last executing test programs: 4m52.533291019s ago: executing program 4 (id=6218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@empty, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7961fdffffff000000007e0000000c0099006c9100001400000063672131d29c28168af08828555d5066bdb7fc2ab6b1c35d477d6bc55f43cadba710980e9e5b38f0235b5848d6579fb723669220e6bfa220a6cb26f114632e63488906f7d9b366a91286b6f994b93396bdba53aef0f3b03acfd9ba545f9a550e94b386066e677a7f456f87179b6c"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 4m51.839283603s ago: executing program 4 (id=6224): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000001b40)={@empty, @broadcast, @void, {@arp={0x806, @generic={0x310, 0xfbfb, 0x6, 0x0, 0xa, @broadcast, "", @multicast}}}}, 0x0) 4m51.485505679s ago: executing program 4 (id=6227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m50.890117709s ago: executing program 4 (id=6230): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r0, 0x8b26, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xe}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r2, 0x1, 0x3d, &(0x7f00000000c0), 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) unshare(0x60000f80) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@broadcast}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) 4m50.505711438s ago: executing program 4 (id=6234): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10) close(r5) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 4m48.958933952s ago: executing program 4 (id=6243): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2m35.090685412s ago: executing program 3 (id=6565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x12, r5, 0x4}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f00000001c0)={0xc, {0x1, 0x7fffffff, 0xe, 0x0, 0x2}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r13, 0x84, 0x19, &(0x7f00000002c0)={r14, 0x7}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110001000000000000000000eb00000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000340)={0x3a, @local, 0x4e22, 0x1, 'lblc\x00', 0x21, 0x80, 0x80}, 0x2c) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m33.785316149s ago: executing program 3 (id=6567): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYRES32=r2], 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x5a2a, 0x8000, 0x80000001, 0x8, 0x8, 0x2, 0xe5c4, r2}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={r6, 0x153, "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"/339}, &(0x7f0000000100)=0x15b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x1, 0x4, 0x1, 0x80000000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 2m32.299479556s ago: executing program 3 (id=6572): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000080)={0x2, 0x4, 0x95d, 0x9, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}, [0x8, 0x6, 0x9, 0x3, 0xa84c, 0x80000001, 0x100000000, 0x0, 0x6, 0x0, 0x95, 0x4, 0x1000, 0xb, 0x3]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1, 0x8}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x7}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104fcfffffd8000000000000000", @ANYRES32=0x0, @ANYBLOB="4312000073240600140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2m23.207258632s ago: executing program 3 (id=6584): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x22d4, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x20, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x22a0, 0x2, 0x0, 0x1, [@generic="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", @typed={0xc, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0x1288, 0x6d, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1034, 0xbf, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="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", @nested={0x4, 0x6b}, @nested={0x4, 0x135}, @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x150}]}, @nested={0x8, 0x99, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @nested={0x23f, 0x52, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x8, 0x33, 0x0, 0x0, @uid}]}]}, 0x22d4}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), 0x4) 2m21.192527167s ago: executing program 3 (id=6588): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x4b, 0x0, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c0f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x6a, &(0x7f0000000600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x1, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "85545414a07348fb", "3f36c09abe4476ceb46391cb75c12684", "a8d0da25", "ed7247c2d8ccb2fc"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=ANY=[@ANYBLOB="140100000000110122bd7008f9ffffff7e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="04007a802c007a8008000400070000020c000300dd8df01d86adae6214000200bbcfb03e27ad74a229d803811876415290007a801400020033394f35f2f47f9c34c7e73656ce503008000400040000000c000300b2067d444fc011471c0002005851ca61a51e50b9e92b4812af787fbddbb49b5ed82e26f2240001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x60) 2m19.093062635s ago: executing program 3 (id=6592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="367c30000001100000000000388c36d6009551a5b90e0000bb7dad44da3ab7c1c9ab3e977f5ad5591d0d5d638c45d571c90ede1292b357bd3cc0ab4a0bd26e715c5f0fe928842643a5a8a5a44243571bf7095f5cbbd4866c89d5ec8542396d3e411767c2f3b2bd8a15ede077144b5988a85012619fd488da126fbde117ed031a694aeb42a5460dc23c8f5297d3f627073b2d57430c8654f2166f7e3e95d78b02bb69a8e90b2b4a565afa69388acba72f40847b6c1a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01}, 0x14}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="38956acf", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="080005000e0000001400040074756e6c3000"/28], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40040000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x4f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="01000000000000000000010005000500070000000000080009000061f3f335002000ff250100100000000000e1ffe000000108000a00000000000f0002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m3.723037251s ago: executing program 32 (id=6592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="367c30000001100000000000388c36d6009551a5b90e0000bb7dad44da3ab7c1c9ab3e977f5ad5591d0d5d638c45d571c90ede1292b357bd3cc0ab4a0bd26e715c5f0fe928842643a5a8a5a44243571bf7095f5cbbd4866c89d5ec8542396d3e411767c2f3b2bd8a15ede077144b5988a85012619fd488da126fbde117ed031a694aeb42a5460dc23c8f5297d3f627073b2d57430c8654f2166f7e3e95d78b02bb69a8e90b2b4a565afa69388acba72f40847b6c1a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01}, 0x14}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="38956acf", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="080005000e0000001400040074756e6c3000"/28], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40040000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x4f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="01000000000000000000010005000500070000000000080009000061f3f335002000ff250100100000000000e1ffe000000108000a00000000000f0002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 19.119191425s ago: executing program 1 (id=6803): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$tipc(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffe000000", 0x58) 18.31279121s ago: executing program 1 (id=6805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x40, 0x8000, 0x4, 0x8, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x678}, &(0x7f0000000100)=0x8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@loopback, @broadcast, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e21, 0x5, @local, 0x4}}}, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x780f00}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044005}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x170, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x664d7dfc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa88}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf19}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff4f}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x170}}, 0x24000040) ioctl$sock_ifreq(r1, 0x87, &(0x7f0000000700)={'veth1_to_hsr\x00', @ifru_hwaddr=@random="e8c4ae6937f3"}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000800)={r2, 0x90, &(0x7f0000000740)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x8}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x3f0, @empty, 0x81}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xb49c}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1}]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000880)={r9, 0x80, 0x0, 0x9, 0x6fdd, 0x5, 0x7fff, 0x9, {r5, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x9, 0xfffffff9, 0x0, 0x7, 0x9}}, &(0x7f0000000940)=0xb0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(r11, &(0x7f0000000980)="03ee736862955ff49d8cea9ca90ff7b2f613394a726bff884edf8ce84e3370221f763b4c5aeb65b707f8eda189006634e367044470199a6cd5e0d08fb991f5e9453093a4ae30625ce7cabf6f49b3fbd9329897a095cc53bd1a726d3884df28339fb3aa1684436e59c4e12df7e5c1ecf97b06de69c22461d1c43313d110a2dd14e639c2baeb8044b88476886fd970a4cb0bef38a37fadf7fe741b74453ccc1c24f657fb2f666900c8fca5b9b562163530c9db24a0b5b0aa2b", 0xb8, 0x10, &(0x7f0000000a40)=@caif=@rfm={0x25, 0xff, "d4c47b3de54fc2476f0aed70f3ff3c6e"}, 0x80) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000ac0)={0x0, 0x2, 0x5, 0x3, 0x8, 0x7}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000b00)) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000c40)={r10, 0x9, 0x4, 0x6, 0xb4f, 0x3}, &(0x7f0000000c80)=0x14) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000cc0)={0x0, 0x4, 0x2, 0x7, 0x8, 0x0, [{0x1, 0x9, 0x0, '\x00', 0x2100}, {0x4, 0x101, 0x8, '\x00', 0x1802}, {0x5, 0xc, 0x10001, '\x00', 0x400}, {0x3, 0x7ff, 0x4, '\x00', 0xd05}, {0x1, 0x2b2, 0x7, '\x00', 0x3003}, {0x2, 0x6, 0x80, '\x00', 0x2000}, {0x8, 0x37f6, 0x3ebc, '\x00', 0x404}, {0x7fffffffffffffff, 0x8, 0x5, '\x00', 0x104}]}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x1a8, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xee, 0x5, "aeb56ba4fdcf88a7be01e126af361d98af77bcdbeaadf3ea92d594d8d7d8c500b197fb37214f9fcd3e0494c0f5c2b597401884c27133686c81c4ca928389217c83d8e64c99778f3003a0537d9a79f1e35821e6e3b21633c12b29193f6aec4998b374972716cd3a33bb253dab74250361370048bfcef2f81b56539ba889c52ad8ba5f3bfc33fca9f68a9f30af429e287c1e63761bcc6755bf42844a0f74622e66e548012c46dcf46f83f101658f90a9f2074121a49cc88851f9d25cd30878b833831101881613f72401bc759c209254cc958077a4361ae5fa2d6fe7608438908e3beecbbf4d0fec8211d6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe2}, @ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "2a7b01678d278b29b4e2eceb17c5fd5ba14d27bff6dfd1e548542313cc83ad5b93c3a4edb103b0671668921a27497ac7f74ac06162804b53a3f3bb828263c4e867ea4d486a66b95190f36c3fa37c0912306d79a22ce7af845608dd42c1769de312bd7d"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4}, 0x20040801) listen(r0, 0x6) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001180)="227234d52239d79aeed404b3fe136e2b173a0415c2fa4613765bfe073c1665df5eba9d42095f74c1c8ffe302a4bd70d99cb177ef4da25f520907f2106077c289123575369793640214b0af81a37c80ec400f58a931b4f1d78612d7039631b0c7ef67fd4067d5d7c75c5e177e7d46671542682d0f70d02566343302294b130dcb4ebb7109f6e5e3f12031a9844b5fca9d72353958b8a4648136f4fec295e46642755f71119fb57a5ace63d9e3b8aff8509e1cf4e359c597062e127580048cdb9c1a2954d765e980787f0ac1f39aa7e189", 0xd0}, {&(0x7f0000001280)="d9c9c03f3a302776b4933a859c6b820286bc868976e1cb42c6d8f969d291fc3af1de24bc3162a89633ae9c7d175ee3873daaa003af2fc4b38cf618f4b7b605254b09e36500b42d3ef0fc97c7e2c33e50d150f6b56b5121d0230b9d4e66271e898f3b25b5c85c7088a82c7d77cf1598e47498432cff82b84a9038dd9626ff2d01dc8b56d6e94d242512b00a61c8ee6d", 0x8f}, {&(0x7f0000001340)="a037e3d9eba168ac8938f2e89403c5c9b8cfa9232f669036b0c97917ca7f400795d1e2dcd053957e17a98d43f3f28beff01353d881b5e115d99bb968328249453bb53bc416a300e5af1c7a6a9dcb8d200595de844a654170df3a21048009e0fb1fc3f2a77b3a3577e35dc0e46f4d67a4e996dc0b42aeafa49e58489fca73a900133a07317ae8d7161386d93f5f3d85091f4a71ddcc188b313fb3bb6385", 0x9d}], 0x3, &(0x7f0000001440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}, 0x4040084) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "a789652a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x4000884) recvmmsg(r1, &(0x7f0000002b00)=[{{&(0x7f0000001600)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001680)}, {&(0x7f00000016c0)=""/86, 0x56}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/183, 0xb7}, {&(0x7f0000002800)=""/199, 0xc7}, {&(0x7f0000002900)=""/111, 0x6f}, {&(0x7f0000002980)=""/126, 0x7e}], 0x7, &(0x7f0000002a80)=""/78, 0x4e}, 0x8001}], 0x1, 0x10021, &(0x7f0000002b40)={0x0, 0x3938700}) 17.269402195s ago: executing program 1 (id=6806): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012030b00010067726574617000000c00028008000100525e384272e43d975ae1bf4ec17cdeb8bf", @ANYRES32, @ANYBLOB="e59e64705be73782ae44d3d9b01760465be4650f21b8887d8279a5a5cb5124796b0709575d9b318328708d93baac63d7", @ANYRES64=r0], 0x4c}}, 0x0) 15.965008154s ago: executing program 1 (id=6807): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORR={0x10, 0x1, {0xd, 0x100, 0x8}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x38, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) 14.205252032s ago: executing program 1 (id=6811): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x3, 0x452, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e00], 0x0, &(0x7f0000000640), &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff02000000030000000000000081006d6163767461703000000000000000006970366772657461703000000000000076657468305f746f5f6272696467650069703667726574617030000000000000bbbbbbbbbbbb00000000000000000000000000ff000000006e000000ee000000260100004155444954000000000000000000000000000000000000000000000000000000080000000000000001000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a31000000000000000000000000000000000000000000000000ff010000ff03000000000000646e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff0000000009000000000000008917626f6e645f736c6176655f300000000067656e6576653000000000000000000076657468305f766c616e0000000000007866726d300000000000000000000000aaaaaaaaaa310000ff00ff00222200c5fcfd00ff0000ffffae000000ae0000002601000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000003000000000000004e464c4f47000000000000000000000000000000000000000000000000000000500000000000000008000000000052df00000000d8de770f69863fc1f259b118ea9a4e7bf5a56f1dc645cedbef853007696e2c8022b9fab4f1c59225da0e057e1b7de6dbb5247151ef3eacf92172278c8cf749fc0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff01000000050000000c00000060047465616d3000000000000000000000006e657464657673696d30000000000000776c616e3100000000000000000000006e696376663000000000000000000000000000000000ff00ffff00ff0180c200000e000000ff00ffa600000026010000760100007265616c6d0000000000000000000000000000000000000000000000000000ff0700000000000000090000000400000000000000000000006c6f6700000000000000000000000000000000000000000000000000000000002800000000000000806561ba2c2fc6092378fabee3456414504f1e828c55f53717000fccbcfffe00080000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000fdffffff000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000105000000fcffffffffffffff"]}, 0x4ca) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb532, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x7, 0x9, "bf41245d332f8fc9a97231bf116cbb8cdb9c350884158d66825ade0e669d355663bebcddde3b49ca809b02b00768b6418990805c654a1e75cdb23650a4ad91", 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="21689661925793af4af5418a55e2b6eba0c52836bbf6aaab72648d308f31cff7415f95155212a4fd254fdf29b1ff7d1c129ddd8fd9eadda1b795e6d67ee9734021e6e87e5b1a3e80080cceeea76978c6276198303f1406b7d7266b48a1144029cb77c9c0ac4edd969cdb9a17", 0x6c}, {&(0x7f0000000140)="c60531edcd8fe41db918b9c773382719175f3b6be076b5e58450cd98fb663a54dbde0bf6bf671c378209c87aa5fd0e9697ca4bf2a5dd853e9ec54f42c80ef4a98fb5f47efbe35b2d5b3ddeb693c89ea2e616722543a0661023f779aec1c241aa602a66ddc598564b308b36975d98e4c3257e68d80c235e5d85e88bd7493644459025c4b499eb7b24f4eef93b77ebd030cf00e234d0d98f186a9302c6d1fcbb5aa082046bc1bc7ed8ffe9e0efc3", 0xad}, {&(0x7f0000000240)="86515af9fb62877a8051cc73e1da83769d0f5431", 0x14}], 0x3, &(0x7f00000002c0)=[{0xe0, 0x117, 0x9d, "2c15f0cf0f91f618511eabd71b8e86fbc9991b1c01c5c944b438b340b228bd9a3f22687936eb89c3b8c72b631d7a421b94b5f10e9f80a0c6d0118d316130994cea02687a26cab6382d27e539310cadafd362ff8835acd717ee96987370889911a78c76829432f2200e817aa0c18c8ca97701315760a41c8651cdb5451e4d93839b507ff7055ffe635daab6fef31d4407be61842d7b54f18bb9754ec6a233615c6e1cb988df9cdfefeaf5e028f6250fdd94514022e6807b95610d14203b883a81a82c472071951cb3e77c"}, {0x50, 0x108, 0x7ff, "c8c731569ba52d8b5f9370274d981a0d076df57c2af890f395b7f72e51c645365e3007bdab5a1e794e17bde748f2158e40134ead01445d9992de77bd1a"}, {0x58, 0x3a, 0x6, "3cf61c5d5cf1aecc4cba0bcf091b692b53eee6d1fb181325a94f17f347f8fa5a5fdad730e6c7960bc4d080ef82110b4d74cd77dcc3ed461bdd609d0eab11587a53f3952d"}, {0xa8, 0x0, 0x8b5, "e93242e7a07d396b595d68b095bac98d03566a23500eedfc80b79d1e14630c237f81502a359cb01e18c6d695d2d0165258afe7351669b2cc21898620afa2a2813e571bd539f10be8645a95e80376bfc170028371d67fc1accfbd5e6f02beaff17cb87c8c87757caf73d247af1a5f85945b20bd8817b2bdc8b67688f497460657f23c59097e99c8a6449fca8d60ed1d0e5b6dc41b8daf4b2d"}, {0x78, 0x10d, 0x53a, "6de603877c8a3a7d32135e7bc7ae504d3243a1c6b86397b5cd69c64062de19dacaadb52ca9ce453f2ff07dade7e1348293947675c3f8cdca6f986ab40bde996ad67ab9c95e0c652e734d873ef98ccc92fcd812f5b1bcb9832ce7004ebd2f484b7e02d2"}, {0xc0, 0x1, 0x10001, "60d768c32f11249413b3350ba8970b5c32ef8f8ec250c82b507593a6706983b9a55b67665645eebccf03ddc3012b12e7be4c168ae410201f93202b3c92e6e39258cd23fd0873db0f88c5024c6be803b4c93623dd32218b13b5200b43741809fc838dd47a12d17dfdae0d7dca9b1a8241b69306af546fecd7bb397a68b3605812915d35a7952f94aab657122decf0bf043d742fc7c324438e5e3d7925c6e72ff8c9d40203b76ef847d9fb"}], 0x368}}, {{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000900)=[{0xc0, 0x107, 0x44fb, "892bb1f4d8b5222126f83dcf228534a51533fac8caf2a67c80a327e9e8e68171f3268b8064bbcc170c0daa8b0de065b6b7a6a5a0c0caa490ac2f83c768dd1dac1921f717cabdde5276fa23030526dd04246dbe8580b8da22581c8e6d120fe3d87dd3f23eb45f0eb2d3da369eea601e4c2c7100c138c70465f1ff154a57d0592f5a8f25c88acf30e9a6202fccb8146ed4ce840f91397c5a712371c9525205a2d50c54c3b633a394d0409f76c2438bc5c5"}, {0x10, 0x117, 0x2}, {0x78, 0x6, 0x4, "5f2739db8f9b7a5dbbb8bfcf3692049c459a012a1798217519832f6f629583fe20fe842193454c0d2ff5de4273b76d458375d5fe1e13a75f8f763096ed8f02a7e72582f2eca645443a4b06b3b907c4799b1c54edaf86e55bde7ef3f8c1a3e245f68d281fba829413"}, {0x100, 0x113, 0x2, "385752893fbdea88a8140704d9e9428783082862fced8ea840fbc6f3eca5cdf666ac97b62a1480b30ebf38a70152fbf57bd2f0228b27d7c61bc271e8a96cf77dbe1b17014e8425285aaa19bf6ed8d32e79c01f752bfc4ba68d8977a50e289a0d3c0fa37ed268c4eb3dc37f2f5b7854688d7f063724ff5efa9dae313e435344f6f35dfb90150a68b4f4497fe89b009a02322fa53653ab8861018c6a0fe6c1f3433859fa23bba59a4d9fa3618e5f28994e0ddd3a9f5e23c2846b32242bcca7dc5220103549655851a40de83ff74541c0964653fccc2125292a91b2d8a32308563b956ecaa7e0bfaceeac5fc64b"}, {0x108, 