last executing test programs: 3.663745682s ago: executing program 3 (id=7609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000014010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) getsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000280)) (async) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000180)) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x25, &(0x7f0000000000), 0x20000010) (async) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5], 0x80}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3.554435604s ago: executing program 3 (id=7612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1482, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@fwd={0x7}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0xe, 0x6}, {0x4, 0x6d4}, {0x5, 0x9}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x6, [{0x3, 0x4, 0x7fffffff}, {0x8, 0x6, 0x2}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x0, 0x2e, 0x5f, 0x4f, 0x61]}}, &(0x7f0000001180)=""/4096, 0x80, 0x1000, 0x1, 0xfffffffc}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0xffffffffffffffe0}], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x32, &(0x7f0000000780)=""/50, 0x41000, 0x59, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x3, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x0, 0x8dba, 0x0, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x8, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xb, 0x5, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x24, &(0x7f0000000240)=""/36, 0x40f00, 0x40, '\x00', r2, @fallback=0x35, r5, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x3, 0x3ff}, 0x10, r6, r7, 0x4, &(0x7f0000000a00)=[0xffffffffffffffff, r8, r0, r9, r10, r11], &(0x7f0000000a40)=[{0x2, 0x3, 0xb, 0x3}, {0x3, 0x1, 0xd, 0xe}, {0x1, 0x2, 0x9}, {0x3, 0x2, 0xa, 0x1}], 0x10, 0x80000001}, 0x94) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r12) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5008000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000100008008000500", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.210285189s ago: executing program 3 (id=7619): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000200)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf0}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtclass={0x78, 0x28, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0x2, 0xffe0}, {0x1, 0xf}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0xf2}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x5}}, @TCA_RATE={0x6, 0x5, {0xaa, 0x4}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0xfd}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x78}}, 0x80) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000002c0)={0x0, 0x40, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x24004) 3.087799482s ago: executing program 0 (id=7621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000001302200000000042e5c191389199b71025ccd8fe8787103c2cd7109033e459b2394f92e5b8b145"], 0x0, 0x26}, 0x28) sendmmsg$inet(r5, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xf7fffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x8}, {0xd, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2.818574477s ago: executing program 0 (id=7623): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c000140000000000000000808000540"], 0xf0}}, 0x24000080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0xff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4040}, {r2, 0x26bd}, {r6, 0x2}, {r0, 0x104}, {r0, 0x4000}], 0x5, 0x32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000020100800c00"], 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r11, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa5, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) 1.139010722s ago: executing program 1 (id=7630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x28b}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f00000069c0)=[{{&(0x7f0000000000)={0xa, 0x108, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x88}, 0x1c, 0x0, 0x0, &(0x7f0000019580)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xc}}}}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @loopback}}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 1.138623105s ago: executing program 3 (id=7631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000800", @ANYRES32, @ANYBLOB="3bc030738569cca660a897ba54f64bf66c9a565e1415de081d6eb6064c9e4cc880e6a5c8a0eba30accf42792727cd15af9b62556148328cdc143564dbcd8441c2b664a060eab8f76d59ca9d45b94ea60d3400894ce784990dca30ec64f485d9340ea4758c2f4a2c3b7152966ac533ae5694d"], 0x1c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ff0001c40ed4b3ac258b664a951982c38759cc8a68f03d310112126663c2b6ae24999a457cc35d2a2695372e97d1724273cc99bfb0444409881114dcae04c8d2e2f837efa9f60dc9aa576a11900410580e70f57c6c1c7e25c7"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) 1.137858021s ago: executing program 4 (id=7632): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r6, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 1.097521563s ago: executing program 0 (id=7633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0xfffffffffffffffe, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private2}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getnexthop={0x1c, 0x6a, 0x20, 0x71bd27, 0x25dfdbff, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000005c0)={0x0, 0x200, '\x00', [@generic={0x8, 0x1000, "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"}]}, 0x1010) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0xf3, 0x62a3, 0x800e, 0xffff3646, 0xffffffff, 0x1, 0x1, 0x9, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x8, 0x5, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 999.808256ms ago: executing program 4 (id=7635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0xd, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r5, 0xa07, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008840) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 998.744205ms ago: executing program 0 (id=7636): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r0, 0x4) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) 990.107177ms ago: executing program 1 (id=7637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 939.539781ms ago: executing program 2 (id=7638): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$netlink(0x10, 0x3, 0x7) 875.489523ms ago: executing program 0 (id=7639): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x25dfdbfd, {0x28}}, 0x14}}, 0x0) 821.212847ms ago: executing program 1 (id=7640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8000000000000040000000000000000022c09f43ca9274f064670fac63667b76c4d61870d6f8f734fa5881a4"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'wg1\x00', @multicast}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x1, &(0x7f0000000100)="81", 0x9, 0xa, 0x14c0, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, 0x0, 0x40000000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB="deee"], 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 803.121242ms ago: executing program 0 (id=7641): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res(0x0, 0xfa2b9d52, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01004244ca73fcdbdf2502000047da0c9e09000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r4, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @f={0x2, 0x3, 0x5, 0x2, 0x6, 0x3, 0x2, {0x2, 0xb, "2365d27396c9964b48d550"}, 0x5, 0x7e, 0x5}}, 0x1c) (async) write$nci(r4, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @f={0x2, 0x3, 0x5, 0x2, 0x6, 0x3, 0x2, {0x2, 0xb, "2365d27396c9964b48d550"}, 0x5, 0x7e, 0x5}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x44040) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYRES64=r4], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) ioctl$sock_netdev_private(r8, 0x89f7, &(0x7f0000000240)="38b6c95a1a40df2dd606c29b9f041bd56e07c73c5236561e0e18effa80196a2b4c78159ebb7707ac54b1907f5205e502bcd6f555dcc95f639c17a78508a672d61951888c01c70503ba539bda7761f099df2e39b3079365604a8dd7ce27d9d162b84140a26316592e559b118bc410025f90013deaf1d3bf5c5d67c343f2a44213896f64fe42522393c985b37877c8d1f1577b98e649273b2abf7ba61e") 695.291144ms ago: executing program 2 (id=7642): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000700000000000001005a8ba300000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r2, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) read(r1, &(0x7f0000000100)=""/178, 0xb2) 694.139664ms ago: executing program 4 (id=7643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r3 = socket(0x11, 0x1, 0x7) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000001c0)) (async) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYRES32], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000600000008000000020000000080000066915849b7030e91f92065a509970f6a6cb52319538faf92d00323896ee996455662e506970f1244a8c6b6f6ce32b7cf4f50f88e46e0a59593847d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000600000008000000020000000080000066915849b7030e91f92065a509970f6a6cb52319538faf92d00323896ee996455662e506970f1244a8c6b6f6ce32b7cf4f50f88e46e0a59593847d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001006d65746100000000140002800800024000000032080001"], 0x7c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000500), &(0x7f0000000280)=@udp=r1}, 0x20) 597.478206ms ago: executing program 2 (id=7644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x80c0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xfffffc00, @rand_addr=' \x01\x00', 0x8001}}, 0x3, 0x8001}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0x58, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x3, @loopback}, @in6={0xa, 0x4e22, 0x0, @private1, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000300)=0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x1404, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe4, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x63cf1297}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000c045}, 0xc840) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x51) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r9, 0x605054833770bcd1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x20c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2066}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x29}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x29}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x53}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x9805}, 0x20000850) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4c8e7751}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'geneve1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@setlink={0x38, 0x13, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x200}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6f3bd}, @IFLA_LINKMODE={0x5, 0x11, 0xa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x44811) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000ec0), 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x114, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x44, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "22295767628cefaf45b4130ef8807c7e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cec8c5338fdeea3952c9e91b9d031899dc74674b98b1533db0daf1da5a72f824"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e308f53da7603e4b0acc134f0a01a9c3191c2992d56e8070a1415d7fae8cc7ca"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ec10b76b2d166d40ec811c9288e42b61e3afe42fa74d0bdfb0a68a44d533f772"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "23f7cc3d3d03bd1e13c4811828d75a60"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "86b0f7743f4521ccf66f3c578cf74d65"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x114}, 0x1, 0x0, 0x0, 0xc0900}, 0x880) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001180)={r4, 0x48, &(0x7f0000001100)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0xbdaf, @local, 0x2}, @in6={0xa, 0x4e21, 0x93, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000011c0)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xb4, r11, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x79}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x898e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x60000, 0x7ff, 0x0, 0x2, 0x7, 0xce5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001480)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_DATA={0x38, 0x1f, "ea946f9654f942f5ca97d42baa6f588a1700e8c75cd0c43682e3aca12e45754575c8c1fa3d75d64936448ad369b92979916667ac"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r14, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004001) 566.018481ms ago: executing program 1 (id=7645): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x9) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='\x00', 0x404103, &(0x7f0000000040)={@align=0x27, {0x7, 0x0, 0x2}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffc01}) write(r9, &(0x7f00000005c0)="557cbe96176459eb14dc9f5dad9efa2cebb8acb43f06af7d249f7af4c16fc4780a2d9db0d2a437eecfecc470579e12e675c6c72ea266dc8e120b0923332708d32517b18fa091285ad5b60818785087032b83f837918a7eae5db4d455eb7319b9f834b77704e612874342a9a9731a54bb6c51f2d7af6f9e98ae1a064f50cc39cad571b334830299b81308ec0e8e62eb3a22162bea2e14bb99492ef026b4a4808988f280fbf678c817dfa4662ca08aadd871a5e0febcd16f74a63e2dc38d3ba2daf5d5485e76", 0xc5) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r10, 0x0, 0xe, 0x0, &(0x7f000000eb40)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x44040) close(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e22, 0xfffd, 0x4e24, 0x1f, 0x2, 0x20, 0x0, 0x21, 0x0, r13}, {0x9, 0x5, 0x4, 0x400, 0x9102, 0x7, 0x4, 0x8}, {0xfffffffffffffffd, 0xb98, 0xffffffffffff4d14, 0x6d}, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3504, 0x4, 0x1, 0x6, 0x8, 0x80, 0x1}}, 0xe8) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) 402.932522ms ago: executing program 4 (id=7646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b00)={{r0, &(0x7f0000000240)='wlan0\x00', 0x20000, &(0x7f0000000280)={@align=0x473c, {0xffff, 0x7, 0x7, 0x8}}, 0xffff, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x7c}, 0x6, &(0x7f0000000a40)=[{0x3, 0xb, &(0x7f0000000500)='\x03\x03\x03\x03\x03\x03', &(0x7f0000000540)="43586d6408147619ebc095a114b4e56aaf2fd5c48447cfb0dcef389fd54c2ca88c5db9ba408dd49df2100bff87df4c30e85d86ea43b3e8088e2dee0dedb93890", 0x40, 0x20}, {0x2, 0xfffffbff, &(0x7f0000000580)='wlan0\x00', &(0x7f00000005c0)="cb4494403578b5df2e52511be0a3456e60c8a4ccf194471490dce1d51f9e3c4ca768742a315a14d1511648bc36714593d4d55a7a1013a419538bce831c6ed9a09a4b7968e62bc882cec1c3e22a2029ccad160d925c3c2f5e8a09db714e3035a6958706ccb8e8ff3984cdccde79eb73ba8503383b67adaf09a01a72acd4dede2d93c0b300fa0fc738c17471e779adda30998e294b13ae15517c7595e16b16c2531b9821b7e01472b674b91dac7afa992c84637983438e986828fba99ca44ed7e6a487", 0xc2, 0x50}, {0x3, 0x2, &(0x7f0000000700)='nl80211\x00', &(0x7f0000000740)="a35d095d69d1d717eabbc679d694c41cc544a3bb6d9268de7c6a12fcb5b22ef522bc1e9836e8f5f334e7ce528ba48c20535ff28b95ec4f7bdfe32d258c8cb8cc1a86587dbce112bc309789977a298b1f83e7bcd96d82cf232b4a19c48d917089a2682872ae300a85d8178cabea8cde9cc59756132097e5f40605296660bd71e48ce01162bc6598de38de01199bc1caac020233996603b509e1f922c37163af4e8ab1442f122e05a29f22d475738d67cc30872b8616702dd472db363fc848ba0a9f871faaeff5ae", 0xc7, 0x18}, {0x1, 0x8, &(0x7f0000000840)='.