last executing test programs: 1m27.520855383s ago: executing program 4 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0x100, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000006c0)={r1, "050503b63cb1050ee249054525b26ce4"}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x7, 0x30, 0x10000, 0x3}, &(0x7f00000000c0)=0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 1m26.286366243s ago: executing program 4 (id=517): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x5c, 0x68, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x6}, [@NHA_GROUP={0x3c, 0x2, [{0x2, 0xf5}, {0x2, 0x1}, {0x1, 0x2}, {0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x8}]}, @NHA_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x810) (async) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000700)={0x0, "6708ec6c10408e3f33fd9b124dee4481"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001700)={r2, 0xa, 0x0, [0x6, 0x3, 0xa30, 0x7f, 0x7fffffffffffffff], [0x2e42, 0x7, 0x7, 0x8000000000000000, 0x4, 0x200, 0xe2, 0x3, 0x8, 0x8, 0x34cf, 0x81, 0x8, 0xfffffffffffffff7, 0x7, 0x63ec675d, 0x9, 0x8, 0xffff, 0xe0, 0x694, 0xfffffffffffffff3, 0x5, 0xf, 0x401, 0x2, 0x11, 0xd98, 0x10001, 0x9, 0x100000000, 0x1, 0xfffffffffffffffb, 0x7, 0x3, 0x3, 0x401, 0x5, 0x4aca, 0x4, 0x2, 0x2, 0x3, 0x2, 0x21, 0x8000000000000001, 0x2, 0x2, 0x3, 0xcd29, 0xf, 0x8000000000000000, 0x3, 0x100000001, 0x3, 0x9, 0x7, 0x0, 0x5, 0x497b, 0x9, 0xb09b, 0xfffffffffffffffb, 0x0, 0x8, 0x5, 0x8000, 0x7, 0x10000, 0x971b, 0x1, 0x0, 0x0, 0x101, 0x7, 0x9, 0x4, 0x7fff, 0x4, 0x8, 0x9, 0x7f, 0x400, 0x6, 0x5e48, 0x4632, 0x4, 0x2, 0xe, 0x2, 0x9, 0x0, 0x5, 0x30d, 0x8, 0x8, 0xa00, 0x81, 0x9, 0x5, 0x7, 0x4, 0x3, 0x4, 0x4, 0x2, 0x6, 0x9, 0x5b9, 0xfffffffffffffffa, 0x2, 0x7, 0x6, 0xffffffffffffff7f, 0x7, 0x7, 0xdd, 0xfffffffffffffff8, 0xc, 0x480, 0x3]}) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m26.277195983s ago: executing program 4 (id=522): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000001080), 0x400) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0) bind$nfc_llcp(r0, &(0x7f0000001100)={0x27, r4, 0x0, 0x7, 0x8, 0x0, "2ed8272911f442a8c7af8da44b09109fcbe58ffa1c257bef0772b512a039646c6929491c3de4fd8542b03c945377f3b23afd32aa5b208e3ab943f6b44bfacf", 0x3c}, 0x60) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r12, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r13, 0x103, 0x1, &(0x7f00000011c0), &(0x7f0000001200)=0x4) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r14, &(0x7f0000000100)='ns/pid_for_children\x00') sendmmsg$inet6(r7, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 1m25.277524639s ago: executing program 4 (id=532): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, {@in, 0x0, 0x32}, @in6=@private2, {0x9, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r10, &(0x7f0000000100)='b', 0x1, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 1m25.268393871s ago: executing program 4 (id=537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.981973387s ago: executing program 4 (id=541): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x2, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0xfd}], 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) r5 = socket(0x2, 0x3, 0xff) sendto$inet(r5, 0x0, 0x0, 0x4085, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x21, 0x0, &(0x7f00000005c0)) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 1m9.870131703s ago: executing program 32 (id=541): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x2, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0xfd}], 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) r5 = socket(0x2, 0x3, 0xff) sendto$inet(r5, 0x0, 0x0, 0x4085, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x21, 0x0, &(0x7f00000005c0)) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 4.925627206s ago: executing program 3 (id=1467): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14011a001f000504000000000004000002", @ANYRESDEC=r1], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 3.121390034s ago: executing program 3 (id=1469): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x4) (async) r0 = socket(0x10, 0x3, 0x4) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4080) socket$inet6_icmp(0xa, 0x2, 0x3a) 2.74936102s ago: executing program 0 (id=1476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.459162544s ago: executing program 0 (id=1479): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) accept4$ax25(r1, 0x0, &(0x7f0000000140), 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.974673935s ago: executing program 0 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x56ee, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048801}, 0x20000840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x122}}, 0x4000080) 1.841528455s ago: executing program 2 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="95000048", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) 1.839990188s ago: executing program 1 (id=1487): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0xe25) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendto$inet(r2, &(0x7f00000003c0)="cacdf468b034656e376b1293b8116bb74a1ecc14aaf9601bdcb603a79344fd31c894d9b1d883aa3155a2e31a186401504fddc363ebe03aae05254271a33b648cc751c67017838eb16aff994159c808231948cb76302d5a216b8d1820e9f18859d69a8dc97a6fb6115b38c794c1fe08b7ecb2ab2029c9c8f160dbfd222e5fb9e862b37c933e6615d6970abb4eedf9e073f93e", 0x92, 0x4000, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) 1.719416837s ago: executing program 0 (id=1489): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000180)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x20000001) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000906030000000000000000000a000002a2e14d20ef7342ab6bbf0c1116f52c2cd9d58df84afb20d1755e60381102938e47093b19fc4aa58d213aa1c686f6bc35087c7feb5da248c504ea6dbbf24f7033e146729378706a5b5ba6e48047593cfd6190d788e93b0f98ca58fa7634829e7d3debb21b3904c8aea932c4532fd57dfc3deac62f8ace89eb251e2403de730e3004f5885b77d89155832a7af0e7cc669099"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f04}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x880) 1.637164343s ago: executing program 3 (id=1490): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0xd0, 0x0, 0x308, 0x210, 0xd0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0x7f8ffa081a265a7c, 0xffffff00], [0xff, 0x0, 0xff, 0xff], 'veth0_to_team\x00', 'tunl0\x00', {0xff}, {}, 0x4, 0x9, 0x0, 0x16}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x533a70c008b67411}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x13}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10, 0x3f, 0x7f1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28}, {0x6, 0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xde}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@local, 0x26, 0x7, 0xafe0}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x5, 0x9, 0xa, 0xa, 0x140a, 0x550d9c7e82756721}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010102, 0xc, 0x2d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000900)={'veth0_to_bond\x00', &(0x7f00000001c0)=@ethtool_eee={0x44, 0x3, 0x7, 0x73f0, 0x0, 0x2, 0xffffff7b, 0x1, [0x40000, 0x5]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000000fd020000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000180016"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x49, &(0x7f0000000040)=r9, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x138, 0x2, 0x3, 0x1, 0x9, 0xe705}, &(0x7f0000000080)=0x20) 1.608419367s ago: executing program 1 (id=1492): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x138, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.549408535s ago: executing program 2 (id=1493): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/186, 0xba) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) listen(r3, 0x1000) 1.417981848s ago: executing program 5 (id=1494): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002600)=0x0) syz_open_procfs$namespace(r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 1.393429162s ago: executing program 3 (id=1495): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@generic="a4fe72bc49a2b43c04"]}, 0x1c}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="6b3611c15cb292bcd15c3c5f2b7a0ad22eb60e74235628d78f02a36a61272c825098f7a182cfbbbe1358730f6bf7dbec6d7fe46fe0ed7e07f12b9467a27997befa1884ed84173dfe84c8e87b543ba637275c560560e08f53d56841060f8ad58d5263fc9b8846d6b8927e555545aa03aa8e2b523c96d04503609443d194ee17f7795677d47d225b29bb2ef6f533efe213b7a05e37abdf57dba1dedeeafede0c910460", 0xa2}, {&(0x7f0000000180)="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", 0x3a1}], 0x2, &(0x7f0000001480)=[{0xffffffffffffff6f, 0x104, 0x72}], 0x10}, 0x10) 1.373778819s ago: executing program 1 (id=1496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) bind(r2, &(0x7f0000000040)=@generic={0x26, "c3521312ee2c5c48f97244ce369fb0954227558046d19d188011ad0d152a3993423c4f57c11da2bf67b6090d7c7f3e98f7e084b3b636096c189ad2a7f250aa322de218f50219ec514c8edc8fb0b7923e2d2e4f4fd7f7721184a100805c5da7a7ce3c78aa6c6869b5dc17d25d8472ee3fd98cd27b330da795a56f6a584ba9"}, 0x80) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x44010, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.301330595s ago: executing program 0 (id=1497): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008003a8abd0c00000000001190780000000000000000948900004e20009c907801000000000000007b4b143b7461fd777b1c012bd1d37b9fd74f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b5a1037ad3c0458e282485fe251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb31db3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09ca78c373ba6b57bf8571a33a3af3ee5bd2a05f38f84eadb2cd74083219c0aecf8ea576a1"], 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x81, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcffffff000000000000030085000000410000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.220088147s ago: executing program 2 (id=1498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x20}, [@IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xc}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000001}, 0x4000040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x102) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x0, 0x3, 0x6}, {}, {0xfffd, 0x1}, {}, {0x6, 0x0, 0x2}, {0x3579, 0x3, 0x8, 0x1}, {0x5, 0x2, 0x4, 0x3}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xfffa, 0x80, 0x6, 0x4}, {0x2d, 0x4, 0x2, 0x717}, {0x200, 0xc, 0x6, 0x101}, {0x7, 0x0, 0x10, 0x7}]}) 998.260088ms ago: executing program 3 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28c, r1, 0x5, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x256, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x1}}, 0x0, @random=0x7fff, 0x1, @void, @void, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x8, 0x6, 0xdda8, 0xff}}, @val={0x6, 0x2, 0xfffc}, @val={0x5, 0x7c, {0x6, 0x3c, 0x3, "bfe4966eac0d1aa781e9cf164e60f40575cc55e95f6e2d5c23eabfc9d4adb43daa2a2bdc6c6a3fa6f7ee3de4c488dc3290067daad4e905593946671f71f8f2e1e16fbbc257bffaaf9dc6972ec5efac5e2d003ea0bba2d4b690ffad58d55ebc06463865cc542cfedb385bdb5aa39200b771cad0075dd73a8ee0"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x6, 0x88, 0xff}}, @void, @void, @void, @void, [{0xdd, 0x36, "0ca1d61a8642ee952400df04a5465a23247e976658606abd7f7012f3eedde45f6aeda421b6877ba982ac4a2e13e03fe64b2af73adf50"}, {0xdd, 0x63, "2ad7b155328bd9189f8e4a8c9add3f72e6ad1d1acec1e20b4493318eba9bccad0bfdeac7927ed1d8ce7248881a1bbf4fba2a5c5a2af402efb3fd5fe9423ed68020c142b86b641539e461e0fb81ad5e5140b8f49dfb0df7d1d645bad94dd2a185c98dd3"}, {0xdd, 0xfc, "cf25a7162a4039ae33b2e252b006032df911688bb3d0ff59db93821ebc5bc01d227bc71046215580f08dc09bbda0d8a10cce75d03553ebb5836edd658daf67c8bce271073b7b4a559cedb79361c5a4bc364cc692c17b996c45d6671cc1317da9d0fa279ba7615f45f868bcb666bf65067ad65412b4134d8680af2fc24e30a8886239b4bbf7526af6b4cf5e5c0ff46b6138c187eb65e5ed912b3ce33a7ec6e57b49171392c04c1e949d54be116e7809785069fce62b359636f921a7b96b54cfb2f5337702a4e9af1433356a292ed2352639eb251da52291f93efc1853a5c86eed042a774da0229809781e9cbce6302a4fd4209700b5f217fd23d726cb"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20043041}, 0x0) 869.462053ms ago: executing program 5 (id=1500): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020f000002000000b4de67ce0bbf000000000000ae12415c25be729bb6fc14c0df0e55821e1a5cf0a235ce63c3c22db6c681185bcce394c56de287a3725e3ca5a98ce2c298be5938b4826680f6c54d4b46e71d97b52b"], 0x10}}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x64}}, 0x0) 860.532079ms ago: executing program 1 (id=1501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000002c0)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 800.425049ms ago: executing program 5 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) (async) write$cgroup_subtree(r2, &(0x7f0000001200)=ANY=[], 0xfe33) sendto$rose(r2, &(0x7f0000000100)="eda46ebd9a394ec2f3e9f4ff1cca4906388d3e984f5798a3a7ed4bc49fe45ba4085427abcb34cc6df0b5939bf7bba834846e68c6fce7dfc5a3b55fbe1e423847a7f30775a751c69c9f74e500e658f0b69acd7efc3cdb8945c14722df3a214fb98cc42589d3404311686057d00f7af219826a8f7821aa889bd1e2d8c00e35c8e93d6ed474753e7c383d821598189c9a991f38dfed8384d1befb2f06e6ebb16ed4daf649bd3faf79762f0e80815dc8c978c52e1f2959d851c62286d16952b722", 0xbf, 0x4044000, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 740.723753ms ago: executing program 3 (id=1503): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r2, 0xb0fe12b999fd9953, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xdf9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x4f, &(0x7f0000000500)={0x0, 0x1f}, 0x1, 0x0, 0x0, 0x2400009d}, 0x4884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000080)={0x8, 0x48, [0x7, 0x6, 0xffffffff, 0x1], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = epoll_create1(0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r6, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000011c0)={0x9}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r10}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c00)={0x3ac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x390, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.&{\xbb[:]:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe02}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "373913a4556980784a3aed1c20895e2ddf0c6abf065856791d7f215070e61eda3d1fa9c56b3e4cb0541b84d68f9c8bd30c2771dac58a48266f67071da00cab3e231d23f46e2433c3aaaaebdf7fbfd1f2f03818761d7a5e86ffe01eaa1df43aca4e64a03a04ec59859b51e2101645c413c802b8e7b2903cf222c8677afb02e3431293f2f1fbbf1518ab210aa22dac381f66b272433a712294fde29bca8bfced4c52"}, @ETHTOOL_A_BITSET_MASK={0xe, 0x5, "ffa26de91a0ccd40eb3c"}, @ETHTOOL_A_BITSET_BITS={0x1bc, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'firstname\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xf0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000021}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa3, 0x2, 'firstn_me\x00\xcad\x1d\x03\x9c\x02\x8aP\xd8\xbb\\A\xa8\xd41\xae+\xacC\x83lu\xbeBQyr\xadZ\xc8\xc3\x1d\xae\xde\xc9\x1fw<{{\\\xa6\x97R\x18|\xd9!-Q\x9e\xbb\xdf\x88(\xe7\x92\xd5c\x94\xdevo\xde\xb9!