0x29, 0x0, "88ca6fb2fdfe17110db9b16cae18c00e38f40e192ae42b96753b5b309f2c855accc3ec2064f12248f5ab7f9207654556b7e859c92777e8c45bef188da5d5864d99b55824f3326fcb44a272fc76180c740d59380fe9fd680e27c495ca28c18c5b658bdf1151be602ea278bf25efa23c94d96852a7ab6fbdd8e6785fb309c781d78fa2f061313db4db302e8be69b95a4370e41d31a82247cf8b253a8c637322eff6b860121ba7fa9d3c79e68242eba81aa7ce1905b1b90d77090232ddf792af074ba08226d27711f98a4f4c0314e04f2b129655a7887e8e2ff4a702360afab0ba9e3166a5027d72bf12e017fada3ca9181faa3ade24b830c82"}, {0xf8, 0x1, 0x8, "f1cae7aa94235c6382b9dbf77bb73ad14781fd371092da45b2fa26ef04163782d1972aaf0b4b397944478c14d1fc59d9b06698096e789e6c384da97fa2bd9b12d1ecf184e1b0dcc7148a3064cc8cad19c7d67865586dc12d7f0a2b3a9bf78b52667d70edfa5f1be854687f77e30d9fe6152aa7a3b62680e787ec90ca3d1a64189b97148acf4d25f66934db028a9d622809328fb0d1ac017b0927bc7cfe2a0445032c907476706ec0c786b75328c5311ae128577c02405e87995ab6cc500a6b080129b9717ecd32d15d4b93b460f7cca19c83e974013273c668730350acc6148cb6ca"}], 0x448}}], 0x2, 0x5004) 13.143756605s ago: executing program 0 (id=6812): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) shutdown(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) 11.733380069s ago: executing program 2 (id=6814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = socket(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r1, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r5, 0x7ce7e4ef5851f55f, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @mcast2}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r11, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x14}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}}, 0x814) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x54, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xcd7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 11.630539157s ago: executing program 0 (id=6815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x2, 0x3, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2}}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xcc, "22447ada1f7d01a68448b8052e58479d723e878d0cf3aa5170f0e51414b6558ccff577e2f843ac127f91e48c0a81f5ffe173e7da9907a213f4b0682b8f40ff45561c70aeabe342a18fe407c456595fbde8c927607f83c3f116a02a72ba015baf708dc0cebcfcb13fcf4a4c0ea3343e98029b7ccb2168521184d99c421cb13b1d96d6e160a5ab61c389fd92f293e9e711ef1a75b447aadd828251a4a67b59e008f5c151b0f43042296a94b7b29eec1f4e64ccbea9eb4e6379be00f14b3baa749bd102318c176ceb2cd6ef4e97"}, &(0x7f00000001c0)=0xd4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000005c0)={{r2, &(0x7f0000000200)='ip6_vti0\x00', 0x8000, &(0x7f0000000440)={@_ha_fsid={[0xd, 0x8]}, {0xfff, 0x5, 0x3, 0x2}}, 0x8, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)}, {[0x8001, 0x3, 0x7, 0xefbf]}, 0x4, 0x8f, &(0x7f0000000500)=""/143}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x48}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb5eb}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xeaf7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x7, @private1, 0x1}}, 0x0, 0xa, 0x3ff, 0x6, 0x7f}, &(0x7f00000003c0)=0x98) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd76, 0x0, 0x0, 0x10, 0x7}, 0x94) 10.495293069s ago: executing program 0 (id=6816): socket(0x22, 0x1, 0x8) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/205, 0xcd}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/42, 0x2a}, {&(0x7f0000000740)=""/22, 0x16}], 0xa) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 10.422033024s ago: executing program 2 (id=6817): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54010000100001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe200000001000000000000800600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000a8000000000000001c0017000000000000000000000000000000000000000000000000004800010073686132353600"/268], 0x154}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) 9.259602591s ago: executing program 0 (id=6818): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffeff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0xffffffffffffff7e, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9a, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.148021439s ago: executing program 2 (id=6819): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24040056) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r3], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) 4.077865084s ago: executing program 0 (id=6820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.35766634s ago: executing program 2 (id=6821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000200)=r1, 0x21) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)="001122334455667788", 0x9, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) close(0x3) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b4", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0xffffff60, 0x24, 0x5820a61ca228651, 0x2, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.290856352s ago: executing program 1 (id=6822): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}, 0x23b}], 0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB='i\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="030000000500000000000000000000ffffff7f000000000000000000"], 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x62ee}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x5, 0x6, 0x18, 0x4}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r8, r9], 0x0, 0x10, 0x2}, 0x94) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000003b00)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb12cea5a4bedb7a4b1fa9897a86d3add2db7208aa10343df8ff0f4d6325549c6e3d0f819ed23064e15279e9f5aa7113dc2542a54817c862c433f24c", 0x78, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffe0, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="a1830000000d00000000050000000c009900020000006c00000052000e0088"], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000d1401022abd7000fbd9df2508000100000000000800038000000000bf82"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000004004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r13, 0x0, 0x0, 0x200000000000000}, 0x20) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, r14, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xc0}}, 0x4000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) 1.013285813s ago: executing program 0 (id=6823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 976.54238ms ago: executing program 2 (id=6824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb9b0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfcbb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ac4eb73}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x100}, 0x800) (async, rerun: 32) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1e}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc1, 0x6}, {0xf, 0x6}, {0x5, 0x5}, {0x8a, 0x7}, {0xb}, {0x0, 0x2}, {0x8, 0x4}, {0x60, 0x3}, {0x5, 0x6}], "f9b4083b3a6b71af"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x8, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x5, 0x2}], "8697b999170367c2"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3, 0x5}, {0xb, 0x1}, {0x7, 0x4}, {0x40, 0x2}, {0x4, 0x4}, {0x57, 0x6}, {0x5, 0x1}, {0x4}, {0xe7, 0x7}, {0x7}, {0xa, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0xe, 0x6}, {0x10, 0x7}, {0x3, 0x6}, {0x8}, {0x5, 0x5}, {0x2, 0x2}], "3cee9c8a9b669ded"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x1}, {0xfd, 0x7}, {0x3, 0x2}, {0x0, 0x1}], "36d8cafab280edb9"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xc3, 0x2}, {0x81, 0x7}, {0x3, 0x2}, {0x41, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0xfa, 0x2}, {0x9, 0x4}, {0x7, 0x5}, {0xe, 0x5}, {0x8, 0x6}, {0xf, 0x2}, {0xf9, 0x6}, {0xd}, {0xbd, 0x2}], "52259ada7f71b077"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x30000000) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8022083}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048091}, 0x20000040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000004c0)={0x2, 0x2, 0x6, 0x9}, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7c07901d}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000780), &(0x7f00000007c0)=0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x340, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe0e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fd6a03f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbdba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xc, @private2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda0b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x20040000}, 0x885) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480a0}, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r0) (rerun: 32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x454781f43a43e011}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x54) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x98, r11, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r12 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001040)={0x0, 0xc3, "b806daab3f6c0fd0629dc243b39e2b3b687c4db8610bec4b283d89fa3b1fcd94158a4e440a3b178d0a48ff82e89809f2de89d32fba5c1176a40afeef4ee75ced89b3f8d22c14305aa0335c6ca2d40f6724c1e1e3b325181cdeb65b72a74aff05c343d7351fa9f5213e1fb2885b676a3b3ef69ed471843e3b6ef7a16de7eba9580cfe989f33ac59faeb7cf3074cd99a3623a9a1238fb3fdf0ce59df83189328373d532624543f792a4dcd3511a7f026dcc41ccdf2b62a078cf34802cbeec08055e643b6"}, &(0x7f0000001140)=0xcb) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000001180)={r13, 0xbe3}, &(0x7f00000011c0)=0x8) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xc0, r11, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xab, 0xa8, @random="a2a543bf6ebe23ed4970a8f63cd9c54da34d201fac50f9db46965beb0120bbe96284dd32c878ac225fd431240b312ed07bb719faba924165c488a5c45da340a320f19401ab854d5d16cf88674c3c271547cfeb476f741dfce150fdfc51f50a6f4d4376a89f81542e430ee91159520bd08e0a743c43a59ead3c72385c0c982ddfa1057e6f582d0c04a7ec8d975548d521f0d140a7d1a9be20d1d64fbc7bf4a7ba65ce773077f752"}]}, 0xc0}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000001380)={0x3a, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'wrr\x00', 0x8, 0x7, 0x29}, 0x2c) ioctl$NILFS_IOCTL_GET_BDESCS(r12, 0xc0186e87, &(0x7f0000001400)={&(0x7f00000013c0)=[{0x4, 0x4, 0xfffffffffffffffe, 0x7, 0xffffffc0}], 0x1, 0x28, 0x7f, 0x7}) (async, rerun: 32) ioctl$XFS_IOC_READLINK_BY_HANDLE(r10, 0xc038586c, &(0x7f0000001540)={r12, &(0x7f0000001440)='%#\x00', 0x20000, &(0x7f0000001480)={@_ha_fsid={[0x8, 0x7]}, {0x8, 0xae2, 0x9, 0xff}}, 0x9, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x8}) (rerun: 32) 0s ago: executing program 2 (id=6825): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x81}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8041}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r6, 0x215eb000) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) (async) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c00000011ffffff0200000000000000000bffe60d000400010000000000000b5500"/59], 0x0, 0x46, 0x0, 0xa}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x483f, 0x200, 0x8, 0xfae5, 0x9, 0x9, 0x8, 0x43, 0x3, 0x1, 0x9de, 0x8de, 0x8000, 0x54, 0x81, 0xd80, 0x9, 0x8, 0x6, 0x8, 0x6e20, 0x2, 0x6, 0xb99, 0x3, 0x3, 0x1, 0xc, 0x9, 0x5, 0x100, 0x3, 0x800, 0xfffffff9, 0x9, 0x8, 0x2, 0x7fff, 0x60000, 0x0, 0x5104, 0x3, 0xcb1, 0x9, 0x80000001, 0x5, 0x7932, 0x7, 0x2, 0x8, 0x401, 0x5, 0x800, 0x6, 0x1, 0x3, 0x8, 0x0, 0xf8000000, 0x40, 0xaa1, 0x4, 0x3, 0x4b, 0x1, 0x9, 0x8, 0x2, 0x8, 0xf8, 0x6, 0x2, 0xd1d1, 0x10001, 0x5, 0x800, 0x0, 0x7, 0x2, 0x0, 0x8, 0x389, 0x100, 0x6, 0xdc, 0x10001, 0xff, 0x5b, 0x7, 0x406, 0x10000, 0x0, 0x4, 0x40, 0x58d7, 0x6, 0x3, 0x49c4, 0x0, 0x9, 0xa4c, 0xfffffffc, 0x3, 0x88f, 0x7, 0xfffffdd1, 0x3, 0xc, 0x81, 0x3ff, 0x5, 0x0, 0x7, 0xfd2, 0x0, 0x9, 0x3, 0xf0, 0x7, 0x800, 0x80000001, 0xf383, 0x47db4311, 0x9, 0x3, 0x1ff, 0x2]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) kernel console output (not intermixed with test programs): : -EINTR [ 589.384758][T24152] SET target dimension over the limit! [ 589.417067][ T5802] tipc: Node number set to 2886997039 [ 589.538692][T24159] ip6_vti0: entered promiscuous mode [ 589.544133][T24159] ip6_vti0: entered allmulticast mode [ 589.730238][T24164] syzkaller0: entered promiscuous mode [ 589.736978][T24164] syzkaller0: entered allmulticast mode [ 589.744137][T23985] ip6gre0 speed is unknown, defaulting to 1000 [ 590.080159][T24184] __nla_validate_parse: 6 callbacks suppressed [ 590.080179][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5121'. [ 591.994886][T23985] ip6gre0 speed is unknown, defaulting to 1000 [ 592.125860][T24196] validate_nla: 1 callbacks suppressed [ 592.125879][T24196] netlink: 'syz.2.5125': attribute type 4 has an invalid length. [ 592.171700][T24198] lo: entered allmulticast mode [ 592.192582][T24198] tunl0: entered allmulticast mode [ 592.204952][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5126'. [ 592.223296][T24198] gre0: entered allmulticast mode [ 592.229814][T24198] gretap0: left promiscuous mode [ 592.235826][T24198] gretap0: entered allmulticast mode [ 592.241307][T24198] erspan0: entered allmulticast mode [ 592.254668][T24198] ip_vti0: entered allmulticast mode [ 592.261373][T24198] ip6_vti0: left promiscuous mode [ 592.269850][T24198] sit0: entered allmulticast mode [ 592.275881][T24198] ip6tnl0: entered allmulticast mode [ 592.281450][T24198] ip6gre0: entered allmulticast mode [ 592.291472][T24198] ip6gretap0: entered allmulticast mode [ 592.298521][T24198] bridge0: entered allmulticast mode [ 592.304062][T24198] vcan0: entered allmulticast mode [ 592.310437][T24198] team0: left promiscuous mode [ 592.315742][T24198] team_slave_0: left promiscuous mode [ 592.321643][T24198] team_slave_1: left promiscuous mode [ 592.327656][T24198] syz_tun: left promiscuous mode [ 592.333194][T24198] v: left promiscuous mode [ 592.338422][T24198] v: entered allmulticast mode [ 592.343543][T24198] nlmon0: entered allmulticast mode [ 592.349223][T24198] batadv0: entered allmulticast mode [ 592.354827][T24198] veth0: entered allmulticast mode [ 592.360674][T24198] veth1: entered allmulticast mode [ 592.371556][T24198] wg0: entered allmulticast mode [ 592.376997][T24198] wg2: entered allmulticast mode [ 592.382288][T24198] veth0_to_bridge: entered allmulticast mode [ 592.389114][T24198] veth1_to_bridge: entered allmulticast mode [ 592.395790][T24198] veth0_to_bond: entered allmulticast mode [ 592.402045][T24198] veth1_to_bond: entered allmulticast mode [ 592.408720][T24198] veth0_to_team: entered allmulticast mode [ 592.415001][T24198] veth1_to_team: entered allmulticast mode [ 592.424448][T24198] veth0_to_batadv: entered allmulticast mode [ 592.431510][T24198] batadv_slave_0: entered allmulticast mode [ 592.438210][T24198] veth1_to_batadv: entered allmulticast mode [ 592.444501][T24198] batadv_slave_1: entered allmulticast mode [ 592.451817][T24198] xfrm0: entered allmulticast mode [ 592.457599][T24198] veth0_to_hsr: entered allmulticast mode [ 592.463676][T24198] hsr_slave_0: entered allmulticast mode [ 592.470399][T24198] veth1_to_hsr: entered allmulticast mode [ 592.477505][T24198] hsr_slave_1: entered allmulticast mode [ 592.483455][T24198] hsr0: entered allmulticast mode [ 592.489836][T24198] veth1_virt_wifi: entered allmulticast mode [ 592.496794][T24198] veth0_virt_wifi: entered allmulticast mode [ 592.503118][T24198] virt_wifi0: entered allmulticast mode [ 592.509366][T24198] veth1_vlan: entered allmulticast mode [ 592.516274][T24198] veth0_vlan: entered allmulticast mode [ 592.522119][T24198] vlan0: entered allmulticast mode [ 592.528345][T24198] vlan1: entered allmulticast mode [ 592.533712][T24198] macvlan0: entered allmulticast mode [ 592.540139][T24198] macvlan1: entered allmulticast mode [ 592.546394][T24198] ipvlan0: entered allmulticast mode [ 592.552021][T24198] ipvlan1: entered allmulticast mode [ 592.558321][T24198] veth1_macvtap: entered allmulticast mode [ 592.564345][T24198] veth0_macvtap: entered allmulticast mode [ 592.570824][T24198] macvtap0: entered allmulticast mode [ 592.576668][T24198] macsec0: entered allmulticast mode [ 592.582087][T24198] geneve0: entered allmulticast mode [ 592.588294][T24198] geneve1: entered allmulticast mode [ 592.593754][T24198] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 592.601871][T24198] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 592.609993][T24198] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 592.617689][T24198] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 592.630597][T24198] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 592.640295][T24198] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 592.651287][T24198] sit1: entered allmulticast mode [ 592.657049][T24198] virt_wifi0.0: entered allmulticast mode [ 592.663166][T24198] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 592.671580][T24198] vxcan2: entered allmulticast mode [ 592.677592][T24198] vxcan3: entered allmulticast mode [ 592.684131][T24198] mac80211_hwsim hwsim39 wlan2: entered allmulticast mode [ 592.692491][T24198] bond1: left promiscuous mode [ 592.697514][T24198] ip6gre2: left promiscuous mode [ 592.706930][T24198] bond2: entered allmulticast mode [ 592.712086][T24198] bond3: entered allmulticast mode [ 592.719960][T24198] gretap1: entered allmulticast mode [ 592.727601][T24198] bridge1: left promiscuous mode [ 592.735541][T24198] bridge2: left promiscuous mode [ 592.742358][T24198] veth2: entered allmulticast mode [ 592.748471][T24198] veth3: entered allmulticast mode [ 592.753929][T24198] gtp0: entered allmulticast mode [ 592.761137][T24198] bond4: entered allmulticast mode [ 592.766645][T24198] bridge3: entered allmulticast mode [ 592.772087][T24198] bond5: entered allmulticast mode [ 592.777856][T24198] mac80211_hwsim hwsim46 wlan3: entered allmulticast mode [ 592.789524][T24198] @: entered allmulticast mode [ 592.797076][T24198] bond6: entered allmulticast mode [ 592.802557][T24198] nic: entered allmulticast mode [ 592.811411][T24198] bond7: entered allmulticast mode [ 592.819257][T24198] bond8: entered allmulticast mode [ 592.826538][T24198] mac80211_hwsim hwsim47 wlan4: entered allmulticast mode [ 592.834361][T24198] macvlan2: entered allmulticast mode [ 592.842554][T24198] bond9: entered allmulticast mode [ 592.848025][T24198] : entered allmulticast mode [ 592.853254][T24198] ipvlan2: entered allmulticast mode [ 592.860780][T24198] mac80211_hwsim hwsim50 wlan5: entered allmulticast mode [ 592.869225][T24198] mac80211_hwsim hwsim51 wlan6: entered allmulticast mode [ 592.877838][T24198] bond10: entered allmulticast mode [ 592.883274][T24198] geneve2: entered allmulticast mode [ 592.892061][T24198] vlan3: entered allmulticast mode [ 592.899651][T24198] vxlan0: entered allmulticast mode [ 592.907263][T24198] bond11: left promiscuous mode [ 592.912168][T24198] bridge4: left promiscuous mode [ 592.921629][T24198] bridge5: entered