\'\x00', &(0x7f0000000880)="65733955cdbd111b66b978d4d1a0ffab48fd55c90129fd40f96664636a463956a8f4cdc795dcdf3c9d05cff68cf3c7111fbb6daf580ea629007d", 0x3a, 0x20}, {0x2, 0x0, &(0x7f00000008c0)='(-\x00', &(0x7f0000000900)="5569108bfec7d7c195dcd9999e6db2612aabdc2586df5d0911fa1ab682cd4b63321a4d72f5aa92a512b8586fa95a4cf3c5612e6fbd6995dc16948998454f772e201ed13e4d354173e900d4a94b97c728613ed6212825f399466d", 0x5a, 0x32}, {0x3, 0x0, &(0x7f0000000980)='syz0\x00', &(0x7f0000000c40)="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", 0x1000, 0x3a}]}) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000001cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, 0x5, 0x6, 0xd01, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="11002abd7000030000000f00000008000300", @ANYRES32=r10, @ANYBLOB="08002bea7e0000000080000000000500769c84dc892db2ed7068b0f867202b509a09cbc484bc767dc4ee900734f6a316d9efc5a18e41d797248f53556b360d86685cec079602324c"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00'/20, @ANYRES32=r10, @ANYBLOB="0000000004000100"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000100", @ANYRES16=r12, @ANYBLOB="05002abd7000200000004400000008000300", @ANYRES32=r13, @ANYBLOB="0a001800030303030303000008006b0007000000"], 0x30}}, 0x4850) (async) r14 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r14, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "1121f0b0a8d3be6c1e60a77bd555fe10"}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="8d83d04530b30c0c3503105a1704061d488ae2ee10c0fc"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="dfdd6b35677389611f"}, @NL80211_ATTR_BSSID={0xa}]}, 0x68}}, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x30) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000001d00)) 331.47328ms ago: executing program 2 (id=7647): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 292.931178ms ago: executing program 1 (id=7648): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) 227.654652ms ago: executing program 3 (id=7649): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x891}, 0x400c804) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x11}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r4, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r5, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x8f7b80029b167919, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f00000003c0)={r8, 0x1, 0x4, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) 227.324571ms ago: executing program 2 (id=7650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003f00), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28861}, 0xc800) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80018428}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x600, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20008081) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x4000005) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) 218.971584ms ago: executing program 4 (id=7651): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 127.873505ms ago: executing program 1 (id=7652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000080)=0x80000000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f00000043c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c80)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f80)="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", 0xfdef}], 0x1}, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x84, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x6, 0xa}}, [@etimer_thresh={0x8, 0xc, 0xa4}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1c0}, 0x20811) 67.261005ms ago: executing program 3 (id=7653): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f0000000040), 0x4) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, 0x0, 0x0) 37.393822ms ago: executing program 4 (id=7654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010000001700000000000a000000000000000000000005001e"], 0x24}}, 0x0) 0s ago: executing program 2 (id=7655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="36ee260ee8ac875b74fb060b009ab6c439080002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f00000009c0)="d7f4394514f10bfeaa6322fb59b94c49399e673fe1d61ce79fd99092df481548db5f07faf27738af595158a24ba10838630d6f10cd2aa8eef3168eaa887e625d7932a0c44342da6c4f2e", &(0x7f0000000b00)=""/186}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000003c0), &(0x7f0000000600)=""/212}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, 0x2}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="78000000030101020000000000000000000000041400198008000200bb00000008000200020000000c00108008000340000000020800154000000004d56bd948433c0001800c00028005000100060000002c000180140003000000000000000000000000000000000014000400fe80000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040850) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x14, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@private2, @in=@local, 0x4e23, 0x0, 0x4e23, 0x8, 0xa, 0x80, 0x80, 0x2b, r3, r10}, {0x4, 0x6, 0xe3ae, 0x18000000000, 0x7, 0x56862d3e, 0x4, 0xa9c}, {0x100, 0x4, 0x4271, 0x3}, 0x3, 0x0, 0x2, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d6, 0x33}, 0xa, @in6=@mcast2, 0x1, 0x0, 0x1, 0x3, 0x2, 0x9, 0x40}}, 0xe8) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): lmulticast mode [ 612.234395][T27497] netlink: 'syz.0.5946': attribute type 25 has an invalid length. [ 612.454983][T27508] netlink: 'syz.0.5949': attribute type 1 has an invalid length. [ 612.531788][T27511] chnl_net:caif_netlink_parms(): no params data found [ 612.549217][T27516] netlink: 'syz.3.5951': attribute type 1 has an invalid length. [ 612.584332][T27508] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 612.595608][T27508] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 612.651950][T27515] bond11: (slave bridge6): Enslaving as an active interface with a down link [ 612.735184][T27348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 612.758052][T27348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 612.769827][T27348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 612.802527][T27531] __nla_validate_parse: 25 callbacks suppressed [ 612.802544][T27531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5956'. [ 612.825388][T27348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 612.841648][T27508] macvlan3: entered promiscuous mode [ 612.847126][T27508] macvlan3: entered allmulticast mode [ 612.853010][T27508] bond11: entered promiscuous mode [ 612.858915][T27508] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 612.866871][T27508] bond11: left promiscuous mode [ 612.897848][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5956'. [ 612.938694][T27536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.009233][T27533] lo: Caught tx_queue_len zero misconfig [ 613.097879][T27532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.199630][T27348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.279282][T27348] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.309940][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.317088][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.352740][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.359918][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.707924][T27588] ip6t_rpfilter: unknown options [ 613.781095][T27592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5970'. [ 613.857830][T27348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.927302][T23136] Bluetooth: hci2: command tx timeout [ 614.046053][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5973'. [ 614.071033][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 614.090163][T27614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5975'. [ 614.107226][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5975'. [ 614.276579][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'. [ 614.301488][T27629] erspan2: entered allmulticast mode [ 614.336126][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5980'. [ 614.454717][T27641] netlink: 'syz.3.5981': attribute type 1 has an invalid length. [ 614.477562][T27348] veth0_vlan: entered promiscuous mode [ 614.512444][T27348] veth1_vlan: entered promiscuous mode [ 614.608858][T27348] veth0_macvtap: entered promiscuous mode [ 614.659402][T27348] veth1_macvtap: entered promiscuous mode [ 614.729368][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5987'. [ 614.747634][T27348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.774906][T27654] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 614.908732][T27668] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.936564][T27348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.985721][ T297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.022644][ T297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.070728][ T297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.085916][ T297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.215396][T27681] bond11 (unregistering): Released all slaves [ 615.243186][T27685] 8021q: VLANs not supported on ip6_vti0 [ 615.338777][T27674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.351144][T23053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.367107][T23053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.580037][T10959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.607407][T10959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.647965][T27698] syzkaller0: entered promiscuous mode [ 615.656535][T27698] syzkaller0: entered allmulticast mode [ 616.006181][ T5827] Bluetooth: hci2: command tx timeout [ 616.219766][T23136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.242859][T23136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.260733][T23136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 616.276756][T23136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.287043][T23136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.955677][T27749] sctp: [Deprecated]: syz.4.6008 (pid 27749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.955677][T27749] Use struct sctp_sack_info instead [ 617.621624][T10959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.692282][T27763] netlink: 'syz.4.6012': attribute type 1 has an invalid length. [ 617.756790][T10959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.895426][T27780] __nla_validate_parse: 5 callbacks suppressed [ 617.895443][T27780] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6012'. [ 617.985839][T10959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.014166][T27785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 618.031275][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 618.043596][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 618.082171][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'. [ 618.092044][T23136] Bluetooth: hci2: command tx timeout [ 618.097685][T27788] netlink: 'syz.2.6016': attribute type 15 has an invalid length. [ 618.143643][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6019'. [ 618.158359][T10959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.213471][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 618.222355][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'. [ 618.269152][T27788] netlink: 'syz.2.6016': attribute type 15 has an invalid length. [ 618.323472][T23136] Bluetooth: hci5: command tx timeout [ 618.324860][T27801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6020'. [ 618.407070][T27806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6021'. [ 618.419342][T27735] chnl_net:caif_netlink_parms(): no params data found [ 618.571116][T27822] delete_channel: no stack [ 619.055651][T10959] bond5 (unregistering): (slave gretap1): Releasing active interface [ 619.088351][T10959] bond1 (unregistering): (slave geneve2): Releasing active interface [ 619.356199][T10959] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 619.373961][T10959] bond0 (unregistering): Released all slaves [ 619.387820][T10959] bond1 (unregistering): Released all slaves [ 619.400235][T10959] bond2 (unregistering): Released all slaves [ 619.414832][T10959] bond3 (unregistering): Released all slaves [ 619.427237][T10959] bond4 (unregistering): Released all slaves [ 619.440624][T10959] bond5 (unregistering): Released all slaves [ 619.453004][T10959] bond6 (unregistering): Released all slaves [ 619.466795][T10959] bond7 (unregistering): Released all slaves [ 619.489027][T10959] bond8 (unregistering): Released all slaves [ 619.503636][T27735] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.510880][T27735] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.518421][T27735] bridge_slave_0: entered allmulticast mode [ 619.525885][T27735] bridge_slave_0: entered promiscuous mode [ 619.586902][T27843] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 619.639456][T27735] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.673789][T27735] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.711422][T27735] bridge_slave_1: entered allmulticast mode [ 619.721545][T27735] bridge_slave_1: entered promiscuous mode [ 619.752284][T10959] tipc: Disabling bearer [ 619.765018][T10959] tipc: Left network mode [ 619.849870][T27871] sit3: entered promiscuous mode [ 619.866982][T27871] sit3: entered allmulticast mode [ 619.898067][T27735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.930724][T27735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.060420][T27735] team0: Port device team_slave_0 added [ 620.099882][T27735] team0: Port device team_slave_1 added [ 620.242789][T27735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.256657][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.334710][T27735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.376206][T27735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.403732][T23136] Bluetooth: hci5: command tx timeout [ 620.417630][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.472993][T27735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.500567][T27918] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 620.671521][T27735] hsr_slave_0: entered promiscuous mode [ 620.680156][T27735] hsr_slave_1: entered promiscuous mode [ 620.686911][T27735] debugfs: 'hsr0' already exists in 'hsr' [ 620.693101][T27735] Cannot create hsr debugfs directory [ 620.922466][T10959] hsr_slave_0: left promiscuous mode [ 620.988569][T10959] pim6reg (unregistering): left allmulticast mode [ 621.030714][T10959] team0 (unregistering): Port device batadv1 removed [ 621.250101][T10959] team0 (unregistering): Port device dummy0 removed [ 621.753702][T27976] bond_slave_0: entered promiscuous mode [ 621.815365][T27983] netlink: 'syz.4.6059': attribute type 17 has an invalid length. [ 621.878985][T27983] erspan0: entered promiscuous mode [ 621.886119][T10959] IPVS: stop unused estimator thread 0... [ 621.902997][T27983] gretap0: entered promiscuous mode [ 622.114693][T27995] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 622.150163][ T5888] IPVS: starting estimator thread 0... [ 622.168665][T27735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 622.210958][T27735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 622.263355][T28000] IPVS: using max 29 ests per chain, 69600 per kthread [ 622.270337][T27735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 622.288521][T27735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.423133][T28005] tipc: Resetting bearer [ 622.494242][T23136] Bluetooth: hci5: command tx timeout [ 622.515382][T28027] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 622.529743][T28028] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 622.555193][T28027] openvswitch: netlink: Message has 252 unknown bytes. [ 622.560924][T27735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.572517][T28029] xt_CONNSECMARK: invalid mode: 0 [ 622.586638][T27735] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.599611][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.606795][T10959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.631254][T10959] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.638448][T10959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.805404][T28039] syzkaller0: entered promiscuous mode [ 622.810925][T28039] syzkaller0: entered allmulticast mode [ 623.053408][T27735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.125762][T27735] veth0_vlan: entered promiscuous mode [ 623.128917][T28005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.142467][T28005] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 623.148391][T27735] veth1_vlan: entered promiscuous mode [ 623.180869][T28005] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.198533][T28005] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 623.225382][T27735] veth0_macvtap: entered promiscuous mode [ 623.235431][T28005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.241443][T28005] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 623.242031][T27735] veth1_macvtap: entered promiscuous mode [ 623.365616][T27735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.459305][T28005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.474138][T27735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.493409][T28005] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 623.529269][ T9093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.568947][ T9093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.624609][ T9093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.649876][ T9093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.703154][T28005] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 623.721792][T28005] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 623.956731][T23053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.016036][T23053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.025181][T28093] netlink: 'syz.2.6078': attribute type 16 has an invalid length. [ 624.033132][T28093] netlink: 'syz.2.6078': attribute type 3 has an invalid length. [ 624.046569][T28093] __nla_validate_parse: 70 callbacks suppressed [ 624.046585][T28093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6078'. [ 624.157598][T23053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.184742][T23053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.412100][T28115] netlink: 'syz.1.6002': attribute type 5 has an invalid length. [ 624.628276][T28133] netlink: 'syz.3.6085': attribute type 178 has an invalid length. [ 624.733050][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.744505][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.753883][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.764791][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.777277][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.852909][T28143] netlink: 'syz.4.6087': attribute type 39 has an invalid length. [ 624.945797][T28146] bond1: Unable to set up delay as MII monitoring is disabled [ 624.962836][T28146] bond1 (unregistering): Released all slaves [ 625.249524][ T297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.273102][ T297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.440990][T28184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6095'. [ 625.460388][ T297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.488433][ T297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.567998][ T297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.580013][ T297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.652606][T28137] chnl_net:caif_netlink_parms(): no params data found [ 625.729949][ T297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.760489][ T297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.998837][T28212] netlink: 'syz.4.6101': attribute type 2 has an invalid length. [ 626.034586][T28212] netlink: 'syz.4.6101': attribute type 8 has an invalid length. [ 626.073491][T28137] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.080699][T28212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6101'. [ 626.097343][T28137] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.106498][T28137] bridge_slave_0: entered allmulticast mode [ 626.115197][T28137] bridge_slave_0: entered promiscuous mode [ 626.149217][T28137] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.177044][T28137] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.195355][T28137] bridge_slave_1: entered allmulticast mode [ 626.215530][T28137] bridge_slave_1: entered promiscuous mode [ 626.358149][T28232] netlink: 'syz.3.6104': attribute type 24 has an invalid length. [ 626.431400][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6105'. [ 626.490063][T28241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 626.644192][ T297] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 626.865489][T28262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.877178][T28262] netlink: 'syz.1.6109': attribute type 4 has an invalid length. [ 626.885211][ T5827] Bluetooth: hci0: command tx timeout [ 626.887163][T28262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6109'. [ 627.091080][ T297] bond0 (unregistering): Released all slaves [ 627.104554][ T297] bond1 (unregistering): Released all slaves [ 627.128249][ T297] bond2 (unregistering): Released all slaves [ 627.146411][ T297] bond3 (unregistering): (slave bond4): Releasing backup interface [ 627.155256][ T297] bond3 (unregistering): Released all slaves [ 627.170731][ T297] bond4 (unregistering): Released all slaves [ 627.184053][ T297] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 627.195263][ T297] bond5 (unregistering): Released all slaves [ 627.211595][ T297] bond6 (unregistering): Released all slaves [ 627.227652][ T297] bond7 (unregistering): Released all slaves [ 627.239780][ T297] bond8 (unregistering): Released all slaves [ 627.252061][ T297] bond9 (unregistering): Released all slaves [ 627.269966][ T297] bond10 (unregistering): Released all slaves [ 627.286788][ T297] bond11 (unregistering): Released all slaves [ 627.313086][T28137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.337963][T28137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.397583][T28137] team0: Port device team_slave_0 added [ 627.415807][T28137] team0: Port device team_slave_1 added [ 627.516237][ T297] : left promiscuous mode [ 627.561849][T28137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.576409][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.652610][T28137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.703482][T28137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.710455][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.770330][T28137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.782719][ T297] : left promiscuous mode [ 627.850585][T28287] openvswitch: netlink: Key type 30 is not supported [ 627.947533][T28137] hsr_slave_0: entered promiscuous mode [ 627.968698][T28137] hsr_slave_1: entered promiscuous mode [ 627.984253][T28293] Cannot find add_set index 2 as target [ 627.992859][T28137] debugfs: 'hsr0' already exists in 'hsr' [ 628.013034][T28137] Cannot create hsr debugfs directory [ 628.039512][T28293] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 628.051711][T28293] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 628.074814][T28293] openvswitch: netlink: Key type 30 is not supported [ 628.217127][T28295] syzkaller0: entered promiscuous mode [ 628.222733][T28295] syzkaller0: entered allmulticast mode [ 628.281989][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6119'. [ 628.965940][ T5827] Bluetooth: hci0: command tx timeout [ 629.902237][T28331] netlink: 'syz.4.6124': attribute type 10 has an invalid length. [ 629.977569][T28331] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.001211][T28331] bridge_slave_1: left allmulticast mode [ 630.022224][T28331] bridge_slave_1: left promiscuous mode [ 630.039738][T28331] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.061147][T28331] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 630.281759][T28362] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 630.443677][T28371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6131'. [ 630.802788][T28379] pim6reg: entered allmulticast mode [ 630.889263][T28379] pim6reg: left allmulticast mode [ 630.958268][T28383] netlink: 'syz.4.6135': attribute type 10 has an invalid length. [ 631.039658][ T297] veth1_vlan: left allmulticast mode [ 631.045104][ T5827] Bluetooth: hci0: command tx timeout [ 631.069020][ T297] pimreg (unregistering): left allmulticast mode [ 631.591646][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6140'. [ 631.722854][T28137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.814363][T28137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.905994][T28425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 631.955975][T28137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.024928][T28430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6140'. [ 632.061171][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6146'. [ 632.477736][T28137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.715937][ T297] IPVS: stop unused estimator thread 0... [ 632.792230][T28469] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6148'. [ 632.920698][T28472] macvtap1: entered promiscuous mode [ 632.972206][T28472] macvtap1: entered allmulticast mode [ 633.001550][T28472] veth1_vlan: entered allmulticast mode [ 633.097181][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6154'. [ 633.114891][T28480] macvtap2: entered promiscuous mode [ 633.125368][T28480] macvtap2: entered allmulticast mode [ 633.126064][ T5827] Bluetooth: hci0: command tx timeout [ 633.151641][T28498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6153'. [ 633.245618][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6154'. [ 633.259380][T28504] netlink: 'syz.3.6155': attribute type 3 has an invalid length. [ 633.305866][T28137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.360239][T28137] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.399096][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.406300][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.427145][T28513] netlink: 'syz.4.6158': attribute type 1 has an invalid length. [ 633.445220][T28513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6158'. [ 633.491504][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.498723][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.724450][T28536] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6162'. [ 633.733834][T28536] openvswitch: netlink: Flow key attr not present in new flow. [ 633.980396][T28137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.091241][T28137] veth0_vlan: entered promiscuous mode [ 634.124720][T28137] veth1_vlan: entered promiscuous mode [ 634.212033][T28137] veth0_macvtap: entered promiscuous mode [ 634.235428][T28137] veth1_macvtap: entered promiscuous mode [ 634.293231][T28137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.343666][T28137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.385351][T28579] netlink: 'syz.0.6174': attribute type 4 has an invalid length. [ 634.407215][ T297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.424657][T28582] Bluetooth: MGMT ver 1.23 [ 634.446532][T28579] .`: renamed from bond0 [ 634.499254][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.509224][T28579] sctp: [Deprecated]: syz.0.6174 (pid 28579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.509224][T28579] Use struct sctp_sack_info instead [ 634.526978][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.544286][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.826631][T28597] syzkaller1: entered promiscuous mode [ 634.832140][T28597] syzkaller1: entered allmulticast mode [ 634.852885][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.884282][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.957987][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.981719][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.222336][T28626] netlink: 'syz.4.6186': attribute type 33 has an invalid length. [ 635.411262][T28636] syzkaller0: entered promiscuous mode [ 635.422880][T28636] syzkaller0: entered allmulticast mode [ 635.602639][T23136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.613015][T23136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.621417][T23136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.629294][T23136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.639839][T23136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.810784][T28639] bond1: invalid ARP target 0.0.0.0 specified for addition [ 635.829227][T28639] bond1: option arp_ip_target: invalid value (0) [ 635.844685][T28639] bond1 (unregistering): Released all slaves [ 636.059506][T28667] __nla_validate_parse: 5 callbacks suppressed [ 636.059522][T28667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6198'. [ 636.110424][T28669] Bluetooth: MGMT ver 1.23 [ 636.148192][T28655] syzkaller0: entered promiscuous mode [ 636.153824][T28655] syzkaller0: entered allmulticast mode [ 636.172994][ T297] syzkaller0: tun_net_xmit 48 [ 636.202831][T28673] macvtap1: entered allmulticast mode [ 636.208405][T28673] veth0_macvtap: entered allmulticast mode [ 636.425213][T28681] bridge2: entered promiscuous mode [ 636.430457][T28681] bridge2: entered allmulticast mode [ 636.504504][T28691] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6205'. [ 636.787586][T28713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6207'. [ 636.849790][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6207'. [ 636.858772][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6207'. [ 637.695898][T23136] Bluetooth: hci3: command tx timeout [ 637.976908][T28694] netlink: 'syz.4.6206': attribute type 4 has an invalid length. [ 638.187690][T28737] tipc: Enabling of bearer rejected, failed to enable media [ 638.429100][T28643] chnl_net:caif_netlink_parms(): no params data found [ 638.541528][T28765] netlink: 'syz.4.6224': attribute type 11 has an invalid length. [ 638.744027][T28781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6223'. [ 638.752924][T28781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6223'. [ 638.843804][T28785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6226'. [ 638.852978][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6226'. [ 639.763722][T23136] Bluetooth: hci3: command tx timeout [ 641.602402][T28773] s5: renamed from vlan1 (while UP) [ 641.637473][T28785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6226'. [ 641.646713][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6226'. [ 641.697408][ T9084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.715118][ T9084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.763214][T28643] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.773003][T28643] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.780455][T28643] bridge_slave_0: entered allmulticast mode [ 641.788148][T28643] bridge_slave_0: entered promiscuous mode [ 641.795545][ T9084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.807314][ T9084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.843434][T23136] Bluetooth: hci3: command tx timeout [ 641.879647][T28643] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.889783][T28643] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.897859][T28643] bridge_slave_1: entered allmulticast mode [ 641.906726][T28643] bridge_slave_1: entered promiscuous mode [ 642.049985][T28798] syzkaller0: entered promiscuous mode [ 642.053320][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6235'. [ 642.063558][T28798] syzkaller0: entered allmulticast mode [ 642.094107][T28815] openvswitch: netlink: EtherType 0 is less than min 600 [ 642.107511][T28811] tipc: Enabled bearer , priority 0 [ 642.156609][T23056] veth5: left allmulticast mode [ 642.161498][T23056] veth5: left promiscuous mode [ 642.171745][T23056] bridge8: port 1(veth5) entered disabled state [ 642.602662][T23056] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 642.612453][T23056] bridge3 (unregistering): left promiscuous mode [ 642.916650][T23056] bond6 (unregistering): (slave bridge10): Releasing backup interface [ 642.924925][T23056] bridge10 (unregistering): left promiscuous mode [ 643.257087][T23056] bond0 (unregistering): Released all slaves [ 643.267416][T23056] bond1 (unregistering): Released all slaves [ 643.280048][T23056] bond2 (unregistering): Released all slaves [ 643.292987][T23056] bond3 (unregistering): Released all slaves [ 643.307210][T23056] bond4 (unregistering): (slave bond5): Releasing backup interface [ 643.318887][T23056] bond4 (unregistering): Released all slaves [ 643.331070][T23056] bond5 (unregistering): Released all slaves [ 643.347132][T23056] bond6 (unregistering): Released all slaves [ 643.360958][T23056] bond7 (unregistering): Released all slaves [ 643.377290][T28643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.460667][T28814] syzkaller0: entered promiscuous mode [ 643.466250][T28814] syzkaller0: entered allmulticast mode [ 643.472376][T28814] tipc: Resetting bearer [ 643.523205][T28820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6237'. [ 643.645230][ T297] tipc: Resetting bearer [ 643.655537][T28643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.678948][T23056] tipc: Left network mode [ 643.709925][T28814] tipc: Resetting bearer [ 643.927124][T23136] Bluetooth: hci3: command tx timeout [ 644.298667][T28871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6244'. [ 645.200185][T28814] tipc: Disabling bearer [ 645.220737][T28643] team0: Port device team_slave_0 added [ 645.262631][T28643] team0: Port device team_slave_1 added [ 645.424116][T28643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.433323][T28643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.531155][T28643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.544747][T28643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.552615][T28643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.562812][T28891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6250'. [ 645.583067][T28643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.847102][T28643] hsr_slave_0: entered promiscuous mode [ 645.867764][T28643] hsr_slave_1: entered promiscuous mode [ 645.884113][T28643] debugfs: 'hsr0' already exists in 'hsr' [ 645.889869][T28643] Cannot create hsr debugfs directory [ 645.908624][T28913] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6252'. [ 645.935059][T28913] netlink: 'syz.4.6252': attribute type 15 has an invalid length. [ 646.008112][T23136] Bluetooth: hci3: command tx timeout [ 646.453484][ T9084] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 646.510935][T28950] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6259'. [ 646.532261][T28948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.808647][T28965] x_tables: duplicate underflow at hook 1 [ 646.955778][T28972] netlink: 'syz.4.6264': attribute type 1 has an invalid length. [ 647.013020][T28972] bond1: entered promiscuous mode [ 647.022557][T28972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.047747][T28982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6266'. [ 647.067693][T28979] can: request_module (can-proto-4) failed. [ 647.093439][T28976] can: request_module (can-proto-4) failed. [ 647.229078][T28972] bond1: (slave bridge3): making interface the new active one [ 647.243714][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6268'. [ 647.252877][T28972] bridge3: entered promiscuous mode [ 647.268890][T28972] bridge3: left promiscuous mode [ 647.342726][T28987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6267'. [ 647.352045][T28987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6267'. [ 647.365489][T28990] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 647.505290][T23056] hsr_slave_0: left promiscuous mode [ 647.511465][T23056] hsr_slave_1: left promiscuous mode [ 647.554916][T23056] pim6reg527 (unregistering): left allmulticast mode [ 647.583586][T23056] pim6reg (unregistering): left allmulticast mode [ 648.071298][T29028] delete_channel: no stack [ 648.171590][T29034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6281'. [ 648.201931][T29040] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6279'. [ 648.278889][T23056] IPVS: stop unused estimator thread 0... [ 648.330164][T28643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 648.366791][T28643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.410969][T28643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.455558][T28643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.500188][T29049] syzkaller0: entered promiscuous mode [ 648.526454][T29049] syzkaller0: entered allmulticast mode [ 648.791163][T29075] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 649.139917][T29102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.158291][T28643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.208332][T28643] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.262807][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.269997][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.308164][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.315381][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.365141][T29115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6293'. [ 649.527573][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 649.584249][T29064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6287'. [ 649.615146][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 650.272801][T29140] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.280385][T29140] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.585203][T29140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.603807][T29140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.870591][T29140] veth0_macvtap: left allmulticast mode [ 650.949348][T29159] netlink: 'syz.4.6303': attribute type 11 has an invalid length. [ 650.964066][T23056] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.026638][T23056] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.056047][T23056] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.113741][T23056] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.147302][T28643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.221261][T28643] veth0_vlan: entered promiscuous mode [ 651.288965][T28643] veth1_vlan: entered promiscuous mode [ 651.442229][T28643] veth0_macvtap: entered promiscuous mode [ 651.498932][T28643] veth1_macvtap: entered promiscuous mode [ 651.543823][T28643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.570299][T28643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.612241][T23056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.673787][T23056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.713716][T23056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.750786][T23056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.827776][T29219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.061718][T29238] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 652.222607][T29249] __nla_validate_parse: 1 callbacks suppressed [ 652.222625][T29249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6323'. [ 652.277257][T29252] netlink: 'syz.0.6324': attribute type 1 has an invalid length. [ 654.660967][T29210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.722203][T10959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.756335][T10959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.816539][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.828501][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.867819][T29267] netlink: 'syz.1.6327': attribute type 1 has an invalid length. [ 654.912018][T29267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6327'. [ 654.925182][T29267] netlink: 'syz.1.6327': attribute type 7 has an invalid length. [ 654.978336][T29267] netlink: 'syz.1.6327': attribute type 8 has an invalid length. [ 655.228126][T29292] bond0: entered promiscuous mode [ 655.237272][T29292] bond_slave_0: entered promiscuous mode [ 655.243128][T29292] bond_slave_1: entered promiscuous mode [ 655.262730][T29292] batadv0: entered promiscuous mode [ 655.273175][T29292] hsr1: entered promiscuous mode [ 655.292034][T29292] hsr1: entered allmulticast mode [ 655.322541][T29292] bond0: entered allmulticast mode [ 655.328579][T29292] bond_slave_0: entered allmulticast mode [ 655.335439][T29292] bond_slave_1: entered allmulticast mode [ 655.341296][T29292] batadv0: entered allmulticast mode [ 655.347707][T29292] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 655.371879][T29292] bond0: left promiscuous mode [ 655.383458][T29292] bond_slave_0: left promiscuous mode [ 655.396294][T29292] bond_slave_1: left promiscuous mode [ 655.406121][T29292] batadv0: left promiscuous mode [ 655.597685][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 655.606812][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6330'. [ 655.629639][T29305] netlink: 'syz.1.6335': attribute type 4 has an invalid length. [ 655.720185][T29315] netlink: 'syz.3.6337': attribute type 12 has an invalid length. [ 656.084393][T29337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6342'. [ 656.126001][T29342] netlink: 'syz.2.6346': attribute type 11 has an invalid length. [ 656.143371][T29342] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.6346'. [ 656.198568][T29342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6346'. [ 656.573977][T29365] netlink: 'syz.2.6352': attribute type 1 has an invalid length. [ 656.575711][T29366] ip6gre0: Master is either lo or non-ether device [ 656.581866][T29365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6352'. [ 656.689399][T29368] syzkaller1: entered promiscuous mode [ 656.706297][T29368] syzkaller1: entered allmulticast mode [ 656.718463][T29368] netlink: 'syz.2.6353': attribute type 1 has an invalid length. [ 656.753069][T29368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6353'. [ 656.862058][T29377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6357'. [ 656.943954][T29377] bond2: entered promiscuous mode [ 656.962352][T29377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.060310][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.071043][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.079076][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.087070][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.094928][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.389266][T29392] netlink: 'syz.4.6360': attribute type 1 has an invalid length. [ 657.502515][T29392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.563505][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6363'. [ 657.594427][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.606415][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.619012][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33365 - 0 [ 657.630922][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 657.749058][T29405] bond1: option xmit_hash_policy: invalid value (64) [ 657.768462][T29405] bond1 (unregistering): Released all slaves [ 657.843206][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.863896][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.880045][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33365 - 0 [ 657.891689][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 657.939717][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 657.963806][T29417] netlink: 'syz.4.6364': attribute type 11 has an invalid length. [ 658.219542][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.247747][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.271110][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33365 - 0 [ 658.281908][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 658.339249][T29441] bridge_slave_0 (unregistering): left allmulticast mode [ 658.352469][T29441] bridge_slave_0 (unregistering): left promiscuous mode [ 658.366206][T29441] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.393617][T29381] chnl_net:caif_netlink_parms(): no params data found [ 658.466538][T29449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'. [ 658.842943][T29381] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.860373][T29381] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.882385][T29381] bridge_slave_0: entered allmulticast mode [ 658.888871][T29483] sock: sock_timestamping_bind_phc: sock not bind to device [ 658.898755][T29381] bridge_slave_0: entered promiscuous mode [ 658.937749][T29481] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6382'. [ 658.959150][T29481] bridge_slave_1: default FDB implementation only supports local addresses [ 658.984919][T29381] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.004910][T29381] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.009646][T29493] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6385'. [ 659.012131][T29381] bridge_slave_1: entered allmulticast mode [ 659.073763][T29381] bridge_slave_1: entered promiscuous mode [ 659.129297][ T5827] Bluetooth: hci4: command tx timeout [ 659.249738][T29381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.277012][T29508] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6387'. [ 659.326130][T29381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.391061][T29511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.409390][ T74] bridge_slave_1: left allmulticast mode [ 659.423679][ T74] bridge_slave_1: left promiscuous mode [ 659.435275][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.445616][T29515] netlink: 'syz.2.6388': attribute type 1 has an invalid length. [ 659.490022][ T74] bridge_slave_0: left allmulticast mode [ 659.506626][ T74] bridge_slave_0: left promiscuous mode [ 659.529912][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.718240][T29524] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 659.726184][T29524] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6382'. [ 659.736445][T29524] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6382'. [ 659.768752][T29524] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6382'. [ 659.819526][ T74] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 659.854874][ T74] dvmrp0 (unregistering): left allmulticast mode [ 659.889263][ T74] bond3 (unregistering): (slave geneve2): Releasing active interface [ 660.010246][ T74] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 660.136629][ T74] bond11 (unregistering): (slave bridge6): Releasing active interface [ 660.243782][ T74] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.254901][ T74] bond_slave_0: left allmulticast mode [ 660.263470][ T74] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.272326][ T74] bond_slave_1: left allmulticast mode [ 660.280955][ T74] .