\xb6-\x97\x9dn\x85+W\xeaSQ\xb3\xe4.v\xa2\xb4\xb3X8%u\xc36oQ\xe2B\"\xec\x0f\xbc\x9e\xce\x18T\x17R\xf2]\xd3\xa1|\x13\xad[\x01O,b\xc8\x9e\xd9\xef\xc7\x1fQ<\xe9Y\x80\xf2\xc3CP\x8d^f\xfb}\xce\xad%5\xa9v\xc7\xfd3\xc85\x1b2'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/{[\xfc%-$\xf2^*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fc}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x127b0000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "0d5474e40843c6d43c2770f8da79edf78bfd55061d656b2ca84075aff5b1fb3bb3d6a90e834fd154b6a624a5352b0f6130d0966373412599b86785254777cf0fcc7b0c9d884107b8622566742e919b71ade16c8c138ba40fd48c2d6a2ddd56d6d85e550d4b8e2a16a00be1f641a37850d46879da795e40ff556efa973d8b517821ab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x50000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x20080, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r13, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x44, 0x26, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2}, {0x1, 0xb}, {0xffff, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x0) 739.934826ms ago: executing program 2 (id=1504): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x5}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x200}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x6}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xb03}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc33}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x10000}]}}]}, 0x78}}, 0x20008000) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 651.155796ms ago: executing program 5 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r3 = socket(0x3, 0x3, 0xb58b) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78e}}}, &(0x7f0000000340)=0x84) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="540575008dbdb55a07ced542df335303a29e2cd57cb5d8fb8177bf494b6bc694b67efad722e520240bedd52490193be3a9e974459164ada244ed1e6929b1098cf4a3cd045d58eac8ef9671b3eb31023cd50c2af4f4df6052ddd809e2591c37369b8750cdd400"/115, @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf25070000000c0006800600010002000000080003000100000008000300000000001c000180080003007f000001080006001000000008000700", @ANYRES32=r8, @ANYBLOB="0800020005000000"], 0x54}}, 0x4000080) write$ppp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x41c0013}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x4091) close(r0) 553.325969ms ago: executing program 1 (id=1506): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x0, 0x1}}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000280)="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", 0x1000}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x24, r2, 0xdac7a804b810efff, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x0) epoll_create1(0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) 551.670643ms ago: executing program 2 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket(0x400000000010, 0x6, 0x6) (async) r2 = socket(0x400000000010, 0x6, 0x6) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x4000880) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffff3e0}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffff3e0}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 322.416948ms ago: executing program 1 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x23, &(0x7f0000000780)="ee340ad606a8ba6e1e06303bac9177f9a3f6d9178ca1bad7eccc3d7ae8b07450e0a3c731907db20ecf01a9511db303e44811acbd45fe6edf94bd96e076302cf7d8b6e3fa8ffe70ad9535c25c101c0370a80d867a2973a213fd246db2454a0041bcb061928774290f65a55b06443fb6112b943a42b44409af03583799006b61bf1e12650e8f23dbe8b8d7a9b52d8b0a96e406b358114283a359b6100ffc316e2b73b5c1ecde61f6334c", 0xa9) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x400000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 268.787564ms ago: executing program 0 (id=1509): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0xa4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xa4}}, 0x4000041) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) (async) sendmmsg$alg(r1, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000006c0)="9ba52faf7ac6621d", 0x8}, {&(0x7f0000000880)="0f48824030a733ea9880c6cabad74ccb43bda18987d5cb622fc6ab0bcd76a03b6f85686bb00089659c0210fb337d94d1f8818be07ba8c5530e162d17793b792b4fbb458016879fdbde58ea8bf9352ed184c80c53958541f220fea06024cb3a955e757ccbb1d55a5ee993b71ea319516ce7f901dfd7726a440280db34dc9016d3bc5a4d3c016b4057e710cb202c26e33d39160ffca48e3b81e10bbdeb79e1f6af723252701f7421025d825ea70a4888b71398242c084913fa593ff092adfb4963060b1dacf4cf8e176d63af1f25d4c94ec38b511569ece31e3e9c95da724d390e450164dd819f2e0c498361", 0xeb}, {&(0x7f0000000980)="07a6f3185184978d019305ad00dead23f0358f8ffc822febfcfb07f821c350f99966d16e7259af62d5ec843feb03dfe636a4beff7a7e0db463adbcdc38759ba219b08ac6a1772b92b306bf15941dc59588b64bde521ea1ea75dd98199282b2ff1773c6d8addd6088a688249431264b6c8ff3afbf3dda71b5d253a0caa1f57026f4159cb85baf2e734548e512d627a0cd77253564ee81ccb165f228b019f3311411f4bc9af5e7468173e061fb285eb04ae174c2ab72cc765de809347f6d23459ce2cbde32dd757cb6d5b632824cb2e21a2f786708b74d65fe77480c3633b517598e5544ddc1306bcad02919fa7e23a2aabdd270", 0xf3}, {&(0x7f0000000a80)="97e3f44ccd3dd4060d7ca26d18fffe92a4db4f0a44e2d90f1ee6378ee16455e87d6b75f47726884cdfb1df072cdb54c409", 0x31}, {&(0x7f0000000ac0)="5ffb97bcd533c060e2ee7a1d9768c44a3984dfa15b66ae5f7e92d7b20fdbe88acf9c4760dc1b160490a3df79179232fda7465926658266983a08b35ab9461a24575f7bb05f7aeb26bc4918de8594723f08ea5febfe9837d3b05048c5af3d1701194cd56f6c1062639a05240cb0b8d8e14bf50d0aa4349f6fa7c0456a2a9105740856c7932fab4060b0021a0b6ee65c52394b872293de1c663cceff0751b74f0807d5df91ef803241405afe8f4bd714be49eaa0f0cc3386177268e88fbfcf", 0xbe}, {&(0x7f0000000b80)="e76a10452e2c4ab0911ac39cac22b73ae41bab4a86e8f6e97f9c85c0d264d6588a294de8042b159f6a701e07c5ddad8da38ae457a69e4a2605915e329166cf3367b936472914e6134a874993974815220e1bbd909e8284ec3303e30a7b8603e7ce5f51ee9475f361e36f58523de8320d309c6f53e3c1091ce2277606182637aaa724064a55b8f528368ae345b542211d7822cbaaf8e0bc952ea2c8405a80f67ff4ee3ed2353cf6d22acf567913ebd4de52c1711186c1ec2a3c7c509e64bf98f7df13d39f2deaeb4ef9", 0xc9}, {&(0x7f0000000c80)="a06f9e8d9bd87a92461e07385ee07b94156f80e76a72d38e23d1cb2579a870bc230af0d3a9cb50b8e395cefa9c0a2d029020f9d1201140be4358bb7b61eab54124c16c29e2db9b255623e9e5a5786144108d83b3", 0x54}, {&(0x7f0000000d00)="f62cfaaaa15b4b12e3a8db9955c6ad6feacbcf09487ddfedd4dc7b0f30da566dfe871f0553de52f75da9d97205671cd08fd67f58c4d47bf21363c1610fa032bd674d71f324ce659bc6ffc75341bbd56cce91028df360751333a2482c14e740ba568b71a26e72caa5e27c0d9e5e33f404b8295de5d17dfa9413ed74a11cb435f7ff6b59c2aa104b393005a5ba7b5e954aa58095bb89a9ddde32629dbb7126b29d8d278a518f0ab593e2d06166de5006795506c624f30253992d6fc4c7fd084c37f47d6cda50513d650f0654", 0xcb}, {&(0x7f0000000e00)="56706bc6f7821c6d3e58aed425243ca91837611a4730d31ea8bae6db716befde2ab5755db3007cc0cb14474699cac2f1750a4766b7d3ebffb1e748a162c6ce3b84d7a9129236", 0x46}, {&(0x7f0000000e80)="9dc932b1e26f35589cf01c0c1064470d2ac4e99bc5fad1cb22a0859e926d3c6e11c6a023a259707862ffbc2030eade97179f351bfb462b4c7d434f445b72c054266d2bd520de6b08be71f9a7a2f8647e7dd9104fd6d09fcc9861f4d698a7ffd0fc3649", 0x63}], 0xa, &(0x7f0000000fc0)=[@iv={0x50, 0x117, 0x2, 0x3c, "2ecc0f702f59c68d2b5b0397b03872c59682ef45f6aef456b4b7098c89dbb084df1a74f69ef8022f1c1a94abeb0d9505814f31a734b781bbac09080c"}, @assoc={0x18, 0x117, 0x4, 0xe440}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0xe8, 0x117, 0x2, 0xd4, "f630d53a0208f2197ec090fdd36b5a8528a5a8bdc9adebc4b86b9aa90476fe1a2abd2207716c506e461fa673684b03b1cae35f4802f95ca620b4b6e426659b6b0850656df032cb7b45fdb7224a30410e13fa7bdeb8b0221120c1d423848b3a85108086eb07ac6e750fbae4e36ce50b128966f94119f357f1af36880c4d85340c9db922a606d5633fdc282cb8cf5e89f642a93efae5b7bed237cf48c52be68cdaf3894003ef20d851535a552080b0260dca2081f92a77faf62da60fbb51a822e8f912ad25d345aa4cdaf1edbc1337e2f5d9130875"}, @iv={0x70, 0x117, 0x2, 0x5c, "49ba557c0b4a475f487e16e1a86857140c35d16547a9922cc8eb91f3f29f19ff5c6437b9a7663f020810792cf3cd6b5512f987c411ad967518d4618998e512542c4a84654a793201a42aa93a6447738acaf61a08551a2a299ca85247"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1f0}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="07d0a9843c054df6d48f797ee22fb1d36085bd3fbd426f318a4c512e8d9087b17adaf2fdfa26ef7ac0f5e7f95f2ea472e62bc7b6be2554295beb2c50d24b10c187e71af9bedabf6c38f6cf52ce3ffa3e530370f69105874b887d8bf2870ae360a0553c7473861a5c9c6a802b35603e29cb0f965067362d03153cf51a", 0x7c}], 0x1, &(0x7f0000001280)=[@assoc={0x18, 0x117, 0x4, 0x55}, @assoc={0x18, 0x117, 0x4, 0x2e5}, @iv={0xd0, 0x117, 0x2, 0xb6, "33de0fb2dcc2eb0f0de9033e845f39295763e7d46882b7e62a9ce9b5501db978bd84a0ccd591e646213b17485ec529df678c999fe9fc92ad83faac7ea83e36dc899c222632e33e548a5bc2e5093baf5650cf8e9406abe1018df2d354e28583451d31024075bae710aeb34128c02f1df783eea84ffcdd905b1f8d1b5611a24b15cc98dfbaeae64644205bbe0303a80335c0bf48b05cedf11a4a259ae715af572398bcabe6eaa7e55a9eec705d49ce2f083338230f949a"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf0, 0x117, 0x2, 0xdb, "a4e7301cf21a80df21efdbf6b86aaa028fb87061285d81cd483f9fd523c819f75b1b33f52596983b1d708d05b76fe54fa951fa9dfcd6ab3dbdfa1f6200266405afa790d807be57954245d9173749cdbd3d095c39b473f2b8ea17c8dd488c34c70977243d1ba6a69f5100ac5683759043a7f97caca4781d28ec3b67a2ec3d5529e5abd89103949616a3a268d4a3cf66a251e4015ce2cd720cd52b119d93a5dbe34eb8cb64e3ebddc1005e0cd73a339d619b65ed8588164dab8c4d5757466ef0abc010e92208a8ab60144a0285cc1e5e211c78089a0335cde36d0a56"}], 0x208, 0x40000}, {0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000014c0)="dca6715664c4579b8c40599287df2f35b0e0c1eeb0b81699f9f120777ccab445f3e6b1c90fb14fed5204ac4e6b6d223f11546f9b6dbd256a3d0a884df72ea3988f0b19996e2d65aa7a93d24d192e1b14105830056aed335ce1cc7b7008b9c350000728ea4af2ad11e7ebedc9a14eb2c72b908b1298a856318820c1aeffee3f3bbe7a36750950e72cedd51c46ec98c43502420ad22ce1b6c19e5b533e49", 0x9d}, {&(0x7f0000001580)="7b3365e15682f467860379a4be3ff7e99f53e46d557c95c3534d5884c2110ebf905d1ce31514dc1705140ca61cb3394c6e95a82bfbf58d8a5056da58e98e525ea833f2ad896fa0a5331a8b279c83c2f1a43e0d9745af03755d95fea5152ac036190b38f86518b3fc6fcc2e5a5d5c39d948bea7ff4938193a200f8676c3891fa5ef98f16fa2f1e0d6c817e9a466251ab0228341d0562b0761909e1978e64b280d2657988ff72bc129124140480d40dfff86802564bf08157b5ad1b76b09c41405bbf6b3cef1da4b7c2a11d5aea82bc958eb48", 0xd2}, {&(0x7f0000001680)="e6c8aaec8bd31de6936932a64d7f66085113013417d93210284bc00806b9d54b2d19012448f1503b122e5c7020b397d7e3519c1047ac4edb45ba8e0f392e844357a8586c35aa0a7cc6fe4f7ee299be858dc663819157b4bd768400787b75e4c05da111de0e8c31e43759dfebbf9554817e6b1dcef84f56058d076f87946f594f", 0x80}, {&(0x7f0000001700)="ce19c564b9a017580847e1756ce87e6a17ae7aff02f7f83342ef374996f9bd8fdfbe84f9bf4047179a481cb3d6836bb69bbc7473fc4ca06c517be548c7e85fd1828928d2c66ecec61136cd445623496683ad162112ea81f5f09461ef5dea5fdd011ccf0deedfddbca5f8d78a2816a4a1bcb3643e4a39fac4e67de563870873456d4b8952795d71bc3e9d121838d0d41bae99da3f8b08d37a8716e8ec242dbc500cbc64d060b3c1dacb22a02702b0d79394f6960a7e56263fb5a0251e850a4033698bb8b5089f96bb9537247977f1698f445afe4b592e8d29df0af43267dbbf4e84424056a2fcb2437baef17f35a88a8ee6fb5579c9a9", 0xf6}], 0x4, &(0x7f0000001840)=[@iv={0xd8, 0x117, 0x2, 0xc1, "36383f0a782236993be85f83a3ec76c6db43dc32f947bd84a4b189b7abedb537f202abd2b770323c1111b688905ed24c5e7211c2a4ec64a0adf88db6ac427417a9630ebc0c76145d024fab49a043296eb8678e93eb0db1c556886072051fce12f35a99a7fb81532b4cd3209a01298dc70711e6cea92f762c6a27b8257a4df720c34151c4b0422a28c86adeea5dd7ed885567df3c5c56efef77930d933f7f6e6943403264bac811c08ab315fad220a5df17e656ce914c05711140b3475bf1876030"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xe8, 0x117, 0x2, 0xcf, "925ce236686f16f8d0876b443e3a60e1d1f882039fbea55f3f9c561b1777e4dfc26134765e71fd847addf3655d74507feebdbb4a34833cac4ea9aed7d74b908bf805dd7cd68e69a587d45051257112dff6766fbdd171ba1d839c4967a452394aa200089945ab3ac4b8652c640e24f0b396122e03064393aaff83efd1301d49d706d878764297f6951481ddb45ccc19eb09bf32dd0f9c79e3645d5cacb1726a656de169bae6953afb72c5b0567581552344066289387323c0c5a0c58c2e29356db23f536e9701cea42ff7ed8025b527"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x1f0, 0x4000000}], 0x3, 0x4048800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x4008031, 0xffffffffffffffff, 0x20000000) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x328}}, 0x1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000027bd70000000000042000002000000000000000072c990d4a30f4f571b0ec0e1b37d5978910dca610b227ae6d093c06ecc28e10a7c549b85dbf99a88f197e0711ee848b5d93cbf735ac5dd3a75cd1d1f4d11aeaa295dd4c97cf480eddaf288e4ad9818"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c00"], 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000004040)=[{r7, 0x202}], 0x1, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="10002fbd7000fbdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000ff0500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 206.172934ms ago: executing program 2 (id=1510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r1, 0xe00, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newchain={0x2c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0xc, 0x4}, {0xb, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0xfffffffe, 0x7ff}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000007c0)={0x0, 0xbe, "9dfe8c2d00fc2f899a769a76d63a33c962ac6cb904fe2261fdba6c3aafbc0c68f33358467a4f063afaa3ccd49a076f93d6d59720babc92e41de6bc447a3a467bc6cb127d063e5760edb872c25b1a15d8c4a1c185f2cafc628f9f0bf5b49539d0f3cd95a126bf57d45c3c12dcc9145693ae67ea2cd34f441e6300c9625021357360d585f4e20d185248678e908aa029212520e961292af815a527c68b6001889fcaeaef80070b2d0651faa5baef15558c4ee16e2c9f35b89641c3c1bb4243"}, &(0x7f0000000700)=0xc6) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r9) sendmsg$NL80211_CMD_ASSOCIATE(r9, 0x0, 0x20000000) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 165.717837ms ago: executing program 5 (id=1511): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0xfdef) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x810, r1, 0xb180d000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="000427bd7000fcdbdf25430000000c00580058000000000000000c00580031000000000000000c00580070000000000000000c0058005d000000000000000c00580030000000000000000c00580011000000000000000c0058006b0000000049000000000000000c00580054a700008000"/124], 0x80}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 81.897016][ T5855] cgroup: Unknown subsys name 'net' [ 82.113577][ T5855] cgroup: Unknown subsys name 'cpuset' [ 82.123524][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.968755][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.618027][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.626469][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.635972][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.644047][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.652787][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.661115][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.692734][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.699841][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.701864][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.707956][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.715954][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.723427][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.729468][ T5885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.737195][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.744374][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.750910][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.758487][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.772927][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.781380][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.789857][ T5887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.797316][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.810705][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.822472][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.829849][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.838341][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.600087][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 87.752225][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 87.806639][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 87.842879][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 87.904845][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 88.074875][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.082589][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.090802][ T5866] bridge_slave_0: entered allmulticast mode [ 88.098122][ T5866] bridge_slave_0: entered promiscuous mode [ 88.107892][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.115382][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.123672][ T5866] bridge_slave_1: entered allmulticast mode [ 88.131359][ T5866] bridge_slave_1: entered promiscuous mode [ 88.205003][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.212379][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.219950][ T5865] bridge_slave_0: entered allmulticast mode [ 88.227233][ T5865] bridge_slave_0: entered promiscuous mode [ 88.266514][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.318557][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.328754][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.336452][ T5865] bridge_slave_1: entered allmulticast mode [ 88.345908][ T5865] bridge_slave_1: entered promiscuous mode [ 88.391214][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.402934][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.410472][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.417642][ T5871] bridge_slave_0: entered allmulticast mode [ 88.426217][ T5871] bridge_slave_0: entered promiscuous mode [ 88.436458][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.443747][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.451172][ T5871] bridge_slave_1: entered allmulticast mode [ 88.459063][ T5871] bridge_slave_1: entered promiscuous mode [ 88.479077][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.486444][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.494007][ T5867] bridge_slave_0: entered allmulticast mode [ 88.502802][ T5867] bridge_slave_0: entered promiscuous mode [ 88.524438][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531762][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.538963][ T5868] bridge_slave_0: entered allmulticast mode [ 88.548036][ T5868] bridge_slave_0: entered promiscuous mode [ 88.582939][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.590545][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.597709][ T5867] bridge_slave_1: entered allmulticast mode [ 88.605365][ T5867] bridge_slave_1: entered promiscuous mode [ 88.633046][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.642480][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.650106][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.657275][ T5868] bridge_slave_1: entered allmulticast mode [ 88.664660][ T5868] bridge_slave_1: entered promiscuous mode [ 88.706764][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.732566][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.750219][ T51] Bluetooth: hci0: command tx timeout [ 88.776772][ T5866] team0: Port device team_slave_0 added [ 88.786492][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.814944][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.824405][ T51] Bluetooth: hci1: command tx timeout [ 88.834406][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.860993][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.872601][ T5866] team0: Port device team_slave_1 added [ 88.882307][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.900491][ T51] Bluetooth: hci3: command tx timeout [ 88.900744][ T5874] Bluetooth: hci2: command tx timeout [ 88.906170][ T5882] Bluetooth: hci4: command tx timeout [ 88.938276][ T5865] team0: Port device team_slave_0 added [ 88.947941][ T5865] team0: Port device team_slave_1 added [ 89.013147][ T5871] team0: Port device team_slave_0 added [ 89.021503][ T5868] team0: Port device team_slave_0 added [ 89.057778][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.065069][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.092411][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.106218][ T5868] team0: Port device team_slave_1 added [ 89.129267][ T5871] team0: Port device team_slave_1 added [ 89.137131][ T5867] team0: Port device team_slave_0 added [ 89.147330][ T5867] team0: Port device team_slave_1 added [ 89.168764][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.175961][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.202799][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.287026][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.294151][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.320918][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.333746][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.340888][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.366992][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.387536][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.394917][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.421251][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.433512][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.440807][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.467409][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.480273][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.487439][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.514107][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.525905][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.533359][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.559643][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.587708][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.595082][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.622279][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.634417][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.641835][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.668242][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.793298][ T5866] hsr_slave_0: entered promiscuous mode [ 89.800310][ T5866] hsr_slave_1: entered promiscuous mode [ 89.825700][ T5865] hsr_slave_0: entered promiscuous mode [ 89.833103][ T5865] hsr_slave_1: entered promiscuous mode [ 89.839357][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 89.845765][ T5865] Cannot create hsr debugfs directory [ 89.904505][ T5871] hsr_slave_0: entered promiscuous mode [ 89.911600][ T5871] hsr_slave_1: entered promiscuous mode [ 89.917716][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 89.924307][ T5871] Cannot create hsr debugfs directory [ 89.936915][ T5867] hsr_slave_0: entered promiscuous mode [ 89.947564][ T5867] hsr_slave_1: entered promiscuous mode [ 89.953867][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 89.959696][ T5867] Cannot create hsr debugfs directory [ 90.066805][ T5868] hsr_slave_0: entered promiscuous mode [ 90.074254][ T5868] hsr_slave_1: entered promiscuous mode [ 90.080583][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 90.086414][ T5868] Cannot create hsr debugfs directory [ 90.699124][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.715911][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.727370][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.757429][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.823444][ T51] Bluetooth: hci0: command tx timeout [ 90.831101][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.855984][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.877554][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.900422][ T51] Bluetooth: hci1: command tx timeout [ 90.903937][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.953956][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.969070][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.979755][ T51] Bluetooth: hci2: command tx timeout [ 90.985296][ T51] Bluetooth: hci3: command tx timeout [ 90.991888][ T5882] Bluetooth: hci4: command tx timeout [ 91.004417][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.043459][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.142824][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.156990][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.168628][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.203514][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.290751][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.301489][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.317084][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.341059][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.426648][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.495698][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.533734][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.555582][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.562974][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.594121][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.601328][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.663958][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.693678][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.700892][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.747106][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.754377][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.824006][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.854323][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.920191][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.955695][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.995592][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.028003][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.035218][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.046145][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.053442][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.082470][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.103213][ T9] cfg80211: failed to load regulatory.db [ 92.142420][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.149681][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.162578][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.169833][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.218671][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.225935][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.307822][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.315096][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.436251][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.457675][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.684964][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.791484][ T5866] veth0_vlan: entered promiscuous mode [ 92.903675][ T5866] veth1_vlan: entered promiscuous mode [ 92.907552][ T51] Bluetooth: hci0: command tx timeout [ 92.981497][ T51] Bluetooth: hci1: command tx timeout [ 93.060114][ T51] Bluetooth: hci2: command tx timeout [ 93.065967][ T51] Bluetooth: hci3: command tx timeout [ 93.071819][ T5882] Bluetooth: hci4: command tx timeout [ 93.077920][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.102365][ T5867] veth0_vlan: entered promiscuous mode [ 93.125265][ T5866] veth0_macvtap: entered promiscuous mode [ 93.155814][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.181277][ T5867] veth1_vlan: entered promiscuous mode [ 93.199204][ T5866] veth1_macvtap: entered promiscuous mode [ 93.242484][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.267334][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.294815][ T5865] veth0_vlan: entered promiscuous mode [ 93.305436][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.314902][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.335997][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.346450][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.365471][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.378723][ T5865] veth1_vlan: entered promiscuous mode [ 93.508487][ T5867] veth0_macvtap: entered promiscuous mode [ 93.544474][ T5867] veth1_macvtap: entered promiscuous mode [ 93.589968][ T5871] veth0_vlan: entered promiscuous mode [ 93.602394][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.648905][ T5871] veth1_vlan: entered promiscuous mode [ 93.703330][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.716507][ T5865] veth0_macvtap: entered promiscuous mode [ 93.738381][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.751060][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.781368][ T3033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792273][ T3033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.843911][ T5865] veth1_macvtap: entered promiscuous mode [ 93.867518][ T3033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877926][ T3033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.911972][ T5871] veth0_macvtap: entered promiscuous mode [ 93.940143][ T5871] veth1_macvtap: entered promiscuous mode [ 93.947352][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.965221][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.975299][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.007246][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.080889][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.112920][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.143568][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.181081][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.193950][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.216015][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.217130][ T5868] veth0_vlan: entered promiscuous mode [ 94.237182][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.248533][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.282333][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.361824][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.374669][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.388403][ T5868] veth1_vlan: entered promiscuous mode [ 94.434683][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.445269][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498949][ T3033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.513026][ T3033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.564178][ T5993] bond1: entered promiscuous mode [ 94.570010][ T5993] bond1: entered allmulticast mode [ 94.575796][ T5993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.643805][ T5993] bond1 (unregistering): Released all slaves [ 94.687659][ T5992] bond1: entered promiscuous mode [ 94.695527][ T5992] bond1: entered allmulticast mode [ 94.701881][ T5992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.767715][ T5992] bond1 (unregistering): Released all slaves [ 94.810812][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.818864][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.822498][ T5868] veth0_macvtap: entered promiscuous mode [ 94.866337][ T5868] veth1_macvtap: entered promiscuous mode [ 94.981584][ T51] Bluetooth: hci0: command tx timeout [ 95.015907][ T6000] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 95.041192][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.059869][ T51] Bluetooth: hci1: command tx timeout [ 95.070878][ T5999] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 95.116766][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.134195][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.142181][ T51] Bluetooth: hci2: command tx timeout [ 95.151452][ T51] Bluetooth: hci3: command tx timeout [ 95.156940][ T51] Bluetooth: hci4: command tx timeout [ 95.164237][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.204253][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.225276][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.247265][ T1004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.273204][ T1004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.293201][ T1099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.331935][ T1099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.403494][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.437157][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.722157][ T6019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.737530][ T6015] tipc: Started in network mode [ 95.743200][ T6015] tipc: Node identity 46d2768f3dec, cluster identity 4711 [ 95.750714][ T6015] tipc: Enabled bearer , priority 0 [ 95.763714][ T6013] tipc: Disabling bearer [ 95.777560][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.787171][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.948977][ T6020] team0 (unregistering): Port device team_slave_0 removed [ 95.960062][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 96.055210][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.084527][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.215411][ T6027] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12'. [ 96.407418][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.501884][ T6036] netem: change failed [ 96.539337][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.741545][ T6041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.128820][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20'. [ 97.189150][ T6060] Bluetooth: MGMT ver 1.23 [ 97.426445][ T6066] wg1: entered promiscuous mode [ 97.880407][ T6087] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 97.884435][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 97.894443][ T6090] netem: change failed [ 98.199481][ T6105] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 98.276123][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 98.476816][ T6117] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 98.480965][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.490149][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.564223][ T6114] Zero length message leads to an empty skb [ 98.592535][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 98.756888][ T6125] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 99.329315][ T6151] netlink: 'syz.4.46': attribute type 12 has an invalid length. [ 99.344699][ T6152] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 99.359522][ T6151] netlink: 'syz.4.46': attribute type 29 has an invalid length. [ 99.370577][ T6152] netlink: 17 bytes leftover after parsing attributes in process `syz.4.46'. [ 99.644689][ T6167] netlink: 'syz.4.49': attribute type 3 has an invalid length. [ 99.959233][ T6177] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 99.990648][ T6177] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 100.045115][ T6179] veth0_to_bridge: entered promiscuous mode [ 100.212752][ T6178] veth0_to_bridge: left promiscuous mode [ 100.584702][ T6205] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 100.628209][ T6205] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 101.035772][ T6221] __nla_validate_parse: 9 callbacks suppressed [ 101.035793][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 101.289908][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 101.498592][ T6243] veth3: entered allmulticast mode [ 101.802214][ T6259] netlink: 