last executing test programs: 5m10.691151524s ago: executing program 4 (id=17386): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2c, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="a3d1ae454f39dcff3fb0", 0xa}], 0x1}}], 0x1, 0x4000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 5m9.611517978s ago: executing program 4 (id=17402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket(0x2c, 0x6, 0xdc63) (async) socket(0x2c, 0x6, 0xdc63) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, 0x0) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2}, 0xff}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) 5m9.266255621s ago: executing program 4 (id=17404): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000000)={0x0, r0, r0, 0x8, 0x0, '\x00', {0x8000000000, 0xb24a, 0x0, 0x7, 0x2, 0x3e55, 0x4, 0xae1, {0x2, 0x6}, {0x3fae, 0x401}, {0x81, 0xab33}, 0x9000000000000000, 0x3c3a, 0x7fff, 0x8, 0xc, 0x101, 0x2, 0x1, 0x688, 0x2, '\x00', 0x7ff, 0x40, 0x2, 0x7}}) socket$inet(0x2, 0xa, 0x401) (async) r1 = socket$inet(0x2, 0xa, 0x401) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000000c0)={{r0}, "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"}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000010c0)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x20) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000001100)={0xfff, 0x7fff}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001140)={{r0}, "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"}) pselect6(0x40, &(0x7f0000002140)={0x80000001, 0x3a7, 0x2, 0x7, 0x1, 0x6, 0xffffffffffffffff, 0x7}, &(0x7f0000002180)={0x1f3c, 0xc55a, 0x10, 0x9, 0x1, 0x1, 0x2, 0x2d800000}, &(0x7f00000021c0)={0x4, 0x401, 0xffffffffffffffff, 0x3, 0x6, 0x5, 0x2, 0x7f}, &(0x7f0000002200)={0x0, 0x989680}, &(0x7f0000002280)={&(0x7f0000002240)={[0x5b]}, 0x8}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000002500)={{&(0x7f00000022c0)=[{0x3, 0x800000000000000, 0xfff, {0x1, 0x2f2}, 0x5, 0x10000, 0xe89}, {0x3, 0x5, 0x5, {0x1d, 0x85}, 0x401, 0x0, 0xe}], 0x2, 0x40, 0x3, 0x3}, {&(0x7f0000002340)=[{0x800, 0x8}, {0xc, 0x6}, {0x4, 0x4}, {0xfffffffffffff377, 0x2}, {0x6, 0xc}, {0x6, 0xffffffff}, {0xf9, 0x1}], 0x7, 0x10, 0x4, 0x1}, {&(0x7f00000023c0)=[0x6, 0x10], 0x2, 0x8, 0x10, 0x6}, {&(0x7f0000002400)=[{0x7, 0x1, 0x5, 0x3, 0x10000}, {0x2, 0xaaf, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x100000000, 0x1, 0x2}, {0x6a, 0x9, 0x9, 0x2, 0x1832d7ae}], 0x4, 0x28, 0x80, 0x7}, {&(0x7f00000024c0)=[0x72b6, 0x31, 0x4], 0x3, 0x8, 0x5b, 0xfffffffffffffffc}}) vmsplice(r1, &(0x7f0000002980)=[{&(0x7f0000002580)="fb99471100d7cbe0fd6556b6148eaa52f65d4f0875d4a242b9bd3b6fa3c806a49d13f4e4b01312f5407f6b5a2d02653e2f413e3385c1bf410dfa5c4b27f3c80a42c28b730eb4efc22b0a9da0fe8a225d3108dfbbc6327c83e041eee9aac94d0ba2d8c6bdebfac1c930014ea80d055fc095282dbf4dedfd2018b8e8e34820559fc6b55e0ad119a4e2b5559bb905bb98590c86cf4bc47454c54dcab69466944172190a45587e080a5c3a9d334b5cf2bcd3abd10a876a5e80d3bce588ec2bd2f00eea7d169e47955b6a074727a071f3dcc03f62ae3dbd8f8768e6cf5919c8c49044dea7f65135c26f5aee72f8d66066e3323dc48ac359024e93", 0xf8}, {&(0x7f0000002680)="59ab910f71b6790b49f15d4f549029321158204e6453e473a7a6f0a8c1ca9213aed4076e25927d27fd37ed2f2cd30c7e6e9f833a11b257cf11217fc8ad8ff4468ca8d68def6c5ae66a484d3ef82cba472a29fbfb655c56949bff2bf67008baf5c16a46a07f6279749d229b57f0ab29e976800bf9cc02bc20f6dac393614b0184778a7e00015d3d26a2bd8e3b3e1d6ac94b92e062cb807204d4f76d7a67caa43559b4c1b87c00e71abb07607f07f3571046f6c2a0b9c5d14abafcdc5a771f3d0e9d1376fcf5be5e11930f8523f14b2e8a4ba20a51af2dcdcd2da83fe623554e2079502c9446ffda3f9cdc133fc0adc08a0b091d979783", 0xf6}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="8776651c3f179dee54bfea1b15077e9d08fc134bbb7371ec3e662e4d3a1369a5bfd423663401d33a32cc9d4e5d8a10a7aa438fc295c05e80720bf72385415cdb4149695b3700f6f3f632cdc1f53bdf39ece8401cfd2dcba5372b10d2b98f234df31119f7a10708f4f6fea4679473cb0cf4d65f700a4f159997dcb282ea72c4dd10ade7998d3f87af96e0f7a0d109ecb8d4e0b65cb179f0bc2f429c70ab637ccf493979b6f13f5beaa48d0be51289e730a571674434e3d61fea85dfa3e0ed83e35f48e141ba1044cd43918c8e35b5bda68b796de51ba27237921eeb1e5f810ca63baa33", 0xe3}, {&(0x7f00000028c0)="f8aa17648bd79e464d219b78f1082635e886a1cccf25031030d98d8b6355f09f4a8fb0a1c82f836902151e24aab07932d4719925c9718573885159ee84ff768e6480d7bb7dcd94d06fd3ac07fbc3d828de947a957bdb0ced12798d7a9da98a5951a25e1901495948b0b7c9", 0x6b}, {&(0x7f0000002940)="bc9de32831bbbc901af88973f8a0de99c88e3d3c5cb03659c417de77dd1d442b50c2566d47db724b0d841b8dd686ea0e4512be3a2c1503b0bad7a1f1b11c2b", 0x3f}], 0x6, 0x0) (async) vmsplice(r1, &(0x7f0000002980)=[{&(0x7f0000002580)="fb99471100d7cbe0fd6556b6148eaa52f65d4f0875d4a242b9bd3b6fa3c806a49d13f4e4b01312f5407f6b5a2d02653e2f413e3385c1bf410dfa5c4b27f3c80a42c28b730eb4efc22b0a9da0fe8a225d3108dfbbc6327c83e041eee9aac94d0ba2d8c6bdebfac1c930014ea80d055fc095282dbf4dedfd2018b8e8e34820559fc6b55e0ad119a4e2b5559bb905bb98590c86cf4bc47454c54dcab69466944172190a45587e080a5c3a9d334b5cf2bcd3abd10a876a5e80d3bce588ec2bd2f00eea7d169e47955b6a074727a071f3dcc03f62ae3dbd8f8768e6cf5919c8c49044dea7f65135c26f5aee72f8d66066e3323dc48ac359024e93", 0xf8}, {&(0x7f0000002680)="59ab910f71b6790b49f15d4f549029321158204e6453e473a7a6f0a8c1ca9213aed4076e25927d27fd37ed2f2cd30c7e6e9f833a11b257cf11217fc8ad8ff4468ca8d68def6c5ae66a484d3ef82cba472a29fbfb655c56949bff2bf67008baf5c16a46a07f6279749d229b57f0ab29e976800bf9cc02bc20f6dac393614b0184778a7e00015d3d26a2bd8e3b3e1d6ac94b92e062cb807204d4f76d7a67caa43559b4c1b87c00e71abb07607f07f3571046f6c2a0b9c5d14abafcdc5a771f3d0e9d1376fcf5be5e11930f8523f14b2e8a4ba20a51af2dcdcd2da83fe623554e2079502c9446ffda3f9cdc133fc0adc08a0b091d979783", 0xf6}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="8776651c3f179dee54bfea1b15077e9d08fc134bbb7371ec3e662e4d3a1369a5bfd423663401d33a32cc9d4e5d8a10a7aa438fc295c05e80720bf72385415cdb4149695b3700f6f3f632cdc1f53bdf39ece8401cfd2dcba5372b10d2b98f234df31119f7a10708f4f6fea4679473cb0cf4d65f700a4f159997dcb282ea72c4dd10ade7998d3f87af96e0f7a0d109ecb8d4e0b65cb179f0bc2f429c70ab637ccf493979b6f13f5beaa48d0be51289e730a571674434e3d61fea85dfa3e0ed83e35f48e141ba1044cd43918c8e35b5bda68b796de51ba27237921eeb1e5f810ca63baa33", 0xe3}, {&(0x7f00000028c0)="f8aa17648bd79e464d219b78f1082635e886a1cccf25031030d98d8b6355f09f4a8fb0a1c82f836902151e24aab07932d4719925c9718573885159ee84ff768e6480d7bb7dcd94d06fd3ac07fbc3d828de947a957bdb0ced12798d7a9da98a5951a25e1901495948b0b7c9", 0x6b}, {&(0x7f0000002940)="bc9de32831bbbc901af88973f8a0de99c88e3d3c5cb03659c417de77dd1d442b50c2566d47db724b0d841b8dd686ea0e4512be3a2c1503b0bad7a1f1b11c2b", 0x3f}], 0x6, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000002a00)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000002a40)={0x2, 0x1}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000002a40)={0x2, 0x1}, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002a80)=0x5, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002ac0)={r1, 0x3, 0x7, 0x3a}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002ac0)={r1, 0x3, 0x7, 0x3a}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002b40)={0x4}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002b40)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002b00)={@cgroup=r0, 0xffffffffffffffff, 0xc, 0x2034, r3, @void, @void, @value=r4}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002bc0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002bc0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002cc0)=r4, 0x4) (async) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002cc0)=r4, 0x4) write(r7, &(0x7f0000002d00)="d07279c4141b3334e7e3ef8a5a55227722bf974976a0f1c7a0838c55b11dffa8eaaf5f6157d3b53140f0f159bd05843d5d65beff9d735035707be9b63d65265384e12d9307d8ea662cc778b048ef80ae2656ba907f8295e2102139e9064ff3a2414eea3726c0e81a1796de8db2d323d0994b3c992bf777397c27f0c3f5520a1a034daafd8b5ef1627ad827e7f9b95e89a3f448fe37a18aef", 0x98) (async) write(r7, &(0x7f0000002d00)="d07279c4141b3334e7e3ef8a5a55227722bf974976a0f1c7a0838c55b11dffa8eaaf5f6157d3b53140f0f159bd05843d5d65beff9d735035707be9b63d65265384e12d9307d8ea662cc778b048ef80ae2656ba907f8295e2102139e9064ff3a2414eea3726c0e81a1796de8db2d323d0994b3c992bf777397c27f0c3f5520a1a034daafd8b5ef1627ad827e7f9b95e89a3f448fe37a18aef", 0x98) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e00), r5) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e00), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003000)={@map=r3, 0xd, 0x1, 0x1000, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f80)=[0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003040)={@cgroup=r3, r3, 0x421db5215aea7e3d, 0x2000, 0x0, @value=r7, @void, @void, @void, r9}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003080)={0x0, 0x6141, 0x5, 0xf9}, &(0x7f00000030c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000003100)={r10, 0x2, 0x0, 0x5, 0x8}, &(0x7f0000003140)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000003180)={r11, @in6={{0xa, 0x4e21, 0x5, @local, 0x60000000}}, 0x8, 0x4}, &(0x7f0000003240)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000003180)={r11, @in6={{0xa, 0x4e21, 0x5, @local, 0x60000000}}, 0x8, 0x4}, &(0x7f0000003240)=0x90) 5m9.123361474s ago: executing program 4 (id=17406): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000540)={'nicvf0\x00', @multicast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r6, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000240)={@link_local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xa}}}}}}, 0x0) listen(r8, 0x0) close(r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250001002803cc52f8dbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) 5m6.354005477s ago: executing program 4 (id=17411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140100000000900010073797a30000000000900020173797a3200000000140000001100010000000000000000000500000a39e1b5486510071b72edf58304dfd7490889d98f5254bfc6ef2296e0d98dbdf5543c70e031b6e477e8f71287fe567fd8a00ee48571f36fcc35d8e349fa540bb2626d8d0a2d53cf0477041c6fd798791d5a739bbd04c92be471ada7d7ea0022f0b8f8d15cf9fa9ceba52e"], 0x88}}, 0x840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140100000000900010073797a30000000000900020173797a3200000000140000001100010000000000000000000500000a39e1b5486510071b72edf58304dfd7490889d98f5254bfc6ef2296e0d98dbdf5543c70e031b6e477e8f71287fe567fd8a00ee48571f36fcc35d8e349fa540bb2626d8d0a2d53cf0477041c6fd798791d5a739bbd04c92be471ada7d7ea0022f0b8f8d15cf9fa9ceba52e"], 0x88}}, 0x840) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x8) 5m6.25933127s ago: executing program 4 (id=17412): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "6096", 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0x5, 0x6, 0x1ff, 'syz0\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x7, 0x0, [0xfcb6, 0x6, 0x7ff, 0x3, 0x4, 0x0, 0x1, 0x3, 0xa, 0xd, 0xb2, 0x6, 0x9, 0x3, 0x8000, 0x3ff], 0x7}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r4}, 0xfffffffffffffff9, 0x2, 0x7fffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "6096", 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0x5, 0x6, 0x1ff, 'syz0\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x7, 0x0, [0xfcb6, 0x6, 0x7ff, 0x3, 0x4, 0x0, 0x1, 0x3, 0xa, 0xd, 0xb2, 0x6, 0x9, 0x3, 0x8000, 0x3ff], 0x7}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r4}, 0xfffffffffffffff9, 0x2, 0x7fffffff}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x25) (async) 4m51.185848058s ago: executing program 32 (id=17412): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "6096", 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0x5, 0x6, 0x1ff, 'syz0\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x7, 0x0, [0xfcb6, 0x6, 0x7ff, 0x3, 0x4, 0x0, 0x1, 0x3, 0xa, 0xd, 0xb2, 0x6, 0x9, 0x3, 0x8000, 0x3ff], 0x7}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r4}, 0xfffffffffffffff9, 0x2, 0x7fffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "6096", 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0x5, 0x6, 0x1ff, 'syz0\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x7, 0x0, [0xfcb6, 0x6, 0x7ff, 0x3, 0x4, 0x0, 0x1, 0x3, 0xa, 0xd, 0xb2, 0x6, 0x9, 0x3, 0x8000, 0x3ff], 0x7}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r4}, 0xfffffffffffffff9, 0x2, 0x7fffffff}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x50}}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2d, 'net'}]}, 0x25) (async) 5.147107778s ago: executing program 2 (id=19756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 4.950878983s ago: executing program 2 (id=19759): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) 4.030283699s ago: executing program 2 (id=19765): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@raw=[@initr0, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}], 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001238000400"/20], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r9, 0x0, 0x0, 0x4001, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x144, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x114, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x43}]}}}, {0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40a5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x748}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x600000000000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb0}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) close(r8) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r13, 0x2a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)="108478fea6fa731b7f91", 0xa}], 0x1}, 0x10) 3.512953895s ago: executing program 2 (id=19770): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x624, r2, 0xb29, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x27, 0x2a, [@mic={0x8c, 0x10, {0x214, "2b6429914e7c", @short="1d351e11b29dbeb6"}}, @channel_switch={0x25, 0x3, {0x1, 0xaf, 0xf8}}, @peer_mgmt={0x75, 0x4, {0x1, 0x27, @void, @void, @void}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x34, 0x2}}]}, @NL80211_ATTR_IE={0x125, 0x2a, [@mic={0x8c, 0x10, {0x604, "64e9ce910a4f", @short="61d734f83c96ea6d"}}, @rann={0x7e, 0x15, {{0x0, 0x16}, 0xf, 0x0, @device_a, 0x1000, 0x4, 0x3}}, @fast_bss_trans={0x37, 0x84, {0x0, 0x3, "9b7f94cf33953c759c61c79ae4899ad4", "00a59a78effde5e135a2f2fc2eaebdf8fea6b31701853a7f9723f83f178cd611", "4171fce47a202669187563039d465747f65cb1a000866061d24f86ce479d5847", [{0x1, 0x22, "accc7e2b312f9b4f65b5c25987d8cd794b68f8c07793d30a52f5ac5325446578c77a"}, {0x3, 0x5, "5b6e82f11a"}, {0x1, 0x5, "fcc0b5a64a"}]}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x9, 0x9, 0x5, 0x3}}, @perr={0x84, 0x2}, @fast_bss_trans={0x37, 0x5c, {0x8, 0x1, "89aa70a0eb403aa885dd185007c1f0b7", "809161dc8fdfd9a784232fec7158a205a77b6736b5c4e038e5c9f458b07bae78", "0048c1a19f0dcffed7410654da1669aa2230d1a34a4a65bf95f6a4ebd644d6c0", [{0x1, 0x8, "9ee43fa8247f70c2"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x152, 0xf, [@cf={0x4, 0x6, {0xf, 0x8, 0x5, 0x200}}, @fast_bss_trans={0x37, 0xce, {0x40, 0x6, "365afed8dc5b102df2ea0b1a8b1684ee", "732a2cf293fd2e11e4c575e8149fa163426b09e2c549622e8d863782e529c016", "267614b17867748ab2f1c470de582e451343f4680385533ee0d0c51d0abb1d65", [{0x1, 0x1b, "c9a27528f5d934ed429b477891eacc245e6cc65d7f4e271a677b18"}, {0x2, 0x13, "9bcf060eebba30bf26d7f7e75463cd48bc3b34"}, {0x4, 0x6, "89a7d3acad41"}, {0x2, 0x7, "7e209fa049e7b6"}, {0x2, 0xd, "18f7c9e5a293836ba6adf59fee"}, {0x2, 0x28, "386ecbdab01f0e6464b3cfa73059a60d0232d6ed043109435ce320dd36201f16f3f950261ac7edd6"}]}}, @rann={0x7e, 0x15, {{0x0, 0xf}, 0x14, 0x3, @device_b, 0x2, 0x8, 0x1}}, @random={0x7, 0x58, "9c5ae14613c7a97ec9a3e03dda27948a79b1f7cfae6be66492c4f73fb9019499123c065bcd8d39f975951f5744ab2b88e33d46be38ebbe69255ab96e59961cc090ed9aab8016a59a6d3e3df169c4e48dd8a7c0e778301782"}, @supported_rates={0x1, 0x3, [{0xc, 0x1}, {0x16, 0x1}, {0x24}]}]}, @NL80211_ATTR_FTM_RESPONDER={0xa4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x50, 0x2, "9c62de2cf83606286d6f1935ec4468e82a770a3879d04aac28879b71607e8b9d1682517632e6d310f509ae25ca761315cc823dd479952a5dfe3202ad65f38cd2776e238fbbe804d759bd634a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "34242731113788c1152922ca64115395ba69bf53d4cc75be9c9470c6915962b2e1581103a4671267ab37d6e88a2d8849013ff8aa001d012601fe4179dd0f43794e56"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x2c6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @random="21ff5d0a889d", {0xe, 0x10}}, 0x8, @default, 0x100, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x68}, @void, @void, @val={0x5, 0x1c, {0x9, 0x24, 0xf, "5454ee103b15af0a60ae7d2e340d89e4d096f81e71c69003b3"}}, @val={0x25, 0x3, {0x0, 0x1d8, 0x9c}}, @void, @val={0x3c, 0x4, {0x1, 0x0, 0xab, 0x4c}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x41}}, @void, [{0xdd, 0x62, "7283206c279a2b8c71718b034d3542dace83ad042c538a5522481bb373fe4acbfe7e646dcd0b9478d44fd8d1426e71dfd89020e4acb9e8ab8f4f7b430ed8cf98aaf8bf04068ee88d81c5723bc18a74a519b3aa3620bda0588fb4a0ea7069f5a688cf"}, {0xdd, 0x34, "5cdc5a645d565db3d38578f1982d809332c6ca5bf182636c26fc2115e4dcabe796c5b0fa1cbc6c25764dc85d6e9fdf593ec11b35"}, {0xdd, 0xf4, "aefa9aac8ecddb0d506a1313bb31cef22179619db080386983878e75779230581ef8d3cfe0fa6cfd479d3dea208421b2a5e5952cd9605b6b66be9b4bb19d80fc0283289dde78e28e33f9846a8167ed0bf56088b518415e5ed0f5b40b3a832d2c0ea4c340cfface484f9f63ff19c14ad222af947ea6b05d63a04cc15d9da8fa4c1977580c3fe0d642bf9512de29eebeda4f076e115c57e0174f251c981d3c623f7d79455a6a061969e5ecb193abad50a2450d194875b93c39535cdf3a019119575681910a7cf96ce259785849764e443dbd0b34242e0cecdd170aae5872afe85fa8370bc5a2a88e4f8cc753c62766791f88e46159"}, {0xdd, 0x42, "57ccca98c07f55a06cb9360688c19cbfae14cb69e3f7286fc3fdc0e957f70e0a6b5c71d6fcd4f98d5dcc6ee2168eea5631448f7a599d2190fdbe234c28bef13582ac"}, {0xdd, 0x8b, "684fb82e3c89b62b24f8d122fc69718707f4819e1d58fabd6ef0e7c28a4b936566b8a1dace60f2c1fdf528f791b6232eeff63e46d3e54eb6855fd152504d7b8038a0ee262fd6b9aa2ee98f808d8b7fd34083272cfe846ffedfd80a21a15fa166b66961e18f8b8a8512bdf6d31ef46c13f3d2dbe37302603b51599854828f5c03e4b9cd849f34108bcc9626"}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x800}, 0x4020) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x30}}, 0x0) 3.315534108s ago: executing program 1 (id=19774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2503004000080001000000000010000780", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.187014187s ago: executing program 2 (id=19776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) close(0x4) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x44008080) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) (async) sendmsg$nl_netfilter(r0, 0x0, 