` (unregistering): Released all slaves [ 660.290402][ T74] bond1 (unregistering): Released all slaves [ 660.303487][ T74] bond2 (unregistering): Released all slaves [ 660.315961][ T74] bond3 (unregistering): Released all slaves [ 660.328307][ T74] bond4 (unregistering): Released all slaves [ 660.342019][ T74] bond5 (unregistering): Released all slaves [ 660.357053][ T74] bond6 (unregistering): Released all slaves [ 660.375865][ T74] bond7 (unregistering): Released all slaves [ 660.399153][ T74] bond8 (unregistering): Released all slaves [ 660.414004][ T74] bond9 (unregistering): Released all slaves [ 660.429784][ T74] bond10 (unregistering): (slave batadv4): Releasing active interface [ 660.438044][ T74] batadv4: left promiscuous mode [ 660.443064][ T74] batadv4: left allmulticast mode [ 660.449703][ T74] bond10 (unregistering): Released all slaves [ 660.462409][ T74] bond11 (unregistering): Released all slaves [ 660.481003][ T74] bond0 (unregistering): Released all slaves [ 660.504552][T29515] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 660.598549][ T74] tipc: Disabling bearer [ 660.623149][ T74] tipc: Left network mode [ 660.647972][T29381] team0: Port device team_slave_0 added [ 660.677301][T29381] team0: Port device team_slave_1 added [ 660.809931][T29381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.841776][T29381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.914965][T29381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.926885][T29556] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 661.011418][T29381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.023494][T29381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.051818][T29381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.170571][T29381] hsr_slave_0: entered promiscuous mode [ 661.181446][T29381] hsr_slave_1: entered promiscuous mode [ 661.187671][T29381] debugfs: 'hsr0' already exists in 'hsr' [ 661.193513][T29381] Cannot create hsr debugfs directory [ 661.211168][ T5827] Bluetooth: hci4: command tx timeout [ 661.620920][T29590] netlink: 'syz.1.6406': attribute type 12 has an invalid length. [ 661.633983][T29590] netlink: 'syz.1.6406': attribute type 29 has an invalid length. [ 661.641992][T29590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6406'. [ 662.018772][T29605] : entered promiscuous mode [ 662.144425][T29613] team0: Port device team_slave_0 removed [ 662.240008][T29625] netlink: 'syz.2.6412': attribute type 1 has an invalid length. [ 662.257480][ T74] hsr_slave_1: left promiscuous mode [ 662.278522][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.289071][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.312864][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.320483][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.333486][ T74] veth1_vlan: left allmulticast mode [ 662.345597][ T74] veth1_macvtap: left promiscuous mode [ 662.361583][ T74] veth1_vlan: left promiscuous mode [ 662.818940][T29619] __nla_validate_parse: 4 callbacks suppressed [ 662.818957][T29619] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6412'. [ 662.835479][T29619] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6412'. [ 662.849955][T29619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6412'. [ 662.890005][T29625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.906405][T29637] openvswitch: : Dropping previously announced user features [ 663.073891][T29381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.096830][T29381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.136579][T29381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.202489][T29381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.221407][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6420'. [ 663.285026][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6420'. [ 663.286412][ T5827] Bluetooth: hci4: command tx timeout [ 663.316180][T29648] syzkaller0: entered promiscuous mode [ 663.321685][T29648] syzkaller0: entered allmulticast mode [ 663.380285][T29663] veth1_macvtap: left promiscuous mode [ 663.767160][T29689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 663.777135][T29689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6423'. [ 665.170802][T29681] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 665.364095][ T5827] Bluetooth: hci4: command tx timeout [ 665.445900][ T74] IPVS: stop unused estimator thread 0... [ 665.457307][T29381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.475983][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'. [ 665.510421][T29381] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.527883][T29737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6429'. [ 665.576538][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.583716][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.634800][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.641957][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.678332][T29747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6432'. [ 665.716731][T29748] netlink: 'syz.4.6430': attribute type 25 has an invalid length. [ 666.307280][T29381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.431279][T29792] bond3: (slave gre0): Device is not bonding slave [ 666.441747][T29792] bond3: option active_slave: invalid value (gre0) [ 666.457280][T29792] bond3 (unregistering): Released all slaves [ 666.501437][T29796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.546531][T29808] x_tables: duplicate underflow at hook 1 [ 666.562935][T29381] veth0_vlan: entered promiscuous mode [ 666.600132][T29381] veth1_vlan: entered promiscuous mode [ 666.642160][T29381] veth0_macvtap: entered promiscuous mode [ 666.654817][T29381] veth1_macvtap: entered promiscuous mode [ 666.669737][T29810] netlink: 'syz.1.6446': attribute type 21 has an invalid length. [ 666.689473][T29381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.704396][T29381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.724695][T10959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.734394][T10959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.743107][T10959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.817254][T10959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.912210][T29823] netlink: 'syz.3.6452': attribute type 29 has an invalid length. [ 666.932568][T29826] openvswitch: netlink: Duplicate or invalid key (type 0). [ 666.956173][T29826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.990867][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.007284][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.062356][T23056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.093536][T23056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.140741][T29839] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 667.254630][T29847] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 667.329541][T29856] vlan2: entered promiscuous mode [ 667.336636][T29856] gretap0: entered promiscuous mode [ 667.485008][T29872] syzkaller0: entered promiscuous mode [ 667.490627][T29872] syzkaller0: entered allmulticast mode [ 667.519614][T29875] netlink: 'syz.4.6465': attribute type 1 has an invalid length. [ 667.560350][T29875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.791922][T29879] bond3: (slave ip6erspan0): making interface the new active one [ 667.815085][T29879] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 667.966541][T29882] __nla_validate_parse: 7 callbacks suppressed [ 667.966561][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6466'. [ 667.991856][T29882] : entered promiscuous mode [ 670.253516][T29849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.405421][T29897] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6472'. [ 670.418763][T29896] team0: Device gtp0 is up. Set it down before adding it as a team port [ 670.461424][T29901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6473'. [ 670.483736][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6470'. [ 671.294713][T29958] syzkaller0: entered promiscuous mode [ 671.300222][T29958] syzkaller0: entered allmulticast mode [ 671.333964][T29961] netlink: 'syz.1.6491': attribute type 4 has an invalid length. [ 671.340873][T29963] xt_NFQUEUE: number of total queues is 0 [ 671.361054][T29961] netlink: 'syz.1.6491': attribute type 4 has an invalid length. [ 671.480311][T29961] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.488150][T29961] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.635539][T29961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.648807][T29961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.664411][T29983] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.6498'. [ 671.688520][T29981] delete_channel: no stack [ 671.773789][T29961] bond2: left promiscuous mode [ 671.823573][T23056] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.832641][T23056] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.853381][T23056] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.873420][T23056] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.025574][T30002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 672.139492][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 672.155746][T30008] bond0: entered promiscuous mode [ 672.161491][T30008] bond_slave_0: entered promiscuous mode [ 672.178871][T30011] netlink: 'syz.0.6506': attribute type 1 has an invalid length. [ 672.197894][T30008] bond_slave_1: entered promiscuous mode [ 672.206213][T30008] bond0: left promiscuous mode [ 672.211055][T30008] bond_slave_0: left promiscuous mode [ 672.216776][T30008] bond_slave_1: left promiscuous mode [ 672.312495][T30008] netlink: 512 bytes leftover after parsing attributes in process `syz.1.6507'. [ 672.729090][T30048] ip6gre1: entered promiscuous mode [ 672.768949][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6518'. [ 672.813985][T30056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6520'. [ 673.000883][T30072] __nla_validate_parse: 2 callbacks suppressed [ 673.000900][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6525'. [ 673.157292][T30076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6527'. [ 673.273429][T30090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6528'. [ 673.303311][T30090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 673.322371][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6528'. [ 673.364517][T30033] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 673.567127][T30099] netlink: 'syz.4.6532': attribute type 1 has an invalid length. [ 673.574990][T30099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.647978][T30101] xt_hashlimit: max too large, truncated to 1048576 [ 673.750035][T30106] netlink: 'syz.4.6534': attribute type 13 has an invalid length. [ 673.797865][T30106] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.811146][T30106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.926317][T30119] netlink: 'syz.0.6539': attribute type 29 has an invalid length. [ 673.935306][T30119] netlink: 'syz.0.6539': attribute type 29 has an invalid length. [ 673.944740][T30119] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6539'. [ 674.076089][T30133] netlink: 'syz.4.6543': attribute type 1 has an invalid length. [ 674.139012][T30135] openvswitch: netlink: IP tunnel TTL not specified. [ 674.164590][T30138] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6546'. [ 674.235775][T30146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6548'. [ 674.464780][T30164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6553'. [ 674.482493][T30169] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.515128][T30169] team0: Cannot enslave team device to itself [ 674.563793][ T5827] Bluetooth: hci4: command 0x0401 tx timeout [ 674.583084][T30176] syzkaller0: entered promiscuous mode [ 674.614728][T30176] syzkaller0: entered allmulticast mode [ 674.672403][T30183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.774926][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6563'. [ 674.914486][T30196] netlink: 'syz.2.6566': attribute type 12 has an invalid length. [ 675.033072][T30203] netlink: 'syz.3.6569': attribute type 1 has an invalid length. [ 675.208193][T30211] syzkaller0: entered promiscuous mode [ 675.213945][T30211] syzkaller0: entered allmulticast mode [ 675.320795][T30198] tipc: Started in network mode [ 675.332784][T30198] tipc: Node identity 2e8ad0a11d6c, cluster identity 4711 [ 675.354328][T30198] tipc: Enabled bearer , priority 0 [ 675.426329][T30197] tipc: Resetting bearer [ 675.435001][T30225] Bluetooth: MGMT ver 1.23 [ 675.479656][T30197] tipc: Disabling bearer [ 676.329218][T30264] netlink: 'syz.2.6589': attribute type 1 has an invalid length. [ 676.424831][T30264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.441133][T30269] 8021q: VLANs not supported on caif0 [ 676.482584][T30264] tipc: Enabling of bearer rejected, media not registered [ 676.776176][T30299] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 676.861336][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.870268][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.914592][T30306] openvswitch: netlink: Invalid VLAN frame [ 676.915852][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.938913][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.013674][T30313] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.055718][T30313] bridge_slave_0 (unregistering): left allmulticast mode [ 677.063094][T30313] bridge_slave_0 (unregistering): left promiscuous mode [ 677.071858][T30313] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.100884][T30322] "syz.0.6608" (30322) uses obsolete ecb(arc4) skcipher [ 677.700269][T30363] netlink: zone id is out of range [ 677.709853][T30362] netlink: zone id is out of range [ 677.715169][T30362] netlink: zone id is out of range [ 677.720399][T30363] netlink: zone id is out of range [ 677.726124][T30362] netlink: zone id is out of range [ 677.751853][T30366] syzkaller0: entered promiscuous mode [ 677.757634][T30366] syzkaller0: entered allmulticast mode [ 677.770073][T30367] syzkaller0: entered promiscuous mode [ 677.775729][T30367] syzkaller0: entered allmulticast mode [ 677.784391][T30367] validate_nla: 2 callbacks suppressed [ 677.784401][T30367] netlink: 'syz.0.6624': attribute type 4 has an invalid length. [ 678.075548][T30384] syzkaller0: entered promiscuous mode [ 678.081167][T30384] syzkaller0: entered allmulticast mode [ 678.120940][T30387] syzkaller0: entered promiscuous mode [ 678.127191][T30387] syzkaller0: entered allmulticast mode [ 678.219204][ T6712] IPVS: starting estimator thread 0... [ 678.320413][T30395] IPVS: using max 41 ests per chain, 98400 per kthread [ 678.500136][T30413] __nla_validate_parse: 13 callbacks suppressed [ 678.500155][T30413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6637'. [ 678.641136][T30424] netlink: 'syz.4.6641': attribute type 2 has an invalid length. [ 678.676667][T30427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6644'. [ 678.715227][T30429] x_tables: unsorted underflow at hook 3 [ 678.873024][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.888643][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.894406][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6649'. [ 678.913665][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.934850][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.959088][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.973106][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 678.982400][T30437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6646'. [ 679.178955][T30462] dvmrp0: entered allmulticast mode [ 679.262563][T30463] syzkaller0: entered promiscuous mode [ 679.268568][T30463] syzkaller0: entered allmulticast mode [ 679.276067][T30471] netlink: 'syz.2.6656': attribute type 4 has an invalid length. [ 679.328303][T30477] netlink: 'syz.2.6656': attribute type 4 has an invalid length. [ 679.380633][T30484] netlink: 'syz.2.6656': attribute type 27 has an invalid length. [ 679.449305][ T30] audit: type=1107 audit(1772894899.185:14): pid=30486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='l0QJyBQ?P@s\bs4a^H2Z<+kzAۗ$>o20*S}ըYgӴsJR3”%lye [ 679.449305][ T30] kp9' [ 681.331165][T30540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.553690][T30565] netlink: 'syz.2.6684': attribute type 4 has an invalid length. [ 681.631614][T30569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.686387][T30569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.741024][T30572] netlink: 'syz.3.6688': attribute type 29 has an invalid length. [ 682.317066][T30627] netlink: 'syz.1.6704': attribute type 1 has an