45 bytes leftover after parsing attributes in process `syz.0.79'. [ 101.911148][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'. [ 101.912442][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'. [ 102.415979][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 102.705906][ T6298] FAULT_INJECTION: forcing a failure. [ 102.705906][ T6298] name failslab, interval 1, probability 0, space 0, times 1 [ 102.765153][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(full) [ 102.765183][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.765194][ T6298] Call Trace: [ 102.765203][ T6298] [ 102.765212][ T6298] dump_stack_lvl+0x189/0x250 [ 102.765241][ T6298] ? __pfx____ratelimit+0x10/0x10 [ 102.765268][ T6298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.765290][ T6298] ? __pfx__printk+0x10/0x10 [ 102.765324][ T6298] ? __pfx___might_resched+0x10/0x10 [ 102.765350][ T6298] should_fail_ex+0x414/0x560 [ 102.765382][ T6298] should_failslab+0xa8/0x100 [ 102.765413][ T6298] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 102.765440][ T6298] ? __alloc_skb+0x112/0x2d0 [ 102.765474][ T6298] __alloc_skb+0x112/0x2d0 [ 102.765507][ T6298] tcp_stream_alloc_skb+0x3d/0x340 [ 102.765537][ T6298] tcp_sendmsg_locked+0xf38/0x5620 [ 102.765652][ T6298] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 102.765689][ T6298] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.765714][ T6298] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.765750][ T6298] tcp_sendmsg+0x2f/0x50 [ 102.765775][ T6298] __sock_sendmsg+0x19c/0x270 [ 102.765804][ T6298] __sys_sendto+0x3bd/0x520 [ 102.765845][ T6298] ? __pfx___sys_sendto+0x10/0x10 [ 102.765877][ T6298] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 102.765920][ T6298] ? __fget_files+0x3a0/0x420 [ 102.765963][ T6298] ? ksys_write+0x22a/0x250 [ 102.765992][ T6298] ? __pfx_ksys_write+0x10/0x10 [ 102.766013][ T6298] ? rcu_is_watching+0x15/0xb0 [ 102.766039][ T6298] __x64_sys_sendto+0xde/0x100 [ 102.766071][ T6298] do_syscall_64+0xfa/0x3b0 [ 102.766097][ T6298] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.766122][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.766141][ T6298] ? clear_bhb_loop+0x60/0xb0 [ 102.766165][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.766184][ T6298] RIP: 0033:0x7f514438ebe9 [ 102.766204][ T6298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.766220][ T6298] RSP: 002b:00007f5145136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.766242][ T6298] RAX: ffffffffffffffda RBX: 00007f51445b5fa0 RCX: 00007f514438ebe9 [ 102.766256][ T6298] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000003 [ 102.766268][ T6298] RBP: 00007f5145136090 R08: 0000000000000000 R09: 0000000000000000 [ 102.766279][ T6298] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 102.766291][ T6298] R13: 00007f51445b6038 R14: 00007f51445b5fa0 R15: 00007fffc1801678 [ 102.766326][ T6298] [ 103.030045][ T6294] bridge1: entered promiscuous mode [ 103.035392][ T6294] bridge1: entered allmulticast mode [ 103.104012][ T6303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.197186][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.238763][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.547168][ T6318] netlink: 15 bytes leftover after parsing attributes in process `syz.1.97'. [ 104.371324][ T6345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.439629][ T6346] nbd0: detected capacity change from 0 to 549764202496 [ 104.876928][ T6360] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 104.886184][ T6360] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 105.012060][ T6364] tipc: Can't bind to reserved service type 0 [ 105.090920][ T51] block nbd0: Receive control failed (result -104) [ 105.366369][ T6378] warning: `syz.3.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.415331][ T6381] openvswitch: netlink: Message has 4 unknown bytes. [ 105.530311][ T6383] lo speed is unknown, defaulting to 1000 [ 105.539067][ T6383] lo speed is unknown, defaulting to 1000 [ 105.689096][ T6391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.736332][ T6383] lo speed is unknown, defaulting to 1000 [ 105.800407][ T6397] netlink: 'syz.3.123': attribute type 11 has an invalid length. [ 105.823544][ T6400] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 106.301300][ T6416] __nla_validate_parse: 4 callbacks suppressed [ 106.301322][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.355174][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.476736][ T6416] veth0: entered promiscuous mode [ 106.497338][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.582781][ T6383] infiniband syz0: set active [ 106.600022][ T6383] infiniband syz0: added lo [ 106.629249][ T6383] syz0: rxe_create_cq: returned err = -12 [ 106.652065][ T6383] infiniband syz0: Couldn't create ib_mad CQ [ 106.668999][ T893] lo speed is unknown, defaulting to 1000 [ 106.681896][ T6383] infiniband syz0: Couldn't open port 1 [ 106.884217][ T6383] RDS/IB: syz0: added [ 106.888706][ T6383] smc: adding ib device syz0 with port count 1 [ 106.921218][ T6383] smc: ib device syz0 port 1 has pnetid [ 107.027285][ T6383] lo speed is unknown, defaulting to 1000 [ 107.047909][ T9] lo speed is unknown, defaulting to 1000 [ 107.119080][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 107.334717][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.138'. [ 107.643148][ T6463] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 107.996089][ T6383] lo speed is unknown, defaulting to 1000 [ 108.173964][ T6482] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 108.317031][ T6482] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.344808][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 108.374845][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 108.386291][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 108.647672][ T6383] lo speed is unknown, defaulting to 1000 [ 108.967317][ T6383] lo speed is unknown, defaulting to 1000 [ 109.202911][ T6383] lo speed is unknown, defaulting to 1000 [ 109.402497][ T6507] netlink: 'syz.0.154': attribute type 142 has an invalid length. [ 109.486113][ T6473] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.561111][ T6473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.739859][ T6519] netlink: 9 bytes leftover after parsing attributes in process `syz.2.157'. [ 109.750492][ T6519] gretap0: entered promiscuous mode [ 110.386326][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 110.690060][ T6550] openvswitch: netlink: Message has 4 unknown bytes. [ 110.709246][ T6550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.732035][ T6555] openvswitch: netlink: Unknown key attributes 2 [ 111.402928][ T6574] syzkaller1: entered promiscuous mode [ 111.417642][ T6574] syzkaller1: entered allmulticast mode [ 111.606466][ T6583] syzkaller1: entered promiscuous mode [ 111.609602][ T6585] __nla_validate_parse: 2 callbacks suppressed [ 111.609619][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 111.619779][ T6583] syzkaller1: entered allmulticast mode [ 111.760331][ T6587] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 111.796969][ T6587] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.820676][ T6587] gretap1: entered promiscuous mode [ 111.826832][ T6587] gretap1: entered allmulticast mode [ 111.849967][ T6594] nbd: device at index 3 is going down [ 112.018582][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 112.191650][ T5919] udevd[5919]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 112.867856][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 112.901108][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 113.411601][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 113.432115][ T6661] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.197'. [ 113.468367][ T6661] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 113.626738][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.900905][ T6677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.051253][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.201'. [ 114.261199][ T6683] FAULT_INJECTION: forcing a failure. [ 114.261199][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.295461][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(full) [ 114.295491][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.295503][ T6683] Call Trace: [ 114.295511][ T6683] [ 114.295519][ T6683] dump_stack_lvl+0x189/0x250 [ 114.295550][ T6683] ? __pfx____ratelimit+0x10/0x10 [ 114.295576][ T6683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.295600][ T6683] ? __pfx__printk+0x10/0x10 [ 114.295628][ T6683] ? __might_fault+0xb0/0x130 [ 114.295668][ T6683] should_fail_ex+0x414/0x560 [ 114.295700][ T6683] _copy_from_iter+0x1db/0x16f0 [ 114.295726][ T6683] ? rcu_is_watching+0x15/0xb0 [ 114.295748][ T6683] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 114.295776][ T6683] ? __pfx__copy_from_iter+0x10/0x10 [ 114.295798][ T6683] ? __build_skb_around+0x257/0x3e0 [ 114.295840][ T6683] ? netlink_sendmsg+0x642/0xb30 [ 114.295866][ T6683] ? skb_put+0x11b/0x210 [ 114.295899][ T6683] netlink_sendmsg+0x6b2/0xb30 [ 114.295938][ T6683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.295970][ T6683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 114.296002][ T6683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.296024][ T6683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.296053][ T6683] __sock_sendmsg+0x21c/0x270 [ 114.296082][ T6683] ____sys_sendmsg+0x505/0x830 [ 114.296110][ T6683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.296140][ T6683] ? import_iovec+0x74/0xa0 [ 114.296165][ T6683] ___sys_sendmsg+0x21f/0x2a0 [ 114.296187][ T6683] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.296243][ T6683] ? __fget_files+0x2a/0x420 [ 114.296271][ T6683] ? __fget_files+0x3a0/0x420 [ 114.296311][ T6683] __x64_sys_sendmsg+0x19b/0x260 [ 114.296333][ T6683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.296363][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 114.296386][ T6683] ? rcu_is_watching+0x15/0xb0 [ 114.296410][ T6683] ? do_syscall_64+0xbe/0x3b0 [ 114.296442][ T6683] do_syscall_64+0xfa/0x3b0 [ 114.296467][ T6683] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.296492][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.296509][ T6683] ? clear_bhb_loop+0x60/0xb0 [ 114.296533][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.296550][ T6683] RIP: 0033:0x7ff76f18ebe9 [ 114.296568][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.296585][ T6683] RSP: 002b:00007ff76ff91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.296606][ T6683] RAX: ffffffffffffffda RBX: 00007ff76f3b5fa0 RCX: 00007ff76f18ebe9 [ 114.296620][ T6683] RDX: 00000000000488c0 RSI: 0000200000000400 RDI: 0000000000000006 [ 114.296632][ T6683] RBP: 00007ff76ff91090 R08: 0000000000000000 R09: 0000000000000000 [ 114.296644][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.296656][ T6683] R13: 00007ff76f3b6038 R14: 00007ff76f3b5fa0 R15: 00007fff45c51f78 [ 114.296689][ T6683] [ 114.715030][ T6710] wg2: entered promiscuous mode [ 114.735389][ T6710] wg2: entered allmulticast mode [ 114.827067][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 115.134602][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 115.283750][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.293015][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.352758][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 115.463332][ T6760] tipc: Started in network mode [ 115.492985][ T6760] tipc: Node identity 6ee8255c990d, cluster identity 4711 [ 115.518882][ T6760] tipc: Enabled bearer , priority 0 [ 115.566377][ T6754] syzkaller0: entered promiscuous mode [ 115.576423][ T6754] syzkaller0: entered allmulticast mode [ 115.648872][ T6754] tipc: Resetting bearer [ 115.877002][ T5927] IPVS: starting estimator thread 0... [ 115.941398][ T6754] hsr_slave_0 (unregistering): left promiscuous mode [ 116.021425][ T6779] IPVS: using max 24 ests per chain, 57600 per kthread [ 116.083102][ T6751] tipc: Resetting bearer [ 116.166702][ T6751] tipc: Disabling bearer [ 116.531609][ T6771] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.741537][ T6802] __nla_validate_parse: 3 callbacks suppressed [ 116.741557][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 116.935517][ T6813] netlink: 'syz.3.230': attribute type 11 has an invalid length. [ 116.966685][ T6813] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 117.015073][ T6813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.230'. [ 117.134019][ T6813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.230'. [ 117.325436][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.391202][ T6819] lo speed is unknown, defaulting to 1000 [ 117.420141][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 117.422989][ T6835] tipc: Started in network mode [ 117.461310][ T6835] tipc: Node identity 4a7235e043e2, cluster identity 4711 [ 117.468688][ T6835] tipc: Enabled bearer , priority 0 [ 117.706194][ T6835] syzkaller0: entered promiscuous mode [ 117.738191][ T6835] syzkaller0: entered allmulticast mode [ 117.779854][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.905837][ T6854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.240'. [ 117.948869][ T6854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.240'. [ 117.989481][ T6854] netlink: 43 bytes leftover after parsing attributes in process `syz.2.240'. [ 118.060018][ T6854] netlink: 'syz.2.240': attribute type 5 has an invalid length. [ 118.075732][ T6835] tipc: Resetting bearer [ 118.131214][ T6854] netlink: 43 bytes leftover after parsing attributes in process `syz.2.240'. [ 118.174704][ T6832] tipc: Resetting bearer [ 118.271631][ T6832] tipc: Disabling bearer [ 118.353273][ T6867] macvtap1: entered promiscuous mode [ 118.358882][ T6867] vlan0: entered promiscuous mode [ 118.413419][ T6867] macvtap1: entered allmulticast mode [ 118.418884][ T6867] vlan0: entered allmulticast mode [ 118.473152][ T6867] veth0_vlan: entered allmulticast mode [ 119.308024][ T6903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.251'. [ 119.390145][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 119.756976][ T6920] bridge_slave_0: left allmulticast mode [ 119.766920][ T6920] bridge_slave_0: left promiscuous mode [ 119.784394][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.863216][ T6920] bridge_slave_1: left allmulticast mode [ 119.888679][ T6920] bridge_slave_1: left promiscuous mode [ 119.905785][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.945193][ T6920] bond0: (slave bond_slave_0): Releasing backup interface [ 120.001521][ T6920] bond0: (slave bond_slave_1): Releasing backup interface [ 120.025946][ T6937] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 120.044221][ T6920] team0: Port device team_slave_0 removed [ 120.079655][ T6920] team0: Port device team_slave_1 removed [ 120.096583][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.105299][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.116424][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.125334][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.153237][ T6920] bond0: (slave wlan1): Releasing backup interface [ 120.424925][ T6937] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.882237][ T6967] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 121.114224][ T6976] netem: change failed [ 121.960168][ T7012] netlink: 'syz.0.279': attribute type 21 has an invalid length. [ 122.251028][ T7026] netem: change failed [ 122.478633][ T7032] __nla_validate_parse: 5 callbacks suppressed [ 122.478654][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 122.530140][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 122.664541][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 122.722006][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 122.748327][ T7048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.788856][ T7046] syzkaller1: entered promiscuous mode [ 122.806982][ T7046] syzkaller1: entered allmulticast mode [ 123.522657][ T7079] netlink: 'syz.2.300': attribute type 3 has an invalid length. [ 123.532102][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.300'. [ 123.797888][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 123.838792][ T7091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 123.856527][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 123.887489][ T7091] nbd: device at index 2 is going down [ 123.951713][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 123.998534][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 124.098227][ T7066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 124.190158][ T7066] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 124.264573][ T6667] udevd[6667]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 124.266620][ T7066] gretap1: entered promiscuous