0x20000000) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x0) (async) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x85]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "01f8ffffffffffff79c7798100c7bf3e7d776b600ba81d2d6ba417e219edd86fb508441efcb75f7803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) 2.953054159s ago: executing program 1 (id=19779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x76f2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "29ba6b56d0a7196e", "40e4a73f1d9feb3ae4e8822ff0c11a5d", "8dbf2e2c", "b0f42cf2891a8376"}, 0x28) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x71, &(0x7f0000000140)="e964652b10ed147d72bb909029124463685f885e797e80a27454c93fa085c71c0b151f45d698427f80cf0ed2ee2a89c6bbfb9e53bd074717c4ee1b5d23285a4b1a40e0df276594f039057cd91123bcd499304055ac16b40349a0460ac44efb379bfb137c0010a561b56adb95fdc266a30e", 0xfffffffffffffdaa, 0x0, &(0x7f00000001c0)="b7893d160629342aca69a294c1fb6c7fffdef98b2ed5bf6680c3243f0156da62ac624b0e90b2d490e58b5d9cf90353e169b6c54862e3a29e9f37e51ac93697fe822be2fee0eb211b93c65817aec97ee5"}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 2.748283352s ago: executing program 2 (id=19780): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r5, 0x1, 0x27, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x80002000}, 0x10) r12 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1bff]}, 0x7, 0x7}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 2.515119518s ago: executing program 1 (id=19782): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, 0x0, 0x10802, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x9]}, {0xda, 0xac, 0xead, 0x7fffffffffffffff}}, 0x6, 0x0, 0x0}, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x100}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x20040084) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8881) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x24}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080d1}, 0x34008098) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd0500fddbdf25010000000800010000004773"], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) 2.304237974s ago: executing program 3 (id=19783): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.207114774s ago: executing program 5 (id=19784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000340)=""/171, 0x0, 0xab, 0x0, 0x6}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0xa2, &(0x7f00000003c0)}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1b0, r3, 0x32b, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf143}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x23}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "c2ae7f62665809be3d3903c7c5740fe0d3e1c9c39a5d5666185b4ab9b2cb76e9f4aa8375e44c05daee9e8187c2473ff3f302d35756374ccd363cc423fa5a8c63c4cee6bb70947fe427f748c24e63cb49f505047ef5bc4b6e9c15ef3f958e45a92dcecf762eec7f2863acf6258a28425cf1bbee7f6c07a765c6aa83a59c7c3fc6a70f8caab4173cba6d89c57b0beb4eff6a720c1adf16f411ea04682710c47726b6796d9cf75c5a532eed7d5f41eba5c4ba4f0d2043975ed7b29960b62544172f1625f1ca7c6e6c6629c8932ee6202638c17ec0bdede50cbce32c45762107593670"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2df}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2.00517244s ago: executing program 0 (id=19785): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x2}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000950e000000000000c1560000850000001900000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000300000000020000000200000000000000000000000000000b030000000000e84c74e3a21cbd5e3390dbae"], 0x0, 0x4a}, 0x20) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xf9b, 0x4) listen(r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000180)={0x27}, 0x6) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x128, 0x1170, 0x1398, 0x0, 0x1170, 0x248, 0x1398, 0x1398, 0x248, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x62, 0x2, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x7f], 0x0, 0x22}}, @inet=@rpfilter={{0x28}, {0x57f1718df6184a85}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x7, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) (async, rerun: 32) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000100)={@empty, @private=0xa010100, 0x0, "85f890e4aebb200138388d17416bde9351775625f037ba7da7dae35084bf3917", 0x3ff, 0x6548, 0x3, 0x7a}, 0x3c) ioctl$sock_netdev_private(r8, 0x89f3, &(0x7f0000000000)) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000101040000000000000000020000002400018014000180081c01007f00000108000200e00000020c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c000280050001002f000000080007400000000014000f8008000140000000000800024000000004"], 0x78}}, 0x0) 1.819213682s ago: executing program 0 (id=19786): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "0af0615d7d19a18b05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}, {0x0, 0x6, "51a0eedb"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0) 1.586320097s ago: executing program 0 (id=19787): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000eb0000000000001801000020207025000000000020332c6d20207b1af8ff00000000bfa1009da2ff2b2de2b02100f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000000000000000000000000000000000ff06"], 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.586088772s ago: executing program 1 (id=19788): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c"], 0x2c}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) close(r1) 1.585797487s ago: executing program 3 (id=19789): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010400000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.531595284s ago: executing program 5 (id=19790): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010300", 0x94}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080080003400000000240000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000100001"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1830000000d00000000050000000c009900020000006c00000052000e0088"], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a9c29ad30d07b280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="8000c50b0a000200b5150ea82cb30000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0, 0xb00}], 0x3}}], 0x1, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r9], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4f, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="92d9c21b010300", 0x94}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080080003400000000240000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000100001"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1830000000d00000000050000000c009900020000006c00000052000e0088"], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a9c29ad30d07b280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="8000c50b0a000200b5150ea82cb30000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0, 0xb00}], 0x3}}], 0x1, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r8}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r9], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4f, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 1.244520336s ago: executing program 3 (id=19791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/118, 0x76}, {0x0}, {0x0}], 0x3}, 0x5}], 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept$alg(r0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/118, 0x76}, {0x0}, {0x0}], 0x3}, 0x5}], 0x1, 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) 1.159077541s ago: executing program 1 (id=19792): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000340), 0x4) 1.158431723s ago: executing program 5 (id=19793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 939.544615ms ago: executing program 1 (id=19794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x5ee5}, &(0x7f00000001c0)=0x8) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={r0, 0xda, "1bf060082423cf0524f4f97810e8d0a014bf798a32b6f59b8590a1a30fd75e540bc634312b68cad20c914b0943e9d73fdd657587ad27cefe788147459c16dd33a36c85c3d4bc0cde6b2029be8fa946584bba9f0767c18eb1d037be4d03b1032212c014cf1148da5c8a65767eaa6d5e494fef320dda5405d6fd0ab9625b545bbd66f1df5a295ab04aff3892fdcb8a7c5e61ab1c8f0add1a17fbcb2480e404f83a622f667dd157e86cf304d5d76ef4783c9d2127f3da301734f6583f1358b5097bcf831df7f74f949cd3498244998bc40bec1e7c1a724010c9d278"}, &(0x7f0000000200)=0xe2) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 786.081781ms ago: executing program 0 (id=19795): r0 = socket(0x2b, 0x3, 0x3) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1ce63b84ed3dcfb}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140e, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) unshare(0x20000400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket(0x2b, 0x3, 0x3) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc1ce63b84ed3dcfb}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140e, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) (async) unshare(0x20000400) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) 690.531986ms ago: executing program 5 (id=19796): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 683.291245ms ago: executing program 3 (id=19797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006c00010027bd7000fedbdf2500000000d6"], 0x20}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 490.499169ms ago: executing program 0 (id=19798): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x0, 0x34f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) listen(r1, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7, 0x8}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0x3a, 0x4, 0x8000, 0x938, 0x9, 0x5, 0x1ce, 0x8, r9}, &(0x7f0000000400)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) 418.612471ms ago: executing program 3 (id=19799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) 417.641743ms ago: executing program 5 (id=19800): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000300)=""/77, 0x4d, 0x0, &(0x7f0000000380)=""/170, 0xaa}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000480)='bond_slave_0\x00', 0x40200, &(0x7f00000004c0)={@align=0x2, {0x6, 0x5, 0x2, 0x19e00000000}}, 0x9, &(0x7f0000000500), &(0x7f0000000540)=0x6}, {[0x9, 0xf504, 0x7fffffff, 0x80]}, 0x3, 0xa6, &(0x7f0000000580)=""/166}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x60) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008b00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) read$alg(r5, &(0x7f0000000100)=""/68, 0x44) (async, rerun: 64) write(r7, &(0x7f0000000680)="4ede", 0x2) (rerun: 64) splice(r7, &(0x7f0000000040), r6, 0x0, 0x800000000ff, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x6) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 79.940784ms ago: executing program 5 (id=19801): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001040)=ANY=[@ANYBLOB='t'], 0x174}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100024}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x12, 0x800, 0x70bd29, 0x25dfdbfe, {0x2c, 0x8, 0xfc, 0x10, {0x4e20, 0x4e23, [0x5, 0x8, 0x5, 0xfffffff7], [0x4, 0x10001, 0xa4d, 0xe], 0x0, [0x7, 0xc]}, 0xb5, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "e021fe8fd94ca7cef1e9022b601487247c98df2d1862a43134f1f0f9c35511560e61951a5b79fa8cc3513467f40568649ae18d6f03f7c4a3ea755f221402d1cf50b15f5f591a8f7869859a849de456d6d27e8d1e014906621f17144f3491735a740698c0d0eeb01228969ce765106a00c5407a41c4182722c147b4e6ee455a5173698aeb4e9550e94992666e12a9469050bccd06"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "701ef6c41d2fadd88c24c3a31cd6ad075e31dd0ed4749f409131db75fe7fe83c2a7fba811b84e4f2cf33e7a8b5ac1b366c3da5912eef8f83f6b0a925724826d8d6ef9d11525cc14165bc7c0013d05b84aa314ce1f8080d3ae412d0f6e2377c634b5a5b12c7ab51e9fda3bedef40c2f877f389d6b78acfa009922217034dc8083f86054aebccbf500"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x41) 200.073µs ago: executing program 0 (id=19802): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="720ac4ff000000e771106b00000000009500000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 0s ago: executing program 3 (id=19803): r0 = socket$netlink(0x10, 0x3, 0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x79, 0x7}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x61, 0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/110, 0x3b, 0x6e, 0x1, 0xa}, 0x28) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0xf, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x800}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 1841.530098][ T7127] syzkaller0: entered allmulticast mode [ 1841.539541][ T7128] 0: reclassify loop, rule prio 0, protocol 800 [ 1841.547222][ T7127] netlink: 'syz.5.17970': attribute type 6 has an invalid length. [ 1841.637487][ T7134] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1842.207049][ T7163] netlink: 496 bytes leftover after parsing attributes in process `syz.3.17981'. [ 1842.232557][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17980'. [ 1842.639600][ T7181] set match dimension is over the limit! [ 1842.707480][ T7186] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17988'. [ 1842.791556][ T7188] tc_dump_action: action bad kind [ 1842.843523][ T7191] netlink: 'syz.2.17990': attribute type 1 has an invalid length. [ 1842.853775][ T7191] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17990'. [ 1842.874827][ T7191] netlink: 1 bytes leftover after parsing attributes in process `syz.2.17990'. [ 1843.193197][ T7212] netlink: 'syz.3.17997': attribute type 19 has an invalid length. [ 1843.434893][ T7216] veth3: entered allmulticast mode [ 1843.670398][ T7232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1843.780051][ T7246] netlink: 'syz.1.18006': attribute type 1 has an invalid length. [ 1843.792394][ T7246] netlink: 'syz.1.18006': attribute type 1 has an invalid length. [ 1843.800913][ T7246] netlink: 'syz.1.18006': attribute type 8 has an invalid length. [ 1844.442421][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1844.514696][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1844.553763][ T7291] openvswitch: netlink: IPv4 tun info is not correct [ 1844.920812][ T7306] netlink: 'syz.0.18023': attribute type 1 has an invalid length. [ 1845.001761][ T7306] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1845.028852][ T7306] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1845.062044][ T7306] bond10: (slave ip6gre3): making interface the new active one [ 1845.073494][ T7306] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 1845.100546][T14168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.264524][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 1845.653830][ T7336] syzkaller0: entered promiscuous mode [ 1845.660820][ T7336] syzkaller0: entered allmulticast mode [ 1846.116786][ T7370] __nla_validate_parse: 16 callbacks suppressed [ 1846.116809][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18044'. [ 1846.137039][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18044'. [ 1846.210482][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18041'. [ 1846.234892][ T7376] ip6gre1: entered promiscuous mode [ 1846.247987][ T7368] validate_nla: 2 callbacks suppressed [ 1846.248011][ T7368] netlink: 'syz.1.18041': attribute type 1 has an invalid length. [ 1846.362363][ T7368] bond6: entered promiscuous mode [ 1846.395240][ T7368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1846.473287][ T7373] bond6: (slave bridge1): making interface the new active one [ 1846.481765][ T7373] bridge1: entered promiscuous mode [ 1846.493490][ T7373] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 1846.510894][ T7386] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001 [ 1846.669558][ T7394] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1847.525879][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18061'. [ 1847.704904][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18066'. [ 1847.744237][ T7463] macsec1: entered promiscuous mode [ 1847.773188][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18066'. [ 1847.783593][ T7458] netlink: 2 bytes leftover after parsing attributes in process `syz.5.18066'. [ 1848.327990][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1848.338960][ T7483] xt_hashlimit: size too large, truncated to 1048576 [ 1848.344253][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1848.356304][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1848.364965][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1848.373570][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1848.527990][ T7497] nbd: must specify a size in bytes for the device [ 1848.951246][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18079'. [ 1849.273421][ T7526] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1849.372136][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18083'. [ 1849.424292][ T7488] lo speed is unknown, defaulting to 1000 [ 1849.434178][ T7488] C speed is unknown, defaulting to 1000 [ 1849.443384][ T7533] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18086'. [ 1849.536775][ T7534] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1849.721085][ T7542] vlan2: entered promiscuous mode [ 1849.726228][ T7542] bridge0: entered promiscuous mode [ 1849.772913][ T7550] syzkaller0: entered promiscuous mode [ 1849.780417][ T7550] syzkaller0: entered allmulticast mode [ 1850.413501][ T7569] sctp: [Deprecated]: syz.3.18096 (pid 7569) Use of int in max_burst socket option. [ 1850.413501][ T7569] Use struct sctp_assoc_value instead [ 1850.458780][T16001] Bluetooth: hci5: command tx timeout [ 1850.542001][ T7488] chnl_net:caif_netlink_parms(): no params data found [ 1850.647802][ T7580] macvtap0: entered promiscuous mode [ 1850.654251][ T7580] vlan0: entered promiscuous mode [ 1850.660051][ T7580] macvtap0: entered allmulticast mode [ 1850.665638][ T7580] vlan0: entered allmulticast mode [ 1850.672974][ T7580] veth0_vlan: entered allmulticast mode [ 1850.898808][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.922135][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.940477][ T7488] bridge_slave_0: entered allmulticast mode [ 1850.958973][ T7488] bridge_slave_0: entered promiscuous mode [ 1850.979253][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.986478][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.000771][ T7488] bridge_slave_1: entered allmulticast mode [ 1851.010692][ T7488] bridge_slave_1: entered promiscuous mode [ 1851.073903][ T7488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.102563][ T7488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.155600][ T7488] team0: Port device team_slave_0 