invalid length. [ 682.357651][T30627] bond4: entered promiscuous mode [ 682.366312][T30627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.379425][T30634] netlink: 'syz.3.6707': attribute type 1 has an invalid length. [ 682.418335][T30634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.483155][T30627] bond4: (slave bridge3): making interface the new active one [ 682.491120][T30627] bridge3: entered promiscuous mode [ 682.498364][T30627] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 682.531429][T30646] syzkaller0: entered promiscuous mode [ 682.542739][T30646] syzkaller0: entered allmulticast mode [ 682.565168][T30645] bridge_slave_1: entered promiscuous mode [ 684.111361][T30684] netlink: 'syz.2.6719': attribute type 9 has an invalid length. [ 684.123417][T30685] netlink: 'syz.1.6716': attribute type 1 has an invalid length. [ 684.148899][T30692] __nla_validate_parse: 56 callbacks suppressed [ 684.148915][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 684.171089][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 684.213701][T30691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.272286][T30691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.362129][T30711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6723'. [ 684.382545][T30711] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6723'. [ 684.432141][T30711] veth3: entered promiscuous mode [ 684.502065][T30716] xt_hashlimit: size too large, truncated to 1048576 [ 684.589070][T30720] syzkaller0: entered promiscuous mode [ 684.594658][T30720] syzkaller0: entered allmulticast mode [ 684.738444][T30739] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6731'. [ 684.849393][T30743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6733'. [ 685.155845][T30770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 685.177027][T30774] netlink: 'syz.3.6741': attribute type 33 has an invalid length. [ 685.226475][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6740'. [ 685.455870][T30792] erspan1: entered allmulticast mode [ 685.639255][T30800] netlink: 'syz.4.6749': attribute type 11 has an invalid length. [ 685.654759][T30801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6750'. [ 685.808229][T30806] netlink: 'syz.0.6748': attribute type 1 has an invalid length. [ 685.825487][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6753'. [ 685.837263][T30806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.850160][T30811] netlink: 'syz.1.6752': attribute type 1 has an invalid length. [ 685.882649][T30802] bond1: (slave gretap1): making interface the new active one [ 685.937560][T30802] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 685.949398][T30811] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 686.171267][T30839] netlink: 'syz.2.6761': attribute type 4 has an invalid length. [ 686.214774][T30839] .`: renamed from bond0 [ 686.580554][T10959] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.590607][T10959] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.631784][T10959] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.663386][T10959] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.122895][T30914] x_tables: duplicate entry at hook 3 [ 687.146026][T30914] netlink: 'syz.2.6781': attribute type 1 has an invalid length. [ 687.241866][T30914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.298328][T30929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.308606][T30929] netlink: 'syz.0.6786': attribute type 1 has an invalid length. [ 687.583158][T30949] netlink: 'syz.0.6789': attribute type 11 has an invalid length. [ 687.739649][T30956] bond0: (slave gre0): Error: Device type is different from other slaves [ 688.053760][T30976] IPVS: Unknown mcast interface: pim6reg1 [ 688.168126][T30989] tc_dump_action: action bad kind [ 688.376375][T31007] xt_policy: neither incoming nor outgoing policy selected [ 689.088065][T31051] gretap2: entered promiscuous mode [ 689.099707][T31051] gretap2: entered allmulticast mode [ 689.280303][T31062] __nla_validate_parse: 123 callbacks suppressed [ 689.280322][T31062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6823'. [ 689.383569][T31066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6824'. [ 689.697708][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6830'. [ 689.774946][T31093] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6833'. [ 689.803350][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 689.804246][T31103] net_ratelimit: 7 callbacks suppressed [ 689.804260][T31103] openvswitch: netlink: Flow actions attr not present in new flow. [ 689.864021][T31099] syzkaller0: entered promiscuous mode [ 689.869628][T31099] syzkaller0: entered allmulticast mode [ 691.528996][T31130] netlink: 'syz.4.6843': attribute type 1 has an invalid length. [ 691.587240][T31130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.624652][T31139] bond0: (slave gre0): Error: Device type is different from other slaves [ 691.757489][T31153] bond0: entered allmulticast mode [ 691.762653][T31153] bond_slave_0: entered allmulticast mode [ 691.797716][T31153] bond_slave_1: entered allmulticast mode [ 691.823396][T31153] bridge_slave_1: entered allmulticast mode [ 691.861767][T31159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6852'. [ 691.881489][T31159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6852'. [ 691.932623][T31165] netlink: 'syz.1.6850': attribute type 1 has an invalid length. [ 691.987055][T31170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6854'. [ 691.998325][T31161] bond5: entered promiscuous mode [ 692.005858][T31161] bond5: entered allmulticast mode [ 692.010706][T31170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.011338][T31161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 692.073694][T31161] bridge4: entered promiscuous mode [ 692.088041][T31161] bridge4: entered allmulticast mode [ 692.094355][T31161] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 692.106563][ T74] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 692.145179][T31161] bridge5: entered promiscuous mode [ 692.150694][T31161] bridge5: entered allmulticast mode [ 692.157167][T31161] bond5: (slave bridge5): Enslaving as a backup interface with a down link [ 692.203520][T31161] can: request_module (can-proto-3) failed. [ 692.251543][T31177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6855'. [ 692.262105][T10959] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 692.289327][T31179] bridge0: port 1(syz_tun) entered blocking state [ 692.298467][T31179] bridge0: port 1(syz_tun) entered disabled state [ 692.305661][T31179] syz_tun: entered allmulticast mode [ 692.312830][T31179] syz_tun: entered promiscuous mode [ 692.373197][T31182] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 692.529391][T31191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6863'. [ 693.016039][T31229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.074928][T31222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.145636][T31252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.416923][T31278] netlink: 'syz.0.6879': attribute type 23 has an invalid length. [ 693.516428][T31284] openvswitch: netlink: Message has 6 unknown bytes. [ 693.714217][T31305] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 693.737885][T31305] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 693.785883][T31315] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 693.863094][T31315] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 694.039757][T31341] openvswitch: netlink: IP tunnel dst address not specified [ 694.331953][T31362] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.339786][T31362] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.462034][T31376] netlink: 'syz.3.6901': attribute type 1 has an invalid length. [ 694.462480][T31372] __nla_validate_parse: 5 callbacks suppressed [ 694.462496][T31372] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6906'. [ 694.566839][ T10] IPVS: starting estimator thread 0... [ 694.582998][T31384] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 694.610378][T31384] mac80211_hwsim hwsim79 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.696180][T31385] IPVS: using max 29 ests per chain, 69600 per kthread [ 694.764406][T31404] netlink: 'syz.3.6914': attribute type 8 has an invalid length. [ 694.795950][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'. [ 694.851849][T31404] bond0: entered promiscuous mode [ 694.857017][T31404] bond_slave_0: entered promiscuous mode [ 694.862858][T31404] bond_slave_1: entered promiscuous mode [ 694.870536][T31404] gretap0: entered promiscuous mode [ 694.879699][T31404] erspan0: entered promiscuous mode [ 694.892992][T31404] hsr1: entered promiscuous mode [ 694.956932][T31413] x_tables: unsorted underflow at hook 2 [ 695.097256][T31424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.862052][T31487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6937'. [ 696.295959][T31456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.645765][T10961] wlan1: Trigger new scan to find an IBSS to join [ 696.883659][T31536] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 696.897044][T31536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.957647][T31538] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6953'. [ 696.974671][T31542] delete_channel: no stack [ 697.194306][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 697.203423][T31554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6956'. [ 697.213111][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 697.224535][T31554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6956'. [ 697.260109][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'. [ 697.285140][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'. [ 697.356596][T31563] netlink: 'syz.4.6959': attribute type 9 has an invalid length. [ 697.572360][T31577] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 697.627947][T31577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.714612][T31586] : entered promiscuous mode [ 697.898357][T31596] bond3 (unregistering): Released all slaves [ 698.089226][T31606] syzkaller1: entered promiscuous mode [ 698.097065][T31606] syzkaller1: entered allmulticast mode [ 698.169626][T31609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.169714][T31617] bond0: entered promiscuous mode [ 698.189119][T31617] bond_slave_0: entered promiscuous mode [ 698.195720][T31617] bond_slave_1: entered promiscuous mode [ 698.201699][T31617] bond0: entered allmulticast mode [ 698.223438][T31617] bond_slave_0: entered allmulticast mode [ 698.234584][T31617] bond_slave_1: entered allmulticast mode [ 698.253113][T31617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.390633][T31617] syzkaller0: entered promiscuous mode [ 698.403955][T31617] syzkaller0: entered allmulticast mode [ 698.462850][T31617] vlan3: entered allmulticast mode [ 698.472510][T31617] bridge6: entered allmulticast mode [ 701.576189][T31683] __nla_validate_parse: 5 callbacks suppressed [ 701.576208][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6991'. [ 701.616687][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6991'. [ 701.636886][T31689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6992'. [ 701.693862][ T9093] wlan1: Trigger new scan to find an IBSS to join [ 701.937901][T31709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.963973][T31709] team0: Device macvlan2 is already an upper device of the team interface [ 701.969955][T31719] netlink: 'syz.2.6999': attribute type 5 has an invalid length. [ 701.987457][T31719] netlink: 'syz.2.6999': attribute type 2 has an invalid length. [ 702.093633][T31723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7003'. [ 702.633094][T31761] netlink: 'syz.1.7014': attribute type 1 has an invalid length. [ 702.726662][T31761] ipt_REJECT: TCP_RESET invalid for non-tcp [ 702.735129][ T9093] wlan1: Creating new IBSS network, BSSID 9a:b2:b4:b9:b2:41 [ 702.818817][T31777] pimreg: entered allmulticast mode [ 702.867513][T31780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7020'. [ 702.878804][T31782] netlink: 'syz.4.7019': attribute type 1 has an invalid length. [ 702.886751][T31782] netlink: 'syz.4.7019': attribute type 4 has an invalid length. [ 702.889808][T31780] netlink: 'syz.3.7020': attribute type 2 has an invalid length. [ 702.894701][T31782] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.7019'. [ 703.010733][T31791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7024'. [ 703.020910][T31791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7024'. [ 703.067805][ T9093] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.074321][T31791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7024'. [ 703.094971][ T9093] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.115810][ T9093] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.123301][T31791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7024'. [ 703.136478][ T9093] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.206606][T31806] x_tables: duplicate underflow at hook 2 [ 703.301561][T31808] netlink: 'syz.0.7028': attribute type 17 has an invalid length. [ 703.750642][T31848] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 703.771301][T31848] bond2 (unregistering): Released all slaves [ 703.857448][T31854] can: request_module (can-proto-5) failed. [ 704.382128][T31898] team0: Port device team_slave_0 removed [ 704.403398][T31904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.428804][T31904] netlink: 'syz.2.7057': attribute type 11 has an invalid length. [ 704.465450][T31904] netlink: 'syz.2.7057': attribute type 11 has an invalid length. [ 704.505208][T31914] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 704.519285][T31914] bond7 (unregistering): Released all slaves [ 704.585176][T31923] netlink: 'syz.3.7062': attribute type 10 has an invalid length. [ 704.811817][ T9093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.825882][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.841887][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.887763][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.961397][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 705.014149][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 705.021316][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 705.350091][T31941] infiniband syz2: set active [ 705.354933][T31941] infiniband syz2: added vxcan1 [ 705.362227][ T5880] vxcan1 speed is unknown, defaulting to 1000 [ 705.416096][T31941] RDS/IB: syz2: added [ 705.420218][T31941] smc: adding ib device syz2 with port count 1 [ 705.426864][T31941] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 705.437442][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 705.494535][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 705.662762][T31990] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 705.889741][T31998] netlink: 'syz.1.7083': attribute type 75 has an invalid length. [ 705.928326][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.936494][T23056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.946586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.955805][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.989360][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 706.171526][T32005] openvswitch: netlink: Flow key attr not present in new flow. [ 706.330430][T32012] openvswitch: netlink: Message has 8 unknown bytes. [ 706.509067][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a6cbc00: rx timeout, send abort [ 706.519522][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a6cbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 706.616301][T32030] gtp0: entered promiscuous mode [ 706.623335][T32030] gtp0: entered