mode [ 124.294346][ T7066] gretap1: entered allmulticast mode [ 124.357190][ T7097] trusted_key: syz.3.306 sent an empty control message without MSG_MORE. [ 124.418163][ T10] lo speed is unknown, defaulting to 1000 [ 125.143690][ T7126] FAULT_INJECTION: forcing a failure. [ 125.143690][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.208748][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 125.208776][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.208788][ T7126] Call Trace: [ 125.208796][ T7126] [ 125.208805][ T7126] dump_stack_lvl+0x189/0x250 [ 125.208834][ T7126] ? __pfx____ratelimit+0x10/0x10 [ 125.208862][ T7126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.208885][ T7126] ? __pfx__printk+0x10/0x10 [ 125.208927][ T7126] should_fail_ex+0x414/0x560 [ 125.208958][ T7126] _copy_to_user+0x31/0xb0 [ 125.208984][ T7126] simple_read_from_buffer+0xe1/0x170 [ 125.209018][ T7126] proc_fail_nth_read+0x1b3/0x220 [ 125.209045][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.209072][ T7126] ? rw_verify_area+0x2a6/0x4d0 [ 125.209095][ T7126] ? __lock_acquire+0xab9/0xd20 [ 125.209121][ T7126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.209145][ T7126] vfs_read+0x200/0xa30 [ 125.209169][ T7126] ? fdget_pos+0x247/0x320 [ 125.209193][ T7126] ? __pfx___mutex_lock+0x10/0x10 [ 125.209221][ T7126] ? __pfx_vfs_read+0x10/0x10 [ 125.209249][ T7126] ? __fget_files+0x2a/0x420 [ 125.209283][ T7126] ? __fget_files+0x3a0/0x420 [ 125.209310][ T7126] ? __fget_files+0x2a/0x420 [ 125.209355][ T7126] ksys_read+0x145/0x250 [ 125.209383][ T7126] ? __pfx_ksys_read+0x10/0x10 [ 125.209405][ T7126] ? rcu_is_watching+0x15/0xb0 [ 125.209431][ T7126] ? do_syscall_64+0xbe/0x3b0 [ 125.209476][ T7126] do_syscall_64+0xfa/0x3b0 [ 125.209501][ T7126] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.209527][ T7126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.209546][ T7126] ? clear_bhb_loop+0x60/0xb0 [ 125.209571][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.209589][ T7126] RIP: 0033:0x7f169c78d5fc [ 125.209607][ T7126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.209623][ T7126] RSP: 002b:00007f169d543030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.209645][ T7126] RAX: ffffffffffffffda RBX: 00007f169c9b5fa0 RCX: 00007f169c78d5fc [ 125.209659][ T7126] RDX: 000000000000000f RSI: 00007f169d5430a0 RDI: 0000000000000007 [ 125.209671][ T7126] RBP: 00007f169d543090 R08: 0000000000000000 R09: 0000000000000000 [ 125.209682][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.209693][ T7126] R13: 00007f169c9b6038 R14: 00007f169c9b5fa0 R15: 00007ffe4c18f1e8 [ 125.209728][ T7126] [ 125.216190][ T7137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 125.380213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.424157][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.629782][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.260858][ T7167] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 126.365084][ T7167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.466109][ T7169] bond1: (slave gretap2): making interface the new active one [ 126.484330][ T7169] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 126.503666][ T7181] 8021q: VLANs not supported on lo [ 126.716260][ T7191] netlink: 'syz.1.339': attribute type 4 has an invalid length. [ 126.742470][ T7191] `: renamed from bond0 (while UP) [ 126.957332][ T7201] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.140821][ T7209] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 127.165028][ T7210] bridge_slave_1: left allmulticast mode [ 127.171624][ T7210] bridge_slave_1: left promiscuous mode [ 127.178953][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.202095][ T7210] bridge_slave_0: left allmulticast mode [ 127.208928][ T7210] bridge_slave_0: left promiscuous mode [ 127.239017][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.527824][ T7218] netlink: 'syz.1.349': attribute type 9 has an invalid length. [ 127.563983][ T7218] __nla_validate_parse: 11 callbacks suppressed [ 127.564005][ T7218] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.349'. [ 128.077201][ T7246] netem: change failed [ 128.202405][ T7252] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 128.393789][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 128.423753][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 128.524413][ T7259] veth3: entered allmulticast mode [ 128.555420][ T7267] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.363'. [ 128.827626][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 128.844062][ T7276] netlink: 'syz.1.367': attribute type 5 has an invalid length. [ 128.852197][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 128.917756][ T7276] geneve2: entered promiscuous mode [ 128.947119][ T7276] geneve2: entered allmulticast mode [ 128.979238][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 129.020771][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 129.068926][ T59] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 129.106339][ T59] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 129.336636][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.738618][ T7313] bridge_slave_0: left allmulticast mode [ 129.776339][ T7313] bridge_slave_0: left promiscuous mode [ 129.787198][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.796652][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 129.813086][ T7313] bridge_slave_1: left allmulticast mode [ 129.818872][ T7313] bridge_slave_1: left promiscuous mode [ 129.825981][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.840716][ T7313] bond0: (slave bond_slave_0): Releasing backup interface [ 129.853133][ T7313] bond0: (slave bond_slave_1): Releasing backup interface [ 129.872089][ T7313] team0: Port device team_slave_0 removed [ 129.882936][ T7313] team0: Port device team_slave_1 removed [ 129.894400][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.903151][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.915347][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.923166][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.961248][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.223137][ T7313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.377'. [ 130.591570][ T7349] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 130.819585][ T7359] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 130.829149][ T7363] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.388'. [ 131.119873][ T7370] sctp: [Deprecated]: syz.0.392 (pid 7370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.119873][ T7370] Use struct sctp_sack_info instead [ 131.169819][ T7371] sctp: [Deprecated]: syz.0.392 (pid 7371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.169819][ T7371] Use struct sctp_sack_info instead [ 131.494780][ T7389] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 131.543591][ T7390] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 131.631863][ T7390] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.670707][ T7389] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.981488][ T7403] netlink: 'syz.0.401': attribute type 21 has an invalid length. [ 132.129777][ T7409] team_slave_0: mtu greater than device maximum [ 132.473341][ T7416] syzkaller0: entered promiscuous mode [ 132.504566][ T7416] syzkaller0: entered allmulticast mode [ 132.585002][ T7431] __nla_validate_parse: 3 callbacks suppressed [ 132.585024][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 132.764880][ T7441] netlink: 300 bytes leftover after parsing attributes in process `syz.1.413'. [ 132.785815][ T7441] netlink: 300 bytes leftover after parsing attributes in process `syz.1.413'. [ 133.079672][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087234][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.424142][ T7458] netlink: 108 bytes leftover after parsing attributes in process `syz.3.418'. [ 133.861716][ T7451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.868382][ T7451] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.703602][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 134.951622][ T7493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.429'. [ 134.981543][ T94] block nbd0: Possible stuck request ffff888025187000: control (read@0,4096B). Runtime 30 seconds [ 135.120499][ T7498] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 135.137476][ T7498] netlink: 'syz.0.431': attribute type 8 has an invalid length. [ 135.163922][ T7505] netlink: 276 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.170749][ T7498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.431'. [ 135.314266][ T7511] veth0: entered promiscuous mode [ 135.348626][ T7511] veth0: left promiscuous mode [ 135.438779][ T7518] netem: change failed [ 135.742251][ T7530] vxcan1: tx address claim with dlc 0 [ 135.777167][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 135.968872][ T7539] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 136.210113][ T7546] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 136.217961][ T7546] netlink: 'syz.2.441': attribute type 3 has an invalid length. [ 136.226555][ T7546] netlink: 224 bytes leftover after parsing attributes in process `syz.2.441'. [ 136.236223][ T7546] NCSI netlink: No device for ifindex 131080 [ 137.242720][ T7534] erspan0: entered allmulticast mode [ 137.462368][ T7551] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 137.525004][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.533702][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.595685][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 137.619858][ T7560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.708575][ T7564] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 137.734344][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.444'. [ 137.838459][ T7572] netlink: 108 bytes leftover after parsing attributes in process `syz.2.450'. [ 137.941037][ T7578] tipc: Started in network mode [ 137.987246][ T7578] tipc: Node identity ac1414aa, cluster identity 4711 [ 137.997403][ T7578] tipc: Enabled bearer , priority 10 [ 138.020623][ T51] Bluetooth: hci2: command tx timeout [ 138.264159][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 138.294796][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 138.999091][ T7624] netlink: 244 bytes leftover after parsing attributes in process `syz.1.465'. [ 139.086001][ T7626] netlink: 108 bytes leftover after parsing attributes in process `syz.2.466'. [ 139.111050][ T10] tipc: Node number set to 2886997162 [ 139.406256][ T7638] netlink: 108 bytes leftover after parsing attributes in process `syz.1.471'. [ 139.427011][ T7636] netlink: 'syz.2.470': attribute type 21 has an invalid length. [ 139.483917][ T7636] netlink: 128 bytes leftover after parsing attributes in process `syz.2.470'. [ 139.584832][ T7636] netlink: 'syz.2.470': attribute type 4 has an invalid length. [ 139.600049][ T7636] netlink: 'syz.2.470': attribute type 5 has an invalid length. [ 139.618046][ T7636] netlink: 3 bytes leftover after parsing attributes in process `syz.2.470'. [ 139.708870][ T7649] nbd: must specify at least one socket [ 140.870374][ T7703] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 140.914154][ T7703] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 141.939130][ T7772] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 142.664514][ T7810] __nla_validate_parse: 8 callbacks suppressed [ 142.664535][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 142.686830][ T7814] netlink: 108 bytes leftover after parsing attributes in process `syz.0.515'. [ 142.696797][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 142.867191][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 142.908000][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 142.911258][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 142.926530][ T7820] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 142.949588][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 142.950642][ T7823] bridge_slave_1: left allmulticast mode [ 142.999788][ T7823] bridge_slave_1: left promiscuous mode [ 143.006146][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.040380][ T7823] bridge_slave_0: left allmulticast mode [ 143.058631][ T7823] bridge_slave_0: left promiscuous mode [ 143.095547][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.213176][ T7831] netlink: 108 bytes leftover after parsing attributes in process `syz.3.519'. [ 143.227218][ T7831] netlink: 108 bytes leftover after parsing attributes in process `syz.3.519'. [ 143.265002][ T7831] netlink: 108 bytes leftover after parsing attributes in process `syz.3.519'. [ 145.012981][ T7914] netlink: 'syz.4.541': attribute type 6 has an invalid length. [ 145.771167][ T7949] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 146.056982][ T7963] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 146.429238][ T7977] netem: change failed [ 147.112455][ T30] audit: type=1800 audit(1755741659.033:2): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.567" name="memory.events" dev="tmpfs" ino=595 res=0 errno=0 [ 147.190604][ T30] audit: type=1804 audit(1755741659.063:3): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.567" name="/newroot/113/memory.events" dev="tmpfs" ino=595 res=1 errno=0 [ 147.312367][ T8015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.375363][ T8019] netem: change failed [ 147.728582][ T8032] __nla_validate_parse: 19 callbacks suppressed [ 147.728602][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 148.030243][ T1099] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 148.285928][ T8065] netlink: 248 bytes leftover after parsing attributes in process `syz.3.582'. [ 148.352650][ T8068] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 148.709914][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 148.779311][ T8072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.809220][ T8072] bond2: (slave bond3): making interface the new active one [ 148.853916][ T8072] bond2: (slave bond3): Enslaving as an active interface with an up link [ 148.883302][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 148.893370][ T8068] erspan0: left allmulticast mode [ 148.956237][ T8084] syzkaller0: entered allmulticast mode [ 148.963736][ T8084] !: renamed from dummy0 (while UP) [ 149.008792][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 149.020242][ T8084] netlink: 45 bytes leftover after parsing attributes in process `syz.1.589'. [ 149.394497][ T8100] netlink: 'syz.1.596': attribute type 29 has an invalid length. [ 149.423386][ T8101] netlink: 'syz.1.596': attribute type 29 has an invalid length. [ 149.468149][ T8101] netlink: 'syz.1.596': attribute type 29 has an invalid length. [ 149.513486][ T8100] netlink: 'syz.1.596': attribute type 29 has an invalid length. [ 149.595581][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 149.619997][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 149.778004][ T8119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.599'. [ 149.822281][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 150.600863][ T8158] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 150.628625][ T8158] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 150.697603][ T8158] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 150.863998][ T8164] dvmrp0: entered allmulticast mode [ 151.194346][ T8177] bridge_slave_0: left allmulticast mode [ 151.204920][ T8177] bridge_slave_0: left promiscuous mode [ 151.216131][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.359338][ T8177] bridge_slave_1: left allmulticast mode [ 151.421511][ T8177] bridge_slave_1: left promiscuous mode [ 151.427398][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.473535][ T8177] bond0: (slave bond_slave_0): Releasing backup interface [ 151.491915][ T8177] bond0: (slave bond_slave_1): Releasing backup interface [ 151.507781][ T8177] team0: Port device team_slave_0 removed [ 151.519135][ T8177] team0: Port device team_slave_1 removed [ 151.527821][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.536285][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.547768][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.556294][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.612397][ T8192] netem: change failed [ 152.004966][ T8177] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 152.019207][ T8177] nbd: error processing sock list [ 152.027469][ T8177] block nbd4: shutting down sockets [ 152.027563][ T8207] syzkaller0: entered promiscuous mode [ 152.040991][ T8207] syzkaller0: entered allmulticast mode [ 152.617076][ T8226] netlink: 'syz.0.632': attribute type 11 has an invalid length. [ 152.669950][ T8226] netlink: 'syz.0.632': attribute type 11 has an invalid length. [ 152.869289][ T8240] netem: change failed [ 153.008773][ T8245] __nla_validate_parse: 