added [ 1851.164390][ T7488] team0: Port device team_slave_1 added [ 1851.200167][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.207239][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.236276][ T7488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.249677][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.256677][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.284423][ T7488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.344812][ T7488] hsr_slave_0: entered promiscuous mode [ 1851.351662][ T7488] hsr_slave_1: entered promiscuous mode [ 1851.358038][ T7488] debugfs: 'hsr0' already exists in 'hsr' [ 1851.364261][ T7488] Cannot create hsr debugfs directory [ 1851.544251][ T7488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1851.557160][ T7488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.569252][ T7488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1851.673583][ T7488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1851.685982][ T7488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.696969][ T7488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1851.750590][ T7488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1851.761984][ T7488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.773032][ T7488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1851.775657][ T7596] sctp: [Deprecated]: syz.2.18101 (pid 7596) Use of int in max_burst socket option. [ 1851.775657][ T7596] Use struct sctp_assoc_value instead [ 1851.867198][ T7488] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1851.879267][ T7488] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.889286][ T7488] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1852.138963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.150963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.539305][T16001] Bluetooth: hci5: command tx timeout [ 1853.036203][ T7570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1853.056538][ T7488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1853.117553][ T7488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1853.231677][ T7488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1853.245909][ T7600] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1853.280354][ T7598] veth1_macvtap: left promiscuous mode [ 1853.305824][ T7488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1853.319411][ T7598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1853.347149][ T9398] IPVS: starting estimator thread 0... [ 1853.411002][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.426049][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1853.435507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.451617][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1853.457663][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.469592][ T7606] IPVS: using max 29 ests per chain, 69600 per kthread [ 1853.604106][ T7605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.616002][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.751104][ T7488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.785264][ T7488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1853.863079][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.870387][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.917170][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.924465][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.977170][ T7631] syzkaller0: entered promiscuous mode [ 1854.008706][ T7638] __nla_validate_parse: 1 callbacks suppressed [ 1854.008731][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18113'. [ 1854.017691][ T7631] syzkaller0: entered allmulticast mode [ 1854.032663][ T7633] netlink: 'syz.1.18110': attribute type 11 has an invalid length. [ 1854.051964][ T7633] netlink: 'syz.1.18110': attribute type 4 has an invalid length. [ 1854.071774][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18113'. [ 1854.106580][ T7633] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.18110'. [ 1854.109816][ T7640] sctp: [Deprecated]: syz.2.18112 (pid 7640) Use of int in max_burst socket option. [ 1854.109816][ T7640] Use struct sctp_assoc_value instead [ 1854.445215][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18117'. [ 1854.490589][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18117'. [ 1854.561209][ T7654] gretap1: entered promiscuous mode [ 1854.566517][ T7654] gretap1: entered allmulticast mode [ 1854.620033][T16001] Bluetooth: hci5: command tx timeout [ 1854.947606][ T7488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.016370][ T7649] lo speed is unknown, defaulting to 1000 [ 1855.036759][ T7488] veth0_vlan: entered promiscuous mode [ 1855.043077][ T7649] C speed is unknown, defaulting to 1000 [ 1855.059444][ T7488] veth1_vlan: entered promiscuous mode [ 1855.131232][ T7488] veth0_macvtap: entered promiscuous mode [ 1855.152505][ T7488] veth1_macvtap: entered promiscuous mode [ 1855.206911][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.237479][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1855.291275][T20051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.307556][T20051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.332267][T20051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.360216][T20051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.526214][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18123'. [ 1855.566915][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18123'. [ 1855.688059][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.705553][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.934184][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18128'. [ 1855.956939][ T7941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.975265][ T7941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.058423][ T7705] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1856.062033][ T7704] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1856.230395][ T7714] netlink: 'syz.0.18069': attribute type 1 has an invalid length. [ 1856.351470][ T7721] netlink: 'syz.3.18131': attribute type 1 has an invalid length. [ 1856.359583][ T7721] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18131'. [ 1856.370663][ T7721] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18131'. [ 1856.402103][ T7721] netlink: 'syz.3.18131': attribute type 1 has an invalid length. [ 1856.444088][ T7721] netlink: 'syz.3.18131': attribute type 8 has an invalid length. [ 1856.698807][T16001] Bluetooth: hci5: command tx timeout [ 1857.143361][ T7749] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1857.355503][ T7750] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1857.533233][ T7772] macvtap1: entered promiscuous mode [ 1857.542723][ T7772] vlan0: entered promiscuous mode [ 1857.553873][ T7772] macvtap1: entered allmulticast mode [ 1857.561406][ T7772] vlan0: entered allmulticast mode [ 1857.566595][ T7772] veth0_vlan: entered allmulticast mode [ 1857.610725][ T7772] netlink: 'syz.0.18146': attribute type 3 has an invalid length. [ 1857.642315][ T7772] net_ratelimit: 3 callbacks suppressed [ 1857.642338][ T7772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.881524][ T7788] geneve2: entered promiscuous mode [ 1857.887237][ T7788] geneve2: entered allmulticast mode [ 1858.162149][ T7803] bond0: entered promiscuous mode [ 1858.170586][ T7803] #ÿ: entered promiscuous mode [ 1858.176474][ T7803] bond_slave_1: entered promiscuous mode [ 1858.207752][ T7813] netlink: 'syz.2.18159': attribute type 3 has an invalid length. [ 1858.339410][ T7818] netlink: 'syz.3.18161': attribute type 12 has an invalid length. [ 1858.355250][ T7801] bond0: left promiscuous mode [ 1858.384891][ T7801] #ÿ: left promiscuous mode [ 1858.405469][ T7801] bond_slave_1: left promiscuous mode [ 1858.648552][ T7831] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1858.710120][ T7838] xt_hashlimit: size too large, truncated to 1048576 [ 1858.807051][ T7831] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1858.912225][ T7833] syzkaller0: entered promiscuous mode [ 1858.949675][ T7833] syzkaller0: entered allmulticast mode [ 1859.178669][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1859.186904][ C0] lec:lec_tx_timeout: lec0 [ 1859.596081][ T7870] __nla_validate_parse: 11 callbacks suppressed [ 1859.596104][ T7870] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18172'. [ 1862.272615][ T7874] nbd: couldn't find a device at index 0 [ 1862.509639][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18175'. [ 1862.520463][ T7876] bond7: Unable to set up delay as MII monitoring is disabled [ 1862.532841][ T7876] bond7 (unregistering): Released all slaves [ 1862.565715][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18176'. [ 1862.567164][ T7885] openvswitch: netlink: IP tunnel dst address not specified [ 1862.662428][ T7882] gtp0: entered promiscuous mode [ 1862.678240][ T7882] gtp0: entered allmulticast mode [ 1862.982954][ T7900] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1863.005748][ T7833] lo speed is unknown, defaulting to 1000 [ 1863.014802][ T7906] syzkaller0: entered promiscuous mode [ 1863.029250][ T7906] syzkaller0: entered allmulticast mode [ 1863.052278][ T7833] C speed is unknown, defaulting to 1000 [ 1863.315338][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18184'. [ 1863.368544][ T7922] syzkaller1: entered promiscuous mode [ 1863.377024][ T7922] syzkaller1: entered allmulticast mode [ 1863.605529][ T7935] xt_check_table_hooks: 23 callbacks suppressed [ 1863.605554][ T7935] x_tables: duplicate underflow at hook 3 [ 1863.670203][T14168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.870121][ T7948] netlink: 'syz.5.18192': attribute type 1 has an invalid length. [ 1863.878089][ T7948] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18192'. [ 1864.656446][ T7975] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18200'. [ 1864.970028][ T7984] netlink: zone id is out of range [ 1864.975387][ T7984] netlink: zone id is out of range [ 1864.981775][ T7984] netlink: zone id is out of range [ 1864.987178][ T7984] netlink: zone id is out of range [ 1865.040184][ T7984] netlink: zone id is out of range [ 1865.170036][ T7984] netlink: zone id is out of range [ 1865.194374][ T7984] netlink: zone id is out of range [ 1865.230012][ T7984] netlink: zone id is out of range [ 1865.266017][ T7984] netlink: zone id is out of range [ 1865.446758][ T8000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18208'. [ 1865.473648][ T7969] lo speed is unknown, defaulting to 1000 [ 1865.492309][ T7969] C speed is unknown, defaulting to 1000 [ 1865.646483][ T8004] syzkaller0: entered promiscuous mode [ 1865.657632][ T8004] syzkaller0: entered allmulticast mode [ 1865.774764][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18211'. [ 1865.801044][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18211'. [ 1866.438073][ T8056] netlink: 'syz.5.18224': attribute type 3 has an invalid length. [ 1866.533074][ T8061] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1866.803856][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18229'. [ 1866.814261][ T8072] veth0_virt_wifi: entered promiscuous mode [ 1867.497972][ T8101] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.18235'. [ 1867.610293][ T8106] netlink: 576 bytes leftover after parsing attributes in process `syz.2.18237'. [ 1867.759475][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18240'. [ 1868.584639][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18253'. [ 1868.603296][ T8155] --map-set only usable from mangle table [ 1868.610255][ T8155] netlink: 'syz.3.18254': attribute type 10 has an invalid length. [ 1868.670594][ T8155] team0: Device vxcan1 is of different type [ 1868.691670][ T8160] bridge_slave_0: left allmulticast mode [ 1868.697697][ T8160] bridge_slave_0: left promiscuous mode [ 1868.713673][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.740683][ T8160] bridge_slave_1: left allmulticast mode [ 1868.746525][ T8160] bridge_slave_1: left promiscuous mode [ 1868.764622][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.797708][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18257'. [ 1868.821901][ T8160] bond0: (slave bond_slave_0): Releasing backup interface [ 1868.854191][ T8160] bond0: (slave bond_slave_1): Releasing backup interface [ 1868.894620][ T8160] team0: Port device team_slave_0 removed [ 1868.921062][ T8160] team0: Port device team_slave_1 removed [ 1868.930474][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.945170][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.957141][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.973839][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.991755][ T8160] net_ratelimit: 47 callbacks suppressed [ 1868.991778][ T8160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1869.325451][ T8173] syzkaller0: entered promiscuous mode [ 1869.336458][ T8173] syzkaller0: entered allmulticast mode [ 1869.982560][ T8213] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1870.150128][ T8220] netlink: 'syz.0.18271': attribute type 30 has an invalid length. [ 1870.258595][ T8229] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1870.457426][ T8242] __nla_validate_parse: 1 callbacks suppressed [ 1870.457449][ T8242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18279'. [ 1870.765119][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18281'. [ 1870.830151][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18282'. [ 1870.890319][ T8260] netlink: 'syz.2.18282': attribute type 7 has an invalid length. [ 1870.918536][ T8260] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18282'. [ 1870.943119][ T8260] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18282'. [ 1871.146216][ T8279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1871.371241][ T8290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18293'. [ 1871.636629][ T8296] syzkaller0: entered promiscuous mode [ 1871.642267][ T8296] syzkaller0: entered allmulticast mode [ 1871.789599][ T8310] IPVS: Unknown mcast interface: ip6erspan0 [ 1872.562540][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18307'. [ 1872.656482][ T8350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18309'. [ 1872.842752][ T3001] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1872.867113][ T3001] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1872.892018][ T8363] netlink: 'syz.1.18312': attribute type 1 has an invalid length. [ 1872.911950][ T8364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1872.920235][ T8363] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18312'. [ 1872.932129][ T8364] team0: Device macvlan2 is already an upper device of the team interface [ 1872.949941][ T8363] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18312'. [ 1873.001249][ T3001] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1873.142405][ T8371] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1873.195028][ T8371] bond2: (slave lo): Enslaving as an active interface with an up link [ 1873.208551][ T8371] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1873.230662][ T3001] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1873.258633][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.384894][ T8389] : renamed from bond0 (while UP) [ 1873.900111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.914049][T31357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.090575][ T8426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1874.213523][ T8436] bond8: option fail_over_mac: invalid value (16) [ 1874.263669][ T8436] bond8 (unregistering): Released all slaves [ 1874.439243][ T8449] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1875.065910][ T8486] openvswitch: netlink: Key type 30 is not supported [ 1875.189937][ T8490] syzkaller0: entered promiscuous mode [ 1875.207551][ T8490] syzkaller0: entered allmulticast mode [ 1876.175167][ T8535] __nla_validate_parse: 9 callbacks suppressed [ 1876.175192][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18359'. [ 1876.201111][ T8535] openvswitch: netlink: Invalid VLAN frame [ 1876.794299][ T8572] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1876.808835][ T8572] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18369'. [ 1876.855294][ T8569] bond3: option xmit_hash_policy: invalid value (253) [ 1876.866887][ T8569] bond3 (unregistering): Released all slaves [ 1876.887789][ T8576] netlink: 136 bytes leftover after parsing attributes in process `syz.3.18370'. [ 1877.293874][ T8590] netlink: 'syz.0.18375': attribute type 13 has an invalid length. [ 1877.349276][ T8590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1879.021118][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1879.413367][ T8553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1879.423298][ T8561] netlink: 'syz.2.18366': attribute type 1 has an invalid length. [ 1879.448093][ T8561] netlink: 'syz.2.18366': attribute type 7 has an invalid length. [ 1879.460246][ T7211] lec:lec_start_xmit: lec0:No lecd attached [ 1879.479277][ T8561] netlink: 'syz.2.18366': attribute type 8 has an invalid length. [ 1879.487224][ T8561] netlink: 208 bytes leftover after parsing attributes in process `syz.2.18366'. [ 1879.501526][ T8561] NCSI netlink: No device for ifindex 65584 [ 1879.720286][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18385'. [ 1879.790598][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18386'. [ 1879.923301][ T8642] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1879.934639][ T8636] macvlan2: entered promiscuous mode [ 1879.943492][ T8636] macvlan2: entered allmulticast mode [ 1879.952540][ T8636] bond3: (slave macvlan2): Opening slave failed [ 1879.974721][ T8634] dummy0: left allmulticast mode [ 1879.981409][ T8634] bridge0: port 1(dummy0) entered disabled state [ 1880.023213][ T8634] bond0: (slave bridge0): Releasing backup interface [ 1880.032331][ T8634] bridge0 (unregistering): left promiscuous mode [ 1880.156228][ T8653] xt_hashlimit: invalid interval [ 1880.390475][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18392'. [ 1880.420695][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18392'. [ 1880.451114][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18392'. [ 1880.552975][ T8672] netlink: 'syz.5.18399': attribute type 30 has an invalid length. [ 1880.601657][ T8672] bond4: option arp_missed_max: invalid value (0) [ 1880.609222][ T8672] bond4: option arp_missed_max: allowed values 1 - 255 [ 1880.630339][ T8672] bond4 (unregistering): Released all