allmulticast mode [ 592.927265][T24198] bridge6: entered allmulticast mode [ 592.932901][T24198] macsec1: entered allmulticast mode [ 592.938783][T24198] ipip0: entered allmulticast mode [ 592.944250][T24198] bond12: entered allmulticast mode [ 592.951555][T23985] ip6gre0 speed is unknown, defaulting to 1000 [ 592.965482][T10837] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 592.976868][T10837] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 592.997492][T10837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.018585][T10837] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 593.042283][T10837] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 593.079722][T10837] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.110933][T10837] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 593.126566][T10837] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 593.136584][T10837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.147092][T10837] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 593.172326][T10837] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 593.182043][T10837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.213502][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 593.249315][T24210] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5129'. [ 593.374138][T24219] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.592269][T23985] ip6gre0 speed is unknown, defaulting to 1000 [ 593.724953][T24232] syzkaller0: entered promiscuous mode [ 593.732219][T24232] syzkaller0: entered allmulticast mode [ 593.748115][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5137'. [ 595.849795][T23985] ip6gre0 speed is unknown, defaulting to 1000 [ 595.993883][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 596.049873][T24240] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5139'. [ 596.098203][T24246] netlink: 'syz.2.5138': attribute type 3 has an invalid length. [ 596.234943][T24249] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 596.258376][T24250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5141'. [ 596.632998][T24274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 596.800349][T24282] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 596.969408][T24277] bond0: entered promiscuous mode [ 596.976391][T24277] bond_slave_0: entered promiscuous mode [ 596.982443][T24277] team0: entered promiscuous mode [ 596.995793][T24277] team_slave_0: entered promiscuous mode [ 597.008160][T24277] team_slave_1: entered promiscuous mode [ 597.024224][T24277] bond0: left allmulticast mode [ 597.036661][T24277] team0: left allmulticast mode [ 597.413108][T24292] netlink: Unknown conntrack attr (type=1797, max=9) [ 597.437570][T24292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.577175][T24304] gre0: entered promiscuous mode [ 597.585149][T24304] gre0: entered allmulticast mode [ 597.749348][T24309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5158'. [ 597.767961][T24308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5159'. [ 597.876037][T24313] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5160'. [ 597.948895][T24308] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.971703][T24308] bond7: entered promiscuous mode [ 597.978416][T24308] bond0: (slave bond7): Enslaving as an active interface with a down link [ 598.030833][T24315] syzkaller0: entered promiscuous mode [ 598.049267][T24315] syzkaller0: entered allmulticast mode [ 598.539724][T24329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5164'. [ 598.554792][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5164'. [ 598.751719][T24334] tunl0: entered promiscuous mode [ 598.760383][T24334] tunl0: left allmulticast mode [ 598.774100][T24334] netlink: 'syz.0.5166': attribute type 4 has an invalid length. [ 598.798843][T24334] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5166'. [ 598.852317][T24337] gretap0: entered promiscuous mode [ 598.872660][T24337] gretap0: left promiscuous mode [ 599.082917][T24326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 599.119799][T24325] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 599.193617][T24354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.302909][T24362] xt_time: unknown flags 0xf4 [ 599.361844][T24369] netlink: 'syz.4.5178': attribute type 1 has an invalid length. [ 600.143759][T24408] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 600.204238][T24417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.249983][T24408] bond4: entered promiscuous mode [ 600.258795][T24408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.671983][T24437] netlink: 'syz.3.5200': attribute type 1 has an invalid length. [ 600.837469][T24448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.851275][T24437] bond5: entered promiscuous mode [ 600.857924][T24437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.904025][T24443] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 600.919157][T24443] bond8 (unregistering): Released all slaves [ 600.945643][T24454] netlink: 'syz.1.5204': attribute type 1 has an invalid length. [ 600.965010][T24446] macvtap1: entered allmulticast mode [ 600.998803][T24437] macvtap2: entered allmulticast mode [ 601.012519][T24453] __nla_validate_parse: 8 callbacks suppressed [ 601.012539][T24453] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5203'. [ 601.075632][T24460] siw: device registration error -23 [ 601.154282][T24454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.164866][T24448] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5203'. [ 601.427299][T24478] tipc: Enabled bearer , priority 0 [ 601.436572][T24478] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 601.444664][T24473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5211'. [ 601.650378][T24496] syzkaller0: entered promiscuous mode [ 601.656329][T24496] syzkaller0: entered allmulticast mode [ 602.320538][T24503] syzkaller1: entered promiscuous mode [ 602.327040][T24503] syzkaller1: entered allmulticast mode [ 602.342954][T24503] pimreg: entered allmulticast mode [ 602.833995][ T1173] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc2 [ 602.890319][T24561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.899905][T24551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.924365][T24563] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 602.972665][T24561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5233'. [ 602.998826][T24563] netlink: 'syz.2.5234': attribute type 2 has an invalid length. [ 603.075742][T24570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5236'. [ 603.171940][T24574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 603.289882][T24581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.452361][T24573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5236'. [ 603.474758][T24573] nbd: device at index 64 is going down [ 603.530397][T24592] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 603.583513][T24595] netlink: 'syz.1.5243': attribute type 4 has an invalid length. [ 603.600840][T24595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5243'. [ 603.964613][T24223] udevd[24223]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.998812][T24223] udevd[24223]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 604.182489][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'. [ 605.355750][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5275'. [ 605.413089][T24690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5276'. [ 605.430676][T24690] x_tables: duplicate underflow at hook 1 [ 605.551282][T24692] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 606.042123][T24729] syzkaller0: left promiscuous mode [ 606.048729][T24729] syzkaller0: left allmulticast mode [ 606.243260][T24740] netlink: 'syz.3.5292': attribute type 34 has an invalid length. [ 606.263004][T24741] netlink: 'syz.3.5292': attribute type 34 has an invalid length. [ 606.282816][T24741] __nla_validate_parse: 1 callbacks suppressed [ 606.282836][T24741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 606.304196][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 606.323495][T24740] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 606.329315][T24741] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 606.701355][T24769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5298'. [ 606.718868][T24768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5299'. [ 606.749618][T24769] netlink: 'syz.4.5298': attribute type 10 has an invalid length. [ 606.762308][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5299'. [ 606.784491][T24769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5298'. [ 606.826947][T24769] v: entered promiscuous mode [ 607.154274][T24790] Bluetooth: MGMT ver 1.23 [ 607.185328][T24793] netlink: 'syz.3.5305': attribute type 15 has an invalid length. [ 607.212674][T24795] x_tables: duplicate underflow at hook 1 [ 607.340786][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 608.095683][T24839] netlink: 'syz.3.5317': attribute type 2 has an invalid length. [ 608.261774][T24846] netlink: 'syz.3.5320': attribute type 1 has an invalid length. [ 608.380579][T24846] bond6: entered promiscuous mode [ 608.409909][T24846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.579237][T24854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.610959][T24854] bond6: (slave ipip1): The slave device specified does not support setting the MAC address [ 608.635461][T24854] bond6: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 608.680246][T24854] bond6: (slave ipip1): making interface the new active one [ 608.702234][T24870] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5323'. [ 608.706324][T24854] ipip1: entered promiscuous mode [ 608.731450][T24854] bond6: (slave ipip1): Enslaving as an active interface with an up link [ 608.895264][T24876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5325'. [ 608.954526][T24881] netlink: 'syz.3.5326': attribute type 83 has an invalid length. [ 608.990717][T24876] netlink: 'syz.0.5325': attribute type 1 has an invalid length. [ 609.016910][T24876] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.5325'. [ 609.220699][T24898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.295918][T24898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.374657][T24907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.407134][T24909] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 609.497577][T24914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.503778][T24915] netlink: 'syz.4.5336': attribute type 19 has an invalid length. [ 609.521543][T24916] netlink: 'syz.3.5337': attribute type 11 has an invalid length. [ 609.641466][ T12] nci: nci_rx_work: unknown MT 0x1 [ 609.671024][T24927] gretap1: entered promiscuous mode [ 609.795353][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.803738][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.813163][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.821597][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.837508][T24932] Cannot find add_set index 34 as target [ 609.994660][T24938] veth1_to_bond: entered promiscuous mode [ 610.003863][T24938] veth1_to_bond (unregistering): left promiscuous mode [ 610.019317][T24938] bond0: (slave bond_slave_1): Releasing backup interface [ 612.488960][T24915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.863331][T24976] netlink: 'syz.1.5356': attribute type 21 has an invalid length. [ 613.037587][T24985] __nla_validate_parse: 64 callbacks suppressed [ 613.037608][T24985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5358'. [ 613.170605][T24990] x_tables: unsorted underflow at hook 4 [ 613.188997][T24990] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 613.284630][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5365'. [ 613.381212][T25001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5366'. [ 613.497872][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 613.537476][T25009] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 613.634359][T25009] lo speed is unknown, defaulting to 1000 [ 613.654142][T25017] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5371'. [ 613.924758][T25025] x_tables: duplicate entry at hook 3 [ 614.144716][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'. [ 614.168165][T25039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5379'. [ 614.224530][T25044] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 614.288013][T25046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5380'. [ 614.350265][T25044] bond8: entered promiscuous mode [ 614.356327][T25044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 614.502331][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5383'. [ 614.635794][T25009] ip6gre0 speed is unknown, defaulting to 1000 [ 614.678723][T25061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.866519][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5386'. [ 615.184401][T25088] vlan3: entered promiscuous mode [ 615.218039][T25088] geneve1: entered promiscuous mode [ 615.235396][T25088] vlan3: entered allmulticast mode [ 615.272770][T25090] macvlan0: entered promiscuous mode [ 615.317238][T25090] macvlan0: left allmulticast mode [ 615.633772][T25109] netlink: 'syz.3.5398': attribute type 83 has an invalid length. [ 615.857378][T25116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.892172][T25116] syzkaller0: entered promiscuous mode [ 615.909713][T25116] syzkaller0: entered allmulticast mode [ 616.743778][T25153] netlink: 'syz.4.5414': attribute type 1 has an invalid length. [ 616.970110][T25157] syzkaller0: entered promiscuous mode [ 616.998583][T25157] syzkaller0: entered allmulticast mode [ 617.035588][T25175] netlink: 'syz.0.5419': attribute type 4 has an invalid length. [ 617.087402][T25176] netlink: 'syz.0.5419': attribute type 4 has an invalid length. [ 617.586975][T25200] netlink: 'syz.2.5427': attribute type 11 has an invalid length. [ 617.629023][T25199] syzkaller1: entered promiscuous mode [ 617.669727][T25199] syzkaller1: entered allmulticast mode [ 618.392671][T25241] __nla_validate_parse: 9 callbacks suppressed [ 618.392691][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5436'. [ 618.478165][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'. [ 618.538727][T25248] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5439'. [ 618.732238][T25255] bridge7: entered promiscuous mode [ 618.746939][T25255] bridge7: entered allmulticast mode [ 619.010359][T25275] netlink: 'syz.2.5451': attribute type 3 has an invalid length. [ 619.433977][T25299] bridge_slave_1: left promiscuous mode [ 619.441482][T25299] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.458132][T25299] bridge_slave_0: left allmulticast mode [ 619.473216][T25299] bridge_slave_0: left promiscuous mode [ 619.486822][T25299] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.704123][T25308] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5463'. [ 619.718395][T25308] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5463'. [ 619.740199][T25308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 619.760520][T25308] nbd: must specify a device to reconfigure [ 620.028525][T25320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.493745][T25343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5474'. [ 620.523737][T25347] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5475'. [ 620.579347][T25346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.594029][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5475'. [ 620.741799][T25356] smc: net device team0 applied user defined pnetid SYZ2 [ 620.837318][T25366] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 620.848676][T25364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5479'. [ 620.893539][T25369] openvswitch: netlink: IP tunnel TTL not specified. [ 620.924108][T25369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.966932][T25375] x_tables: duplicate entry at hook 3 [ 621.247827][T25388] netlink: 'syz.0.5487': attribute type 4 has an invalid length. [ 621.516141][T25403] netlink: 'syz.2.5493': attribute type 7 has an invalid length. [ 621.524087][T25403] netlink: 'syz.2.5493': attribute type 8 has an invalid length. [ 621.558910][T25403] erspan0: entered promiscuous mode [ 621.569889][T25403] erspan0: left promiscuous mode [ 621.964077][T25420] syzkaller0: left promiscuous mode [ 621.985213][T25420] syzkaller0: left allmulticast mode [ 622.277561][T25443] netlink: 'syz.3.5508': attribute type 1 has an invalid length. [ 622.518878][T25445] bond7 (unregistering): Released all slaves [ 622.652151][T25449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.692906][T25450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.798053][T19107] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.835436][T19106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.868226][T19106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.985438][ T153] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.299851][T25478] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 623.319504][T25478] tipc: Enabled bearer , priority 10 [ 623.362832][T25507] netlink: 'syz.1.5523': attribute type 2 has an invalid length. [ 623.539313][T25517] __nla_validate_parse: 10 callbacks suppressed [ 623.539332][T25517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5525'. [ 623.637937][T25522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5526'. [ 623.962476][T25542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5531'. [ 624.060520][T25548] netlink: 'syz.0.5533': attribute type 29 has an invalid length. [ 624.421944][T25561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5536'. [ 624.435346][T20607] tipc: Node number set to 3664630468 [ 624.693480][T25579] syzkaller0: entered promiscuous mode [ 624.729952][T25579] syzkaller0: entered allmulticast mode [ 625.351260][T25611] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.466229][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5548'. [ 625.535279][T25619] bond0: (slave team0): Releasing backup interface [ 625.549961][T25625] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 625.589083][T25619] team0 (unregistering): left promiscuous mode [ 625.626857][T25619] team_slave_0: left promiscuous mode [ 625.644286][T25619] team_slave_1: left promiscuous mode [ 625.690578][T25619] team0 (unregistering): Port device team_slave_0 removed [ 625.740340][T25619] team0 (unregistering): Port device team_slave_1 removed [ 625.833797][T25611] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.000188][T25611] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.200707][T25611] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.292830][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5557'. [ 626.372299][T25663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5560'. [ 626.583448][T25672] netlink: 'syz.3.5563': attribute type 8 has an invalid length. [ 626.670282][T25678] netlink: 'syz.4.5565': attribute type 3 has an invalid length. [ 626.735304][ T153] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.752191][ T153] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.825320][ T1173] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.857964][ T1173] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.170370][T25703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.278298][T25707] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5574'. [ 628.048658][T25756] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5587'. [ 628.073162][T25756] gretap0: entered promiscuous mode [ 628.084034][T25759] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5588'. [ 628.103286][T25756] gretap0: left allmulticast mode [ 628.667454][T25797] netlink: 'syz.1.5598': attribute type 1 has an invalid length. [ 628.714606][T25799] __nla_validate_parse: 4 callbacks suppressed [ 628.714625][T25799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5600'. [ 629.255669][T25834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5607'. [ 631.607742][T25799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.806960][T25837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5608'. [ 631.828356][T25841] netlink: 'syz.1.5610': attribute type 13 has an invalid length. [ 631.840840][T25837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5608'. [ 631.870280][T25841] netlink: 'syz.1.5610': attribute type 58 has an invalid length. [ 631.911200][T25841] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5610'. [ 631.931604][T25854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5613'. [ 632.398947][T25880] sctp: [Deprecated]: syz.0.5618 (pid 25880) Use of int in maxseg socket option. [ 632.398947][T25880] Use struct sctp_assoc_value instead [ 632.423838][T25881] netlink: 'syz.2.5617': attribute type 28 has an invalid length. [ 632.462764][T25881] netlink: 'syz.2.5617': attribute type 3 has an invalid length. [ 632.478644][T25882] IPVS: length: 178 != 24 [ 632.494239][T25881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5617'. [ 632.888568][T25898] SET target dimension over the limit! [ 633.248908][T25920] netlink: 'syz.2.5627': attribute type 1 has an invalid length. [ 633.327868][T25923] sctp: [Deprecated]: syz.3.5628 (pid 25923) Use of int in maxseg socket option. [ 633.327868][T25923] Use struct sctp_assoc_value instead [ 633.403584][T25920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5627'. [ 633.455772][T25931] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5630'. [ 633.472697][T25920] 8021q: adding VLAN 0 to HW filter on device bond13 [ 633.503102][T25933] Unsupported ieee802154 address type: 0 [ 633.532788][T25920] bridge9: entered promiscuous mode [ 633.555855][T25920] bond13: (slave bridge9): making interface the new active one [ 633.588685][T25920] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 633.627683][T25935] netlink: 'syz.3.5632': attribute type 29 has an invalid length. [ 633.661945][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'. [ 633.700478][T25941] netlink: 'syz.0.5634': attribute type 7 has an invalid length. [ 633.753364][T25937] team0: entered promiscuous mode [ 633.778986][T25937] team0: entered allmulticast mode [ 633.967838][T25955] __nla_validate_parse: 1 callbacks suppressed [ 633.967858][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5636'. [ 634.424750][T25984] ip6tnl1: entered allmulticast mode [ 634.478705][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5646'. [ 634.601715][T25985] hsr_slave_1 (unregistering): left promiscuous mode [ 634.801813][T25999] netlink: 'syz.1.5650': attribute type 1 has an invalid length. [ 634.841174][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5650'. [ 634.902654][T26005] bond8 (unregistering): Released all slaves [ 635.093241][T26013] bond8 (unregistering): Released all slaves [ 635.466168][T26045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'. [ 635.526055][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5659'. [ 635.942502][T26068] bond14 (unregistering): Released all slaves [ 635.960202][T26073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5665'. [ 636.004011][T26070] syzkaller0: entered promiscuous mode [ 636.031493][T26070] syzkaller0: entered allmulticast mode [ 636.044670][T26070] smc: net device team0 applied user defined pnetid SYZ2 [ 636.059952][T26076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 636.109589][T26076] netlink: 'syz.0.5668': attribute type 2 has an invalid length. [ 636.441100][T26099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5673'. [ 636.448720][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'. [ 636.461971][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'. [ 636.692809][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 636.729535][T26111] openvswitch: netlink: Message has 4 unknown bytes. [ 637.049361][T26128] netlink: 'syz.0.5680': attribute type 10 has an invalid length. [ 637.730358][T26171] 8021q: VLANs not supported on wg0 [ 638.539663][T26224] siw: device registration error -23 [ 638.868899][T26247] netlink: 'syz.0.5716': attribute type 2 has an invalid length. [ 638.889916][T26247] netlink: 'syz.0.5716': attribute type 2 has an invalid length. [ 638.921180][T26249] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 639.140741][T26258] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 639.148872][T26257] __nla_validate_parse: 10 callbacks suppressed [ 639.148892][T26257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5720'. [ 639.171973][T26258] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 639.185366][T26257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5720'. [ 639.457108][T26276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5726'. [ 639.477011][T26276] batadv0: mtu less than device minimum [ 639.493232][T26277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5725'. [ 639.630696][T26281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5728'. [ 639.656412][T26281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5728'. [ 639.817330][T26286] xt_CT: No such helper "snmp" [ 640.647169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.105665][T26257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.439518][T26307] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5737'. [ 642.577991][T26316] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 642.763665][T26325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5741'. [ 642.928592][T26343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5746'. [ 643.094950][T26348] dvmrp0: entered allmulticast mode [ 643.222361][T26357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5753'. [ 643.450185][T26370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 643.489942][T26376] bond9: (slave batadv2): Opening slave failed [ 643.697575][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.710099][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.721525][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.730130][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.741741][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.503571][T26421] syzkaller1: entered promiscuous mode [ 644.535405][T26421] syzkaller1: entered allmulticast mode [ 644.634060][T16311] team0: Port device syz_tun removed [ 644.735849][T26434] __nla_validate_parse: 5 callbacks suppressed [ 644.735870][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5774'. [ 644.830990][T26381] lo speed is unknown, defaulting to 1000 [ 644.855778][T26439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5776'. [ 645.012860][T26442] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.012899][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.031654][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.042636][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.051202][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.059917][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.068900][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.077382][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.101736][T26441] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 645.330707][T26470] tap0: tun_chr_ioctl cmd 2148553947 [ 645.402279][T26381] ip6gre0 speed is unknown, defaulting to 1000 [ 645.792464][T26444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.854313][ T50] Bluetooth: hci4: command tx timeout [ 646.133350][T26381] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.166862][T26381] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.188989][T26381] bridge_slave_0: entered allmulticast mode [ 646.222440][T26381] bridge_slave_0: entered promiscuous mode [ 646.267469][T26381] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.306824][T26381] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.344114][T26381] bridge_slave_1: entered allmulticast mode [ 646.394470][T26381] bridge_slave_1: entered promiscuous mode [ 646.585684][T26381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.734722][T26381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.856645][T26532] netlink: 'syz.1.5798': attribute type 13 has an invalid length. [ 646.864836][T26381] team0: Port device team_slave_0 added [ 647.048202][T26381] team0: Port device team_slave_1 added [ 647.183671][T26381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.208381][T26381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.251308][T26381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.266844][T26381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.274081][T26381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.317708][T26381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.472708][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5805'. [ 647.504408][T26555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5805'. [ 647.523115][T26381] hsr_slave_0: entered promiscuous mode [ 647.554262][T26381] hsr_slave_1: entered promiscuous mode [ 647.579937][T26381] debugfs: 'hsr0' already exists in 'hsr' [ 647.592424][T26381] Cannot create hsr debugfs directory [ 647.840461][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5812'. [ 647.936332][ T50] Bluetooth: hci4: command tx timeout [ 648.216516][T26590] SET target dimension over the limit! [ 648.349506][T26597] IPVS: set_ctl: invalid protocol: 8 172.20.20.60:20001 [ 648.360018][T26573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5811'. [ 648.390871][T26573] openvswitch: netlink: Duplicate or invalid key (type 0). [ 648.421869][T26598] openvswitch: netlink: nsh attr 89 is out of range max 3 [ 648.432600][T26593] netlink: NAT attribute has 5 unknown bytes [ 648.465345][T26593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.273008][T26625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5826'. [ 649.324654][T26381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 649.356413][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.364543][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5826'. [ 649.388694][T26630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.400227][T26381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 649.437241][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.559997][T26631] bond11 (unregistering): Released all slaves [ 649.597572][T26381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 649.621039][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.681915][T26642] lo: Caught tx_queue_len zero misconfig [ 649.707455][T26381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.746356][T26381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.005917][ T50] Bluetooth: hci4: command tx timeout [ 650.048877][T26381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.077091][T26381] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.117214][T19107] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.124480][T19107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.184604][T19106] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.191792][T19106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.360445][T26683] validate_nla: 1 callbacks suppressed [ 650.360463][T26683] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 650.391853][T26684] netlink: 'syz.4.5841': attribute type 1 has an invalid length. [ 650.614941][T26693] netlink: 808 bytes leftover after parsing attributes in process `syz.4.5844'. [ 650.662778][T26695] netlink: 'syz.1.5845': attribute type 1 has an invalid length. [ 650.782368][T26695] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.848164][T26696] bond6: (slave veth0_to_bond): making interface the new active one [ 650.860830][T26696] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 650.887894][T26708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5848'. [ 651.458953][T26736] can: request_module (can-proto-0) failed. [ 651.687404][T26381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.719085][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5857'. [ 651.831762][T26381] veth0_vlan: entered promiscuous mode [ 651.870081][T26381] veth1_vlan: entered promiscuous mode [ 651.938236][T26381] veth0_macvtap: entered promiscuous mode [ 651.961589][T26381] veth1_macvtap: entered promiscuous mode [ 652.050274][T26381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.086127][ T50] Bluetooth: hci4: command tx timeout [ 652.104387][T26381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.196159][T19107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.247514][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.298901][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.493023][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 652.542651][T26787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.560670][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.580087][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.600131][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.692259][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.703443][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.840205][T26798] netlink: 'syz.0.5868': attribute type 2 has an invalid length. [ 653.010883][T26807] netlink: 'syz.0.5871': attribute type 1 has an invalid length. [ 653.025796][T26807] nbd: error processing sock list [ 653.177666][T26814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5874'. [ 653.193481][T26816] netlink: 'syz.2.5875': attribute type 1 has an invalid length. [ 653.307021][T26824] netlink: 'syz.3.5878': attribute type 11 has an invalid length. [ 653.408079][T26822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5877'. [ 653.421028][T26827] veth3: entered promiscuous mode [ 653.520489][T26832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5880'. [ 653.873967][T26857] netlink: 'syz.3.5885': attribute type 1 has an invalid length. [ 653.911013][T26857] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5885'. [ 654.880828][T26912] xt_hashlimit: size too large, truncated to 1048576 [ 654.980575][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5901'. [ 654.997715][T26919] netlink: 'syz.1.5903': attribute type 1 has an invalid length. [ 655.012025][T26919] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5903'. [ 655.087834][T26929] netlink: 'syz.4.5904': attribute type 15 has an invalid length. [ 655.258348][T26938] sctp: [Deprecated]: syz.4.5907 (pid 26938) Use of int in max_burst socket option. [ 655.258348][T26938] Use struct sctp_assoc_value instead [ 655.388525][T26946] xt_cgroup: xt_cgroup: no path or classid specified [ 655.449844][T26950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.460656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.900076][T26967] netlink: 'syz.3.5915': attribute type 1 has an invalid length. [ 655.998808][T26976] netlink: 'syz.2.5919': attribute type 8 has an invalid length. [ 656.022768][T26971] netlink: 'syz.1.5918': attribute type 4 has an invalid length. [ 656.036146][T26976] __nla_validate_parse: 2 callbacks suppressed [ 656.036159][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 656.068137][T26976] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.075960][T26976] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.184692][T26982] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5916'. [ 656.522459][T26996] netlink: 'syz.2.5923': attribute type 24 has an invalid length. [ 656.716250][T27004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5926'. [ 656.771289][T27004] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5926'. [ 656.800436][T27004] netlink: 'syz.2.5926': attribute type 5 has an invalid length. [ 656.823238][T27004] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5926'. [ 657.051094][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5930'. [ 657.092235][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5930'. [ 657.121946][T27020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5930'. [ 657.165633][T27020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5930'. [ 657.223549][T27024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5930'. [ 657.324551][T27020] erspan0: entered promiscuous mode [ 657.361101][T27020] gretap0: entered promiscuous mode [ 657.391460][T27020] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 657.426894][T27020] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 657.678975][T27045] netlink: 'syz.0.5937': attribute type 1 has an invalid length. [ 658.088344][T27068] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 658.164861][T27075] netlink: 'syz.4.5946': attribute type 1 has an invalid length. [ 658.443377][T27084] netlink: 'syz.2.5952': attribute type 10 has an invalid length. [ 658.500786][T27093] netlink: 'syz.3.5954': attribute type 49 has an invalid length. [ 658.726027][T27106] netlink: 'syz.3.5958': attribute type 10 has an invalid length. [ 658.777380][T27109] netlink: Invalid conntrack helper [ 658.803846][T27109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.853221][T27106] veth0_to_bond: entered promiscuous mode [ 658.859614][T27106] veth0_to_bond: entered allmulticast mode [ 658.966682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.032902][T27116] vcan0: entered allmulticast mode [ 659.316366][T27143] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 659.550079][T27148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.820177][T27175] bond_slave_0: Caught tx_queue_len zero misconfig [ 659.874613][T27179] tipc: Started in network mode [ 659.903284][T27179] tipc: Node identity ac14140f, cluster identity 4711 [ 659.942327][T27179] tipc: New replicast peer: 255.255.255.255 [ 659.985760][T27179] tipc: Enabled bearer , priority 10 [ 660.428613][T27210] netlink: NAT attribute has 5 unknown bytes [ 660.441719][T27210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.603688][T27210] .