45 callbacks suppressed [ 153.008795][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 153.054855][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 153.257122][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 153.260575][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 153.272494][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 153.406391][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 153.481857][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 153.505073][ T8265] netlink: 108 bytes leftover after parsing attributes in process `syz.2.642'. [ 153.528314][ T8262] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 153.543302][ T8262] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 153.719191][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 153.774730][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 153.953779][ T8288] netem: change failed [ 154.123842][ T8295] netlink: 'syz.0.650': attribute type 8 has an invalid length. [ 154.637901][ T8314] netlink: zone id is out of range [ 154.648551][ T8314] netlink: zone id is out of range [ 154.670458][ T8314] netlink: zone id is out of range [ 154.676041][ T8314] netlink: get zone limit has 8 unknown bytes [ 154.718925][ T8316] bridge0: port 1(batadv1) entered blocking state [ 154.750868][ T8316] bridge0: port 1(batadv1) entered disabled state [ 154.770855][ T8316] batadv1: entered allmulticast mode [ 154.803762][ T8316] batadv1: entered promiscuous mode [ 154.869335][ T8322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.896801][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.945286][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.947299][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.049131][ T8334] netlink: 'syz.3.661': attribute type 21 has an invalid length. [ 155.072380][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.079981][ T8322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.107765][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.190287][ T7753] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 155.200263][ T7753] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 155.460225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.633226][ T8361] vlan0: entered promiscuous mode [ 155.638421][ T8361] bridge0: entered promiscuous mode [ 155.728617][ T8374] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.778431][ T8375] mac80211_hwsim hwsim5 wlan1: default FDB implementation only supports local addresses [ 156.785460][ T8409] gtp1: entered promiscuous mode [ 156.811656][ T8409] gtp1: entered allmulticast mode [ 156.831039][ T8415] netlink: 'syz.3.679': attribute type 5 has an invalid length. [ 156.870873][ T1099] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.889537][ T1099] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.942073][ T1099] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.989640][ T1099] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.115484][ T8461] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.343950][ T8476] syzkaller1: entered promiscuous mode [ 158.365201][ T8476] syzkaller1: entered allmulticast mode [ 158.384921][ T8478] __nla_validate_parse: 15 callbacks suppressed [ 158.384950][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 158.402243][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 158.647708][ T8488] netlink: 108 bytes leftover after parsing attributes in process `syz.1.702'. [ 159.005293][ T8502] netlink: 'syz.0.706': attribute type 16 has an invalid length. [ 159.016730][ T8502] netlink: 'syz.0.706': attribute type 3 has an invalid length. [ 159.028199][ T8502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.706'. [ 159.194978][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.222177][ T8509] bond0: (slave rose0): Enslaving as an active interface with an up link [ 159.307869][ T8511] openvswitch: netlink: Message has 20 unknown bytes. [ 159.330409][ T8511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.421166][ T8511] tipc: Enabled bearer , priority 0 [ 159.471015][ T8517] syzkaller0: entered promiscuous mode [ 159.499651][ T8517] syzkaller0: entered allmulticast mode [ 159.575388][ T8511] tipc: Resetting bearer [ 159.617512][ T8510] tipc: Resetting bearer [ 159.682110][ T8510] tipc: Disabling bearer [ 159.746749][ T8532] netem: change failed [ 159.762724][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 159.903933][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 160.027736][ T8539] syzkaller0: entered promiscuous mode [ 160.053334][ T8539] syzkaller0: entered allmulticast mode [ 160.071779][ T8541] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 160.161698][ T8541] bond1: entered promiscuous mode [ 160.171085][ T8541] bond1: entered allmulticast mode [ 160.177144][ T8541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.189531][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 160.225201][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 160.265029][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 160.299756][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 160.576061][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.590432][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.600220][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.619662][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.637856][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.974316][ T8574] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.278231][ T8555] lo speed is unknown, defaulting to 1000 [ 162.739625][ T51] Bluetooth: hci5: command tx timeout [ 163.105939][ T8606] `: (slave bond_slave_0): Releasing backup interface [ 163.149239][ T8606] `: (slave bond_slave_1): Releasing backup interface [ 163.199132][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.209877][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.231130][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.238804][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.312127][ T893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.406197][ T8614] __nla_validate_parse: 4 callbacks suppressed [ 163.406219][ T8614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.739'. [ 163.533406][ T893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.441492][ T8555] chnl_net:caif_netlink_parms(): no params data found [ 164.819649][ T51] Bluetooth: hci5: command tx timeout [ 164.847204][ T8669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.019157][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 165.062951][ T94] block nbd0: Possible stuck request ffff888025187000: control (read@0,4096B). Runtime 60 seconds [ 165.085574][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.093400][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.101070][ T8555] bridge_slave_0: entered allmulticast mode [ 165.110595][ T8555] bridge_slave_0: entered promiscuous mode [ 165.112581][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.754'. [ 165.119911][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.132700][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.140118][ T8555] bridge_slave_1: entered allmulticast mode [ 165.189724][ T8555] bridge_slave_1: entered promiscuous mode [ 165.219901][ T8684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.758'. [ 165.410874][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.463526][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.694978][ T8555] team0: Port device team_slave_0 added [ 165.704306][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 165.713441][ T8555] team0: Port device team_slave_1 added [ 165.908017][ T8707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.942514][ T8711] netlink: 56 bytes leftover after parsing attributes in process `syz.0.765'. [ 165.970732][ T8711] netlink: 56 bytes leftover after parsing attributes in process `syz.0.765'. [ 166.001711][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.027657][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.095680][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.196352][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.236518][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.309475][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.476064][ T8733] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.770'. [ 166.486797][ T8555] hsr_slave_0: entered promiscuous mode [ 166.494308][ T8555] hsr_slave_1: entered promiscuous mode [ 166.503913][ T8555] debugfs: 'hsr0' already exists in 'hsr' [ 166.513439][ T8555] Cannot create hsr debugfs directory [ 166.519257][ T8736] netlink: 14 bytes leftover after parsing attributes in process `syz.3.773'. [ 166.564850][ T8736] hsr_slave_0: left promiscuous mode [ 166.578449][ T8736] hsr_slave_1: left promiscuous mode [ 166.704401][ T8740] netlink: 56 bytes leftover after parsing attributes in process `syz.0.774'. [ 166.901885][ T51] Bluetooth: hci5: command tx timeout [ 166.996768][ T8750] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 167.040895][ T8555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.054031][ T8555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.070355][ T8555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.087441][ T8555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.413216][ T8771] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 167.434349][ T8771] netlink: 'syz.3.781': attribute type 4 has an invalid length. [ 167.445009][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.561645][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.662009][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.670223][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.728689][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.735947][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.797082][ T8787] netlink: 'syz.1.784': attribute type 24 has an invalid length. [ 167.809884][ T8786] netlink: 'syz.1.784': attribute type 24 has an invalid length. [ 168.036394][ T8555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.246952][ T8801] dvmrp1: entered allmulticast mode [ 168.452403][ T8812] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.662136][ T8817] team0: mtu less than device minimum [ 168.986186][ T51] Bluetooth: hci5: command tx timeout [ 169.000873][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.069070][ T8830] veth0: entered promiscuous mode [ 169.116330][ T8828] veth0: left promiscuous mode [ 169.510585][ T8848] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 169.526573][ T8849] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 169.635633][ T8848] veth0_vlan: entered allmulticast mode [ 169.705528][ T8848] veth0_vlan: left promiscuous mode [ 169.732012][ T8848] veth0_vlan: entered promiscuous mode [ 169.743408][ T8848] team0: Device veth0_vlan failed to register rx_handler [ 169.815396][ T8849] veth0_vlan: left promiscuous mode [ 169.823656][ T8849] veth0_vlan: entered promiscuous mode [ 169.841146][ T8849] team0: Device veth0_vlan failed to register rx_handler [ 170.145985][ T8555] veth0_vlan: entered promiscuous mode [ 170.175876][ T8555] veth1_vlan: entered promiscuous mode [ 170.255993][ T8555] veth0_macvtap: entered promiscuous mode [ 170.274578][ T8555] veth1_macvtap: entered promiscuous mode [ 170.328076][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.368475][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.413277][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.437894][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.474344][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.502484][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.521187][ T8888] __nla_validate_parse: 3 callbacks suppressed [ 170.521216][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 170.543024][ T8888] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 170.557220][ T8888] netlink: 148 bytes leftover after parsing attributes in process `syz.1.806'. [ 170.811500][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.849446][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.891569][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 170.998850][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.012831][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.024864][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'. [ 171.078185][ T8902] syz.2.811 uses old SIOCAX25GETINFO [ 171.081841][ T8900] netem: change failed [ 171.191423][ T8892] delete_channel: no stack [ 171.245353][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.812'. [ 171.553004][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 171.647868][ T8923] netlink: 108 bytes leftover after parsing attributes in process `syz.2.817'. [ 171.908006][ T8937] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 171.908193][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.037125][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.077134][ T8943] netem: change failed [ 172.118135][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.276131][ T8946] veth3: entered allmulticast mode [ 172.288445][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.301092][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.317189][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.353273][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.366322][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.392751][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.419111][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.453043][ T8935] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 172.700923][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.917204][ T7753] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 172.981649][ T51] Bluetooth: hci5: command tx timeout [ 173.067526][ T8991] Illegal XDP return value 4294967289 on prog (id 155) dev N/A, expect packet loss! [ 173.116065][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.833'. [ 173.527765][ T9012] netlink: 108 bytes leftover after parsing attributes in process `syz.5.837'. [ 173.540788][ T9014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.836'. [ 174.274383][ T9040] ip6erspan0: entered promiscuous mode [ 174.298475][ T9040] ip6erspan0: entered allmulticast mode [ 175.015434][ T9077] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 175.183380][ T7773] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.229702][ T7773] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.252164][ T9089] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 176.134823][ T9115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.804037][ T9150] __nla_validate_parse: 7 callbacks suppressed [ 176.804058][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 177.160041][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'. [ 177.423043][ T9181] netlink: 2 bytes leftover after parsing attributes in process `syz.5.886'. [ 177.907964][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 178.711776][ T9237] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 178.726352][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 178.867306][ T9239] netlink: 'syz.2.902': attribute type 11 has an invalid length. [ 178.911856][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 179.143523][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.906'. [ 179.159500][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 179.183670][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 179.504058][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 179.676791][ T9277] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 179.694788][ T9277] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 179.729069][ T893] IPVS: starting estimator thread 0... [ 179.798310][ T9283] veth0_to_team: entered promiscuous mode [ 179.808299][ T9283] veth0_to_team: entered allmulticast mode [ 179.817761][ T893] IPVS: starting estimator thread 0... [ 179.835820][ T9283] validate_nla: 25 callbacks suppressed [ 179.835840][ T9283] netlink: 'syz.0.915': attribute type 8 has an invalid length. [ 179.849462][ T9281] IPVS: using max 25 ests per chain, 60000 per kthread [ 179.961975][ T9287] IPVS: using max 26 ests per chain, 62400 per kthread [ 180.105004][ T9293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.353890][ T9309] netlink: 'syz.3.923': attribute type 75 has an invalid length. [ 180.494833][ T9303] lo speed is unknown, defaulting to 1000 [ 180.640350][ T9324] tipc: New replicast peer: 255.255.255.255 [ 180.647313][ T9324] tipc: Enabled bearer , priority 10 [ 180.806203][ T9332] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 180.971267][ T9338] netlink: 'syz.5.930': attribute type 10 has an invalid length. [ 180.995994][ T9338] team0: Device ipvlan1 failed to register rx_handler [ 181.024657][ T9338] netlink: 'syz.5.930': attribute type 4 has an invalid length. [ 181.051395][ T9338] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 181.428090][ T9355] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 181.773220][ T5949] tipc: Node number set to 4158989660 [ 182.478084][ T9393] __nla_validate_parse: 4 callbacks suppressed [ 182.478114][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'. [ 182.626895][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 182.973261][ T9409] netlink: 'syz.0.952': attribute type 13 has an invalid length. [ 183.016447][ T9409] digital: digital_start_poll: Unknown protocol [ 183.096945][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.953'. [ 183.107410][ T9409] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 183.157371][ T9418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.954'. [ 183.173507][ T9414] dvmrp0: entered allmulticast mode [ 183.185506][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 183.198987][ T9418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.954'. [ 183.364369][ T9426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.424852][ T9427] tipc: Started in network mode [ 183.458355][ T9427] tipc: Node identity 528920a74a7f, cluster identity 4711 [ 183.489973][ T9427] tipc: Enabled bearer , priority 0 [ 183.531427][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 183.542507][ T9428] syzkaller0: entered promiscuous mode [ 183.548107][ T9428] syzkaller0: entered allmulticast mode [ 183.584792][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 183.653665][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 183.662200][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 183.672353][ T9428] tipc: Resetting bearer [ 183.725717][ T9428] tipc: Disabling bearer [ 183.978164][ T9460] netlink: 'syz.1.966': attribute type 30 has an invalid length. [ 184.207177][ T9473] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 184.300819][ T9473] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 184.356238][ T9477] pimreg3: entered allmulticast mode [ 184.383893][ T9479] netdevsim netdevsim3 : renamed from netdevsim0 [ 184.431016][ T9479] netdevsim netdevsim3 : left promiscuous mode [ 184.514388][ T9487] netlink: 'syz.0.973': attribute type 33 has an invalid length. [ 185.159801][ T9508] tun0: tun_chr_ioctl cmd 1074025675 [ 185.165188][ T9508] tun0: persist disabled [ 185.235048][ T9516] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 185.238521][ T9519] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 185.531021][ T9526] Bluetooth: MGMT ver 1.23 [ 185.866146][ T9541] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 185.910085][ T9541] nbd: couldn't find a device at index 1 [ 185.975050][ T9540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 186.030998][ T9550] netlink: 'syz.1.993': attribute type 8 has an invalid length. [ 186.825171][ T9579] lo speed is unknown, defaulting to 1000 [ 187.488398][ T9607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.822294][ T9620] __nla_validate_parse: 16 callbacks suppressed [ 187.822314][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 187.900363][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 188.401674][ T9641] netem: unknown loss type 0 [ 188.406630][ T9641] netem: change failed [ 188.627633][ T9652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.702512][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1027'. [ 188.860528][ T9662] netlink: 'syz.2.1028': attribute type 12 has an invalid length. [ 189.089667][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1030'. [ 189.109719][ T9671] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1030'. [ 189.120078][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 189.166930][ T9676] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 189.218410][ T9676] netlink: 'syz.5.1030': attribute type 1 has an invalid length. [ 189.284007][ T9685] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1035'. [ 189.412845][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 189.503228][ T9693] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1038'. [ 189.552254][ T9694] tipc: Enabled bearer , priority 12 [ 189.579165][ T9691] nft_compat: unsupported protocol 5 [ 190.621806][ T9741] tipc: New replicast peer: 255.255.255.255 [ 190.646484][ T9741] tipc: Enabled bearer , priority 10 [ 190.879891][ T9753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.183636][ T9761] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 191.198832][ T9761] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 191.236561][ T9761] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 191.346120][ T9765] tipc: Enabled bearer , priority 0 [ 191.359268][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1056'. [ 191.372939][ T9765] syzkaller0: entered promiscuous mode [ 191.391277][ T981] IPVS: starting estimator thread 0... [ 191.394511][ T9761] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.400160][ T9765] syzkaller0: entered allmulticast mode [ 191.509471][ T9771] IPVS: using max 23 ests per chain, 55200 per kthread [ 191.581443][ T9775] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 191.590230][ T9775] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 191.642957][ T9780] netlink: 'syz.3.1059': attribute type 8 has an invalid length. [ 191.677165][ T9764] tipc: Resetting bearer [ 191.752764][ T9764] tipc: Disabling bearer [ 191.769800][ T43] tipc: Node number set to 418783399 [ 192.251232][ T9806] netlink: 'syz.5.1063': attribute type 1 has an invalid length. [ 192.716062][ T9809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.751758][ T9809] bond1: (slave bond2): making interface the new active one [ 192.796299][ T9809] bond1: (slave bond2): Enslaving as an active interface with an up link [ 192.906648][ T9830] __nla_validate_parse: 3 callbacks suppressed [ 192.906667][ T9830] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1070'. [ 193.012622][ T9830] Bluetooth: MGMT ver 1.23 [ 193.116056][ T9840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1071'. [ 193.674415][ T9875] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 194.111103][ T9885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1080'. [ 194.186402][ T9890] netlink: 'syz.0.1083': attribute type 4 has an invalid length. [ 194.204970][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 194.246883][ T9898] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 194.317104][ T9899] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1084'. [ 194.511221][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.160185][ T94] block nbd0: Possible stuck request ffff888025187000: control (read@0,4096B). Runtime 90 seconds [ 195.354907][ T9943] tipc: Enabled bearer , priority 0 [ 195.365291][ T9943] syzkaller0: entered promiscuous mode [ 195.371211][ T9943] syzkaller0: entered allmulticast mode [ 195.407736][ T9943] tipc: Resetting bearer [ 195.504463][ T9939] tipc: Resetting bearer [ 195.588022][ T9939] tipc: Disabling bearer [ 195.742766][ T9961] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1102'. [ 195.755859][ T9961] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 195.787042][ T9961] 0ªî{X¹¦: entered allmulticast mode [ 195.820156][ T9961] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 196.022080][ T9969] netlink: 'syz.5.1105': attribute type 1 has an invalid length. [ 196.049482][ T9969] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1105'. [ 196.128552][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 196.457652][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 196.526836][ T9989] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 196.556889][ T9989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.860223][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 196.967322][T10013] netlink: 'syz.2.1117': attribute type 13 has an invalid length. [ 197.238935][T10021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.396130][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.400745][T10026] netlink: 'syz.1.1120': attribute type 24 has an invalid length. [ 198.107415][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1128'. [ 198.176735][T10063] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1129'. [ 198.338073][T10051] lo speed is unknown, defaulting to 1000 [ 198.353628][T10059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.366588][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 198.390164][T10060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.407104][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 198.695564][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 198.720316][T10085] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 198.766195][T10082] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1138'. [ 199.159947][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 199.160834][T10105] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 199.267159][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1143'. [ 199.557409][T10123] netlink: 'syz.2.1147': attribute type 21 has an invalid length. [ 199.570639][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1146'. [ 199.587988][T10124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.597414][T10123] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1147'. [ 199.675681][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.683586][T10125] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.793017][T10129] netlink: 'syz.1.1150': attribute type 4 has an invalid length. [ 201.046455][T10167] tipc: Enabled bearer , priority 0 [ 201.086897][T10167] syzkaller0: entered promiscuous mode [ 201.170093][T10167] syzkaller0: entered allmulticast mode [ 201.252215][T10167] tipc: Resetting bearer [ 201.324017][T10166] tipc: Resetting bearer [ 201.423919][T10166] tipc: Disabling bearer [ 201.462200][T10185] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 201.812901][T10197] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 202.044736][T10214] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 202.063212][T10207] lo speed is unknown, defaulting to 1000 [ 202.219632][T10217] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.525549][T10221] netem: change failed [ 202.723960][T10228] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 202.858706][T10228] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 203.379130][T10245] __nla_validate_parse: 5 callbacks suppressed [ 203.379151][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 203.567824][T10264] netem: change failed [ 203.734321][T10267] netem: unknown loss type 0 [ 203.751734][T10267] netem: change failed [ 204.159641][T10283] veth1_to_hsr: entered allmulticast mode [ 204.636124][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 204.780016][T10301] tipc: Enabled bearer , priority 10 [ 204.859065][T10302] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.000862][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 205.191659][T10317] IPv6: Can't replace route, no match found [ 205.377248][T10320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1212'. [ 205.563583][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 205.756855][T10337] netem: change failed [ 205.779654][ T5949] tipc: Node number set to 160445920 [ 206.028859][T10346] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1220'. [ 206.071691][T10350] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1218'. [ 206.139475][T10350] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1218'. [ 206.353448][T10362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.405993][T10363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.822463][T10385] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 206.862776][T10385] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 206.982972][T10389] netem: change failed [ 207.200046][T10397] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 207.231843][T10397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1233'. [ 207.293430][T10401] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 207.330970][T10401] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1233'. [ 207.411815][T10397] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 207.449642][T10397] netlink: 'syz.3.1233': attribute type 5 has an invalid length. [ 207.471534][T10401] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 207.505420][T10418] openvswitch: netlink: IPv4 tun info is not correct [ 207.542442][T10401] netlink: 'syz.3.1233': attribute type 5 has an invalid length. [ 208.161727][T10439] netem: change failed [ 208.471646][T10448] __nla_validate_parse: 2 callbacks suppressed [ 208.471667][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1251'. [ 208.824074][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'. [ 208.849097][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 209.114400][T10477] netlink: 'syz.3.1261': attribute type 13 has an invalid length. [ 209.149099][T10477] veth0_macvtap: left promiscuous mode [ 209.174884][T10477] macvtap0: entered allmulticast mode [ 209.221700][T10484] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 209.251820][T10477] macvtap0: refused to change device tx_queue_len [ 209.675426][T10502] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 209.701020][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 209.738314][T10502] netlink: 'syz.3.1270': attribute type 16 has an invalid length. [ 209.752574][T10509] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 209.768650][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 210.193568][T10523] netem: change failed [ 210.220703][T10522] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1276'. [ 210.428967][ T7753] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 210.898429][T10543] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.398040][T10554] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 211.428171][T10554] netlink: 'syz.0.1284': attribute type 4 has an invalid length. [ 211.494225][T10554] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1284'. [ 211.654457][T10566] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.663934][T10565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 211.690813][T10566] tipc: Enabled bearer , priority 10 [ 211.724655][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 211.759731][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 211.789840][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.799279][T10569] netem: change failed [ 211.894080][T10563] bridge0: port 3(vlan2) entered blocking state [ 211.932648][T10563] bridge0: port 3(vlan2) entered disabled state [ 211.951315][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 211.957495][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 211.990456][T10563] vlan2: entered allmulticast mode [ 212.004657][T10563] bridge0: entered allmulticast mode [ 212.019096][T10586] delete_channel: no stack [ 212.029880][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 212.059497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.103643][T10563] vlan2: left allmulticast mode [ 212.124708][T10563] bridge0: left allmulticast mode [ 212.151551][T10571] tipc: Enabled bearer , priority 0 [ 212.200609][T10591] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 212.294806][T10591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.394772][T10591] tipc: New replicast peer: 0.0.0.0 [ 212.402789][T10591] tipc: Enabled bearer , priority 10 [ 212.447510][T10591] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 212.486380][T10598] openvswitch: netlink: IP tunnel TTL not specified. [ 212.490230][T10600] openvswitch: netlink: IP tunnel TTL not specified. [ 212.515007][T10562] tipc: Disabling bearer [ 212.589888][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.637220][T10593] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 212.742419][T10612] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 212.762495][T10612] netlink: 'syz.3.1299': attribute type 4 has an invalid length. [ 212.858260][T10619] netlink: 'syz.1.1301': attribute type 21 has an invalid length. [ 213.072782][T10623] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 213.259532][T10640] netlink: 'syz.2.1307': attribute type 11 has an invalid length. [ 213.275932][T10623] gretap3: entered promiscuous mode [ 213.351374][T10623] bond6: (slave gretap3): making interface the new active one [ 213.390716][T10623] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 213.619503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.731733][T10647] netlink: 'syz.1.1311': attribute type 29 has an invalid length. [ 213.761108][T10647] __nla_validate_parse: 10 callbacks suppressed [ 213.761130][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 213.868558][T10652] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 214.104639][T10658] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1315'. [ 214.132970][T10658] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1315'. [ 