allmulticast mode [ 706.774770][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 706.791641][T32039] __nla_validate_parse: 16 callbacks suppressed [ 706.791659][T32039] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7093'. [ 706.887513][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7093'. [ 706.932337][T32039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7093'. [ 706.956004][T32039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7093'. [ 706.985790][T32039] vlan0: entered promiscuous mode [ 707.039786][T32060] tap0: tun_chr_ioctl cmd 2148553947 [ 707.058233][T32060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.314142][T32069] syzkaller0: entered promiscuous mode [ 707.325875][T32069] syzkaller0: entered allmulticast mode [ 707.344952][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 707.478569][T32079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7103'. [ 707.508033][T32079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7103'. [ 707.527477][T32084] lo: entered promiscuous mode [ 707.549543][T32084] tunl0: entered promiscuous mode [ 707.575831][T32084] gre0: entered promiscuous mode [ 707.634892][T32084] ip_vti0: entered promiscuous mode [ 707.731040][T32093] netlink: 'syz.2.7106': attribute type 3 has an invalid length. [ 707.747829][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 707.772168][T32095] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 707.790843][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7107'. [ 707.800069][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7107'. [ 708.183649][T31941] vxcan1 speed is unknown, defaulting to 1000 [ 708.225706][T32123] ip6tnl2: entered promiscuous mode [ 708.448058][T32141] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7122'. [ 708.610589][T32149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7126'. [ 708.628353][T32148] netlink: 'syz.4.7125': attribute type 11 has an invalid length. [ 709.038095][T32179] netlink: 'syz.1.7135': attribute type 9 has an invalid length. [ 709.050509][T32178] netlink: 'syz.1.7135': attribute type 9 has an invalid length. [ 709.145676][T32181] netlink: 'syz.1.7136': attribute type 1 has an invalid length. [ 709.181647][T32181] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.344337][T32184] IPVS: set_ctl: invalid protocol: 47 172.20.20.16:20256 [ 709.371119][T32190] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.378573][T32190] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.392977][T32190] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 709.417231][T32190] set match dimension is over the limit! [ 709.626156][T32211] IPv6: NLM_F_CREATE should be specified when creating new route [ 709.637049][T32211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 709.644334][T32211] IPv6: NLM_F_CREATE should be set when creating new route [ 709.683810][T23136] Bluetooth: hci0: command 0x0c1a tx timeout [ 709.689932][ T5827] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 709.707127][T32219] team0: Cannot enslave team device to itself [ 709.833627][ T9093] net_ratelimit: 12 callbacks suppressed [ 709.833647][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 709.953392][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 710.063342][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 710.173455][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 710.283329][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 710.364946][T32205] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 710.394246][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 710.513359][T23056] bond5: (slave bridge4): failed to get link speed/duplex [ 710.630822][T32245] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 710.641364][T31265] bond5: (slave bridge4): failed to get link speed/duplex [ 710.680002][T32249] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 710.753363][T31265] bond5: (slave bridge4): failed to get link speed/duplex [ 710.873392][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 711.763821][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.608459][T32211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.618255][T32221] __nla_validate_parse: 6 callbacks suppressed [ 712.618272][T32221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7150'. [ 712.864847][T32276] netlink: 'syz.2.7165': attribute type 14 has an invalid length. [ 712.893313][T32276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'. [ 712.912565][T32276] netlink: 'syz.2.7165': attribute type 14 has an invalid length. [ 712.944167][T32276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'. [ 713.117618][T32298] netlink: 'syz.1.7172': attribute type 1 has an invalid length. [ 713.130940][T32298] netlink: 'syz.1.7172': attribute type 7 has an invalid length. [ 713.144470][T32298] netlink: 'syz.1.7172': attribute type 8 has an invalid length. [ 713.152058][T32300] xt_hashlimit: size too large, truncated to 1048576 [ 713.152300][T32298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7172'. [ 713.944361][T32297] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 713.979645][T32327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7180'. [ 714.014681][T32327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7180'. [ 714.115410][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'. [ 714.913447][T10961] net_ratelimit: 44 callbacks suppressed [ 714.913468][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 715.033334][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 715.123661][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.143315][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 715.203340][ T5827] Bluetooth: hci4: command 0x0401 tx timeout [ 715.263341][T23056] bond5: (slave bridge4): failed to get link speed/duplex [ 715.373488][T31267] bond5: (slave bridge4): failed to get link speed/duplex [ 715.493387][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 715.603323][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 715.713363][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 715.823330][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 716.145569][T32306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.244572][T32346] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7186'. [ 716.254085][T32346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7186'. [ 716.330087][T32348] syzkaller0: entered promiscuous mode [ 716.371409][T32348] syzkaller0: entered allmulticast mode [ 716.482249][T32366] delete_channel: no stack [ 716.582935][T32369] bridge0: entered allmulticast mode [ 716.754876][T32386] syzkaller0: entered promiscuous mode [ 716.769734][T32386] syzkaller0: entered allmulticast mode [ 716.824041][T32395] lo: left promiscuous mode [ 716.829889][T32395] tunl0: left promiscuous mode [ 716.837313][T32395] gre0: left promiscuous mode [ 716.846546][T32395] ip_vti0: left promiscuous mode [ 716.899613][T32395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7201'. [ 716.921359][T32395] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 717.082571][T32404] netlink: 'syz.3.7204': attribute type 1 has an invalid length. [ 717.201154][T32412] bond3: (slave bridge6): making interface the new active one [ 717.214467][T32412] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 717.268329][T32419] bond8: entered promiscuous mode [ 717.286705][T32419] 8021q: adding VLAN 0 to HW filter on device bond8 [ 717.322486][T32426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 717.357640][T32419] macvlan4: entered promiscuous mode [ 717.370794][T32419] macvlan4: entered allmulticast mode [ 717.432963][T32419] bond8: (slave macvlan4): Opening slave failed [ 717.941210][T32464] __nla_validate_parse: 7 callbacks suppressed [ 717.941230][T32464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7214'. [ 718.202979][T32469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7219'. [ 718.236174][T32475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7219'. [ 718.396769][T32485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7224'. [ 718.702504][T32503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7229'. [ 718.711627][T32503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.735073][T32503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.811418][T32512] netlink: 'syz.3.7229': attribute type 14 has an invalid length. [ 719.237056][T32545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7240'. [ 719.342197][T32556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7240'. [ 719.437986][T32565] netlink: 'syz.2.7247': attribute type 1 has an invalid length. [ 719.457938][T32568] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7246'. [ 719.484965][T32568] xt_hashlimit: size too large, truncated to 1048576 [ 719.550661][T32571] netlink: 'syz.2.7249': attribute type 2 has an invalid length. [ 719.564453][T32570] xt_policy: output policy not valid in PREROUTING and INPUT [ 719.794970][T32597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7255'. [ 719.818562][T32597] netlink: 'syz.2.7255': attribute type 29 has an invalid length. [ 719.857058][T32597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7255'. [ 719.954375][T32605] syzkaller0: entered promiscuous mode [ 719.959887][T32605] syzkaller0: entered allmulticast mode [ 720.033504][T13009] net_ratelimit: 36 callbacks suppressed [ 720.033522][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 720.060296][T32616] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 720.167108][ T6712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.199274][ T13] bond5: (slave bridge4): failed to get link speed/duplex [ 720.235387][T32633] netlink: 'syz.3.7268': attribute type 1 has an invalid length. [ 720.281552][T32634] tipc: Started in network mode [ 720.286665][T32634] tipc: Node identity a6e39af9d512, cluster identity 9 [ 720.293891][T32634] tipc: Enabled bearer , priority 0 [ 720.323483][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.327999][T32633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.340167][T32633] bond4: (slave bond5): making interface the new active one [ 720.348745][T32633] bond4: (slave bond5): Enslaving as an active interface with an up link [ 720.359027][T32639] syzkaller0: entered promiscuous mode [ 720.366892][T32639] syzkaller0: entered allmulticast mode [ 720.380641][T32634] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 720.420202][T32641] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 720.436670][T32633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.469213][T32634] tipc: Resetting bearer [ 720.483797][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 720.572881][T32665] batadv_slave_1: entered promiscuous mode [ 720.579233][T32666] batadv_slave_1: left promiscuous mode [ 720.606586][ T13] bond5: (slave bridge4): failed to get link speed/duplex [ 720.616721][T32631] tipc: Resetting bearer [ 720.638267][T32631] tipc: Disabling bearer [ 720.746572][T31267] bond5: (slave bridge4): failed to get link speed/duplex [ 720.875508][ T13] bond5: (slave bridge4): failed to get link speed/duplex [ 721.013391][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 721.123956][T31267] bond5: (slave bridge4): failed to get link speed/duplex [ 723.307960][T32640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.473632][T32718] __nla_validate_parse: 4 callbacks suppressed [ 723.473652][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7289'. [ 723.492296][T32720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7291'. [ 723.504005][T32720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7291'. [ 723.571032][T32726] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 723.612352][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.632897][T32726] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 723.660210][T32726] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 723.684068][T32732] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 723.698971][T32732] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.714554][T32732] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.724970][T32732] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 723.732699][T32732] netlink: 'syz.0.7295': attribute type 8 has an invalid length. [ 723.742534][T32732] netlink: 606 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.754924][T32730] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 723.773748][T32730] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.795889][T32730] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7295'. [ 723.819018][T32730] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 723.831185][T32730] netlink: 'syz.0.7295': attribute type 8 has an invalid length. [ 723.840500][T32730] netlink: 606 bytes leftover after parsing attributes in process `syz.0.7295'. [ 724.148981][ T306] netlink: 'syz.1.7308': attribute type 21 has an invalid length. [ 724.884586][ T359] syzkaller0: entered promiscuous mode [ 724.892551][ T359] syzkaller0: entered allmulticast mode [ 724.972338][ T363] xt_hashlimit: size too large, truncated to 1048576 [ 725.527635][ T10] net_ratelimit: 43 callbacks suppressed [ 725.527654][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.253701][ T6712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.568123][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.576258][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.642587][ T392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.656735][ T392] netlink: 'syz.3.7334': attribute type 5 has an invalid length. [ 727.604699][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.202675][ T379] macvtap1: entered promiscuous mode [ 728.208056][ T379] vlan0: entered promiscuous mode [ 728.216511][ T379] macvtap1: entered allmulticast mode [ 728.221903][ T379] vlan0: entered allmulticast mode [ 728.228416][ T379] veth0_vlan: entered allmulticast mode [ 728.325876][ T432] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 728.355061][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 728.441578][ T448] bridge0: port 3(syz_tun) entered blocking state [ 728.463858][ T448] bridge0: port 3(syz_tun) entered disabled state [ 728.470485][ T448] syz_tun: entered allmulticast mode [ 728.488654][ T448] syz_tun: entered promiscuous mode [ 728.633479][ T454] netlink: 'syz.2.7345': attribute type 1 has an invalid length. [ 728.644281][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.739004][ T473] __nla_validate_parse: 10 callbacks suppressed [ 728.739023][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7350'. [ 728.835439][ T476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.862802][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7345'. [ 728.920377][ T454] bridge: RTM_NEWNEIGH with invalid ether address [ 729.003738][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7345'. [ 729.012631][ T469] bridge: RTM_NEWNEIGH with invalid ether address [ 729.045765][T31266] bond5: (slave bridge4): failed to get link speed/duplex [ 729.115758][ T491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7352'. [ 729.276206][ T504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7358'. [ 729.292763][ T493] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 729.340059][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7358'. [ 730.030012][T28137] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 730.089236][T28137] CPU: 0 UID: 0 PID: 28137 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 730.089263][T28137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.089275][T28137] Call Trace: [ 730.089283][T28137] [ 730.089295][T28137] dump_stack_lvl+0xe8/0x150 [ 730.089329][T28137] dump_header+0xd3/0x4c0 [ 730.089355][T28137] oom_kill_process+0x3ab/0x970 [ 730.089382][T28137] out_of_memory+0x106c/0x1410 [ 