`: renamed from bond0 (while UP) [ 661.052306][T27246] __nla_validate_parse: 11 callbacks suppressed [ 661.052344][T27246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5998'. [ 661.156055][ T5729] tipc: Node number set to 2886997007 [ 661.198508][T27250] vlan2: entered allmulticast mode [ 661.204912][T27250] bridge9: entered allmulticast mode [ 661.248732][T27246] erspan0: left allmulticast mode [ 661.260416][T27246] erspan0: left promiscuous mode [ 661.266913][T27246] bridge0: port 4(erspan0) entered disabled state [ 661.282297][T27246] bridge9: port 1(erspan0) entered blocking state [ 661.309732][T27246] bridge9: port 1(erspan0) entered disabled state [ 661.322082][T27246] erspan0: entered allmulticast mode [ 661.341689][T27246] erspan0: entered promiscuous mode [ 661.588798][T27269] validate_nla: 43 callbacks suppressed [ 661.588818][T27269] netlink: 'syz.4.6004': attribute type 1 has an invalid length. [ 661.787158][T27253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.905429][T27269] bond8: entered promiscuous mode [ 661.923950][T27269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 662.010338][T27278] bond8: (slave bridge10): making interface the new active one [ 662.018488][T27278] bridge10: entered promiscuous mode [ 662.024911][T27278] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 662.184573][T27253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.273359][T27291] netlink: 'syz.4.6009': attribute type 32 has an invalid length. [ 662.315649][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6009'. [ 662.500703][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.513790][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.524376][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.536061][T27291] bond9: option coupled_control: invalid value (64) [ 662.544448][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.552364][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.591235][T27291] bond9 (unregistering): Released all slaves [ 662.857573][T27253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.023635][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.046766][T27316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6016'. [ 663.074869][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.086896][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.089986][T27316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6016'. [ 663.149273][T27320] xt_hashlimit: size too large, truncated to 1048576 [ 663.158355][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.171135][T27322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.180067][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.214808][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.231042][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.244497][T27253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.255872][T27314] netlink: 'syz.3.6016': attribute type 83 has an invalid length. [ 663.302973][T27316] gretap0: entered promiscuous mode [ 663.312389][T27316] gretap0: left promiscuous mode [ 663.331800][T27324] hsr0: entered allmulticast mode [ 663.337457][T27324] hsr_slave_0: entered allmulticast mode [ 663.688104][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6020'. [ 663.716975][T27335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6020'. [ 663.745832][T27335] openvswitch: netlink: Flow key attr not present in new flow. [ 663.776526][T19109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.808569][T19109] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.834725][T19109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.875766][T19109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.920630][T27339] bridge0: port 1(ipvlan2) entered blocking state [ 663.965809][T27339] bridge0: port 1(ipvlan2) entered disabled state [ 663.972596][T27339] ipvlan2: entered allmulticast mode [ 663.982160][T27339] bridge0: entered allmulticast mode [ 663.990628][T27339] ipvlan2: left allmulticast mode [ 663.997782][T27344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6024'. [ 664.013242][T27339] bridge0: left allmulticast mode [ 664.071118][T27348] syzkaller0: entered promiscuous mode [ 664.091660][T27348] syzkaller0: entered allmulticast mode [ 664.148339][T27297] lo speed is unknown, defaulting to 1000 [ 664.161870][T27352] netlink: zone id is out of range [ 664.171620][T27352] netlink: zone id is out of range [ 664.190940][T27352] netlink: zone id is out of range [ 664.223380][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6026'. [ 664.245787][T27352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6026'. [ 664.483586][T27361] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 664.531935][T27361] pim6reg: entered allmulticast mode [ 664.645612][ T50] Bluetooth: hci5: command tx timeout [ 664.664632][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 664.813941][T27297] ip6gre0 speed is unknown, defaulting to 1000 [ 664.825324][T10837] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.843412][T10837] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.870663][T10837] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.890265][T10837] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.334972][T27416] geneve1: entered allmulticast mode [ 666.420855][T27422] __nla_validate_parse: 8 callbacks suppressed [ 666.420870][T27422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6044'. [ 666.441110][T27422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.724843][T27297] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.732343][ T50] Bluetooth: hci5: command tx timeout [ 666.740612][T27297] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.747982][T27297] bridge_slave_0: entered allmulticast mode [ 666.767192][T27297] bridge_slave_0: entered promiscuous mode [ 666.778880][T27297] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.786763][T27297] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.794041][T27297] bridge_slave_1: entered allmulticast mode [ 666.808870][T27297] bridge_slave_1: entered promiscuous mode [ 666.851524][T27297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.864597][T27297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.944413][T27297] team0: Port device team_slave_0 added [ 667.039384][T27297] team0: Port device team_slave_1 added [ 667.142442][T27446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6052'. [ 667.161084][T27297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.185582][T27297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.241144][T27297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.257795][T27297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.266273][T27297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.296771][T27297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.310977][T27454] xt_hashlimit: size too large, truncated to 1048576 [ 667.376313][T27455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6053'. [ 667.510860][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6057'. [ 667.625896][T27297] hsr_slave_0: entered promiscuous mode [ 667.653953][T27297] hsr_slave_1: entered promiscuous mode [ 667.679720][T27297] debugfs: 'hsr0' already exists in 'hsr' [ 667.700958][T27297] Cannot create hsr debugfs directory [ 668.152610][T27475] validate_nla: 28 callbacks suppressed [ 668.152627][T27475] netlink: 'syz.0.6059': attribute type 7 has an invalid length. [ 668.667884][T27297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 668.684069][T27297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 668.709448][T27297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.752923][T27297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54783 - 0 [ 668.806817][ T50] Bluetooth: hci5: command tx timeout [ 669.093465][T27493] IPv6: sit2: Disabled Multicast RS [ 669.159429][T27511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6068'. [ 669.407438][T27297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 669.435059][T27297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 669.465061][T27297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.485059][T27297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54783 - 0 [ 669.788991][T27297] .`: (slave netdevsim1): Releasing backup interface [ 669.831109][T27297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 669.872382][T27297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 669.908786][T27297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.944905][T27535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6076'. [ 669.947063][T27297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54783 - 0 [ 670.046302][T27531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 670.083238][T27542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6078'. [ 670.325897][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 670.393891][T27297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 670.421733][T27297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 670.436942][T27297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.454484][T27297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54783 - 0 [ 670.519030][T27551] 8021q: VLANs not supported on ip6tnl0 [ 670.889538][ T50] Bluetooth: hci5: command tx timeout [ 671.256690][T27571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6086'. [ 671.491742][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6088'. [ 671.533949][T27297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.576974][T27297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.624102][T27297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.662231][T27297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.682646][T27297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.744566][T27584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6091'. [ 671.763710][T27297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.764297][T27584] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6091'. [ 671.804650][T27584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6091'. [ 671.823762][T27297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.913250][T27297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.935511][T27588] can: request_module (can-proto-0) failed. [ 671.977391][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6093'. [ 672.071469][T27599] netlink: 'syz.3.6093': attribute type 1 has an invalid length. [ 672.121589][T27599] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6093'. [ 672.249399][T27608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6095'. [ 672.281979][T27608] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6095'. [ 672.334634][T27615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6095'. [ 672.363757][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6096'. [ 672.647676][T27297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.755589][T27297] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.776527][T27625] netlink: 'syz.0.6100': attribute type 2 has an invalid length. [ 672.828671][T19107] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.835971][T19107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.850148][T27625] netlink: 'syz.0.6100': attribute type 8 has an invalid length. [ 672.996154][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.003455][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.000892][T27659] team0 (unregistering): Port device team_slave_0 removed [ 674.050863][T27659] team0 (unregistering): Port device team_slave_1 removed [ 674.082475][T27659] team0 (unregistering): Port device geneve1 removed [ 674.470627][T27675] netlink: 'syz.4.6113': attribute type 1 has an invalid length. [ 674.513805][T27676] netlink: 'syz.4.6113': attribute type 1 has an invalid length. [ 674.647089][T27680] vlan4: entered promiscuous mode [ 674.796329][T27683] bond9: (slave bridge11): making interface the new active one [ 674.823483][T27683] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 675.111356][T27704] netlink: 'syz.2.6121': attribute type 11 has an invalid length. [ 675.487206][T27297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.617694][T27713] nbd4: detected capacity change from 0 to 63 [ 675.678108][T27297] veth0_vlan: entered promiscuous mode [ 675.683948][T27717] netlink: 'syz.2.6126': attribute type 1 has an invalid length. [ 675.727991][T27297] veth1_vlan: entered promiscuous mode [ 675.802026][T27297] veth0_macvtap: entered promiscuous mode [ 675.833060][T27297] veth1_macvtap: entered promiscuous mode [ 675.857686][T27726] netlink: 'syz.3.6128': attribute type 9 has an invalid length. [ 675.908933][T27297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.940937][T27297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.155384][ T50] block nbd4: Receive control failed (result -104) [ 676.210483][T19107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.429567][T27740] syzkaller1: entered promiscuous mode [ 676.471877][T27740] syzkaller1: entered allmulticast mode [ 676.606597][T27738] bond11: Removing last ns target with arp_interval on [ 676.655619][T19106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.868413][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.898520][T19109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.914776][T19109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.927332][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.190410][T27759] __nla_validate_parse: 9 callbacks suppressed [ 677.190432][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'. [ 677.243167][T19109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.290788][T19109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.939287][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6141'. [ 678.811603][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6148'. [ 679.166362][T27824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6154'. [ 679.694443][T27833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6157'. [ 679.840378][T27833] IPVS: Unknown mcast interface: vcan0 [ 679.883776][T27852] netlink: 'syz.4.6162': attribute type 1 has an invalid length. [ 679.917563][T27852] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6162'. [ 680.576120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.038106][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6175'. [ 681.272817][T27908] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6176'. [ 681.319943][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6178'. [ 682.226914][T27939] x_tables: unsorted underflow at hook 3 [ 682.323849][T27939] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6183'. [ 682.975067][T27961] netlink: 'syz.3.6188': attribute type 1 has an invalid length. [ 683.473007][T27987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6191'. [ 683.488294][T27961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.809423][T27996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6195'. [ 683.834082][T27996] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 683.852759][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6195'. [ 684.084402][T28011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6198'. [ 684.276463][T28019] netlink: 'syz.0.6201': attribute type 10 has an invalid length. [ 684.601450][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6203'. [ 685.021594][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 685.064186][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 685.150045][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6208'. [ 685.310488][T28043] bond1: Invalid ad_actor_system MAC address. [ 685.317101][T28043] bond1: option ad_actor_system: invalid value (1) [ 685.327687][T28043] bond1 (unregistering): Released all slaves [ 685.348042][T28050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6209'. [ 685.404212][T28053] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 685.553790][T28047] netlink: 'syz.0.6207': attribute type 2 has an invalid length. [ 685.578914][T28058] bridge37: entered promiscuous mode [ 685.594712][T28058] bridge37: entered allmulticast mode [ 685.604438][T28047] netlink: 'syz.0.6207': attribute type 2 has an invalid length. [ 685.821058][T28067] netlink: 'syz.1.6212': attribute type 1 has an invalid length. [ 686.046703][T28072] netlink: 'syz.3.6214': attribute type 11 has an invalid length. [ 686.054722][T28069] bond2 (unregistering): Released all slaves [ 686.171582][T28075] sctp: [Deprecated]: syz.1.6215 (pid 28075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.171582][T28075] Use struct sctp_sack_info instead [ 687.237856][T28101] batadv_slave_1: entered promiscuous mode [ 687.272784][T28097] batadv_slave_1: left promiscuous mode [ 687.654902][T28113] __nla_validate_parse: 3 callbacks suppressed [ 687.654923][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6227'. [ 687.739000][T28113] netlink: 'syz.4.6227': attribute type 1 has an invalid length. [ 687.786269][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6227'. [ 687.807843][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6227'. [ 687.843679][T28113] netlink: 'syz.4.6227': attribute type 1 has an invalid length. [ 687.867020][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6227'. [ 687.918361][T28114] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6228'. [ 687.943452][T28114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6228'. [ 688.062726][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6229'. [ 688.171408][T28122] bond9: option xmit_hash_policy: invalid value (64) [ 688.208087][T28122] bond9 (unregistering): Released all slaves [ 688.266792][T28134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 688.284176][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6231'. [ 688.400165][T28133] team0 (unregistering): Port device team_slave_0 removed [ 688.461123][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 688.482213][T28133] team0 (unregistering): Port device team_slave_1 removed [ 688.498082][T28146] xt_hashlimit: size too large, truncated to 1048576 [ 688.552502][T28145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.608930][T28147] xt_hashlimit: size too large, truncated to 1048576 [ 688.616071][T28133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.887225][T28172] netlink: 'syz.0.6241': attribute type 1 has an invalid length. [ 690.387494][T28172] bond12: entered promiscuous mode [ 690.403932][T28172] 8021q: adding VLAN 0 to HW filter on device bond12 [ 691.443430][T28201] gtp0: entered promiscuous mode [ 691.479857][T28201] gtp0: entered allmulticast mode [ 692.027527][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.042991][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.058439][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.072647][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.088130][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.917813][T28252] __nla_validate_parse: 1 callbacks suppressed [ 693.917834][T28252] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6257'. [ 694.173741][ T5624] Bluetooth: hci3: command tx timeout [ 694.989828][T28267] bridge0: port 3(dummy0) entered blocking state [ 695.084747][T28267] bridge0: port 3(dummy0) entered disabled state [ 695.170795][T28267] dummy0: entered allmulticast mode [ 695.261369][T28267] dummy0: entered promiscuous mode [ 695.364616][T28267] bridge0: port 