slaves [ 1880.754658][ T8676] xt_TCPMSS: Only works on TCP SYN packets [ 1883.504480][T31357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.148485][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1884.159136][T31357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.178248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 1885.186392][ C0] lec:lec_tx_timeout: lec0 [ 1886.113931][ T2984] bridge_slave_0: left allmulticast mode [ 1886.120700][ T2984] bridge_slave_0: left promiscuous mode [ 1886.126492][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.452699][ T2984]  (unregistering): (slave bridge0): Releasing backup interface [ 1886.466566][ T2984] bridge0 (unregistering): left promiscuous mode [ 1886.514277][ T2984] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1886.522824][ T2984] bridge1 (unregistering): left promiscuous mode [ 1886.803959][ T2984] bond4 (unregistering): (slave bridge8): Releasing backup interface [ 1886.812659][ T2984] bridge8 (unregistering): left promiscuous mode [ 1886.946567][ T2984]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1886.957232][ T2984] bond_slave_0: left promiscuous mode [ 1886.964666][ T2984]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.974084][ T2984] bond_slave_1: left promiscuous mode [ 1886.981346][ T2984]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1886.998908][ T2984] bridge_slave_1: left promiscuous mode [ 1887.006579][ T2984]  (unregistering): Released all slaves [ 1887.018024][ T2984] bond1 (unregistering): Released all slaves [ 1887.034028][ T2984] bond2 (unregistering): Released all slaves [ 1887.053340][ T2984] bond3 (unregistering): Released all slaves [ 1887.084435][ T2984] bond0 (unregistering): Released all slaves [ 1887.112345][ T2984] bond4 (unregistering): Released all slaves [ 1887.132295][ T2984] bond5 (unregistering): Released all slaves [ 1887.148046][ T2984] bond6 (unregistering): Released all slaves [ 1887.268443][ T2984] : left promiscuous mode [ 1887.341950][ T2984] tipc: Disabling bearer [ 1887.362019][ T2984] tipc: Left network mode [ 1888.010818][ T2984] hsr_slave_0: left promiscuous mode [ 1888.016875][ T2984] 1·: left promiscuous mode [ 1888.024369][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1888.032732][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.068663][ T2984] pim6reg527 (unregistering): left allmulticast mode [ 1888.221147][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 1888.238780][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 1888.383058][T11255] lo speed is unknown, defaulting to 1000 [ 1888.390699][T11255] syz0: Port: 1 Link DOWN [ 1888.640849][ T2984] IPVS: stop unused estimator thread 0... [ 1893.742262][T11255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.499069][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1902.143530][ T8699] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18404'. [ 1902.236426][ T8704] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18407'. [ 1902.311255][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.320377][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.328915][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.337238][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.345623][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.353977][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.362339][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.370687][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.379055][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.747910][ T8725] netlink: 'syz.0.18409': attribute type 1 has an invalid length. [ 1902.837990][ T8725] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1903.073544][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18416'. [ 1903.167889][ T8742] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18417'. [ 1903.232450][ T8742] netlink: 220 bytes leftover after parsing attributes in process `syz.1.18417'. [ 1903.312957][ T8747] team0: No ports can be present during mode change [ 1903.531013][ T8754] netlink: 'syz.0.18422': attribute type 1 has an invalid length. [ 1903.539824][ T8754] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18422'. [ 1903.556524][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18421'. [ 1903.567421][ T8753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18421'. [ 1903.616132][ T8761] tipc: Started in network mode [ 1903.622962][ T8761] tipc: Node identity be24e19addd2, cluster identity 4711 [ 1903.644796][ T8761] tipc: Enabled bearer , priority 11 [ 1903.867386][ T8770] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18427'. [ 1904.437449][ T8796] geneve4: entered promiscuous mode [ 1904.488058][ T8799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18435'. [ 1904.758915][ T9398] tipc: Node number set to 1677123994 [ 1904.794708][ T8811] netlink: 'syz.3.18441': attribute type 1 has an invalid length. [ 1904.842392][ T8817] netlink: 'syz.1.18442': attribute type 21 has an invalid length. [ 1904.885145][ T8818] netlink: 'syz.5.18443': attribute type 1 has an invalid length. [ 1904.925870][ T8820] netlink: 'syz.1.18442': attribute type 21 has an invalid length. [ 1905.007826][ T8818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1905.035854][ T8828] netlink: 'syz.2.18444': attribute type 1 has an invalid length. [ 1905.057384][ T8822] vlan2: entered promiscuous mode [ 1905.065360][ T8822] bond4: entered promiscuous mode [ 1905.081106][ T8822] vlan2: entered allmulticast mode [ 1905.086434][ T8822] bond4: entered allmulticast mode [ 1905.115818][ T8827] bond4: (slave bridge1): making interface the new active one [ 1905.129541][ T8827] bridge1: entered promiscuous mode [ 1905.135973][ T8827] bridge1: entered allmulticast mode [ 1905.144779][ T8827] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1905.411319][ T8828] veth9: entered promiscuous mode [ 1905.417136][ T8828] veth9: entered allmulticast mode [ 1905.553169][ T30] audit: type=1804 audit(1773484961.856:29): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.18454" name="/newroot/593/cgroup.controllers" dev="tmpfs" ino=3027 res=1 errno=0 [ 1905.585615][ T30] audit: type=1800 audit(1773484961.876:30): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18454" name="cgroup.controllers" dev="tmpfs" ino=3027 res=0 errno=0 [ 1905.611094][ T30] audit: type=1800 audit(1773484961.876:31): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18454" name="cgroup.controllers" dev="tmpfs" ino=3027 res=0 errno=0 [ 1905.949264][ T8874] net_ratelimit: 1420 callbacks suppressed [ 1905.949289][ T8874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1905.981772][ T8872] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 1906.002776][ T8872] bond10 (unregistering): Released all slaves [ 1906.844863][ T8902] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1907.123441][ T8912] netlink: 'syz.2.18469': attribute type 10 has an invalid length. [ 1907.167125][ T8920] __nla_validate_parse: 15 callbacks suppressed [ 1907.167152][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18473'. [ 1908.378693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.387163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.396759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.405110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.919783][ T8912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1909.959470][ T8912] batadv0: entered promiscuous mode [ 1909.966618][ T8912] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1910.023539][ T8941] netlink: 'syz.1.18476': attribute type 1 has an invalid length. [ 1910.061332][ T8937] mac80211_hwsim hwsim178 wlan0: entered promiscuous mode [ 1910.086267][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18476'. [ 1910.097699][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18476'. [ 1910.144191][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.274045][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18480'. [ 1910.570466][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18483'. [ 1910.624067][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1910.647964][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1910.657436][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1910.667785][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1910.676505][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1910.731091][ T8977] netlink: 'syz.2.18485': attribute type 39 has an invalid length. [ 1910.916861][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18486'. [ 1911.322640][T29917] bridge0: port 1(syz_tun) entered disabled state [ 1911.383570][T29917] syz_tun (unregistering): left allmulticast mode [ 1911.401757][T29917] syz_tun (unregistering): left promiscuous mode [ 1911.488065][T29917] bridge0: port 1(syz_tun) entered disabled state [ 1911.611685][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18492'. [ 1911.640066][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18491'. [ 1911.649579][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18492'. [ 1911.800606][ T8968] C speed is unknown, defaulting to 1000 [ 1912.041499][ T9024] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.18494'. [ 1912.063309][T20051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.101628][T20051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.125255][T20051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1912.158930][T20051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 39174 - 0 [ 1912.207460][ T9023] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.231831][ T9025] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.356693][T20051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.384521][T20051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.407163][T20051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1912.430526][T20051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 39174 - 0 [ 1912.456507][ T9026] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.483688][ T9026] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.503698][ T9026] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.514462][ T9026] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.611410][T20051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.633986][T20051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.646615][T20051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1912.647351][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18497'. [ 1912.670256][T20051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 39174 - 0 [ 1912.682601][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18497'. [ 1912.698426][T16001] Bluetooth: hci4: command tx timeout [ 1912.734938][ T9026] netlink: 'syz.2.18495': attribute type 29 has an invalid length. [ 1912.790771][ T9038] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1912.798013][T31357] IPVS: starting estimator thread 0... [ 1912.836295][T20051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.871063][T20051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.885816][T20051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1912.889633][ T9039] IPVS: using max 23 ests per chain, 55200 per kthread [ 1912.903736][T20051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 39174 - 0 [ 1913.190248][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1913.293147][ T7941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.371953][ T2984] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.414659][ T2983] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.480025][ T2984] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.552832][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 1913.683220][ T9064] xt_nat: multiple ranges no longer supported [ 1914.275713][T20051] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 1914.286794][T20051] bridge1 (unregistering): left promiscuous mode [ 1914.367631][T20051]  (unregistering): (slave 7#ÿ): Releasing backup interface [ 1914.392282][T20051]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.407129][T20051]  (unregistering): Released all slaves [ 1914.421358][T20051] bond1 (unregistering): Released all slaves [ 1914.439489][T20051] bond2 (unregistering): (slave lo): Releasing backup interface [ 1914.447856][T20051] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1914.463969][T20051] bond2 (unregistering): Released all slaves [ 1914.483451][T20051] bond3 (unregistering): Released all slaves [ 1914.514217][T20051] bond4 (unregistering): Released all slaves [ 1914.535536][T20051] bond5 (unregistering): Released all slaves [ 1914.556057][T20051] bond6 (unregistering): Released all slaves [ 1914.573966][T20051] bond7 (unregistering): Released all slaves [ 1914.595382][T20051] bond0 (unregistering): Released all slaves [ 1914.636553][ T9072] lo: Caught tx_queue_len zero misconfig [ 1914.656164][ T9072] netlink: 'syz.0.18505': attribute type 10 has an invalid length. [ 1914.778521][T16001] Bluetooth: hci4: command tx timeout [ 1914.855130][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18509'. [ 1914.868729][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1914.887810][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1914.906665][T20051] tipc: Left network mode [ 1914.945821][ T9091] gretap0: entered promiscuous mode [ 1914.979506][ T9091] vlan2: entered promiscuous mode [ 1915.308623][ T9109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18514'. [ 1915.462670][ T9116] netlink: 'syz.0.18516': attribute type 29 has an invalid length. [ 1915.482866][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.515032][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.534076][ T8968] bridge_slave_0: entered allmulticast mode [ 1915.552374][ T8968] bridge_slave_0: entered promiscuous mode [ 1915.591239][ T9116] netlink: 'syz.0.18516': attribute type 29 has an invalid length. [ 1915.667288][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.692301][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.708072][ T8968] bridge_slave_1: entered allmulticast mode [ 1915.735995][ T8968] bridge_slave_1: entered promiscuous mode [ 1915.941222][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18520'. [ 1915.976599][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18520'. [ 1916.031755][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1916.077480][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1916.483268][ T8968] team0: Port device team_slave_0 added [ 1916.513040][ T8968] team0: Port device team_slave_1 added [ 1916.762590][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1916.775284][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.860397][T16001] Bluetooth: hci4: command tx timeout [ 1916.877577][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1916.998042][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.028896][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1917.129948][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.317527][ T9158] syzkaller0: entered promiscuous mode [ 1917.340202][ T9158] syzkaller0: entered allmulticast mode [ 1917.405507][ T7941] syzkaller0: tun_net_xmit 48 [ 1917.892271][ T9193] delete_channel: no stack [ 1918.939565][T16001] Bluetooth: hci4: command tx timeout [ 1920.138662][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1920.146809][ C0] lec:lec_tx_timeout: lec0 [ 1920.716492][ T8968] hsr_slave_0: entered promiscuous mode [ 1920.723485][ T8968] hsr_slave_1: entered promiscuous mode [ 1920.733373][ T8968] debugfs: 'hsr0' already exists in 'hsr' [ 1920.741520][ T8968] Cannot create hsr debugfs directory [ 1920.805131][T20051] hsr_slave_0: left promiscuous mode [ 1920.811821][T20051] 0·: left promiscuous mode [ 1920.869360][T20051] vlan0: left allmulticast mode [ 1920.874312][T20051] veth0_vlan: left allmulticast mode [ 1920.882241][T20051] vlan0: left promiscuous mode [ 1920.887685][T20051] veth1_macvtap: left promiscuous mode [ 1920.896695][T20051] veth1_vlan: left promiscuous mode [ 1920.902149][T20051] veth0_vlan: left promiscuous mode [ 1921.556839][T20051] pim6reg (unregistering): left allmulticast mode [ 1921.714184][T20051] team0 (unregistering): Port device team_slave_1 removed [ 1921.744745][T20051] team0 (unregistering): Port device team_slave_0 removed [ 1921.864629][T20051] team0 (unregistering): Port device dummy0 removed [ 1921.919352][ T9209] syzkaller0: entered promiscuous mode [ 1921.925017][ T9209] syzkaller0: entered allmulticast mode [ 1922.062511][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1922.331450][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18542'. [ 1922.771151][ T8968] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.791800][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18545'. [ 1922.892892][T20051] IPVS: stop unused estimator thread 0... [ 1923.022764][ T8968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.223778][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18552'. [ 1923.253781][ T8968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.529952][ T9298] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1923.537459][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1923.555130][ T8968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.697842][ T9302] netlink: 'syz.0.18558': attribute type 1 has an invalid length. [ 1924.069783][ T9318] openvswitch: netlink: Multiple metadata blocks provided [ 1924.272782][ T8968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1924.422583][ T8968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1924.547979][ T8968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1924.603777][ T8968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1924.755827][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18569'. [ 1924.859873][ T9357] bond6: Invalid ad_actor_system MAC address. [ 1924.866459][ T9357] bond6: option ad_actor_system: invalid value (1) [ 1924.874992][ T9357] bond6 (unregistering): Released all slaves [ 1925.142882][ T9378] tipc: Enabled bearer , priority 0 [ 1925.162360][ T9378] syzkaller0: entered promiscuous mode [ 1925.169329][ T9378] syzkaller0: entered allmulticast mode [ 1925.194423][ T9378] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1925.216701][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18575'. [ 1925.246725][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.267272][ T9380] xfrm1: entered promiscuous mode [ 1925.272851][ T9380] xfrm1: entered allmulticast mode [ 1925.282039][ T9382] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18574'. [ 