS: starting estimator thread 0... [ 698.410548][T32517] IPVS: using max 29 ests per chain, 69600 per kthread [ 698.452546][T32524] h: entered promiscuous mode [ 698.587918][T32534] : entered promiscuous mode [ 698.636686][T32535] TC_ACT_REPEAT abuse ? [ 699.009319][T32561] __nla_validate_parse: 12 callbacks suppressed [ 699.009341][T32561] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7254'. [ 699.292808][T32579] syzkaller0: entered promiscuous mode [ 699.298367][T32579] syzkaller0: entered allmulticast mode [ 699.371506][T32585] delete_channel: no stack [ 699.430789][T32589] veth0: entered promiscuous mode [ 699.437193][T32589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7260'. [ 699.635538][ T5837] block nbd3: Receive control failed (result -107) [ 699.682587][T32598] nbd3: detected capacity change from 0 to 104 [ 699.698608][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.711100][T32388] block nbd3: Dead connection, failed to find a fallback [ 699.718191][T32388] block nbd3: shutting down sockets [ 699.726917][T32604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.747109][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 699.754411][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.763735][T32608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.774420][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 699.784590][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 699.787977][T32388] blk_print_req_error: 51 callbacks suppressed [ 699.788023][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.835376][T32612] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 699.850982][T32388] buffer_io_error: 51 callbacks suppressed [ 699.851000][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 699.863058][T32607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 699.882144][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.893070][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 699.905538][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.916272][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 699.941006][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.961353][T32612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'. [ 699.978896][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 699.997076][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.030886][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.051969][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.069140][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.086233][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.093227][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.102741][T32620] netlink: 'syz.2.7270': attribute type 10 has an invalid length. [ 700.110971][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.121148][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.138340][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.148539][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.149194][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.170855][T32388] ldm_validate_partition_table(): Disk read failed. [ 700.183181][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.198260][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.224523][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.235988][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.272574][T32388] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 700.291665][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.318156][T32388] Buffer I/O error on dev nbd3, logical block 0, async page read [ 700.353169][T32388] Dev nbd3: unable to read RDB block 0 [ 700.372207][T32607] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.402369][T32388] nbd3: unable to read partition table [ 700.440812][T32388] ldm_validate_partition_table(): Disk read failed. [ 700.498594][T32388] Dev nbd3: unable to read RDB block 0 [ 700.523086][T32388] nbd3: unable to read partition table [ 700.670138][T32653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7274'. [ 700.736620][T32641] veth0: entered promiscuous mode [ 701.331908][T32694] syzkaller0: entered promiscuous mode [ 701.337614][T32694] syzkaller0: entered allmulticast mode [ 701.709899][T32716] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 703.359980][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 704.225502][ T5837] [ 704.227885][ T5837] ====================================================== [ 704.234924][ T5837] WARNING: possible circular locking dependency detected [ 704.242158][ T5837] syzkaller #0 Not tainted [ 704.246593][ T5837] ------------------------------------------------------ [ 704.253765][ T5837] kworker/u9:7/5837 is trying to acquire lock: [ 704.259941][ T5837] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 704.270512][ T5837] [ 704.270512][ T5837] but task is already holding lock: [ 704.277890][ T5837] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 704.288237][ T5837] [ 704.288237][ T5837] which lock already depends on the new lock. [ 704.288237][ T5837] [ 704.298668][ T5837] [ 704.298668][ T5837] the existing dependency chain (in reverse order) is: [ 704.307731][ T5837] [ 704.307731][ T5837] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 704.315833][ T5837] down_write+0x96/0x200 [ 704.320608][ T5837] kernfs_add_one+0x41/0x5c0 [ 704.325736][ T5837] kernfs_create_dir_ns+0xde/0x130 [ 704.331394][ T5837] internal_create_group+0x425/0x1180 [ 704.337329][ T5837] cpuhp_invoke_callback+0x445/0x860 [ 704.343176][ T5837] cpuhp_issue_call+0x430/0x7a0 [ 704.348571][ T5837] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 704.355208][ T5837] __cpuhp_setup_state+0x3f/0x60 [ 704.360718][ T5837] do_one_initcall+0x250/0x8d0 [ 704.366033][ T5837] do_initcall_level+0x104/0x190 [ 704.371514][ T5837] do_initcalls+0x59/0xa0 [ 704.376407][ T5837] kernel_init_freeable+0x2a6/0x3e0 [ 704.382148][ T5837] kernel_init+0x1d/0x1d0 [ 704.387021][ T5837] ret_from_fork+0x51e/0xb90 [ 704.392168][ T5837] ret_from_fork_asm+0x1a/0x30 [ 704.397480][ T5837] [ 704.397480][ T5837] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 704.405327][ T5837] [ 704.405327][ T5837] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 704.413078][ T5837] cpus_read_lock+0x42/0x160 [ 704.418204][ T5837] static_key_disable+0x12/0x20 [ 704.423598][ T5837] __inet_hash_connect+0x2430/0x2440 [ 704.429440][ T5837] tcp_v4_connect+0xd5f/0x19b0 [ 704.434764][ T5837] __inet_stream_connect+0x25a/0xdd0 [ 704.440592][ T5837] inet_stream_connect+0x66/0xa0 [ 704.446108][ T5837] __sys_connect+0x312/0x450 [ 704.451335][ T5837] __x64_sys_connect+0x7a/0x90 [ 704.456772][ T5837] do_syscall_64+0x14d/0xf80 [ 704.461915][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.468362][ T5837] [ 704.468362][ T5837] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 704.476040][ T5837] lock_sock_nested+0x48/0x100 [ 704.481348][ T5837] inet_shutdown+0x6a/0x390 [ 704.486409][ T5837] nbd_mark_nsock_dead+0x2e9/0x560 [ 704.492068][ T5837] recv_work+0x1c7f/0x1d90 [ 704.497037][ T5837] process_scheduled_works+0xb6e/0x18c0 [ 704.503131][ T5837] worker_thread+0xa53/0xfc0 [ 704.508268][ T5837] kthread+0x388/0x470 [ 704.512875][ T5837] ret_from_fork+0x51e/0xb90 [ 704.518001][ T5837] ret_from_fork_asm+0x1a/0x30 [ 704.523334][ T5837] [ 704.523334][ T5837] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 704.531002][ T5837] __mutex_lock+0x19f/0x1300 [ 704.536157][ T5837] nbd_queue_rq+0x37b/0x1100 [ 704.541292][ T5837] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 704.547391][ T5837] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 704.554277][ T5837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 704.560813][ T5837] blk_mq_run_hw_queue+0x348/0x4f0 [ 704.566486][ T5837] blk_mq_dispatch_list+0xd16/0xe10 [ 704.572265][ T5837] blk_mq_flush_plug_list+0x48d/0x570 [ 704.578190][ T5837] __blk_flush_plug+0x3ed/0x4d0 [ 704.583682][ T5837] __submit_bio+0x28d/0x580 [ 704.588734][ T5837] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 704.594935][ T5837] block_read_full_folio+0x599/0x830 [ 704.600772][ T5837] filemap_read_folio+0x137/0x3b0 [ 704.606342][ T5837] do_read_cache_folio+0x358/0x590 [ 704.612004][ T5837] read_part_sector+0xb6/0x2b0 [ 704.617336][ T5837] adfspart_check_ICS+0xa5/0xa40 [ 704.622813][ T5837] bdev_disk_changed+0x7ba/0x1550 [ 704.628371][ T5837] blkdev_get_whole+0x380/0x510 [ 704.633766][ T5837] bdev_open+0x31e/0xd30 [ 704.638573][ T5837] blkdev_open+0x470/0x610 [ 704.643560][ T5837] do_dentry_open+0x785/0x14e0 [ 704.648871][ T5837] vfs_open+0x3b/0x340 [ 704.653487][ T5837] path_openat+0x2e08/0x3860 [ 704.658611][ T5837] do_file_open+0x23e/0x4a0 [ 704.663682][ T5837] do_sys_openat2+0x113/0x200 [ 704.668917][ T5837] __x64_sys_openat+0x138/0x170 [ 704.674313][ T5837] do_syscall_64+0x14d/0xf80 [ 704.679446][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.685872][ T5837] [ 704.685872][ T5837] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 704.693101][ T5837] __mutex_lock+0x19f/0x1300 [ 704.698232][ T5837] nbd_queue_rq+0xc6/0x1100 [ 704.703274][ T5837] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 704.709358][ T5837] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 704.716230][ T5837] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 704.722747][ T5837] blk_mq_run_hw_queue+0x348/0x4f0 [ 704.728391][ T5837] blk_mq_dispatch_list+0xd16/0xe10 [ 704.734133][ T5837] blk_mq_flush_plug_list+0x48d/0x570 [ 704.740074][ T5837] __blk_flush_plug+0x3ed/0x4d0 [ 704.745474][ T5837] __submit_bio+0x28d/0x580 [ 704.750516][ T5837] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 704.756692][ T5837] block_read_full_folio+0x599/0x830 [ 704.762522][ T5837] filemap_read_folio+0x137/0x3b0 [ 704.768090][ T5837] do_read_cache_folio+0x358/0x590 [ 704.773761][ T5837] read_part_sector+0xb6/0x2b0 [ 704.779070][ T5837] adfspart_check_ICS+0xa5/0xa40 [ 704.784557][ T5837] bdev_disk_changed+0x7ba/0x1550 [ 704.790140][ T5837] blkdev_get_whole+0x380/0x510 [ 704.795564][ T5837] bdev_open+0x31e/0xd30 [ 704.800355][ T5837] blkdev_open+0x470/0x610 [ 704.805363][ T5837] do_dentry_open+0x785/0x14e0 [ 704.810673][ T5837] vfs_open+0x3b/0x340 [ 704.815291][ T5837] path_openat+0x2e08/0x3860 [ 704.820424][ T5837] do_file_open+0x23e/0x4a0 [ 704.825467][ T5837] do_sys_openat2+0x113/0x200 [ 704.830690][ T5837] __x64_sys_openat+0x138/0x170 [ 704.836096][ T5837] do_syscall_64+0x14d/0xf80 [ 704.841237][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.847680][ T5837] [ 704.847680][ T5837] -> #4 (set->srcu){.+.+}-{0:0}: [ 704.854826][ T5837] __synchronize_srcu+0xca/0x300 [ 704.860311][ T5837] elevator_switch+0x1e8/0x7a0 [ 704.865622][ T5837] elevator_change+0x2cc/0x450 [ 704.870947][ T5837] elevator_set_default+0x36c/0x430 [ 704.876695][ T5837] blk_register_queue+0x366/0x430 [ 704.882277][ T5837] __add_disk+0x677/0xd50 [ 704.887157][ T5837] add_disk_fwnode+0xfb/0x480 [ 704.892380][ T5837] nbd_dev_add+0x72c/0xb50 [ 704.897337][ T5837] nbd_init+0x168/0x1f0 [ 704.902050][ T5837] do_one_initcall+0x250/0x8d0 [ 704.907362][ T5837] do_initcall_level+0x104/0x190 [ 704.912933][ T5837] do_initcalls+0x59/0xa0 [ 704.917825][ T5837] kernel_init_freeable+0x2a6/0x3e0 [ 704.923568][ T5837] kernel_init+0x1d/0x1d0 [ 704.928460][ T5837] ret_from_fork+0x51e/0xb90 [ 704.933590][ T5837] ret_from_fork_asm+0x1a/0x30 [ 704.938907][ T5837] [ 704.938907][ T5837] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 704.946749][ T5837] __mutex_lock+0x19f/0x1300 [ 704.951890][ T5837] elevator_change+0x1b3/0x450 [ 704.957194][ T5837] elevator_set_none+0xb5/0x140 [ 704.962679][ T5837] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 704.969032][ T5837] nbd_start_device+0x17f/0xb10 [ 704.974426][ T5837] nbd_genl_connect+0x165b/0x1cf0 [ 704.979998][ T5837] genl_family_rcv_msg_doit+0x22a/0x330 [ 704.986122][ T5837] genl_rcv_msg+0x61c/0x7a0 [ 704.991177][ T5837] netlink_rcv_skb+0x232/0x4b0 [ 704.996483][ T5837] genl_rcv+0x28/0x40 [ 705.001017][ T5837] netlink_unicast+0x80f/0x9b0 [ 705.006341][ T5837] netlink_sendmsg+0x813/0xb40 [ 705.011701][ T5837] ____sys_sendmsg+0x972/0x9f0 [ 705.017023][ T5837] ___sys_sendmsg+0x2a5/0x360 [ 705.022271][ T5837] __x64_sys_sendmsg+0x1bd/0x2a0 [ 705.027766][ T5837] do_syscall_64+0x14d/0xf80 [ 705.033037][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.039486][ T5837] [ 705.039486][ T5837] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 705.048118][ T5837] blk_alloc_queue+0x546/0x680 [ 705.053462][ T5837] __blk_mq_alloc_disk+0x197/0x390 [ 705.059137][ T5837] nbd_dev_add+0x499/0xb50 [ 705.064093][ T5837] nbd_init+0x168/0x1f0 [ 705.068807][ T5837] do_one_initcall+0x250/0x8d0 [ 705.074128][ T5837] do_initcall_level+0x104/0x190 [ 705.079606][ T5837] do_initcalls+0x59/0xa0 [ 705.084485][ T5837] kernel_init_freeable+0x2a6/0x3e0 [ 705.090237][ T5837] kernel_init+0x1d/0x1d0 [ 705.095126][ T5837] ret_from_fork+0x51e/0xb90 [ 705.100270][ T5837] ret_from_fork_asm+0x1a/0x30 [ 705.105585][ T5837] [ 705.105585][ T5837] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 705.112821][ T5837] fs_reclaim_acquire+0x71/0x100 [ 705.118302][ T5837] kmem_cache_alloc_noprof+0x40/0x650 [ 705.124213][ T5837] __kernfs_iattrs+0xdf/0x340 [ 705.129434][ T5837] kernfs_iop_setattr+0xea/0x3f0 [ 705.134921][ T5837] notify_change+0xc1a/0xf40 [ 705.140082][ T5837] do_truncate+0x1c2/0x250 [ 705.145036][ T5837] path_openat+0x2f89/0x3860 [ 705.150163][ T5837] do_file_open+0x23e/0x4a0 [ 705.155204][ T5837] do_sys_openat2+0x113/0x200 [ 705.160427][ T5837] __x64_sys_openat+0x138/0x170 [ 705.165826][ T5837] do_syscall_64+0x14d/0xf80 [ 705.170968][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.177403][ T5837] [ 705.177403][ T5837] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 705.186045][ T5837] __lock_acquire+0x15a5/0x2cf0 [ 705.191549][ T5837] lock_acquire+0xf0/0x2e0 [ 705.196526][ T5837] down_write+0x96/0x200 [ 705.201309][ T5837] kernfs_unlink_sibling+0x71/0x180 [ 705.207048][ T5837] __kernfs_remove+0x3e7/0x660 [ 705.212354][ T5837] kernfs_remove_by_name_ns+0xaf/0x130 [ 705.218351][ T5837] sysfs_unmerge_group+0xd4/0x140 [ 705.223933][ T5837] dpm_sysfs_remove+0x76/0xd0 [ 705.229172][ T5837] device_del+0x250/0x8f0 [ 705.234047][ T5837] device_unregister+0x21/0xf0 [ 705.239377][ T5837] hci_conn_del+0xc36/0x1230 [ 705.244507][ T5837] hci_abort_conn_sync+0xdd0/0x1190 [ 705.250243][ T5837] hci_cmd_sync_work+0x213/0x400 [ 705.255726][ T5837] process_scheduled_works+0xb6e/0x18c0 [ 705.261820][ T5837] worker_thread+0xa53/0xfc0 [ 705.267053][ T5837] kthread+0x388/0x470 [ 705.271686][ T5837] ret_from_fork+0x51e/0xb90 [ 705.276903][ T5837] ret_from_fork_asm+0x1a/0x30 [ 705.282258][ T5837] [ 705.282258][ T5837] other info that might help us debug this: [ 705.282258][ T5837] [ 705.292524][ T5837] Chain exists of: [ 705.292524][ T5837] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 705.292524][ T5837] [ 