3(dummy0) entered blocking state [ 695.373419][T28267] bridge0: port 3(dummy0) entered forwarding state [ 695.408523][ T30] audit: type=1804 audit(1786119401.406:15): pid=28277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6261" name="/newroot/554/cgroup.controllers" dev="tmpfs" ino=2853 res=1 errno=0 [ 695.806619][ T30] audit: type=1800 audit(1786119401.446:16): pid=28277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6261" name="cgroup.controllers" dev="tmpfs" ino=2853 res=0 errno=0 [ 696.246196][ T5624] Bluetooth: hci3: command tx timeout [ 697.151395][T28300] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6266'. [ 697.195665][T28299] netlink: NAT attribute has 1 unknown bytes [ 697.273794][T28299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.414242][T28222] lo speed is unknown, defaulting to 1000 [ 698.325452][ T5624] Bluetooth: hci3: command tx timeout [ 698.604593][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6271'. [ 698.808964][T28318] openvswitch: netlink: Key type 170 is out of range max 32 [ 700.182318][T28343] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6276'. [ 700.406592][ T5624] Bluetooth: hci3: command tx timeout [ 700.744803][T28222] ip6gre0 speed is unknown, defaulting to 1000 [ 701.417472][T28360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6282'. [ 701.519246][T28362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.664318][T28360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.671654][T28360] IPv6: NLM_F_CREATE should be set when creating new route [ 701.678980][T28360] IPv6: NLM_F_CREATE should be set when creating new route [ 702.674780][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6285'. [ 703.697383][T28395] bond0: Caught tx_queue_len zero misconfig [ 704.613936][T28404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6293'. [ 704.799555][T28410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 705.285160][T28410] xt_CT: No such helper "pptp" [ 706.605888][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 30 seconds [ 706.619013][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 30 seconds [ 706.630060][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 30 seconds [ 706.641379][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 30 seconds [ 708.968236][T28467] netlink: 'syz.1.6304': attribute type 4 has an invalid length. [ 709.094176][T28467] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6304'. [ 710.142801][T28482] netlink: 'syz.0.6306': attribute type 6 has an invalid length. [ 710.176558][T28483] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6307'. [ 710.307845][T28487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6306'. [ 710.467986][T28222] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.542814][T28222] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.600995][T28222] bridge_slave_0: entered allmulticast mode [ 710.712340][T28222] bridge_slave_0: entered promiscuous mode [ 710.810914][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.142156][T28222] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.239124][T28222] bridge_slave_1: entered allmulticast mode [ 711.405251][T28222] bridge_slave_1: entered promiscuous mode [ 711.727728][T28493] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.121843][T28222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.334699][T28222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.440608][ T30] audit: type=1804 audit(1786119418.496:17): pid=28513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6314" name="/newroot/592/cgroup.controllers" dev="tmpfs" ino=3039 res=1 errno=0 [ 712.924318][ T30] audit: type=1800 audit(1786119418.526:18): pid=28513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6314" name="cgroup.controllers" dev="tmpfs" ino=3039 res=0 errno=0 [ 712.952379][T28222] team0: Port device team_slave_0 added [ 713.063456][T28222] team0: Port device team_slave_1 added [ 713.746871][T28222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.830206][T28222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.098991][T28222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.260420][T28222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.352888][T28222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.641695][T28552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6321'. [ 714.707312][T28222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.047999][T28222] hsr_slave_0: entered promiscuous mode [ 716.202810][T28222] hsr_slave_1: entered promiscuous mode [ 716.254805][T28222] debugfs: 'hsr0' already exists in 'hsr' [ 716.458975][T28222] Cannot create hsr debugfs directory [ 716.922194][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6327'. [ 717.188183][T28574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6327'. [ 717.872206][T28589] lo: MTU too low for tipc bearer [ 717.901667][T28589] tipc: Enabling of bearer rejected, failed to enable media [ 720.733736][T28635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6341'. [ 720.773417][T28637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 721.787278][T28648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6345'. [ 722.542116][T28657] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 724.024077][T28673] vlan0: entered promiscuous mode [ 727.908257][T28700] x_tables: duplicate underflow at hook 2 [ 728.703725][T28222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.965482][T28222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.089104][T28222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 729.168478][T28714] netlink: 'syz.0.6362': attribute type 1 has an invalid length. [ 729.403914][T28714] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6362'. [ 729.425621][T28222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.518713][T28714] netlink: 'syz.0.6362': attribute type 1 has an invalid length. [ 729.602867][T28222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 729.978792][T28222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.110324][T28222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 730.378376][T28222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.057849][T28746] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6366'. [ 732.634957][T28752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6369'. [ 732.803466][T28753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 733.133397][T28222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.782722][T28222] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.993300][T19107] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.000608][T19107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.819023][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.826267][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.960117][T28792] xt_l2tp: invalid flags combination: 8 [ 736.017059][T28793] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6377'. [ 736.316025][T28800] netlink: 'syz.3.6378': attribute type 4 has an invalid length. [ 736.396869][T28801] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.6378'. [ 736.490943][T28800] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6378'. [ 736.894737][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 60 seconds [ 736.908290][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 60 seconds [ 736.919938][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 60 seconds [ 736.931202][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 60 seconds [ 737.106523][T28806] netlink: 'syz.0.6379': attribute type 4 has an invalid length. [ 739.841924][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6387'. [ 740.035706][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6387'. [ 741.666094][T28869] netlink: 'syz.3.6395': attribute type 39 has an invalid length. [ 742.593020][T28222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.516494][T28896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6400'. [ 743.572562][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6401'. [ 744.724463][T28905] bond2: entered allmulticast mode [ 744.786449][T28905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.749623][T28935] netlink: 'syz.0.6407': attribute type 2 has an invalid length. [ 746.331417][T28945] erspan0: entered promiscuous mode [ 748.127559][T28974] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 748.358725][T28222] veth0_vlan: entered promiscuous mode [ 748.760077][T28222] veth1_vlan: entered promiscuous mode [ 749.414581][T28222] veth0_macvtap: entered promiscuous mode [ 749.571315][T28995] netlink: 'syz.0.6416': attribute type 5 has an invalid length. [ 749.658210][T28996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.865367][T28222] veth1_macvtap: entered promiscuous mode [ 750.452389][T28222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.499906][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6420'. [ 750.600989][T28222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.693428][T29016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6425'. [ 753.464122][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 753.487554][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 753.511206][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 753.566227][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 753.579537][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 753.990318][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6432'. [ 754.052436][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6434'. [ 754.902038][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6437'. [ 754.916493][T29061] netlink: 'syz.0.6439': attribute type 2 has an invalid length. [ 754.983160][T29061] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6439'. [ 755.092022][T29056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 755.126359][T29065] netlink: 'syz.0.6439': attribute type 11 has an invalid length. [ 755.242936][T29056] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 755.294708][T29056] gretap1: entered promiscuous mode [ 755.341564][T29056] gretap1: entered allmulticast mode [ 755.605574][ T5624] Bluetooth: hci2: command tx timeout [ 757.668501][T29089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6445'. [ 757.686539][ T5624] Bluetooth: hci2: command tx timeout [ 758.170747][T29104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6445'. [ 758.960285][T29112] netlink: 'syz.3.6449': attribute type 1 has an invalid length. [ 759.765275][ T5624] Bluetooth: hci2: command tx timeout [ 761.845455][ T50] Bluetooth: hci2: command tx timeout [ 761.966375][T29035] lo speed is unknown, defaulting to 1000 [ 763.520442][T29159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6461'. [ 764.323596][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6464'. [ 764.514473][T29169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6464'. [ 765.077923][T29165] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 765.102388][T29167] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 765.529537][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6466'. [ 766.077953][T29035] ip6gre0 speed is unknown, defaulting to 1000 [ 767.017751][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 90 seconds [ 767.029046][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 90 seconds [ 767.040524][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 90 seconds [ 767.052140][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 90 seconds [ 767.778132][T29197] netlink: 'syz.1.6470': attribute type 2 has an invalid length. [ 767.901048][ T13] bridge_slave_1: left allmulticast mode [ 767.967762][ T13] bridge_slave_1: left promiscuous mode [ 768.026671][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.607729][ T13] bridge_slave_0: left allmulticast mode [ 768.698699][ T13] bridge_slave_0: left promiscuous mode [ 768.767224][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.685675][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 773.680037][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.800769][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.907522][ T13] bond0 (unregistering): Released all slaves [ 774.084001][T29197] : entered promiscuous mode [ 774.376165][T29230] syzkaller0: entered promiscuous mode [ 774.424484][T29230] syzkaller0: entered allmulticast mode [ 774.470047][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 776.564596][T29292] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 776.694047][T29297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.186514][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6495'. [ 781.395444][ T4979] udevd[4979]: worker [25166] /devices/virtual/block/nbd4 is taking a long time [ 782.086086][ T13] hsr_slave_0: left promiscuous mode [ 782.111523][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6500'. [ 782.167200][ T13] hsr_slave_1: left promiscuous mode [ 782.216255][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.319771][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.442323][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.511513][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.802267][ T13] veth1_macvtap: left promiscuous mode [ 782.842295][ T13] veth0_macvtap: left promiscuous mode [ 782.866390][ T13] veth1_vlan: left promiscuous mode [ 782.903212][ T13] veth0_vlan: left promiscuous mode [ 785.053168][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 789.197297][ T13] team0 (unregistering): Port device team_slave_1 removed [ 789.475536][ T13] team0 (unregistering): Port device team_slave_0 removed [ 792.103974][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 795.418824][T29035] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.559225][T29035] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.839560][T29035] bridge_slave_0: entered allmulticast mode [ 795.919623][T29035] bridge_slave_0: entered promiscuous mode [ 796.020669][T29035] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.040458][T29035] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.063735][T29035] bridge_slave_1: entered allmulticast mode [ 796.117419][T29424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6513'. [ 796.136185][T29035] bridge_slave_1: entered promiscuous mode [ 796.911130][T29424] bond9: entered allmulticast mode [ 796.979442][T29035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.275765][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 120 seconds [ 797.291735][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 120 seconds [ 797.316962][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 120 seconds [ 797.445984][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 120 seconds [ 797.501820][T29035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.588974][T29433] syzkaller0: entered promiscuous mode [ 798.647333][T29433] syzkaller0: entered allmulticast mode [ 810.294362][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 810.362668][T29035] team0: Port device team_slave_0 added [ 810.723903][T29035] team0: Port device team_slave_1 added [ 810.991090][T29487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6526'. [ 811.454202][T29035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.484386][T29035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.585196][T29035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.597612][T29503] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 811.790268][T29035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.880423][T29035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.291606][T29035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.511430][T29513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6533'. [ 814.818944][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.837196][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.852869][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.866334][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.879631][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.968621][T29544] atomic_op ffff888064868998 conn xmit_atomic 0000000000000000 [ 816.970315][ T50] Bluetooth: hci3: command tx timeout [ 819.048556][ T50] Bluetooth: hci3: command tx timeout [ 819.144274][T29277] bridge_slave_1: left allmulticast mode [ 819.195361][T29277] bridge_slave_1: left promiscuous mode [ 819.290009][T29277] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.502245][T29277] bridge_slave_0: left allmulticast mode [ 819.577928][T29277] bridge_slave_0: left promiscuous mode [ 819.634823][T29277] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.734929][T29619] netlink: 'syz.1.6554': attribute type 1 has an invalid length. [ 819.921080][T29623] netlink: 'syz.1.6554': attribute type 1 has an invalid length. [ 821.125698][ T50] Bluetooth: hci3: command tx timeout [ 821.212246][T29277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.392602][T29277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.544571][T29277] bond0 (unregistering): Released all slaves [ 821.901093][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 823.217223][ T50] Bluetooth: hci3: command tx timeout [ 824.373746][T29666] netlink: 'syz.3.6565': attribute type 6 has an invalid length. [ 824.711050][T29643] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 824.863678][T29643] bond13: (slave lo): Enslaving as an active interface with an up link [ 824.900231][T29643] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 825.341890][T29540] lo speed is unknown, defaulting to 1000 [ 825.850512][T29676] pimreg: entered allmulticast mode [ 826.043492][T29277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.437365][T29277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.380714][T29701] netlink: 'syz.1.6573': attribute type 2 has an invalid length. [ 827.905470][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 150 seconds [ 827.916518][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 150 seconds [ 827.928848][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 150 seconds [ 827.941015][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 150 seconds [ 828.737903][T29277] team0 (unregistering): Port device team_slave_1 removed [ 829.152793][T29277] team0 (unregistering): Port device team_slave_0 removed [ 829.959866][T29694] sctp: [Deprecated]: syz.3.6572 (pid 29694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 829.959866][T29694] Use struct sctp_sack_info instead [ 830.246867][T29715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6572'. [ 832.030266][T29686] vcan0: entered promiscuous mode [ 832.053879][T29686] vcan0: entered allmulticast mode [ 833.195093][T29540] ip6gre0 speed is unknown, defaulting to 1000 [ 833.963034][T29745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6582'. [ 834.165423][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.645215][T29724] tipc: Enabling of bearer rejected, failed to enable media [ 837.013856][T29756] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 837.579618][T29764] erspan0: entered promiscuous