1925.283423][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18575'. [ 1925.327642][ T9378] tipc: Resetting bearer [ 1925.366908][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.392440][ T9374] tipc: Resetting bearer [ 1925.471568][ T9374] tipc: Disabling bearer [ 1925.525661][T20051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.533015][T20051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.600170][T20051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.607469][T20051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.040513][ T9414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18582'. [ 1926.089442][ T9417] netlink: 'syz.2.18584': attribute type 1 has an invalid length. [ 1926.118497][ T9417] netlink: 228 bytes leftover after parsing attributes in process `syz.2.18584'. [ 1926.247592][ T9417] netlink: 'syz.2.18584': attribute type 12 has an invalid length. [ 1926.276988][ T9424] ip6gre1: entered promiscuous mode [ 1926.308017][ T9417] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.18584'. [ 1926.564670][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1926.606860][ T9440] bond0: Caught tx_queue_len zero misconfig [ 1926.746840][ T9445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1926.780552][ T9446] syzkaller0: entered promiscuous mode [ 1926.794314][ T9446] syzkaller0: entered allmulticast mode [ 1927.132727][ T9460] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1927.152299][ T8968] veth0_vlan: entered promiscuous mode [ 1927.309211][ T8968] veth1_vlan: entered promiscuous mode [ 1927.437611][ T8968] veth0_macvtap: entered promiscuous mode [ 1927.497516][ T9479] __nla_validate_parse: 1 callbacks suppressed [ 1927.497539][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18599'. [ 1927.515363][ T8968] veth1_macvtap: entered promiscuous mode [ 1927.564406][ T9480] erspan0: entered promiscuous mode [ 1927.596817][ T9487] siw: device registration error -23 [ 1927.682924][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1927.704470][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18600'. [ 1927.731962][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1927.786803][ T9495] netlink: 256 bytes leftover after parsing attributes in process `syz.2.18601'. [ 1927.837176][ T3013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.862748][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.875347][ T3013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.895398][ T3013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.406878][T20051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1928.437847][T20051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1928.532764][ T9528] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18608'. [ 1928.659841][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1928.685166][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1928.924092][ T9537] netlink: 'syz.3.18613': attribute type 5 has an invalid length. [ 1928.970992][ T9541] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1929.123269][ T9519] C speed is unknown, defaulting to 1000 [ 1929.412128][ T9553] "syz.1.18616" (9553) uses obsolete ecb(arc4) skcipher [ 1929.748792][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1929.779069][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1929.790247][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1929.808004][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1929.822606][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1930.474764][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18622'. [ 1930.683727][ T9587] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1930.972000][ T9564] C speed is unknown, defaulting to 1000 [ 1931.133616][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18627'. [ 1931.161542][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18627'. [ 1931.201948][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18627'. [ 1931.243729][ T3003] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.272718][ T9601] mac80211_hwsim hwsim182 ÿ: renamed from wlan1 (while UP) [ 1931.311268][ T3003] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.344286][ T3003] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.378358][ T3003] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1931.450288][ T9603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18629'. [ 1931.761619][ T9625] ipt_ECN: cannot use operation on non-tcp rule [ 1931.903062][T16001] Bluetooth: hci0: command tx timeout [ 1932.649018][ T9656] netlink: 'syz.0.18642': attribute type 2 has an invalid length. [ 1932.690649][ T9656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18642'. [ 1932.704091][ T9656] netlink: 'syz.0.18642': attribute type 1 has an invalid length. [ 1932.716743][ T9656] netlink: 236 bytes leftover after parsing attributes in process `syz.0.18642'. [ 1932.732331][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18642'. [ 1932.813159][ T9664] sit1: entered promiscuous mode [ 1932.821150][ T9664] sit1: entered allmulticast mode [ 1932.833572][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 1932.970234][ T9671] netlink: 'syz.0.18645': attribute type 11 has an invalid length. [ 1933.144114][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.151608][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.159631][ T9564] bridge_slave_0: entered allmulticast mode [ 1933.167780][ T9564] bridge_slave_0: entered promiscuous mode [ 1933.177472][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.186164][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.194090][ T9564] bridge_slave_1: entered allmulticast mode [ 1933.202711][ T9564] bridge_slave_1: entered promiscuous mode [ 1933.211335][ T9682] veth0: entered promiscuous mode [ 1933.264336][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1933.277636][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1933.341960][ T9564] team0: Port device team_slave_0 added [ 1933.356289][ T9564] team0: Port device team_slave_1 added [ 1933.396919][ T9679] veth0: left promiscuous mode [ 1933.411836][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1933.432911][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1933.476620][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1933.491403][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1933.500371][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1933.530327][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1933.711351][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18651'. [ 1933.748265][ T9697] netlink: 'syz.5.18653': attribute type 10 has an invalid length. [ 1933.770845][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18652'. [ 1933.796038][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18651'. [ 1933.835691][ T9697] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1933.889839][ T9564] hsr_slave_0: entered promiscuous mode [ 1933.897325][ T9564] hsr_slave_1: entered promiscuous mode [ 1933.943386][ T9564] debugfs: 'hsr0' already exists in 'hsr' [ 1933.950853][ T9564] Cannot create hsr debugfs directory [ 1933.986798][T16001] Bluetooth: hci0: command tx timeout [ 1934.152738][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18658'. [ 1934.180127][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18658'. [ 1934.242296][ T9714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1934.297770][ T9714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1934.340370][ T9714] bond0 (unregistering): Released all slaves [ 1934.660572][ T9564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1934.687487][ T9564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.904849][ T9564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1934.915432][ T9564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.926808][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18666'. [ 1934.945171][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.087005][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.215500][ T9564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1935.247930][ T9564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.266669][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.361882][ T9749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1935.446988][ T9564] batman_adv: batadv0: Removing interface: netdevsim0 [ 1935.460936][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.494815][ T9564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1935.535841][ T9564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.592074][ T9759] syzkaller1: entered promiscuous mode [ 1935.597714][ T9759] syzkaller1: entered allmulticast mode [ 1936.007157][ T9564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1936.023590][ T9790] netlink: 'syz.5.18676': attribute type 16 has an invalid length. [ 1936.044943][ T9790] netlink: 'syz.5.18676': attribute type 17 has an invalid length. [ 1936.059796][T16001] Bluetooth: hci0: command tx timeout [ 1936.073902][ T9564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1936.185795][ T9790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1936.207656][ T9790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1936.223558][ T9790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1936.253794][ T9564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1936.291332][ T9564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1936.481983][ T9814] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1936.494246][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1936.519846][ T9816] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1936.529423][ T9815] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18681'. [ 1936.591715][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1936.671270][ T9821] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1936.681110][ T9821] team0: Port device batadv1 added [ 1936.720301][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.727618][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1936.754956][ T9824] hsr_slave_0: left promiscuous mode [ 1936.763471][ T9824] hsr_slave_1: left promiscuous mode [ 1936.851969][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.859287][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.239826][ T9813] C speed is unknown, defaulting to 1000 [ 1937.420973][ T9849] #ÿ: renamed from bond_slave_0 (while UP) [ 1937.611474][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1937.788695][ T9859] netlink: 'syz.3.18693': attribute type 5 has an invalid length. [ 1937.817186][ T9564] veth0_vlan: entered promiscuous mode [ 1937.889769][ T9859] __nla_validate_parse: 37 callbacks suppressed [ 1937.889790][ T9859] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18693'. [ 1937.934142][ T9564] veth1_vlan: entered promiscuous mode [ 1938.081443][ T9869] netlink: 'syz.1.18695': attribute type 13 has an invalid length. [ 1938.139486][T16001] Bluetooth: hci0: command tx timeout [ 1938.307420][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18695'. [ 1938.352477][ T9885] netlink: 2 bytes leftover after parsing attributes in process `syz.1.18695'. [ 1938.460467][ T9564] veth0_macvtap: entered promiscuous mode [ 1938.547799][ T9564] veth1_macvtap: entered promiscuous mode [ 1938.714214][ T9899] syz_tun: entered promiscuous mode [ 1938.731988][ T9899] macvtap1: entered promiscuous mode [ 1938.761553][ T9899] syz_tun: left promiscuous mode [ 1938.815613][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.895939][ T9899] syz_tun: entered promiscuous mode [ 1938.903350][ T9899] macvtap1: entered promiscuous mode [ 1938.956595][ T9899] syz_tun: left promiscuous mode [ 1939.052683][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1939.103898][ T9899] syz_tun: entered promiscuous mode [ 1939.119633][ T9899] macvtap1: entered promiscuous mode [ 1939.145431][ T9899] syz_tun: left promiscuous mode [ 1939.261796][ T9913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1939.273350][ T9899] syz_tun: entered promiscuous mode [ 1939.298348][ T9899] macvtap1: entered promiscuous mode [ 1939.328887][ T9899] syz_tun: left promiscuous mode [ 1939.395565][ T7927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.429644][ T3013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.517914][ T3013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.535420][ T3013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.574532][ T9899] syz_tun: entered promiscuous mode [ 1939.592851][ T9899] macvtap1: entered promiscuous mode [ 1939.642407][ T9899] syz_tun: left promiscuous mode [ 1939.664326][ T9927] ksmbd: Unknown IPC event: 3, ignore. [ 1939.712811][ T9920] udevd[9920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1939.728468][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18708'. [ 1939.760638][ T9777] udevd[9777]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1940.051336][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.087388][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.255783][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.274254][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.684567][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18719'. [ 1940.702875][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18719'. [ 1940.725983][ T9964] netlink: 'syz.2.18719': attribute type 1 has an invalid length. [ 1940.738969][ T9964] netlink: 228 bytes leftover after parsing attributes in process `syz.2.18719'. [ 1940.805234][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18720'. [ 1941.185169][ T9990] netlink: 220 bytes leftover after parsing attributes in process `syz.5.18725'. [ 1941.229429][ T9990] netlink: 'syz.5.18725': attribute type 2 has an invalid length. [ 1941.292909][ T9996] netlink: 'syz.0.18730': attribute type 4 has an invalid length. [ 1941.341777][ T9999] xt_addrtype: ipv6 does not support BROADCAST matching [ 1941.912198][T10030] vlan2: entered allmulticast mode [ 1941.982544][T10034] netlink: 'syz.5.18741': attribute type 13 has an invalid length. [ 1942.224086][T10051] delete_channel: no stack [ 1942.254184][T10055] netlink: 'syz.0.18747': attribute type 30 has an invalid length. [ 1942.347926][T10043] tipc: Failed to remove unknown binding: 66,0,0/0:3108064557/3108064558 [ 1942.360509][T10043] tipc: Failed to remove unknown binding: 66,0,0/0:3108064557/3108064558 [ 1942.369291][T10043] tipc: Failed to remove unknown binding: 66,0,0/0:3108064557/3108064558 [ 1942.377834][T10043] tipc: Failed to remove unknown binding: 66,0,0/0:3108064557/3108064558 [ 1942.395452][T10061] IPVS: set_ctl: invalid protocol: 137 172.30.0.1:20002 [ 1942.409723][T10042] tipc: Failed to remove unknown binding: 66,0,0/0:3108064557/3108064558 [ 1942.485581][T10055] bond5: option arp_missed_max: invalid value (0) [ 1942.512095][T10055] bond5: option arp_missed_max: allowed values 1 - 255 [ 1942.536867][T10055] bond5 (unregistering): Released all slaves [ 1942.703389][ T7211] lec:lec_start_xmit: lec0:No lecd attached [ 1942.841735][T10083] netlink: 'syz.1.18755': attribute type 18 has an invalid length. [ 1942.986030][T10093] __nla_validate_parse: 5 callbacks suppressed [ 1942.986053][T10093] netlink: 256 bytes leftover after parsing attributes in process `syz.0.18757'. [ 1943.141267][T10095] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18758'. [ 1943.307325][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18762'. [ 1943.342531][T10115] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1943.433760][T10115] pim6reg527: entered allmulticast mode [ 1943.476467][T10120] netlink: 'syz.3.18764': attribute type 21 has an invalid length. [ 1943.503347][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18764'. [ 1943.595494][T10118] bond2: (slave lo): Releasing backup interface [ 1943.622455][T10118] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1943.647249][T10118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1943.973696][T10147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1944.077556][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.089376][T10149] batadv_slave_0: entered promiscuous mode [ 1944.155960][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18771'. [ 1944.170797][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18772'. [ 1944.372796][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18778'. [ 1944.407051][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18778'. [ 1944.422225][T10175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18778'. [ 1944.466862][T10170] xt_CT: No such helper "snmp_trap" [ 1944.534396][T10179] bridge_slave_0: left promiscuous mode [ 1944.542412][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.557028][T10179] bridge_slave_1: left allmulticast mode [ 1944.565712][T10179] bridge_slave_1: left promiscuous mode [ 1944.574765][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.604503][T10179] team0: Port device team_slave_0 removed [ 1944.623915][T10179] team0: Port device team_slave_1 removed [ 1944.636484][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.644971][T10179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.657808][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1944.668345][T10179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1944.852116][T10179] team0: Mode changed to "loadbalance" [ 1944.909657][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18782'. [ 1945.268379][T10204] geneve2: entered promiscuous mode [ 1945.289492][ T7927] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 44806 - 0 [ 1945.299121][ T7927] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 44806 - 0 [ 1945.328385][ T7927] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 44806 - 0 [ 1945.346545][ T7927] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 44806 - 0 [ 1945.531220][T10217] netlink: 'syz.5.18792': attribute type 13 has an invalid length. [ 1945.540117][T10215] netlink: 'syz.3.18791': attribute type 10 has an invalid length. [ 1945.593221][T10221] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1945.679155][T10223] netlink: 'syz.5.18792': attribute type 3 has an invalid length. [ 1945.780126][T10215] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1945.788343][T10215] batman_adv: batadv0: Adding interface: netdevsim0 [ 1945.801683][T10215] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1945.838686][T10215] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1946.404400][T10254] netlink: 'syz.5.18799': attribute type 9 has an invalid length. [ 1946.567621][T10265] syzkaller0: entered promiscuous mode [ 1946.576566][T10265] syzkaller0: entered