214.567395][T10685] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1323'. [ 214.611963][T10675] bond1: entered promiscuous mode [ 214.637313][T10675] bond1: entered allmulticast mode [ 214.658851][T10675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.669414][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.906076][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 214.925291][T10675] bond1 (unregistering): Released all slaves [ 214.979603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.003532][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 215.029771][T10695] tipc: Enabling of bearer rejected, failed to enable media [ 215.205080][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 215.231042][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 215.389022][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1330'. [ 215.636204][T10716] tipc: Enabled bearer , priority 0 [ 215.670021][T10716] syzkaller0: entered promiscuous mode [ 215.699532][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.710095][T10716] syzkaller0: entered allmulticast mode [ 215.846518][T10723] netem: change failed [ 215.867683][T10716] tipc: Resetting bearer [ 216.265441][T10715] tipc: Resetting bearer [ 216.312715][T10750] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1347'. [ 216.324301][T10715] tipc: Disabling bearer [ 216.611241][T10764] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 216.629627][T10767] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1350'. [ 216.739410][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.634312][T10806] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.724653][T10814] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.779399][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.803616][T10806] bridge2: entered promiscuous mode [ 217.823706][T10806] bridge2: entered allmulticast mode [ 218.173079][T10827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.278437][T10839] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 218.483100][T10839] bond7: entered promiscuous mode [ 218.506184][T10839] bond7: entered allmulticast mode [ 218.516285][T10839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.548505][T10850] IPVS: Scheduler module ip_vs_sip not found [ 218.831596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.874670][T10839] bond7 (unregistering): Released all slaves [ 218.900316][T10860] tipc: Started in network mode [ 218.905470][T10860] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 218.919294][T10860] tipc: Enabled bearer , priority 10 [ 218.948059][T10871] __nla_validate_parse: 2 callbacks suppressed [ 218.948082][T10871] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1378'. [ 219.329743][T10891] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 219.656413][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 219.801884][T10915] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1390'. [ 219.813080][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1388'. [ 219.817345][T10915] netlink: 'syz.1.1390': attribute type 29 has an invalid length. [ 219.859525][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.029669][ T5927] tipc: Node number set to 4269801492 [ 220.899537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.909723][T10966] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1405'. [ 220.952968][T10968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.265437][T10984] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1410'. [ 221.295412][T10982] tipc: Enabling of bearer rejected, already enabled [ 221.337370][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 221.398583][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1409'. [ 221.449903][T10985] netlink: 'syz.5.1409': attribute type 7 has an invalid length. [ 221.730454][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 221.758849][T11006] nbd: nbd0 already in use [ 221.916802][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1420'. [ 221.939400][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.107228][T11019] netlink: 'syz.1.1423': attribute type 16 has an invalid length. [ 222.536997][T11035] pim6reg: entered allmulticast mode [ 222.597217][T11042] netlink: 'syz.1.1431': attribute type 11 has an invalid length. [ 222.979403][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.218124][T11064] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 224.029602][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.297685][T11123] tipc: Enabled bearer , priority 0 [ 224.495772][T11123] syzkaller0: entered promiscuous mode [ 224.511213][T11123] syzkaller0: entered allmulticast mode [ 224.517806][T11123] tipc: Resetting bearer [ 224.584750][T11137] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 224.638265][T11137] netlink: 'syz.2.1460': attribute type 4 has an invalid length. [ 224.668290][T11119] tipc: Resetting bearer [ 224.874786][T11145] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 224.882755][T11146] __nla_validate_parse: 12 callbacks suppressed [ 224.882776][T11146] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1464'. [ 224.902967][T11145] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1463'. [ 224.912912][T11145] netlink: 'syz.5.1463': attribute type 2 has an invalid length. [ 224.930742][T11145] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 225.059549][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.239060][ T94] block nbd0: Possible stuck request ffff888025187000: control (read@0,4096B). Runtime 120 seconds [ 226.101993][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.697903][T11119] tipc: Disabling bearer [ 226.721015][T11166] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 227.140050][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.292208][T11189] syz_tun: entered allmulticast mode [ 227.450689][T11201] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1478'. [ 227.537348][T11201] netlink: zone id is out of range [ 227.590020][T11201] netlink: get zone limit has 8 unknown bytes [ 227.594794][T11206] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 227.704865][T11210] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 227.761367][T11210] nbd: error processing sock list [ 227.792885][T11210] block nbd4: shutting down sockets [ 227.792939][T11215] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 227.807700][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1482'. [ 227.815293][T11206] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 227.829825][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 228.046936][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1485'. [ 228.179520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.430902][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 228.626200][T11242] bond0: entered promiscuous mode [ 228.633142][T11246] netlink: 'syz.1.1496': attribute type 13 has an invalid length. [ 228.650106][T11242] bond_slave_0: entered promiscuous mode [ 228.670755][T11242] bond_slave_1: entered promiscuous mode [ 228.692098][T11242] batadv0: entered promiscuous mode [ 228.705894][T11242] hsr1: entered allmulticast mode [ 228.739897][T11242] bond0: entered allmulticast mode [ 228.747515][T11242] bond_slave_0: entered allmulticast mode [ 228.755937][T11242] bond_slave_1: entered allmulticast mode [ 228.762734][T11242] batadv0: entered allmulticast mode [ 228.768813][T11242] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 228.832671][T11242] bond0: left promiscuous mode [ 228.838001][T11242] bond_slave_0: left promiscuous mode [ 228.846254][T11242] bond_slave_1: left promiscuous mode [ 228.854040][T11242] batadv0: left promiscuous mode [ 228.932280][T11246] 8021q: adding VLAN 0 to HW filter on device ` [ 228.951224][T11246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.219534][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.463425][T11278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1507'. [ 229.611009][T11290] netlink: 'syz.1.1508': attribute type 1 has an invalid length. [ 229.832189][T11290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.858048][T11302] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1510'. [ 229.928297][T11291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.945172][T11291] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.957887][T11308] [ 229.960342][T11308] ====================================================== [ 229.960889][T11291] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 229.967472][T11308] WARNING: possible circular locking dependency detected [ 229.967488][T11308] syzkaller #0 Not tainted [ 229.967498][T11308] ------------------------------------------------------ [ 229.967506][T11308] syz.5.1512/11308 is trying to acquire lock: [ 229.999486][T11308] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 230.008687][T11308] [ 230.008687][T11308] but task is already holding lock: [ 230.016139][T11308] ffff88814d941f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 230.025560][T11308] [ 230.025560][T11308] which lock already depends on the new lock. [ 230.025560][T11308] [ 230.036078][T11308] [ 230.036078][T11308] the existing dependency chain (in reverse order) is: [ 230.045285][T11308] [ 230.045285][T11308] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 230.053386][T11308] lock_acquire+0x120/0x360 [ 230.058470][T11308] _raw_spin_lock_bh+0x36/0x50 [ 230.063853][T11308] nr_rt_device_down+0x12a/0x720 [ 230.069321][T11308] nr_device_event+0x137/0x150 [ 230.074622][T11308] notifier_call_chain+0x1b3/0x3e0 [ 230.080352][T11308] netif_close_many+0x29c/0x410 [ 230.086164][T11308] netif_close+0x158/0x210 [ 230.091310][T11308] dev_close+0x10a/0x220 [ 230.096177][T11308] bpq_device_event+0x377/0x6a0 [ 230.101563][T11308] notifier_call_chain+0x1b3/0x3e0 [ 230.107199][T11308] netif_close_many+0x29c/0x410 [ 230.112609][T11308] netif_close+0x158/0x210 [ 230.117826][T11308] dev_close+0x10a/0x220 [ 230.122781][T11308] bond_setup_by_slave+0x5f/0x3f0 [ 230.128506][T11308] bond_enslave+0x7a0/0x3a20 [ 230.133618][T11308] bond_do_ioctl+0x635/0x9b0 [ 230.138826][T11308] bond_siocdevprivate+0x17e/0x350 [ 230.144557][T11308] dev_ifsioc+0xb57/0xf00 [ 230.149619][T11308] dev_ioctl+0x84c/0x1150 [ 230.154532][T11308] sock_ioctl+0x719/0x790 [ 230.159497][T11308] __se_sys_ioctl+0xfc/0x170 [ 230.164799][T11308] do_syscall_64+0xfa/0x3b0 [ 230.169935][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.176525][T11308] [ 230.176525][T11308] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 230.184383][T11308] lock_acquire+0x120/0x360 [ 230.189672][T11308] _raw_spin_lock_bh+0x36/0x50 [ 230.194988][T11308] nr_rt_device_down+0xa9/0x720 [ 230.200366][T11308] nr_device_event+0x137/0x150 [ 230.205678][T11308] notifier_call_chain+0x1b3/0x3e0 [ 230.211346][T11308] netif_close_many+0x29c/0x410 [ 230.216824][T11308] netif_close+0x158/0x210 [ 230.221954][T11308] dev_close+0x10a/0x220 [ 230.226985][T11308] bpq_device_event+0x377/0x6a0 [ 230.232636][T11308] notifier_call_chain+0x1b3/0x3e0 [ 230.238364][T11308] netif_close_many+0x29c/0x410 [ 230.243747][T11308] netif_close+0x158/0x210 [ 230.248690][T11308] dev_close+0x10a/0x220 [ 230.253656][T11308] bond_setup_by_slave+0x5f/0x3f0 [ 230.259219][T11308] bond_enslave+0x7a0/0x3a20 [ 230.264346][T11308] bond_do_ioctl+0x635/0x9b0 [ 230.269585][T11308] bond_siocdevprivate+0x17e/0x350 [ 230.275250][T11308] dev_ifsioc+0xb57/0xf00 [ 230.280125][T11308] dev_ioctl+0x84c/0x1150 [ 230.285000][T11308] sock_ioctl+0x719/0x790 [ 230.290028][T11308] __se_sys_ioctl+0xfc/0x170 [ 230.295270][T11308] do_syscall_64+0xfa/0x3b0 [ 230.300320][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.306766][T11308] [ 230.306766][T11308] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 230.314682][T11308] validate_chain+0xb9b/0x2140 [ 230.319974][T11308] __lock_acquire+0xab9/0xd20 [ 230.325183][T11308] lock_acquire+0x120/0x360 [ 230.330400][T11308] _raw_spin_lock_bh+0x36/0x50 [ 230.335787][T11308] nr_rt_ioctl+0x390/0xd50 [ 230.340833][T11308] sock_do_ioctl+0xd9/0x300 [ 230.345907][T11308] sock_ioctl+0x576/0x790 [ 230.350794][T11308] __se_sys_ioctl+0xfc/0x170 [ 230.356187][T11308] do_syscall_64+0xfa/0x3b0 [ 230.361307][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.367843][T11308] [ 230.367843][T11308] other info that might help us debug this: [ 230.367843][T11308] [ 230.378332][T11308] Chain exists of: [ 230.378332][T11308] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 230.378332][T11308] [ 230.392345][T11308] Possible unsafe locking scenario: [ 230.392345][T11308] [ 230.400094][T11308] CPU0 CPU1 [ 230.405570][T11308] ---- ---- [ 230.411026][T11308] lock(&nr_node->node_lock); [ 230.415892][T11308] lock(nr_node_list_lock); [ 230.423100][T11308] lock(&nr_node->node_lock); [ 230.430386][T11308] lock(nr_neigh_list_lock); [ 230.435073][T11308] [ 230.435073][T11308] *** DEADLOCK *** [ 230.435073][T11308] [ 230.443297][T11308] 2 locks held by syz.5.1512/11308: [ 230.448516][T11308] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 230.458015][T11308] #1: ffff88814d941f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 230.468209][T11308] [ 230.468209][T11308] stack backtrace: [ 230.474103][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.5.1512 Not tainted syzkaller #0 PREEMPT(full) [ 230.474122][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.474132][T11308] Call Trace: [ 230.474139][T11308] [ 230.474146][T11308] dump_stack_lvl+0x189/0x250 [ 230.474171][T11308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.474189][T11308] ? __pfx__printk+0x10/0x10 [ 230.474209][T11308] ? stack_trace_save+0x9c/0xe0 [ 230.474233][T11308] print_circular_bug+0x2ee/0x310 [ 230.474252][T11308] check_noncircular+0x134/0x160 [ 230.474271][T11308] validate_chain+0xb9b/0x2140 [ 230.474296][T11308] __lock_acquire+0xab9/0xd20 [ 230.474321][T11308] ? nr_rt_ioctl+0x390/0xd50 [ 230.474338][T11308] lock_acquire+0x120/0x360 [ 230.474359][T11308] ? nr_rt_ioctl+0x390/0xd50 [ 230.474378][T11308] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.474399][T11308] ? nr_rt_ioctl+0x390/0xd50 [ 230.474416][T11308] _raw_spin_lock_bh+0x36/0x50 [ 230.474436][T11308] ? nr_rt_ioctl+0x390/0xd50 [ 230.474453][T11308] nr_rt_ioctl+0x390/0xd50 [ 230.474476][T11308] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 230.474498][T11308] ? apparmor_capable+0x137/0x1b0 [ 230.474519][T11308] ? capable+0x89/0xe0 [ 230.474535][T11308] ? nr_ioctl+0x1b1/0x3b0 [ 230.474550][T11308] sock_do_ioctl+0xd9/0x300 [ 230.474571][T11308] ? __pfx_sock_do_ioctl+0x10/0x10 [ 230.474588][T11308] ? __lock_acquire+0xab9/0xd20 [ 230.474616][T11308] sock_ioctl+0x576/0x790 [ 230.474635][T11308] ? __pfx_sock_ioctl+0x10/0x10 [ 230.474652][T11308] ? __fget_files+0x2a/0x420 [ 230.474683][T11308] ? __fget_files+0x3a0/0x420 [ 230.474705][T11308] ? __fget_files+0x2a/0x420 [ 230.474729][T11308] ? bpf_lsm_file_ioctl+0x9/0x20 [ 230.474748][T11308] ? __pfx_sock_ioctl+0x10/0x10 [ 230.474767][T11308] __se_sys_ioctl+0xfc/0x170 [ 230.474787][T11308] do_syscall_64+0xfa/0x3b0 [ 230.474809][T11308] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.474830][T11308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.474846][T11308] ? clear_bhb_loop+0x60/0xb0 [ 230.474864][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.474879][T11308] RIP: 0033:0x7fdbfe18ebe9 [ 230.474895][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.474910][T11308] RSP: 002b:00007fdbff008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.474928][T11308] RAX: ffffffffffffffda RBX: 00007fdbfe3b5fa0 RCX: 00007fdbfe18ebe9 [ 230.474940][T11308] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 230.474950][T11308] RBP: 00007fdbfe211e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.474966][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.474976][T11308] R13: 00007fdbfe3b6038 R14: 00007fdbfe3b5fa0 R15: 00007ffc5f0dbc28 [ 230.474994][T11308] [ 230.752684][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.783009][T11295] netem: change failed [ 230.815292][T11297] veth1: entered promiscuous mode [ 230.825313][T11297] bond1: (slave veth1): Enslaving as an active interface with a down link [ 230.860193][T11290] vlan0: entered allmulticast mode [ 230.865565][T11290] bond1: entered allmulticast mode [ 231.780055][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.819976][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.859999][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.952876][ T5235] udevd[5235]: worker [6282] /devices/virtual/block/nbd0 is taking a long time [ 234.899984][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.939900][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.979998][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.020021][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.059995][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available