mode [ 837.634387][T29764] erspan0: entered allmulticast mode [ 838.060724][T29766] hsr0: entered allmulticast mode [ 838.125353][T29766] hsr_slave_0: entered allmulticast mode [ 838.199551][T29766] hsr_slave_1: entered allmulticast mode [ 838.922197][T29773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6588'. [ 840.849282][T29804] sit1: entered promiscuous mode [ 840.894077][T29804] sit1: entered allmulticast mode [ 841.064852][T29795] lo speed is unknown, defaulting to 1000 [ 843.295728][T29817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6596'. [ 844.934167][T29540] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.986166][T29540] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.059808][T29540] bridge_slave_0: entered allmulticast mode [ 845.157461][T29540] bridge_slave_0: entered promiscuous mode [ 845.235675][T29795] ip6gre0 speed is unknown, defaulting to 1000 [ 845.258379][T29540] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.376438][T29540] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.496261][T29540] bridge_slave_1: entered allmulticast mode [ 845.560397][T29540] bridge_slave_1: entered promiscuous mode [ 846.451403][T29855] xt_ecn: cannot match TCP bits for non-tcp packets [ 846.507894][T29540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.880864][T29540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.718180][T29876] netlink: 'syz.1.6607': attribute type 1 has an invalid length. [ 848.003742][T29540] team0: Port device team_slave_0 added [ 848.193155][T29540] team0: Port device team_slave_1 added [ 849.390478][T29540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.461692][T29540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.805283][T29540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.014379][T29540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.081505][T29540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.564781][T29540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.964450][T29916] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 851.246104][T29540] hsr_slave_0: entered promiscuous mode [ 851.383082][T29540] hsr_slave_1: entered promiscuous mode [ 851.505814][T29540] debugfs: 'hsr0' already exists in 'hsr' [ 851.511604][T29540] Cannot create hsr debugfs directory [ 852.468239][T29936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6620'. [ 853.645248][T29946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 854.519634][T29946] team1: entered promiscuous mode [ 854.548004][T29946] team1: entered allmulticast mode [ 857.386713][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.405113][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.415068][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.437269][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.455630][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 858.426022][T29993] openvswitch: netlink: Message has 8 unknown bytes. [ 858.432794][T29993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.505716][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 180 seconds [ 858.520500][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 180 seconds [ 858.535346][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 180 seconds [ 858.547066][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 180 seconds [ 859.530498][ T5624] Bluetooth: hci2: command tx timeout [ 861.607770][ T5624] Bluetooth: hci2: command tx timeout [ 863.700063][ T5624] Bluetooth: hci2: command tx timeout [ 864.466052][T30053] ipvlan1: Caught tx_queue_len zero misconfig [ 865.778705][ T5624] Bluetooth: hci2: command tx timeout [ 865.926349][T30069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6652'. [ 866.221978][T29981] lo speed is unknown, defaulting to 1000 [ 868.680782][T29540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.903550][T29540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.027310][T29540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 869.147765][T29540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.431379][T29981] ip6gre0 speed is unknown, defaulting to 1000 [ 869.834769][T29540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 870.156306][T29540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.335229][T29540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 870.388508][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6662'. [ 870.525154][T30117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6662'. [ 870.544868][T29540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.578923][T30119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 871.703781][T30142] netlink: 'syz.1.6665': attribute type 1 has an invalid length. [ 872.644288][T30142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 873.191996][T30147] bond1: (slave gretap2): making interface the new active one [ 873.253066][T30147] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 873.508178][ T4979] udevd[4979]: worker [25166] /devices/virtual/block/nbd4 timeout; kill it [ 873.570674][ T4979] udevd[4979]: seq 29824 '/devices/virtual/block/nbd4' killed [ 875.246880][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.265082][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.273721][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.292523][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.366498][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.852508][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 877.445210][ T50] Bluetooth: hci0: command tx timeout [ 877.988246][T30196] geneve4: entered promiscuous mode [ 878.627875][T30184] syzkaller0: entered promiscuous mode [ 878.644194][T30184] syzkaller0: entered allmulticast mode [ 879.525111][ T50] Bluetooth: hci0: command tx timeout [ 879.557213][T30204] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 879.690245][T30204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 879.837989][T30204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 881.393464][T30229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6678'. [ 881.605438][ T50] Bluetooth: hci0: command tx timeout [ 882.906751][T30243] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6680'. [ 883.685075][ T50] Bluetooth: hci0: command tx timeout [ 883.717284][T30268] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 883.785614][T30268] netlink: 'syz.2.6683': attribute type 21 has an invalid length. [ 883.890023][T30268] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.825393][T30280] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6685'. [ 885.151940][T30280] bridge0: port 3(dummy0) entered disabled state [ 885.346168][T30280] dummy0 (unregistering): left allmulticast mode [ 885.450350][T30280] dummy0 (unregistering): left promiscuous mode [ 885.496685][T30280] bridge0: port 3(dummy0) entered disabled state [ 885.732730][T30170] lo speed is unknown, defaulting to 1000 [ 886.472837][T30297] netlink: 'syz.1.6688': attribute type 1 has an invalid length. [ 887.704030][T29981] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.711483][T30170] ip6gre0 speed is unknown, defaulting to 1000 [ 887.793435][T29981] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.817216][T29981] bridge_slave_0: entered allmulticast mode [ 887.871882][T29981] bridge_slave_0: entered promiscuous mode [ 888.015528][T30297] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 888.873357][T29981] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.204530][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 210 seconds [ 889.251447][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 210 seconds [ 889.262885][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 210 seconds [ 889.274180][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 210 seconds [ 889.330010][T29981] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.625971][T29981] bridge_slave_1: entered allmulticast mode [ 889.678670][T29981] bridge_slave_1: entered promiscuous mode [ 889.786169][T30319] netlink: 'syz.2.6692': attribute type 1 has an invalid length. [ 890.015080][T30319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6692'. [ 891.198104][T29981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.167326][T30319] nbd1: detected capacity change from 0 to 127 [ 892.239270][ T4940] block nbd1: Dead connection, failed to find a fallback [ 892.250875][ T4940] block nbd1: shutting down sockets [ 892.257375][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.270419][ T4940] Buffer I/O error on dev nbd1, logical block 0, async page read [ 892.281664][ T4940] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 892.291522][ T4940] Buffer I/O error on dev nbd1, logical block 1, async page read [ 892.299406][ T4940] Buffer I/O error on dev nbd1, logical block 2, async page read [ 892.307726][ T4940] Buffer I/O error on dev nbd1, logical block 3, async page read [ 892.317859][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.328468][ T4940] Buffer I/O error on dev nbd1, logical block 0, async page read [ 892.336691][ T4940] Buffer I/O error on dev nbd1, logical block 1, async page read [ 892.344654][ T4940] Buffer I/O error on dev nbd1, logical block 2, async page read [ 892.356318][ T4940] Buffer I/O error on dev nbd1, logical block 3, async page read [ 892.364852][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.375203][ T4940] Buffer I/O error on dev nbd1, logical block 0, async page read [ 892.384652][ T4940] Buffer I/O error on dev nbd1, logical block 1, async page read [ 892.394367][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.404630][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.415045][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.428517][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.440185][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 892.456505][T25168] ldm_validate_partition_table(): Disk read failed. [ 892.479933][ T4940] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 892.492759][T25168] Dev nbd1: unable to read RDB block 0 [ 892.500256][T29981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.513566][T25168] nbd1: unable to read partition table [ 892.548052][T25168] ldm_validate_partition_table(): Disk read failed. [ 892.626276][T25168] Dev nbd1: unable to read RDB block 0 [ 892.702998][T25168] nbd1: unable to read partition table [ 893.284290][T29981] team0: Port device team_slave_0 added [ 893.574291][T30352] netlink: 'syz.0.6695': attribute type 1 has an invalid length. [ 893.714713][T30352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6695'. [ 894.492522][T29981] team0: Port device team_slave_1 added [ 894.870677][T29981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.988199][T29981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.100425][T29981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.289877][T29981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.359385][T29981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.632322][T29981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.962452][T30390] xt_TCPMSS: Only works on TCP SYN packets [ 897.087910][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 897.267959][T30404] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 897.406197][T30404] xt_hashlimit: size too large, truncated to 1048576 [ 898.378222][ T70] bridge_slave_1: left allmulticast mode [ 898.414316][ T70] bridge_slave_1: left promiscuous mode [ 898.463213][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.620523][ T70] bridge_slave_0: left allmulticast mode [ 898.662036][ T70] bridge_slave_0: left promiscuous mode [ 898.701579][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.111744][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.233566][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.353860][ T70] bond0 (unregistering): Released all slaves [ 901.504151][T29981] hsr_slave_0: entered promiscuous mode [ 901.551544][T29981] hsr_slave_1: entered promiscuous mode [ 901.584523][T29981] debugfs: 'hsr0' already exists in 'hsr' [ 901.620303][T29981] Cannot create hsr debugfs directory [ 902.584641][T30447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 902.588472][T30449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6711'. [ 902.762973][T30451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 903.009664][T30451] veth0_macvtap: left promiscuous mode [ 904.369836][T30470] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6717'. [ 904.873938][T30473] netlink: 'syz.1.6718': attribute type 1 has an invalid length. [ 905.998281][T30473] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 906.947222][ T70] hsr_slave_0: left promiscuous mode [ 907.096510][ T70] hsr_slave_1: left promiscuous mode [ 907.175172][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.239735][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.477236][T30500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.094157][ T70] team0 (unregistering): Port device team_slave_1 removed [ 911.278937][ T70] team0 (unregistering): Port device team_slave_0 removed [ 915.444406][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6730'. [ 915.712560][T30551] set match dimension is over the limit! [ 915.856957][T30553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.847519][T30170] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.902883][T30170] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.968030][T30170] bridge_slave_0: entered allmulticast mode [ 917.041500][T30170] bridge_slave_0: entered promiscuous mode [ 918.060351][T30170] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.078834][T30170] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.169367][T30170] bridge_slave_1: entered allmulticast mode [ 918.328399][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.342986][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.355608][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.370779][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.382877][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 918.534508][T30170] bridge_slave_1: entered promiscuous mode [ 918.787282][T30567] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 918.821073][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6733'. [ 919.289468][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 240 seconds [ 919.300736][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 240 seconds [ 919.312104][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 240 seconds [ 919.323642][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 240 seconds [ 919.850594][T30170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.043888][T30170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.485649][ T5624] Bluetooth: hci3: command tx timeout [ 921.432100][T30170] team0: Port device team_slave_0 added [ 921.649761][T30170] team0: Port device team_slave_1 added [ 922.393213][T30170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.429932][T30170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.565924][ T5624] Bluetooth: hci3: command tx timeout [ 922.780525][T30170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.970338][T30170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.195524][T30170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.728219][T30170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.647407][ T5624] Bluetooth: hci3: command tx timeout [ 925.362445][T30649] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 925.464397][T30649] syzkaller0: entered promiscuous mode [ 925.527996][T30649] syzkaller0: entered allmulticast mode [ 925.955170][T30568] lo speed is unknown, defaulting to 1000 [ 926.735419][ T5624] Bluetooth: hci3: command tx timeout [ 927.418918][T30677] netlink: 'syz.2.6747': attribute type 1 has an invalid length. [ 927.446368][T30677] netlink: 'syz.2.6747': attribute type 2 has an invalid length. [ 927.512319][T30677] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6747'. [ 927.684671][T30170] hsr_slave_0: entered promiscuous mode [ 927.713463][T30170] hsr_slave_1: entered promiscuous mode [ 927.787418][T30170] debugfs: 'hsr0' already exists in 'hsr' [ 927.846515][T30170] Cannot create hsr debugfs directory [ 929.697237][T30712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6753'. [ 929.729725][T30568] ip6gre0 speed is unknown, defaulting to 1000 [ 930.865103][T30722] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 930.915432][T30722] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 931.963108][T30740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6759'. [ 932.146450][T30741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.880147][T30755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6763'. [ 934.167998][ T1173] bridge_slave_1: left allmulticast mode [ 934.204186][ T1173] bridge_slave_1: left promiscuous mode [ 934.255048][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.364707][ T1173] bridge_slave_0: left allmulticast mode [ 934.505657][ T1173] bridge_slave_0: left promiscuous mode [ 934.553069][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.701132][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 934.716235][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 934.731797][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 934.755665][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 934.767265][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.937349][T30766] netlink: 'syz.0.6766': attribute type 1 has an invalid length. [ 934.964975][T30766] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6766'. [ 936.755437][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.885472][ T50] Bluetooth: hci2: command tx timeout [ 937.029427][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.126489][ T1173] bond0 (unregistering): Released all slaves [ 937.957571][T30777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6768'. [ 938.170413][T30784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6768'. [ 938.984733][ T50] Bluetooth: hci2: command tx timeout [ 940.837888][T30818] bond0: (slave bond_slave_1): Releasing backup interface [ 941.045349][ T50] Bluetooth: hci2: command tx timeout [ 941.479063][T30830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6777'. [ 942.255775][T30797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 943.125637][ T50] Bluetooth: hci2: command tx timeout [ 943.296583][T30762] lo speed is unknown, defaulting to 1000 [ 943.379634][T30847] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6780'. [ 944.528104][ T1173] hsr_slave_0: left promiscuous mode [ 944.641220][ T1173] hsr_slave_1: left promiscuous mode [ 944.734641][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.914537][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.987614][T30860] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 945.393424][T30863] xt_hashlimit: size too large, truncated to 1048576 [ 945.981350][T30868] netlink: 'syz.2.6785': attribute type 2 has an invalid length. [ 946.805414][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 