allmulticast mode [ 1946.590979][T10265] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1947.005094][T10285] netlink: 'syz.0.18810': attribute type 1 has an invalid length. [ 1947.006084][T10277] netlink: 'syz.3.18808': attribute type 10 has an invalid length. [ 1947.661024][ T5839] Bluetooth: hci6: command 0x0419 tx timeout [ 1947.668007][T10321] Cannot find set identified by id 0 to match [ 1947.884061][T10333] bond1: entered promiscuous mode [ 1947.962322][T10341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1948.139226][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1948.147402][ C0] lec:lec_tx_timeout: lec0 [ 1948.164976][T10347] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1948.202207][T10353] syzkaller0: entered promiscuous mode [ 1948.214232][T10353] syzkaller0: entered allmulticast mode [ 1948.307301][T10353] __nla_validate_parse: 7 callbacks suppressed [ 1948.307325][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18831'. [ 1948.369817][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18831'. [ 1948.437926][T10361] netlink: 'syz.0.18834': attribute type 16 has an invalid length. [ 1948.456439][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18834'. [ 1948.484025][T10365] erspan1: entered allmulticast mode [ 1948.792196][T10378] dvmrp0: entered allmulticast mode [ 1948.833731][T10378] netlink: 54 bytes leftover after parsing attributes in process `syz.3.18839'. [ 1948.844451][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18839'. [ 1948.995647][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18845'. [ 1949.017708][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18847'. [ 1949.036129][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18847'. [ 1949.116694][T10401] x_tables: duplicate underflow at hook 2 [ 1949.329709][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1949.459992][T10419] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.18855'. [ 1949.623806][T10424] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18858'. [ 1949.743430][T10435] netlink: 'syz.3.18860': attribute type 21 has an invalid length. [ 1949.753158][T10433] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1949.764155][T10435] netlink: 'syz.3.18860': attribute type 1 has an invalid length. [ 1950.022758][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1950.624494][T10478] netlink: 'syz.0.18871': attribute type 1 has an invalid length. [ 1950.640010][T10478] netlink: 'syz.0.18871': attribute type 1 has an invalid length. [ 1950.693609][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1950.722931][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1950.735974][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1951.155688][T10496] netlink: 'syz.2.18877': attribute type 16 has an invalid length. [ 1951.180374][T10496] netlink: 'syz.2.18877': attribute type 17 has an invalid length. [ 1951.312781][T10496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1951.491244][T10510] netlink: 'syz.0.18882': attribute type 8 has an invalid length. [ 1951.862166][T10531] netlink: 'syz.0.18886': attribute type 1 has an invalid length. [ 1952.147510][T10545] can: request_module (can-proto-3) failed. [ 1952.452639][T10561] xt_hashlimit: size too large, truncated to 1048576 [ 1952.817005][T10571] netlink: 'syz.1.18896': attribute type 13 has an invalid length. [ 1952.827021][T10584] 8021q: VLANs not supported on ip_vti0 [ 1952.973803][T10571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1953.065152][T10592] ip6tnl3: entered allmulticast mode [ 1953.436269][T10610] syzkaller0: entered promiscuous mode [ 1953.462342][T10610] syzkaller0: entered allmulticast mode [ 1953.567314][T10615] ip6gre1: entered allmulticast mode [ 1953.965581][T10638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1954.006891][T10640] __nla_validate_parse: 10 callbacks suppressed [ 1954.006918][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18920'. [ 1954.349040][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18927'. [ 1954.439401][T10658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1954.548661][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18929'. [ 1954.626754][T10669] tipc: Started in network mode [ 1954.636718][T10669] tipc: Node identity ac14140f, cluster identity 4711 [ 1954.647772][T10669] tipc: New replicast peer: 255.255.255.255 [ 1954.658991][T10669] tipc: Enabled bearer , priority 10 [ 1954.889960][T10685] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1954.997656][T10693] IPv6: NLM_F_CREATE should be specified when creating new route [ 1955.126086][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1955.149257][T10701] netlink: 240 bytes leftover after parsing attributes in process `syz.3.18937'. [ 1955.214885][T10707] netlink: 7 bytes leftover after parsing attributes in process `syz.1.18941'. [ 1955.296677][T10707] netlink: 92 bytes leftover after parsing attributes in process `syz.1.18941'. [ 1955.358830][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18943'. [ 1955.368417][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18943'. [ 1955.441920][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18945'. [ 1955.651316][T10734] netlink: 'syz.2.18946': attribute type 21 has an invalid length. [ 1955.736797][T10734] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18946'. [ 1955.775532][T14168] tipc: Node number set to 2886997007 [ 1955.801145][T10734] netlink: 'syz.2.18946': attribute type 5 has an invalid length. [ 1955.837906][T10736] netem: incorrect gi model size [ 1955.851263][T10736] netem: change failed [ 1956.224071][T10763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1956.347139][T10767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1956.420576][T10772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1956.815909][T10786] 0·: renamed from hsr_slave_1 [ 1956.825898][T10786] 0·: entered allmulticast mode [ 1956.833054][T10786] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1957.427657][T10821] netlink: 'syz.0.18972': attribute type 1 has an invalid length. [ 1957.516352][T10818] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1957.672786][T10830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1957.736528][T10830] bond6: (slave bond7): making interface the new active one [ 1957.764285][T10830] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1957.842289][T10821] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 1957.879660][T10835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1958.027192][T10849] IPv6: sit2: Disabled Multicast RS [ 1958.687957][T10889] lo: Caught tx_queue_len zero misconfig [ 1959.180027][T10909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1959.192769][T10908] __nla_validate_parse: 12 callbacks suppressed [ 1959.192795][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18996'. [ 1959.213544][T10913] netlink: 'syz.0.18997': attribute type 10 has an invalid length. [ 1959.236934][T10913] team0: Device vxcan1 is of different type [ 1959.367943][T10925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.19000'. [ 1962.175230][T10911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1962.216073][T10950] netlink: 'syz.2.19007': attribute type 1 has an invalid length. [ 1962.251434][T10950] netlink: 236 bytes leftover after parsing attributes in process `syz.2.19007'. [ 1962.343299][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19008'. [ 1962.380368][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19008'. [ 1962.424444][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19008'. [ 1962.451588][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.493120][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19011'. [ 1962.517942][T10957] team0 (unregistering): Port device team_slave_0 removed [ 1962.550937][T10957] team0 (unregistering): Port device team_slave_1 removed [ 1962.642025][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.658764][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.667181][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.671701][T10971] netlink: 'syz.1.19013': attribute type 1 has an invalid length. [ 1962.694405][T10971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19013'. [ 1962.701942][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.735593][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.774304][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.854024][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.878505][T10957] netlink: 'syz.5.19010': attribute type 10 has an invalid length. [ 1962.915962][T10986] netlink: 244 bytes leftover after parsing attributes in process `syz.0.19017'. [ 1963.569498][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19030'. [ 1964.433978][T11070] __nla_validate_parse: 7 callbacks suppressed [ 1964.434003][T11070] netlink: 147072 bytes leftover after parsing attributes in process `syz.5.19039'. [ 1967.082146][T11056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1967.234483][T11102] netlink: 176 bytes leftover after parsing attributes in process `syz.3.19047'. [ 1967.367419][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19049'. [ 1967.374398][T11110] dvmrp0: entered allmulticast mode [ 1967.642400][T11130] validate_nla: 58 callbacks suppressed [ 1967.642424][T11130] netlink: 'syz.2.19057': attribute type 17 has an invalid length. [ 1967.660643][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19057'. [ 1967.673725][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19057'. [ 1967.720912][T11130] gretap0: entered promiscuous mode [ 1967.733053][T11130] gretap0: left promiscuous mode [ 1968.013602][T11147] netlink: 'syz.2.19063': attribute type 1 has an invalid length. [ 1968.064053][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19063'. [ 1968.114327][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19063'. [ 1968.294050][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19066'. [ 1968.670046][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19069'. [ 1968.825946][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19072'. [ 1968.849715][T11178] chnl_net:caif_netlink_parms(): no params data found [ 1968.961800][T11181] ¾x9ÿ: renamed from bridge_slave_0 [ 1968.991104][T11159] C speed is unknown, defaulting to 1000 [ 1969.786291][T11222] netlink: 256 bytes leftover after parsing attributes in process `syz.3.19086'. [ 1969.832353][T11226] delete_channel: no stack [ 1970.115723][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1970.148371][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1970.191035][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19090'. [ 1970.242089][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1970.262041][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1970.281673][T11243] bond0: entered promiscuous mode [ 1970.286838][T11243] bond_slave_0: entered promiscuous mode [ 1970.305657][T11243] bond_slave_1: entered promiscuous mode [ 1970.316547][T11243] mac80211_hwsim hwsim177 wlan1: entered promiscuous mode [ 1970.347008][T11243] bond0: entered allmulticast mode [ 1970.364686][T11243] bond_slave_0: entered allmulticast mode [ 1970.367085][T11249] xt_TCPMSS: Only works on TCP SYN packets [ 1970.399818][T11243] bond_slave_1: entered allmulticast mode [ 1970.410401][T11243] mac80211_hwsim hwsim177 wlan1: entered allmulticast mode [ 1970.463366][T11162] C speed is unknown, defaulting to 1000 [ 1970.612534][T11253] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19094'. [ 1970.679522][T11253] 8021q: VLANs not supported on gre0 [ 1970.776251][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19097'. [ 1970.821801][T11263] openvswitch: netlink: Missing valid actions attribute. [ 1970.838339][T11263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1970.984279][T11273] veth0: entered promiscuous mode [ 1971.010549][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19100'. [ 1971.288275][T11282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19102'. [ 1971.479332][T11286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1971.783782][T11309] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1971.889971][T11317] netlink: 'syz.5.19110': attribute type 1 has an invalid length. [ 1972.055945][T11317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1972.125997][T11311] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1972.172573][T11332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.193662][T11325] bond6: entered promiscuous mode [ 1972.209325][T11325] bond6: entered allmulticast mode [ 1972.343642][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.408023][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020fbe400: rx timeout, send abort [ 1972.437067][T11343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.848495][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1973.260196][T16001] Bluetooth: hci5: command 0x0406 tx timeout [ 1973.571562][T11331] C speed is unknown, defaulting to 1000 [ 1973.579163][T11378] netlink: 'syz.0.19126': attribute type 1 has an invalid length. [ 1973.793916][T11378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1973.854321][T11394] tipc: Enabled bearer , priority 0 [ 1974.291725][T11410] netlink: 'syz.0.19133': attribute type 1 has an invalid length. [ 1974.303040][T11410] netlink: 'syz.0.19133': attribute type 2 has an invalid length. [ 1974.525054][T11414] bond7: option fail_over_mac: invalid value (16) [ 1974.592944][T11414] bond7 (unregistering): Released all slaves [ 1974.920034][T11436] netlink: 'syz.5.19142': attribute type 1 has an invalid length. [ 1975.380434][T11451] __nla_validate_parse: 9 callbacks suppressed [ 1975.380457][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19147'. [ 1975.436486][T11448] gre0: entered promiscuous mode [ 1975.443154][T11448] gre0: entered allmulticast mode [ 1975.468046][T11450] syzkaller0: entered promiscuous mode [ 1975.498994][T11450] syzkaller0: entered allmulticast mode [ 1976.071578][T11472] x_tables: duplicate underflow at hook 1 [ 1976.138057][T11476] syzkaller1: entered promiscuous mode [ 1976.145602][T11476] syzkaller1: entered allmulticast mode [ 1976.179214][T11477] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.19153'. [ 1976.191701][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19153'. [ 1976.303298][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1976.316761][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1976.727152][T11498] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19162'. [ 1976.841516][T11501] netlink: 'syz.1.19164': attribute type 39 has an invalid length. [ 1977.015415][T11512] netlink: 'syz.3.19165': attribute type 20 has an invalid length. [ 1977.047422][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19165'. [ 1977.086384][T11512] netlink: 'syz.3.19165': attribute type 20 has an invalid length. [ 1977.126015][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19165'. [ 1977.427015][T11532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19172'. [ 1977.473242][T11536] syzkaller0: entered allmulticast mode [ 1977.541602][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19173'. [ 1977.951206][T11554] netlink: 240 bytes leftover after parsing attributes in process `syz.5.19181'. [ 1978.062199][T16001] Bluetooth: hci4: command 0x0405 tx timeout [ 1978.237012][T11580] x_tables: duplicate underflow at hook 2 [ 1978.239339][T11581] ip_vti0: entered allmulticast mode [ 1978.400040][T11592] sctp: [Deprecated]: syz.5.19188 (pid 11592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1978.400040][T11592] Use struct sctp_sack_info instead [ 1978.435293][T11588] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1978.446767][T11588] team0: Device macvlan2 is already an upper device of the team interface [ 1978.462013][T11592] nbd: couldn't find a device at index 0 [ 1978.470854][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19188'. [ 1978.758576][T11609] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1978.794867][T11609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1978.881188][T11612] s5ÿÿø: renamed from vlan1 (while UP) [ 1979.044478][T11622] bridge_slave_0: invalid flags given to default FDB implementation [ 1979.084276][T11624] netlink: 'syz.3.19192': attribute type 29 has an invalid length. [ 1979.157460][T11599] netlink: 'syz.3.19192': attribute type 29 has an invalid length. [ 1979.173250][T20051] tipc: Subscription rejected, illegal request [ 1979.448719][T11636] bond1: Invalid ad_actor_system MAC address. [ 1979.456609][T11636] bond1: option ad_actor_system: invalid value (1) [ 1979.469674][T11636] bond1 (unregistering): Released all slaves [ 1979.541901][T11640] netlink: 'syz.2.19206': attribute type 1 has an invalid length. [ 1979.774972][T11651] syzkaller0: entered promiscuous mode [ 1979.794309][T11651] syzkaller0: entered allmulticast mode [ 1980.126865][T11666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1980.207474][T11670] team0: Caught tx_queue_len zero misconfig [ 1980.447775][T11686] netlink: 'syz.1.19223': attribute type 1 has an invalid length. [ 1980.521501][T11696] __nla_validate_parse: 9 callbacks suppressed [ 1980.521527][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19221'. [ 1980.935171][T11686] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1981.232680][T11719] netlink: 'syz.1.19227': attribute type 1 has an invalid length. [ 1981.281204][T11721] netlink: 'syz.0.19228': attribute type 11 has an invalid length. [ 1981.328789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1981.336937][ C0] lec:lec_tx_timeout: lec0 [ 1981.706941][T11735] tipc: Enabled bearer , priority 0 [ 1981.736359][T11733] tipc: Disabling bearer [ 1982.553629][T11746] netlink: 'syz.0.19235': attribute type 19 has an invalid length. [ 1982.569724][T11746] netlink: 'syz.0.19235': attribute type 3 has an invalid length. [ 1982.769877][T11751] netlink: 'syz.3.19237': attribute type 1 has an invalid length. [ 1982.778806][T11751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19237'. [ 1982.787918][T11751] netlink: 'syz.3.19237': attribute type 1 has an invalid length. [ 1982.802064][T11751] netlink: 'syz.3.19237': attribute type 8 has an invalid length. [ 1982.812192][T11751] netlink: 606 bytes leftover after parsing attributes in process `syz.3.19237'. [ 1982.823787][T11751] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19237'. [ 1983.364995][T11774] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20003 [ 1983.550665][T11785] netlink: 56 bytes leftover after parsing attributes in process `syz.5.19241'. [ 