705.307003][ T5837] Possible unsafe locking scenario: [ 705.307003][ T5837] [ 705.314489][ T5837] CPU0 CPU1 [ 705.319874][ T5837] ---- ---- [ 705.325261][ T5837] lock(&root->kernfs_rwsem); [ 705.330047][ T5837] lock(cpuhp_state_mutex); [ 705.337176][ T5837] lock(&root->kernfs_rwsem); [ 705.344491][ T5837] lock(&root->kernfs_iattr_rwsem); [ 705.349798][ T5837] [ 705.349798][ T5837] *** DEADLOCK *** [ 705.349798][ T5837] [ 705.357950][ T5837] 5 locks held by kworker/u9:7/5837: [ 705.363240][ T5837] #0: ffff888057ad6148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 705.374060][ T5837] #1: ffffc90003ee7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 705.386708][ T5837] #2: ffff888036bb4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 705.396583][ T5837] #3: ffff888036bb40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 705.406368][ T5837] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 705.417097][ T5837] [ 705.417097][ T5837] stack backtrace: [ 705.422997][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 705.423016][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 705.423028][ T5837] Workqueue: hci5 hci_cmd_sync_work [ 705.423052][ T5837] Call Trace: [ 705.423059][ T5837] [ 705.423067][ T5837] dump_stack_lvl+0xe8/0x150 [ 705.423092][ T5837] print_circular_bug+0x2e1/0x300 [ 705.423119][ T5837] check_noncircular+0x12e/0x150 [ 705.423147][ T5837] __lock_acquire+0x15a5/0x2cf0 [ 705.423172][ T5837] ? __lock_acquire+0x6b5/0x2cf0 [ 705.423198][ T5837] lock_acquire+0xf0/0x2e0 [ 705.423218][ T5837] ? kernfs_unlink_sibling+0x71/0x180 [ 705.423240][ T5837] down_write+0x96/0x200 [ 705.423255][ T5837] ? kernfs_unlink_sibling+0x71/0x180 [ 705.423272][ T5837] ? __pfx_down_write+0x10/0x10 [ 705.423287][ T5837] ? kernfs_root+0x1c/0x230 [ 705.423310][ T5837] ? kernfs_root+0x1c/0x230 [ 705.423333][ T5837] ? kernfs_root+0x1c/0x230 [ 705.423356][ T5837] ? kernfs_root+0x1ea/0x230 [ 705.423380][ T5837] kernfs_unlink_sibling+0x71/0x180 [ 705.423399][ T5837] __kernfs_remove+0x3e7/0x660 [ 705.423418][ T5837] kernfs_remove_by_name_ns+0xaf/0x130 [ 705.423436][ T5837] sysfs_unmerge_group+0xd4/0x140 [ 705.423462][ T5837] dpm_sysfs_remove+0x76/0xd0 [ 705.423489][ T5837] device_del+0x250/0x8f0 [ 705.423510][ T5837] ? klist_iter_exit+0xc1/0x100 [ 705.423536][ T5837] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 705.423554][ T5837] ? __pfx_device_del+0x10/0x10 [ 705.423576][ T5837] ? __pfx_autoremove_wake_function+0x10/0x10 [ 705.423597][ T5837] device_unregister+0x21/0xf0 [ 705.423619][ T5837] hci_conn_del+0xc36/0x1230 [ 705.423639][ T5837] ? hci_abort_conn_sync+0xa7b/0x1190 [ 705.423657][ T5837] hci_abort_conn_sync+0xdd0/0x1190 [ 705.423683][ T5837] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 705.423702][ T5837] ? abort_conn_sync+0x26/0x210 [ 705.423724][ T5837] ? abort_conn_sync+0x26/0x210 [ 705.423743][ T5837] ? abort_conn_sync+0x19c/0x210 [ 705.423762][ T5837] ? __pfx_abort_conn_sync+0x10/0x10 [ 705.423783][ T5837] hci_cmd_sync_work+0x213/0x400 [ 705.423808][ T5837] ? process_scheduled_works+0xa8d/0x18c0 [ 705.423830][ T5837] process_scheduled_works+0xb6e/0x18c0 [ 705.423864][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.423887][ T5837] ? assign_work+0x3d5/0x5e0 [ 705.423910][ T5837] worker_thread+0xa53/0xfc0 [ 705.423944][ T5837] kthread+0x388/0x470 [ 705.423960][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 705.423981][ T5837] ? __pfx_kthread+0x10/0x10 [ 705.423996][ T5837] ret_from_fork+0x51e/0xb90 [ 705.424019][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 705.424040][ T5837] ? __switch_to+0xc7d/0x1450 [ 705.424059][ T5837] ? __pfx_kthread+0x10/0x10 [ 705.424075][ T5837] ret_from_fork_asm+0x1a/0x30 [ 705.424106][ T5837]