949.415450][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 270 seconds [ 949.426621][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 270 seconds [ 949.438583][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 949.442721][ T1485] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 270 seconds [ 949.457018][ T1485] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 270 seconds [ 949.941931][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 952.562772][T30864] netlink: 'syz.2.6785': attribute type 12 has an invalid length. [ 953.323102][T30762] ip6gre0 speed is unknown, defaulting to 1000 [ 953.619240][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6790'. [ 953.733092][T30894] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 954.380283][T30568] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.600984][T30907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6792'. [ 954.613645][T30568] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.744423][T30909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6793'. [ 954.747124][T30568] bridge_slave_0: entered allmulticast mode [ 954.804809][T30568] bridge_slave_0: entered promiscuous mode [ 955.034615][T30568] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.208422][T30568] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.273020][T30568] bridge_slave_1: entered allmulticast mode [ 955.352943][T30568] bridge_slave_1: entered promiscuous mode [ 955.818164][T30568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.989866][T30568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.414429][T30923] ip_tables: iptables: counters copy to user failed while replacing table [ 957.578088][T30927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6797'. [ 957.713479][T30568] team0: Port device team_slave_0 added [ 957.973197][T30930] sctp: [Deprecated]: syz.2.6798 (pid 30930) Use of int in maxseg socket option. [ 957.973197][T30930] Use struct sctp_assoc_value instead [ 958.107937][T30568] team0: Port device team_slave_1 added [ 959.017578][T30568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.069255][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.291210][T30568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.601706][ T1173] bridge_slave_1: left allmulticast mode [ 959.689401][ T1173] bridge_slave_1: left promiscuous mode [ 959.854532][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.957123][ T1173] bridge_slave_0: left allmulticast mode [ 960.014810][ T1173] bridge_slave_0: left promiscuous mode [ 960.186211][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6804'. [ 960.313236][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.350207][T30963] netlink: 'syz.0.6804': attribute type 10 has an invalid length. [ 960.419987][T30963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6804'. [ 962.123061][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.320954][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.416422][ T1173] bond0 (unregistering): Released all slaves [ 962.447250][T30942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6801'. [ 962.466940][T30942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6801'. [ 962.487925][T30942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6801'. [ 962.549137][T30568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.611121][T30568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.730356][T30568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.937479][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 963.659694][T30988] netlink: 'syz.2.6809': attribute type 2 has an invalid length. [ 963.971559][T30981] syzkaller0: entered promiscuous mode [ 964.003198][T30981] syzkaller0: entered allmulticast mode [ 964.844691][T30568] hsr_slave_0: entered promiscuous mode [ 964.907451][T30568] hsr_slave_1: entered promiscuous mode [ 964.964730][T30568] debugfs: 'hsr0' already exists in 'hsr' [ 965.001018][T30568] Cannot create hsr debugfs directory [ 967.211451][ T1173] hsr_slave_0: left promiscuous mode [ 967.274438][ T1173] hsr_slave_1: left promiscuous mode [ 967.458916][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.551531][ T50] block nbd0: Receive control failed (result -22) [ 967.579718][T31019] block nbd0: reconnected socket [ 967.599316][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.706802][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 971.989683][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 974.619741][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 975.994955][T31063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6821'. [ 976.290286][T31063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6821'. [ 977.525126][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 977.984390][T31075] netlink: 'syz.1.6822': attribute type 5 has an invalid length. [ 978.135244][T31075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6822'. [ 978.510450][T30762] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.627962][T30762] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.718535][T30762] bridge_slave_0: entered allmulticast mode [ 978.881967][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 978.901669][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 978.911319][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 978.923144][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 978.924577][T30762] bridge_slave_0: entered promiscuous mode [ 978.972035][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.070364][T30762] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.143265][T30762] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.189155][ T50] [ 979.191537][ T50] ====================================================== [ 979.198580][ T50] WARNING: possible circular locking dependency detected [ 979.205638][ T50] syzkaller #0 Not tainted [ 979.210103][ T50] ------------------------------------------------------ [ 979.217221][ T50] kworker/u9:0/50 is trying to acquire lock: [ 979.223240][ T50] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 979.233756][ T50] [ 979.233756][ T50] but task is already holding lock: [ 979.241141][ T50] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 979.250594][ T50] [ 979.250594][ T50] which lock already depends on the new lock. [ 979.250594][ T50] [ 979.261032][ T50] [ 979.261032][ T50] the existing dependency chain (in reverse order) is: [ 979.270076][ T50] [ 979.270076][ T50] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 979.278114][ T50] down_write+0x96/0x200 [ 979.282930][ T50] kernfs_add_one+0x41/0x5e0 [ 979.288088][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 979.293852][ T50] internal_create_group+0x440/0x1180 [ 979.299775][ T50] cpuhp_invoke_callback+0x434/0x810 [ 979.305615][ T50] cpuhp_issue_call+0x3f0/0x750 [ 979.311018][ T50] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 979.317637][ T50] __cpuhp_setup_state+0x3f/0x60 [ 979.323129][ T50] do_one_initcall+0x250/0x870 [ 979.328448][ T50] do_initcall_level+0x10a/0x1a0 [ 979.333933][ T50] do_initcalls+0x59/0xa0 [ 979.338807][ T50] kernel_init_freeable+0x29d/0x3e0 [ 979.344990][ T50] kernel_init+0x1d/0x1d0 [ 979.349877][ T50] ret_from_fork+0x514/0xb70 [ 979.355031][ T50] ret_from_fork_asm+0x1a/0x30 [ 979.360344][ T50] [ 979.360344][ T50] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 979.368210][ T50] [ 979.368210][ T50] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 979.375971][ T50] cpus_read_lock+0x42/0x160 [ 979.381121][ T50] static_key_slow_inc+0x12/0x30 [ 979.386613][ T50] nbd_genl_reconfigure+0x1301/0x1e80 [ 979.392537][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 979.398636][ T50] genl_rcv_msg+0x614/0x7a0 [ 979.403685][ T50] netlink_rcv_skb+0x226/0x4a0 [ 979.409088][ T50] genl_rcv+0x28/0x40 [ 979.413617][ T50] netlink_unicast+0x7bb/0x940 [ 979.418934][ T50] netlink_sendmsg+0x813/0xb40 [ 979.424243][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 979.429818][ T50] ____sys_sendmsg+0x54e/0x850 [ 979.435124][ T50] ___sys_sendmsg+0x2a5/0x360 [ 979.440352][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 979.445838][ T50] do_syscall_64+0x174/0x580 [ 979.450981][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.457436][ T50] [ 979.457436][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 979.465123][ T50] __mutex_lock+0x19d/0x1550 [ 979.470269][ T50] nbd_queue_rq+0x373/0x1150 [ 979.475424][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 979.481514][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 979.488389][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 979.494924][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 979.500524][ T50] process_scheduled_works+0xa8e/0x14e0 [ 979.506614][ T50] worker_thread+0xa47/0xfb0 [ 979.511756][ T50] kthread+0x388/0x470 [ 979.516385][ T50] ret_from_fork+0x514/0xb70 [ 979.521520][ T50] ret_from_fork_asm+0x1a/0x30 [ 979.526825][ T50] [ 979.526825][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 979.534049][ T50] __mutex_lock+0x19d/0x1550 [ 979.539180][ T50] nbd_queue_rq+0xc1/0x1150 [ 979.544228][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 979.550312][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 979.557186][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 979.563714][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 979.569369][ T50] process_scheduled_works+0xa8e/0x14e0 [ 979.575456][ T50] worker_thread+0xa47/0xfb0 [ 979.580587][ T50] kthread+0x388/0x470 [ 979.585201][ T50] ret_from_fork+0x514/0xb70 [ 979.590346][ T50] ret_from_fork_asm+0x1a/0x30 [ 979.595664][ T50] [ 979.595664][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 979.602811][ T50] __synchronize_srcu+0xc9/0x2f0 [ 979.608288][ T50] elevator_switch+0x1e8/0x7b0 [ 979.613595][ T50] elevator_change+0x2fa/0x480 [ 979.618909][ T50] elevator_set_default+0x375/0x440 [ 979.624653][ T50] blk_register_queue+0x3f3/0x4e0 [ 979.630222][ T50] __add_disk+0x6cb/0xe30 [ 979.635099][ T50] add_disk_fwnode+0x100/0x3a0 [ 979.640402][ T50] nbd_dev_add+0x733/0xb60 [ 979.645363][ T50] nbd_init+0x15f/0x1e0 [ 979.650069][ T50] do_one_initcall+0x250/0x870 [ 979.655368][ T50] do_initcall_level+0x10a/0x1a0 [ 979.660839][ T50] do_initcalls+0x59/0xa0 [ 979.665699][ T50] kernel_init_freeable+0x29d/0x3e0 [ 979.671424][ T50] kernel_init+0x1d/0x1d0 [ 979.676305][ T50] ret_from_fork+0x514/0xb70 [ 979.681436][ T50] ret_from_fork_asm+0x1a/0x30 [ 979.686738][ T50] [ 979.686738][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 979.694589][ T50] __mutex_lock+0x19d/0x1550 [ 979.699719][ T50] elevator_change+0x1af/0x480 [ 979.705022][ T50] elevator_set_none+0xb5/0x140 [ 979.710419][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 979.716783][ T50] nbd_start_device+0x189/0xb30 [ 979.722184][ T50] nbd_genl_connect+0x1597/0x1c10 [ 979.727746][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 979.733833][ T50] genl_rcv_msg+0x614/0x7a0 [ 979.738875][ T50] netlink_rcv_skb+0x226/0x4a0 [ 979.744172][ T50] genl_rcv+0x28/0x40 [ 979.748686][ T50] netlink_unicast+0x7bb/0x940 [ 979.753998][ T50] netlink_sendmsg+0x813/0xb40 [ 979.759296][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 979.764860][ T50] ____sys_sendmsg+0x54e/0x850 [ 979.770161][ T50] ___sys_sendmsg+0x2a5/0x360 [ 979.775379][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 979.780867][ T50] do_syscall_64+0x174/0x580 [ 979.786003][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.792432][ T50] [ 979.792432][ T50] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 979.801076][ T50] blk_alloc_queue+0x544/0x690 [ 979.806385][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 979.812047][ T50] nbd_dev_add+0x494/0xb60 [ 979.817021][ T50] nbd_init+0x15f/0x1e0 [ 979.821731][ T50] do_one_initcall+0x250/0x870 [ 979.827042][ T50] do_initcall_level+0x10a/0x1a0 [ 979.832518][ T50] do_initcalls+0x59/0xa0 [ 979.837385][ T50] kernel_init_freeable+0x29d/0x3e0 [ 979.843121][ T50] kernel_init+0x1d/0x1d0 [ 979.847999][ T50] ret_from_fork+0x514/0xb70 [ 979.853141][ T50] ret_from_fork_asm+0x1a/0x30 [ 979.858471][ T50] [ 979.858471][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 979.865706][ T50] fs_reclaim_acquire+0x71/0x100 [ 979.871187][ T50] kmem_cache_alloc_noprof+0x64/0x5f0 [ 979.877115][ T50] __kernfs_iattrs+0xdd/0x380 [ 979.882353][ T50] kernfs_iop_setattr+0xe6/0x3f0 [ 979.887842][ T50] notify_change+0xbba/0xea0 [ 979.892969][ T50] do_truncate+0x1c2/0x250 [ 979.897932][ T50] path_openat+0x2fed/0x3830 [ 979.903071][ T50] do_file_open+0x23e/0x4a0 [ 979.908112][ T50] do_sys_openat2+0x115/0x200 [ 979.913324][ T50] __x64_sys_openat+0x138/0x170 [ 979.918724][ T50] do_syscall_64+0x174/0x580 [ 979.923887][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.930320][ T50] [ 979.930320][ T50] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 979.938862][ T50] __lock_acquire+0x1520/0x2cf0 [ 979.944262][ T50] lock_acquire+0x106/0x350 [ 979.949304][ T50] down_write+0x96/0x200 [ 979.954087][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 979.959829][ T50] kernfs_add_one+0x1d2/0x5e0 [ 979.965058][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 979.970808][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 979.976632][ T50] kobject_add_internal+0x622/0xcd0 [ 979.982432][ T50] kobject_add+0x163/0x240 [ 979.987407][ T50] device_add+0x3fa/0xb80 [ 979.992285][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 979.997766][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 980.003716][ T50] hci_event_packet+0x6cd/0xf10 [ 980.009201][ T50] hci_rx_work+0x3ee/0x1020 [ 980.014248][ T50] process_scheduled_works+0xa8e/0x14e0 [ 980.020334][ T50] worker_thread+0xa47/0xfb0 [ 980.025469][ T50] kthread+0x388/0x470 [ 980.030108][ T50] ret_from_fork+0x514/0xb70 [ 980.035260][ T50] ret_from_fork_asm+0x1a/0x30 [ 980.040572][ T50] [ 980.040572][ T50] other info that might help us debug this: [ 980.040572][ T50] [ 980.050804][ T50] Chain exists of: [ 980.050804][ T50] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 980.050804][ T50] [ 980.065247][ T50] Possible unsafe locking scenario: [ 980.065247][ T50] [ 980.072721][ T50] CPU0 CPU1 [ 980.078120][ T50] ---- ---- [ 980.083504][ T50] lock(&root->kernfs_rwsem); [ 980.088288][ T50] lock(cpuhp_state_mutex); [ 980.095414][ T50] lock(&root->kernfs_rwsem); [ 980.102722][ T50] lock(&root->kernfs_iattr_rwsem); [ 980.108051][ T50] [ 980.108051][ T50] *** DEADLOCK *** [ 980.108051][ T50] [ 980.116207][ T50] 4 locks held by kworker/u9:0/50: [ 980.121324][ T50] #0: ffff888055aea940 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 980.132319][ T50] #1: ffffc90000ba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 980.144352][ T50] #2: ffff88803a1f40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 980.154209][ T50] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 980.164073][ T50] [ 980.164073][ T50] stack backtrace: [ 980.170004][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 980.170029][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.170042][ T50] Workqueue: hci0 hci_rx_work [ 980.170067][ T50] Call Trace: [ 980.170074][ T50] [ 980.170082][ T50] dump_stack_lvl+0xe8/0x150 [ 980.170107][ T50] print_circular_bug+0x2e1/0x300 [ 980.170137][ T50] check_noncircular+0x12e/0x150 [ 980.170167][ T50] __lock_acquire+0x1520/0x2cf0 [ 980.170192][ T50] ? __lock_acquire+0x683/0x2cf0 [ 980.170219][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 980.170244][ T50] lock_acquire+0x106/0x350 [ 980.170265][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 980.170295][ T50] down_write+0x96/0x200 [ 980.170317][ T50] ? kernfs_link_sibling+0x4c7/0x5a0 [ 980.170341][ T50] ? __pfx_down_write+0x10/0x10 [ 980.170361][ T50] ? kernfs_root+0x1c/0x230 [ 980.170383][ T50] ? kernfs_root+0x1c/0x230 [ 980.170404][ T50] ? kernfs_root+0x1c/0x230 [ 980.170426][ T50] ? kernfs_root+0x1ea/0x230 [ 980.170449][ T50] kernfs_link_sibling+0x4c7/0x5a0 [ 980.170478][ T50] kernfs_add_one+0x1d2/0x5e0 [ 980.170504][ T50] kernfs_create_dir_ns+0x1a1/0x230 [ 980.170532][ T50] sysfs_create_dir_ns+0x12f/0x2a0 [ 980.170556][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 980.170579][ T50] ? do_raw_spin_unlock+0xf5/0x210 [ 980.170598][ T50] kobject_add_internal+0x622/0xcd0 [ 980.170627][ T50] kobject_add+0x163/0x240 [ 980.170652][ T50] ? __pfx_kobject_add+0x10/0x10 [ 980.170678][ T50] ? get_device_parent+0x366/0x3a0 [ 980.170705][ T50] device_add+0x3fa/0xb80 [ 980.170731][ T50] hci_conn_add_sysfs+0xd5/0x210 [ 980.170758][ T50] hci_conn_complete_evt+0x8a8/0x1350 [ 980.170781][ T50] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 980.170803][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 980.170824][ T50] ? skb_pull_data+0xf0/0x200 [ 980.170845][ T50] hci_event_packet+0x6cd/0xf10 [ 980.170867][ T50] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 980.170887][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 980.170910][ T50] ? audit_tree_freeing_mark+0x8d0/0xb20 [ 980.170930][ T50] ? hci_send_to_monitor+0xe2/0x590 [ 980.170947][ T50] hci_rx_work+0x3ee/0x1020 [ 980.170970][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 980.170988][ T50] process_scheduled_works+0xa8e/0x14e0 [ 980.171018][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 980.171038][ T50] ? assign_work+0x3cf/0x5d0 [ 980.171056][ T50] worker_thread+0xa47/0xfb0 [ 980.171086][ T50] kthread+0x388/0x470 [ 980.171108][ T50] ? __pfx_worker_thread+0x10/0x10 [ 980.171125][ T50] ? __pfx_kthread+0x10/0x10 [ 980.171147][ T50] ret_from_fork+0x514/0xb70 [ 980.171171][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 980.171193][ T50] ? __switch_to+0xc89/0x1420 [ 980.171213][ T50] ? __pfx_kthread+0x10/0x10 [ 980.171235][ T50] ret_from_fork_asm+0x1a/0x30 [ 980.171269][ T50] [ 980.310182][T30762] bridge_slave_1: entered allmulticast mode [ 980.634937][ T1485] block nbd4: Possible stuck request ffff8880273de000: control (read@0,1024B). Runtime 300 seconds SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 980.708953][ T1485] block nbd4: Possible stuck request ffff8880273de1c0: control (read@1024,1024B). Runtime 300 seconds [ 980.944933][T29996] block nbd4: Possible stuck request ffff8880273de380: control (read@2048,1024B). Runtime 300 seconds [ 980.959333][T29996] block nbd4: Possible stuck request ffff8880273de540: control (read@3072,1024B). Runtime 300 seconds [ 981.944808][T30762] bridge_slave_1: entered promiscuous mode [ 982.885332][ T5624] Bluetooth: hci0: command tx timeout [ 983.684088][ T164] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.030480][ T164] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.347592][ T164] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.397048][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 984.647410][ T164] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.875939][T29276] smc: removing ib device syz0 [ 985.979293][T29276] smbdirect: ib_dev[syz0] removed [ 987.854907][ T164] gretap0 (unregistering): left promiscuous mode [ 988.904207][ T164] bond3 (unregistering): (slave bridge2): Releasing backup interface