1983.601484][T11788] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1983.760881][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19244'. [ 1984.194346][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19254'. [ 1984.204073][T11817] openvswitch: netlink: Flow actions attr not present in new flow. [ 1984.265655][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19254'. [ 1984.286219][T11822] tipc: Enabled bearer , priority 0 [ 1984.312194][T11822] syzkaller0: entered promiscuous mode [ 1984.317746][T11822] syzkaller0: entered allmulticast mode [ 1984.365408][T11822] tipc: Resetting bearer [ 1984.376033][T11820] tipc: Resetting bearer [ 1984.410543][T11820] tipc: Disabling bearer [ 1984.774817][T11802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1985.075192][T11856] dvmrp0: entered allmulticast mode [ 1985.153084][T11859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1985.178055][T11859] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1985.187587][T11859] gretap2: entered promiscuous mode [ 1985.203369][T11859] gretap2: entered allmulticast mode [ 1985.215929][T11863] mac80211_hwsim hwsim176 wlan0: entered promiscuous mode [ 1985.240129][T11865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1985.702942][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19278'. [ 1985.883164][T11914] xt_cgroup: path and classid specified [ 1985.927147][T11915] validate_nla: 4 callbacks suppressed [ 1985.927176][T11915] netlink: 'syz.2.19280': attribute type 1 has an invalid length. [ 1985.979439][T16001] Bluetooth: hci2: command 0x0406 tx timeout [ 1986.056795][T11915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1986.072153][T11921] netlink: 'syz.0.19281': attribute type 10 has an invalid length. [ 1986.205562][T11919] bond3: (slave geneve3): making interface the new active one [ 1986.217620][T11919] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1986.230915][T11921] team0: Device vxcan1 is of different type [ 1986.246938][ T3001] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1986.257634][T11928] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1986.309838][ T3001] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1986.310659][T11928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19284'. [ 1986.321032][ T3001] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1986.394440][ T3001] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1986.457397][T11932] netlink: 'syz.1.19289': attribute type 10 has an invalid length. [ 1986.526684][T11932] team0 (unregistering): Port device team_slave_0 removed [ 1986.553642][T11932] team0 (unregistering): Port device team_slave_1 removed [ 1986.663878][T11941] syzkaller0: entered promiscuous mode [ 1986.682137][T11941] syzkaller0: entered allmulticast mode [ 1986.690053][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19287'. [ 1986.715486][T11946] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19289'. [ 1986.753893][T11949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.19290'. [ 1986.765484][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19290'. [ 1986.811701][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19291'. [ 1986.838294][T11951] netlink: 'syz.2.19291': attribute type 5 has an invalid length. [ 1986.864159][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19291'. [ 1986.894451][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19292'. [ 1986.911048][T11953] openvswitch: netlink: EtherType 0 is less than min 600 [ 1986.935336][T11951] geneve4: entered promiscuous mode [ 1986.950123][T11951] geneve4: entered allmulticast mode [ 1987.134978][T11963] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1987.366047][T11971] openvswitch: netlink: Key 6 has unexpected len 211 expected 2 [ 1987.922387][T11995] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19301'. [ 1990.235473][ T7941] netdevsim netdevsim2 netdevsim0: set [1, 3] type 2 family 0 port 256 - 0 [ 1990.246061][ T7941] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0 [ 1990.265084][ T7941] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0 [ 1990.404606][ T7941] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0 [ 1990.627183][T12014] netlink: 'syz.0.19305': attribute type 7 has an invalid length. [ 1990.664701][T12012] batadv0: entered promiscuous mode [ 1990.686169][T12012] debugfs: 'hsr1' already exists in 'hsr' [ 1990.694405][T12012] Cannot create hsr debugfs directory [ 1990.704810][T12012] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1990.727011][T12012] hsr1: entered promiscuous mode [ 1990.734311][T12012] hsr1: entered allmulticast mode [ 1990.768228][T12012] batadv0: entered allmulticast mode [ 1990.774295][T12012] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1990.799959][T12012] batadv0: left promiscuous mode [ 1990.867997][T12022] __nla_validate_parse: 2 callbacks suppressed [ 1990.868036][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19306'. [ 1991.084631][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1991.512009][T12064] netlink: 272 bytes leftover after parsing attributes in process `syz.3.19316'. [ 1991.575478][T12068] netlink: 92 bytes leftover after parsing attributes in process `syz.2.19317'. [ 1991.687650][T12079] netlink: 'syz.0.19318': attribute type 2 has an invalid length. [ 1991.744580][T12079] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19318'. [ 1991.917305][T12085] ip6gre2: entered promiscuous mode [ 1991.954231][T12085] ip6gre2: entered allmulticast mode [ 1992.073383][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19322'. [ 1992.127311][T12095] bridge3: port 1(veth0_to_bond) entered blocking state [ 1992.143464][T12095] bridge3: port 1(veth0_to_bond) entered disabled state [ 1992.151868][T12095] veth0_to_bond: entered allmulticast mode [ 1992.161478][T12095] veth0_to_bond: entered promiscuous mode [ 2005.913832][ T7211] lec:lec_start_xmit: lec0:No lecd attached [ 2007.020267][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2011.178290][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 2011.186396][ C0] lec:lec_tx_timeout: lec0 [ 2015.819771][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19330'. [ 2015.855843][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19330'. [ 2016.069876][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19331'. [ 2016.072974][T12135] 8021q: VLANs not supported on caif0 [ 2016.112750][T12130] bridge_slave_1: left allmulticast mode [ 2016.134425][T12130] bridge_slave_1: left promiscuous mode [ 2016.180105][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.223441][T12146] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2016.234574][T12130] bridge_slave_0: left allmulticast mode [ 2016.241516][T12130] bridge_slave_0: left promiscuous mode [ 2016.247399][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.411153][T12155] xt_policy: output policy not valid in PREROUTING and INPUT [ 2016.593439][T12166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19339'. [ 2016.605418][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19342'. [ 2016.752755][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19342'. [ 2016.782843][T12174] netlink: 'syz.3.19344': attribute type 10 has an invalid length. [ 2016.810619][T12171] netlink: 'syz.0.19343': attribute type 29 has an invalid length. [ 2016.895973][T12174] team0: Port device dummy0 added [ 2016.927206][T12165] netlink: 'syz.2.19342': attribute type 5 has an invalid length. [ 2017.315462][T12194] netlink: 'syz.0.19351': attribute type 1 has an invalid length. [ 2017.427548][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19352'. [ 2020.456998][T12202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2020.903373][T12260] netlink: 68 bytes leftover after parsing attributes in process `syz.5.19367'. [ 2020.930617][T12262] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2021.074651][T12270] netlink: 'syz.3.19369': attribute type 11 has an invalid length. [ 2021.160829][T12264] netlink: 'syz.0.19368': attribute type 13 has an invalid length. [ 2021.276333][T12274] netlink: 'syz.0.19368': attribute type 1 has an invalid length. [ 2021.825570][T12302] dvmrp6: entered allmulticast mode [ 2021.953930][T12307] netlink: 'syz.5.19376': attribute type 1 has an invalid length. [ 2022.005544][T12310] netlink: 108 bytes leftover after parsing attributes in process `syz.5.19376'. [ 2022.283296][T12307] bond7: entered promiscuous mode [ 2022.289610][T12307] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2022.525408][T12324] netlink: 'syz.0.19379': attribute type 18 has an invalid length. [ 2022.567098][T12328] openvswitch: netlink: Message has -2 unknown bytes. [ 2022.580389][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19379'. [ 2022.654126][T12324] netlink: 'syz.0.19379': attribute type 18 has an invalid length. [ 2022.729717][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19379'. [ 2023.026928][T12346] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19387'. [ 2023.039110][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19387'. [ 2023.066781][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19387'. [ 2023.169230][T12353] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.19390'. [ 2023.391863][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19391'. [ 2023.444448][T12362] nbd: couldn't find device at index 0 [ 2023.871480][T12379] xt_addrtype: ipv6 does not support BROADCAST matching [ 2023.911234][T12380] atomic_op ffff88809be65998 conn xmit_atomic 0000000000000000 [ 2024.106678][T12387] netlink: 'syz.0.19401': attribute type 9 has an invalid length. [ 2024.129751][T12387] netlink: 'syz.0.19401': attribute type 11 has an invalid length. [ 2024.183776][T12387] netlink: 'syz.0.19401': attribute type 12 has an invalid length. [ 2024.227974][T12387] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.19401'. [ 2024.230669][T12393] netlink: 'syz.0.19401': attribute type 10 has an invalid length. [ 2024.310424][T12393] netlink: 'syz.0.19401': attribute type 6 has an invalid length. [ 2024.403410][T12397] bridge5: port 1(erspan0) entered blocking state [ 2024.412994][T12397] bridge5: port 1(erspan0) entered disabled state [ 2024.462829][T12397] erspan0: entered allmulticast mode [ 2024.475817][T12397] erspan0: left allmulticast mode [ 2024.593149][T12406] ip6t_srh: unknown srh match flags 4000 [ 2024.672496][T12407] bridge0: entered promiscuous mode [ 2024.686324][T12407] macsec2: entered promiscuous mode [ 2024.699903][T12407] macsec2: entered allmulticast mode [ 2024.728180][T12407] bridge0: entered allmulticast mode [ 2024.742213][T12407] bridge0: port 3(macsec2) entered blocking state [ 2024.751472][T12407] bridge0: port 3(macsec2) entered disabled state [ 2024.811606][T12407] bridge0: left allmulticast mode [ 2024.816938][T12407] bridge0: left promiscuous mode [ 2024.997288][T12425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2025.075871][T12425] netlink: 'syz.5.19408': attribute type 64 has an invalid length. [ 2025.843251][T12454] geneve2: entered promiscuous mode [ 2025.864660][T12454] geneve2: entered allmulticast mode [ 2026.649307][T12498] __nla_validate_parse: 8 callbacks suppressed [ 2026.649334][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19424'. [ 2026.721451][T12498] openvswitch: netlink: Flow key attr not present in new flow. [ 2027.282690][T12527] netlink: 244 bytes leftover after parsing attributes in process `syz.0.19429'. [ 2027.536398][T12533] IPv6: NLM_F_CREATE should be specified when creating new route [ 2027.705179][T12542] erspan0: entered promiscuous mode [ 2027.729912][T12542] vlan2: entered promiscuous mode [ 2027.791955][T12543] netlink: 'syz.1.19433': attribute type 11 has an invalid length. [ 2027.821642][T12543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19433'. [ 2028.147994][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19438'. [ 2028.176145][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19438'. [ 2028.232380][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19438'. [ 2028.268804][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19438'. [ 2028.360258][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19439'. [ 2028.395120][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19439'. [ 2028.436457][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19442'. [ 2028.446825][T12566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2028.474747][T12566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.965845][T12590] nbd: couldn't find a device at index 0 [ 2029.574439][T12611] netlink: 'syz.2.19455': attribute type 2 has an invalid length. [ 2029.698996][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.749935][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.780079][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.807489][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.830627][T12626] netlink: 'syz.0.19461': attribute type 4 has an invalid length. [ 2029.833991][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.863602][T12626] netlink: 'syz.0.19461': attribute type 1 has an invalid length. [ 2029.882594][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.915610][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.928217][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.968399][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2029.990790][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.024387][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.033652][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.053268][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.075757][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.085466][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.097447][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.108455][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.115225][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.125038][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.145581][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.177037][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.210890][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.226539][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.248368][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.259509][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.266387][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.277845][T12640] batadv_slave_1: entered promiscuous mode [ 2030.317437][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.340365][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.366244][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.384856][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.415110][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.443911][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.480506][T12620] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 2030.498491][T12649] netlink: 'syz.5.19468': attribute type 2 has an invalid length. [ 2030.695144][T12638] batadv_slave_1: left promiscuous mode [ 2030.996852][T12667] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 2031.081685][T12667] bond8 (unregistering): Released all slaves [ 2031.166193][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.185378][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.224778][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.281504][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.318543][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.327181][T12680] netlink: 'syz.2.19476': attribute type 29 has an invalid length. [ 2031.451747][T12686] macvlan2: entered promiscuous mode [ 2031.492620][T12686] macvlan2: entered allmulticast mode [ 2031.502390][T12686] bond9: entered promiscuous mode [ 2031.511378][T12686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2031.602528][T12686] bond9: left promiscuous mode [ 2031.622320][T12695] netlink: set zone limit has 4 unknown bytes [ 2031.722875][T12685] syzkaller1: entered promiscuous mode [ 2031.731287][T12685] syzkaller1: entered allmulticast mode [ 2031.746958][T12703] __nla_validate_parse: 8 callbacks suppressed [ 2031.746981][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19482'. [ 2031.765417][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19481'. [ 2031.842302][T12697] hsr_slave_0 (unregistering): left promiscuous mode [ 2032.612502][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19489'. [ 2032.700290][T12736] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 2032.967749][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19491'. [ 2033.097570][T12746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2033.266802][T12754] bond4: entered promiscuous mode [ 2033.331530][T12754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2033.414188][T12749] bond4: (slave bridge2): making interface the new active one [ 2033.430483][T12749] bridge2: entered promiscuous mode [ 2033.476490][T12749] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2033.850023][T12771] mac80211_hwsim hwsim187 wlan0: entered promiscuous mode [ 2033.964649][T12784] nbd: couldn't find a device at index 0 [ 2033.997216][T12784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19499'. [ 2034.160505][T12789] bond2: (slave gre0): Device is not bonding slave [ 2034.167097][T12789] bond2: option active_slave: invalid value (gre0) [ 2034.206167][T12797] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19503'. [ 2034.232149][T12789] bond2 (unregistering): Released all slaves [ 2034.350250][T12790] bond8: option miimon: invalid value (18446744073709551585) [ 2034.368449][T12790] bond8: option miimon: allowed values 0 - 2147483647 [ 2034.393959][T12790] bond8 (unregistering): Released all slaves [ 2034.415859][T12805] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19505'. [ 2034.442149][T12805] netlink: 1 bytes leftover after parsing attributes in process `syz.2.19505'. [ 2034.472768][T12805] netlink: 634 bytes leftover after parsing attributes in process `syz.2.19505'. [ 2034.548689][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 2034.556949][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19505'. [ 2035.123315][T12839] gre0: entered promiscuous mode [ 2035.157286][T12839] gre0: entered allmulticast mode [ 2035.366223][T12848] validate_nla: 6 callbacks suppressed [ 2035.366248][T12848] netlink: 'syz.0.19516': attribute type 1 has an invalid length. [ 2035.447159][T12848] vlan2: entered allmulticast mode [ 2035.482069][T12848] team_slave_1: entered allmulticast mode [ 2035.636038][T12857] netlink: 'syz.2.19520': attribute type 1 has an invalid length. [ 2035.647571][T12857] netlink: 'syz.2.19520': attribute type 1 has an invalid length. [ 2035.728783][T12857] netlink: 'syz.2.19520': attribute type 8 has an invalid length. [ 2035.778300][T12861] syzkaller0: entered promiscuous mode [ 2035.783856][T12861] syzkaller0: entered allmulticast mode [ 2036.973246][T12907] netlink: 'syz.0.19530': attribute type 33 has an invalid length. [ 2037.025911][T12908] __nla_validate_parse: 9 callbacks suppressed [ 2037.025937][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19531'. [ 2037.089294][T12908] netlink: 50 bytes leftover after parsing attributes in process `syz.1.19531'. [ 2037.103091][T12908] netlink: 50 bytes leftover after parsing attributes in process `syz.1.19531'. [ 2037.720080][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19538'. [ 2037.746942][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2037.762620][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 2038.230121][T12954] syzkaller0: entered allmulticast mode [ 2038.296966][T12954] syzkaller0 (unregistering): left allmulticast mode [ 2038.900668][T12942] C speed is unknown, defaulting to 1000 [ 2039.036612][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19550'. [ 2039.736032][T13006] netlink: 'syz.2.19555': attribute type 83 has an invalid length. [ 2039.892520][T13008] netlink: 252 bytes leftover after parsing attributes in process `syz.5.19556'. [ 2039.930455][T12980] C speed is unknown, defaulting to 1000 [ 2039.963986][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19558'. [ 2040.244561][T13020] macvtap1: entered promiscuous mode [ 2040.258420][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19561'. [ 2040.289432][T13020] macvtap1: entered allmulticast mode [ 2040.295180][T13020] veth1_vlan: entered allmulticast mode [ 2040.301439][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19561'. [ 2040.340874][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19559'. [ 2040.513516][T13017] syzkaller0: entered promiscuous mode [ 2040.529080][T13017] syzkaller0: entered allmulticast mode [ 2043.181108][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 2043.189284][ C0] lec:lec_tx_timeout: lec0 [ 2046.087565][T13040] netlink: 'syz.5.19566': attribute type 50 has an invalid length. [ 2046.098954][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19566'. [ 2046.165539][T13036] syzkaller1: entered promiscuous mode [ 2046.173232][T13036] syzkaller1: entered allmulticast mode [ 2046.274709][T13046] netlink: 59 bytes leftover after parsing attributes in process `syz.1.19565'. [ 2046.847189][T13055] ip6gre2: entered promiscuous mode [ 2046.853067][T13055] ip6gre2: entered allmulticast mode [ 2046.882242][T13056] sit0: Caught tx_queue_len zero misconfig [ 2046.996609][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19569'. [ 2047.647509][T13073] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19572'. [ 2047.836080][T13083] netlink: 84 bytes leftover after parsing attributes in process `syz.5.19575'. [ 2047.845715][T13083] netlink: 84 bytes leftover after parsing attributes in process `syz.5.19575'. [ 2047.889526][T13083] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2047.995734][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19575'. [ 2048.053720][T13094] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19575'. [ 2048.474004][T13107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19582'. [ 2049.997399][T13175] netlink: 248 bytes leftover after parsing attributes in process `syz.0.19595'. [ 2050.599005][T13176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2050.622470][T13176] bridge0: entered allmulticast mode [ 2050.962905][T13193] netlink: 'syz.2.19599': attribute type 6 has an invalid length. [ 2051.004118][T13183] syzkaller0: entered promiscuous mode [ 2051.038288][T13183] syzkaller0: entered allmulticast mode [ 2051.185360][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19600'. [ 2056.785411][T13205] veth0_to_team: entered promiscuous mode [ 2056.826480][T13205] veth0_to_team: left promiscuous mode [ 2057.001078][T13226] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19605'. [ 2057.129503][T13231] netlink: 45 bytes leftover after parsing attributes in process `syz.2.19608'. [ 2057.491437][T13246] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19611'. [ 2057.699900][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19612'. [ 2057.712888][T13251] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2057.741522][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19612'. [ 2057.760265][T13251] bond8 (unregistering): Released all slaves [ 2057.805891][T13257] netlink: 176 bytes leftover after parsing attributes in process `syz.3.19614'. [ 2057.853265][T13257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19614'. [ 2057.869242][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19615'. [ 2058.094877][T13262] bridge0: port 1(veth0_to_bridge) entered blocking state [ 2058.112435][T13262] bridge0: port 1(veth0_to_bridge) entered disabled state [ 2058.186637][T13262] veth0_to_bridge: entered allmulticast mode [ 2058.196438][T13262] veth0_to_bridge: entered promiscuous mode [ 2058.205490][T13262] bridge0: port 1(veth0_to_bridge) entered blocking state [ 2058.212841][T13262] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 2058.242595][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2058.436574][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19622'. [ 2058.462576][T13273] openvswitch: netlink: Flow key attr not present in new flow. [ 2058.477255][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19621'. [ 2059.545736][T13340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2059.910215][T13355] netlink: 'syz.2.19641': attribute type 9 has an invalid length. [ 2060.077379][T13361] netlink: 'syz.2.19641': attribute type 64 has an invalid length. [ 2065.196336][T13370] netlink: 'syz.5.19645': attribute type 62 has an invalid length. [ 2065.378665][T13377] __nla_validate_parse: 7 callbacks suppressed [ 2065.378691][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19648'. [ 2065.424496][T13385] nbd: couldn't find a device at index 0 [ 2065.434327][T13385] netlink: 'syz.5.19649': attribute type 31 has an invalid length. [ 2065.483178][T13385] netlink: 56 bytes leftover after parsing attributes in process `syz.5.19649'. [ 2065.541613][T13389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19650'. [ 2065.875244][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19654'. [ 2066.401815][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19658'. [ 2067.131358][T13438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2067.272377][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19664'. [ 2067.728182][ T30] audit: type=1800 audit(1773485124.006:32): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19668" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1023 res=0 errno=0 [ 2068.386500][T13487] macvtap2: entered allmulticast mode [ 2068.399938][T13487] veth0_macvtap: entered allmulticast mode [ 2068.562387][T13489] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 2068.744918][T13489] tipc: Resetting bearer [ 2069.053251][T13512] netlink: 'syz.3.19682': attribute type 25 has an invalid length. [ 2069.181423][T13517] netlink: 'syz.0.19684': attribute type 1 has an invalid length. [ 2069.385817][T13518] bond10: (slave gretap3): making interface the new active one [ 2069.410009][T13518] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 2069.644788][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19689'. [ 2069.691730][ T7211] lec:lec_start_xmit: lec0:No lecd attached [ 2069.730017][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19690'. [ 2069.933948][T13539] syzkaller0: entered promiscuous mode [ 2069.979074][T13539] syzkaller0: entered allmulticast mode [ 2070.005906][T13534] bond11: (slave vcan0): refused to change device type [ 2070.105975][T13547] SET target dimension over the limit! [ 2070.356887][T13549] syzkaller0: entered promiscuous mode [ 2070.364220][T13549] syzkaller0: entered allmulticast mode [ 2070.375925][T13549] tipc: Enabled bearer , priority 0 [ 2070.499578][T13559] gtp2: entered promiscuous mode [ 2070.520191][T13559] gtp2: entered allmulticast mode [ 2070.597029][T13548] tipc: Resetting bearer [ 2070.782394][T13548] tipc: Disabling bearer [ 2071.125485][T13574] syzkaller0: entered promiscuous mode [ 2071.160795][T13574] syzkaller0: entered allmulticast mode [ 2075.179065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 2075.187140][ C0] lec:lec_tx_timeout: lec0 [ 2076.352157][T13593] veth0: entered promiscuous mode [ 2076.417512][T13593] veth0: left promiscuous mode [ 2076.936590][T13625] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2077.008231][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19709'. [ 2077.289521][T13640] x_tables: duplicate underflow at hook 2 [ 2077.401173][T13647] netlink: 1 bytes leftover after parsing attributes in process `syz.0.19714'. [ 2077.487355][T13649] netlink: 'syz.2.19716': attribute type 2 has an invalid length. [ 2077.616152][T13657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19718'. [ 2078.384348][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19726'. [ 2078.431877][T13678] netlink: 'syz.0.19726': attribute type 4 has an invalid length. [ 2078.473467][T13678] netlink: 'syz.0.19726': attribute type 4 has an invalid length. [ 2078.802206][T13693] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 2079.823166][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19742'. [ 2079.965352][T13734] bond5: option xmit_hash_policy: invalid value (64) [ 2080.023751][T13734] bond5 (unregistering): Released all slaves [ 2080.234041][T13755] openvswitch: netlink: IP tunnel dst address not specified [ 2080.283434][T13755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2080.673963][T13779] netlink: 'syz.3.19752': attribute type 10 has an invalid length. [ 2080.682216][T13779] netlink: 396 bytes leftover after parsing attributes in process `syz.3.19752'. [ 2080.937063][T13794] netlink: 'syz.5.19757': attribute type 64 has an invalid length. [ 2081.244236][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19759'. [ 2082.146950][T13823] syzkaller0: entered promiscuous mode [ 2082.152775][T13823] syzkaller0: entered allmulticast mode [ 2082.343831][T13828] Bluetooth: MGMT ver 1.23 [ 2082.389853][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19767'. [ 2082.472646][T13834] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19769'. [ 2082.496917][T13834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19769'. [ 2082.788390][T13840] netlink: 'syz.1.19774': attribute type 1 has an invalid length. [ 2082.911554][T13840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2082.971121][T13840] nbd: couldn't find a device at index 0 [ 2083.194822][T13867] x_tables: unsorted underflow at hook 1 [ 2083.914157][T13902] netlink: 'syz.5.19784': attribute type 21 has an invalid length. [ 2084.075995][T13908] x_tables: unsorted entry at hook 3 [ 2084.321671][T13902] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19784'. [ 2084.527768][T13921] xt_NFQUEUE: number of total queues is 0 [ 2084.545625][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19789'. [ 2084.555735][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19790'. [ 2084.556797][T13922] netlink: 'syz.1.19788': attribute type 1 has an invalid length. [ 2084.572858][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19790'. [ 2084.573099][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19790'. [ 2084.668534][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19788'. [ 2084.972183][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19793'. [ 2085.006121][T13938] erspan0: entered promiscuous mode [ 2085.093430][T13938] macvtap1: entered promiscuous mode [ 2085.109530][T13938] macvtap1: entered allmulticast mode [ 2085.123750][T13938] erspan0: entered allmulticast mode [ 2086.151149][T13970] [ 2086.153561][T13970] ====================================================== [ 2086.160614][T13970] WARNING: possible circular locking dependency detected [ 2086.167722][T13970] syzkaller #0 Not tainted [ 2086.172179][T13970] ------------------------------------------------------ [ 2086.179248][T13970] syz.0.19802/13970 is trying to acquire lock: [ 2086.185599][T13970] ffffffff8fd49b38 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 2086.195337][T13970] [ 2086.195337][T13970] but task is already holding lock: [ 2086.202737][T13970] ffffffff8fd49ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 2086.212390][T13970] [ 2086.212390][T13970] which lock already depends on the new lock. [ 2086.212390][T13970] [ 2086.222930][T13970] [ 2086.222930][T13970] the existing dependency chain (in reverse order) is: [ 2086.231999][T13970] [ 2086.231999][T13970] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 2086.240118][T13970] _raw_spin_lock_bh+0x36/0x50 [ 2086.245593][T13970] nr_rt_ioctl+0x40c/0xf90 [ 2086.250599][T13970] sock_do_ioctl+0x101/0x320 [ 2086.255963][T13970] sock_ioctl+0x5c6/0x7f0 [ 2086.260879][T13970] __se_sys_ioctl+0xfc/0x170 [ 2086.266089][T13970] do_syscall_64+0x14d/0xf80 [ 2086.271279][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.277759][T13970] [ 2086.277759][T13970] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 2086.285813][T13970] _raw_spin_lock_bh+0x36/0x50 [ 2086.291158][T13970] nr_rt_ioctl+0x215/0xf90 [ 2086.296247][T13970] sock_do_ioctl+0x101/0x320 [ 2086.301504][T13970] sock_ioctl+0x5c6/0x7f0 [ 2086.306418][T13970] __se_sys_ioctl+0xfc/0x170 [ 2086.311598][T13970] do_syscall_64+0x14d/0xf80 [ 2086.316778][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.323261][T13970] [ 2086.323261][T13970] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 2086.331158][T13970] __lock_acquire+0x15a5/0x2cf0 [ 2086.336596][T13970] lock_acquire+0xf0/0x2e0 [ 2086.341602][T13970] _raw_spin_lock_bh+0x36/0x50 [ 2086.346952][T13970] nr_rt_device_down+0xbe/0x860 [ 2086.352373][T13970] nr_device_event+0x137/0x150 [ 2086.357822][T13970] notifier_call_chain+0x1be/0x400 [ 2086.363570][T13970] __dev_notify_flags+0x16d/0x310 [ 2086.369332][T13970] netif_change_flags+0xe8/0x1a0 [ 2086.374872][T13970] dev_change_flags+0x130/0x260 [ 2086.380393][T13970] dev_ioctl+0x7b4/0x1150 [ 2086.385363][T13970] sock_do_ioctl+0x23e/0x320 [ 2086.390528][T13970] sock_ioctl+0x5c6/0x7f0 [ 2086.395415][T13970] __se_sys_ioctl+0xfc/0x170 [ 2086.400612][T13970] do_syscall_64+0x14d/0xf80 [ 2086.405766][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.412210][T13970] [ 2086.412210][T13970] other info that might help us debug this: [ 2086.412210][T13970] [ 2086.422467][T13970] Chain exists of: [ 2086.422467][T13970] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 2086.422467][T13970] [ 2086.436423][T13970] Possible unsafe locking scenario: [ 2086.436423][T13970] [ 2086.443959][T13970] CPU0 CPU1 [ 2086.449357][T13970] ---- ---- [ 2086.454806][T13970] lock(nr_neigh_list_lock); [ 2086.459522][T13970] lock(&nr_node->node_lock); [ 2086.466896][T13970] lock(nr_neigh_list_lock); [ 2086.474130][T13970] lock(nr_node_list_lock); [ 2086.478752][T13970] [ 2086.478752][T13970] *** DEADLOCK *** [ 2086.478752][T13970] [ 2086.486919][T13970] 2 locks held by syz.0.19802/13970: [ 2086.492226][T13970] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 2086.501076][T13970] #1: ffffffff8fd49ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 2086.511135][T13970] [ 2086.511135][T13970] stack backtrace: [ 2086.517093][T13970] CPU: 0 UID: 0 PID: 13970 Comm: syz.0.19802 Not tainted syzkaller #0 PREEMPT(full) [ 2086.517126][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2086.517140][T13970] Call Trace: [ 2086.517150][T13970] [ 2086.517160][T13970] dump_stack_lvl+0xe8/0x150 [ 2086.517194][T13970] print_circular_bug+0x2e1/0x300 [ 2086.517229][T13970] check_noncircular+0x12e/0x150 [ 2086.517262][T13970] __lock_acquire+0x15a5/0x2cf0 [ 2086.517294][T13970] ? __lock_acquire+0x6b5/0x2cf0 [ 2086.517323][T13970] lock_acquire+0xf0/0x2e0 [ 2086.517346][T13970] ? nr_rt_device_down+0xbe/0x860 [ 2086.517369][T13970] ? nr_rt_device_down+0xbe/0x860 [ 2086.517386][T13970] _raw_spin_lock_bh+0x36/0x50 [ 2086.517413][T13970] ? nr_rt_device_down+0xbe/0x860 [ 2086.517430][T13970] nr_rt_device_down+0xbe/0x860 [ 2086.517447][T13970] ? nr_device_event+0x12f/0x150 [ 2086.517480][T13970] nr_device_event+0x137/0x150 [ 2086.517509][T13970] notifier_call_chain+0x1be/0x400 [ 2086.517544][T13970] __dev_notify_flags+0x16d/0x310 [ 2086.517576][T13970] ? __pfx___dev_notify_flags+0x10/0x10 [ 2086.517604][T13970] ? __dev_change_flags+0x4c6/0x690 [ 2086.517638][T13970] ? kasan_quarantine_put+0xbb/0x1f0 [ 2086.517661][T13970] ? __pfx___dev_change_flags+0x10/0x10 [ 2086.517693][T13970] ? full_name_hash+0x92/0xe0 [ 2086.517724][T13970] netif_change_flags+0xe8/0x1a0 [ 2086.517757][T13970] dev_change_flags+0x130/0x260 [ 2086.517788][T13970] dev_ioctl+0x7b4/0x1150 [ 2086.517816][T13970] sock_do_ioctl+0x23e/0x320 [ 2086.517841][T13970] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2086.517862][T13970] ? do_futex+0x395/0x420 [ 2086.517894][T13970] sock_ioctl+0x5c6/0x7f0 [ 2086.517916][T13970] ? __pfx_sock_ioctl+0x10/0x10 [ 2086.517938][T13970] ? __fget_files+0x2a/0x420 [ 2086.517966][T13970] ? __fget_files+0x3a0/0x420 [ 2086.517993][T13970] ? __fget_files+0x2a/0x420 [ 2086.518023][T13970] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2086.518051][T13970] ? __pfx_sock_ioctl+0x10/0x10 [ 2086.518074][T13970] __se_sys_ioctl+0xfc/0x170 [ 2086.518098][T13970] do_syscall_64+0x14d/0xf80 [ 2086.518124][T13970] ? trace_irq_disable+0x3b/0x150 [ 2086.518154][T13970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.518174][T13970] ? clear_bhb_loop+0x40/0x90 [ 2086.518196][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.518216][T13970] RIP: 0033:0x7fd87339c799 [ 2086.518235][T13970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.518254][T13970] RSP: 002b:00007fd874275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2086.518276][T13970] RAX: ffffffffffffffda RBX: 00007fd873615fa0 RCX: 00007fd87339c799 [ 2086.518292][T13970] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 2086.518305][T13970] RBP: 00007fd873432c99 R08: 0000000000000000 R09: 0000000000000000 [ 2086.518318][T13970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2086.518331][T13970] R13: 00007fd873616038 R14: 00007fd873615fa0 R15: 00007ffc9a42f9f8 [ 2086.518355][T13970] [ 2086.907312][T13970] bond0: (slave rose0): Error: Device is in use and cannot be enslaved