730.089401][T28137] ? percpu_ref_put+0x19/0x180 [ 730.089426][T28137] ? __pfx___mutex_lock+0x10/0x10 [ 730.089455][T28137] ? __pfx_out_of_memory+0x10/0x10 [ 730.089471][T28137] ? do_raw_spin_unlock+0xf5/0x210 [ 730.089502][T28137] try_charge_memcg+0xc53/0x1560 [ 730.089526][T28137] ? __lock_acquire+0x6b5/0x2cf0 [ 730.089562][T28137] ? __pfx_try_charge_memcg+0x10/0x10 [ 730.089581][T28137] ? xa_load+0x60/0x210 [ 730.089608][T28137] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 730.089634][T28137] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 730.089660][T28137] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 730.089685][T28137] __swap_cache_prepare_and_add+0x52a/0x700 [ 730.089732][T28137] swap_cache_alloc_folio+0xf1/0x240 [ 730.089762][T28137] swap_cluster_readahead+0x369/0x690 [ 730.089795][T28137] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 730.089835][T28137] ? get_vma_policy+0x27b/0x3c0 [ 730.089862][T28137] swapin_readahead+0x196/0xc50 [ 730.089900][T28137] ? __pfx_swapin_readahead+0x10/0x10 [ 730.089928][T28137] ? swap_table_get+0x1e/0x260 [ 730.089952][T28137] ? swap_table_get+0x1e/0x260 [ 730.089973][T28137] ? swap_table_get+0x1e/0x260 [ 730.089998][T28137] ? swap_table_get+0x216/0x260 [ 730.090024][T28137] ? swap_cache_get_folio+0x513/0x520 [ 730.090055][T28137] do_swap_page+0x54f/0x58d0 [ 730.090081][T28137] ? __lock_acquire+0x6b5/0x2cf0 [ 730.090129][T28137] ? do_swap_page+0x12c/0x58d0 [ 730.090153][T28137] ? __pfx_do_swap_page+0x10/0x10 [ 730.090175][T28137] ? __pte_offset_map+0x1ae/0x240 [ 730.090206][T28137] ? pte_offset_map_rw_nolock+0xea/0x160 [ 730.090236][T28137] handle_mm_fault+0x12d2/0x3310 [ 730.090276][T28137] ? handle_mm_fault+0xee/0x3310 [ 730.090311][T28137] ? __pfx_handle_mm_fault+0x10/0x10 [ 730.090335][T28137] ? lock_vma_under_rcu+0x45a/0x500 [ 730.090382][T28137] do_user_addr_fault+0xa73/0x1340 [ 730.090414][T28137] ? rcu_is_watching+0x15/0xb0 [ 730.090440][T28137] ? trace_page_fault_user+0x84/0x210 [ 730.090465][T28137] exc_page_fault+0x6a/0xc0 [ 730.090493][T28137] asm_exc_page_fault+0x26/0x30 [ 730.090512][T28137] RIP: 0033:0x7fa004957938 [ 730.090531][T28137] Code: 00 00 48 8b 44 24 10 0f 05 5b c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff 0f 1f 00 48 83 ec 10 ff 74 24 18 73 ff ff ff 5a 59 48 63 d0 3d 00 f0 ff ff 77 0f 48 89 d0 48 83 [ 730.090547][T28137] RSP: 002b:00007ffee207e000 EFLAGS: 00010202 [ 730.090564][T28137] RAX: 0000000000000000 RBX: 0000000000000311 RCX: 0000000000000000 [ 730.090575][T28137] RDX: 0000000040000001 RSI: 00007ffee207e07c RDI: ffffffffffffffff [ 730.090588][T28137] RBP: 00007ffee207e07c R08: 0000000000000000 R09: 0000000000000000 [ 730.090600][T28137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 730.090611][T28137] R13: 00000000000927c0 R14: 00000000000b20c4 R15: 00007ffee207e0d0 [ 730.090642][T28137] [ 730.431011][T28137] memory: usage 307200kB, limit 307200kB, failcnt 681 [ 730.497496][T28137] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 730.593816][T28137] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 730.601137][T28137] Memory cgroup stats for /syz2: [ 730.601258][T28137] cache 0 [ 730.611425][T28137] rss 0 [ 730.615049][T28137] rss_huge 0 [ 730.618251][T28137] shmem 0 [ 730.621288][T28137] mapped_file 0 [ 730.641883][T28137] dirty 0 [ 730.651646][T28137] writeback 0 [ 730.661330][T28137] workingset_refault_anon 29 [ 730.671108][T28137] workingset_refault_file 64 [ 730.676314][T28137] swap 241664 [ 730.679664][T28137] swapcached 372736 [ 730.685928][T28137] pgpgin 100106 [ 730.689519][T28137] pgpgout 100104 [ 730.693127][T28137] pgfault 214517 [ 730.698856][T28137] pgmajfault 17 [ 730.702459][T28137] inactive_anon 4096 [ 730.706785][T28137] active_anon 4096 [ 730.710502][T28137] inactive_file 0 [ 730.714671][T28137] active_file 0 [ 730.718189][T28137] unevictable 0 [ 730.722848][T28137] hierarchical_memory_limit 314572800 [ 730.730398][T28137] hierarchical_memsw_limit 9223372036854771712 [ 730.736948][T28137] total_cache 0 [ 730.740574][T28137] total_rss 0 [ 730.745272][T28137] total_rss_huge 0 [ 730.748997][T28137] total_shmem 0 [ 730.752614][T28137] total_mapped_file 0 [ 730.757119][T28137] total_dirty 0 [ 730.760579][T28137] total_writeback 0 [ 730.764852][T28137] total_workingset_refault_anon 29 [ 730.769960][T28137] total_workingset_refault_file 64 [ 730.773345][ T5881] net_ratelimit: 14 callbacks suppressed [ 730.773359][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.777356][T28137] total_swap 241664 [ 730.823458][T28137] total_swapcached 372736 [ 730.827816][T28137] total_pgpgin 100106 [ 730.852159][T28137] total_pgpgout 100104 [ 730.871083][T28137] total_pgfault 214517 [ 730.881130][T28137] total_pgmajfault 17 [ 730.893789][ T534] openvswitch: netlink: Multiple metadata blocks provided [ 730.897493][T28137] total_inactive_anon 4096 [ 730.918224][T28137] total_active_anon 4096 [ 730.928017][T28137] total_inactive_file 0 [ 730.932184][T28137] total_active_file 0 [ 730.946321][T28137] total_unevictable 0 [ 730.956458][T28137] anon_cost 0 [ 730.959761][T28137] file_cost 0 [ 730.964740][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7368'. [ 730.982896][T28137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7345,pid=453,uid=0 [ 731.015984][T28137] Memory cgroup out of memory: Killed process 453 (syz.2.7345) total-vm:115124kB, anon-rss:1236kB, file-rss:35740kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 731.089964][ T537] tunl0: entered promiscuous mode [ 731.105252][ T537] netlink: 'syz.0.7367': attribute type 3 has an invalid length. [ 731.125136][ T537] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7367'. [ 731.134464][ T541] netlink: 'syz.3.7366': attribute type 12 has an invalid length. [ 731.142376][ T541] netlink: 'syz.3.7366': attribute type 29 has an invalid length. [ 731.155440][ T541] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7366'. [ 731.253312][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 731.364572][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 731.391327][ T558] netlink: 'syz.4.7375': attribute type 1 has an invalid length. [ 731.454735][ T558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.468419][ T561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7376'. [ 731.554619][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 731.663349][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 731.785886][T10961] gretap0: left allmulticast mode [ 731.833364][T10961] bridge0: port 1(gretap0) entered disabled state [ 731.850682][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.959442][ T590] netlink: 'syz.2.7384': attribute type 1 has an invalid length. [ 732.051438][ T599] netlink: 'syz.1.7381': attribute type 1 has an invalid length. [ 732.186914][T10961] bond2 (unregistering): (slave vti1): Releasing backup interface [ 732.195082][T10961] vti1 (unregistering): left promiscuous mode [ 732.259184][T10961] dvmrp0 (unregistering): left allmulticast mode [ 732.643603][ T6711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.717065][T10961] bond1 (unregistering): Released all slaves [ 732.731174][T10961] bond2 (unregistering): Released all slaves [ 732.751825][T10961] bond0 (unregistering): Released all slaves [ 732.765566][T10961] bond3 (unregistering): Released all slaves [ 732.782988][T10961] bond4 (unregistering): (slave veth5): Releasing active interface [ 732.791579][T31266] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 732.806329][T10961] bond4 (unregistering): Released all slaves [ 732.821638][T10961] bond5 (unregistering): Released all slaves [ 732.837962][ T593] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 732.853044][ T600] netlink: 'syz.2.7384': attribute type 12 has an invalid length. [ 732.888852][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.898551][ T596] lo: entered allmulticast mode [ 732.914812][ T13] bond5: (slave bridge4): failed to get link speed/duplex [ 733.029461][T10961] tipc: Disabling bearer [ 733.108512][T10961] tipc: Left network mode [ 733.324331][ T633] netlink: 'syz.1.7391': attribute type 5 has an invalid length. [ 733.780708][ T677] __nla_validate_parse: 5 callbacks suppressed [ 733.780726][ T677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7404'. [ 733.803312][ T677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7404'. [ 733.812324][ T669] veth0: entered promiscuous mode [ 733.829225][ T669] veth0: left promiscuous mode [ 734.261961][T10961] hsr_slave_0: left promiscuous mode [ 734.268852][T10961] hsr_slave_1: left promiscuous mode [ 734.297698][T10961] veth0_macvtap: left promiscuous mode [ 734.303763][T10961] : left allmulticast mode [ 734.308532][T10961] : left promiscuous mode [ 734.492297][ T663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.655888][ T703] netlink: 'syz.3.7407': attribute type 10 has an invalid length. [ 734.701181][ T703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7407'. [ 734.794944][ T703] dummy0: entered promiscuous mode [ 734.801947][ T703] bridge0: port 4(dummy0) entered blocking state [ 734.832664][ T703] bridge0: port 4(dummy0) entered disabled state [ 734.858890][ T717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7407'. [ 734.874766][ T703] dummy0: entered allmulticast mode [ 735.040895][ T731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7413'. [ 735.254383][ T742] syzkaller1: entered promiscuous mode [ 735.262966][T10961] IPVS: stop unused estimator thread 0... [ 735.270396][ T742] syzkaller1: entered allmulticast mode [ 735.300777][ T742] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 735.321874][ T742] team0: Device macvlan3 is already an upper device of the team interface [ 735.558035][ T766] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7428'. [ 735.813313][T31266] net_ratelimit: 26 callbacks suppressed [ 735.813333][T31266] bond5: (slave bridge4): failed to get link speed/duplex [ 735.858055][ T791] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7434'. [ 735.859218][ T794] netlink: 'syz.2.7434': attribute type 1 has an invalid length. [ 735.920090][ T795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7436'. [ 735.935098][ T794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 735.981026][ T791] bond3: (slave ip6erspan0): making interface the new active one [ 736.004076][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.021400][ T791] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 736.110614][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 736.233660][ T815] team0: Device ip6gre2 is of different type [ 736.253337][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 736.365816][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 736.440506][ T845] validate_nla: 2 callbacks suppressed [ 736.440524][ T845] netlink: 'syz.1.7449': attribute type 4 has an invalid length. [ 736.523759][T31266] bond5: (slave bridge4): failed to get link speed/duplex [ 736.646015][T31265] bond5: (slave bridge4): failed to get link speed/duplex [ 736.672704][ T857] x_tables: duplicate underflow at hook 4 [ 736.763292][T31265] bond5: (slave bridge4): failed to get link speed/duplex [ 736.804348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.825646][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.959168][ T871] netlink: 'syz.3.7459': attribute type 1 has an invalid length. [ 736.975550][ T871] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7459'. [ 737.299645][ T895] netlink: 209616 bytes leftover after parsing attributes in process `syz.2.7467'. [ 740.351660][ T899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.434899][ T960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.505958][ T962] sctp: [Deprecated]: syz.3.7484 (pid 962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.505958][ T962] Use struct sctp_sack_info instead [ 740.580956][ T975] netlink: 'syz.1.7486': attribute type 83 has an invalid length. [ 740.594925][ T974] netlink: 'syz.1.7486': attribute type 4 has an invalid length. [ 740.602670][ T974] __nla_validate_parse: 1 callbacks suppressed [ 740.602682][ T974] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7486'. [ 740.652826][ T978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7487'. [ 740.731437][ T984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7489'. [ 740.844068][T13009] net_ratelimit: 44 callbacks suppressed [ 740.844087][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 740.901053][ T1000] lo speed is unknown, defaulting to 1000 [ 740.924110][ T1000] lo speed is unknown, defaulting to 1000 [ 740.938058][ T1000] lo speed is unknown, defaulting to 1000 [ 740.979822][ T1000] infiniband kyz0: RDMA CMA: cma_listen_on_dev, error -98 [ 740.987862][T10961] bond5: (slave bridge4): failed to get link speed/duplex [ 741.036738][ T1010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7496'. [ 741.047980][ T1000] lo speed is unknown, defaulting to 1000 [ 741.056724][ T1000] lo speed is unknown, defaulting to 1000 [ 741.059399][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7499'. [ 741.074138][ T1000] lo speed is unknown, defaulting to 1000 [ 741.093338][ T9093] bond5: (slave bridge4): failed to get link speed/duplex [ 741.100539][ T1000] lo speed is unknown, defaulting to 1000 [ 741.121758][ T1000] lo speed is unknown, defaulting to 1000 [ 741.126185][ T1024] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7498'. [ 741.205405][T13009] bond5: (slave bridge4): failed to get link speed/duplex [ 741.205767][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.242254][ T1026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7501'. [ 741.286889][ T1038] netlink: 'syz.3.7504': attribute type 1 has an invalid length. [ 741.313558][T31265] bond5: (slave bridge4): failed to get link speed/duplex [ 741.340712][ T1040] sit1: entered promiscuous mode [ 741.347310][ T1040] sit1: entered allmulticast mode [ 741.411731][ T1045] bond6: entered promiscuous mode [ 741.463001][ T1045] bond6: entered allmulticast mode [ 741.480337][ T1045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.509740][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 741.636361][ T1064] bond2 (unregistering): Released all slaves [ 741.672489][ T1070] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7512'. [ 741.681603][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 741.706938][ T1076] sctp: [Deprecated]: syz.2.7514 (pid 1076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.706938][ T1076] Use struct sctp_sack_info instead [ 741.803367][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 741.913914][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 741.985278][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7519'. [ 742.197329][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 742.385762][ T1132] netlink: 'syz.0.7528': attribute type 3 has an invalid length. [ 742.432354][ T1132] netlink: 'syz.0.7528': attribute type 1 has an invalid length. [ 742.549017][ T1136] team1: entered promiscuous mode [ 742.556074][ T1136] team1: entered allmulticast mode [ 742.635729][ T1136] team2: entered promiscuous mode [ 742.642003][ T1136] team2: entered allmulticast mode [ 742.649385][ T1136] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 742.662375][ T1152] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 742.677895][ T1136] team3: entered promiscuous mode [ 742.682986][ T1136] team3: entered allmulticast mode [ 742.709491][ T1136] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 742.746261][ T1136] team4: entered promiscuous mode [ 742.751429][ T1136] team4: entered allmulticast mode [ 742.758096][ T1136] team5 (uninitialized): Failed to send options change via netlink (err -105) [ 742.789055][ T1136] team5: entered promiscuous mode [ 742.795117][ T1136] team5: entered allmulticast mode [ 742.801482][ T1136] team6 (uninitialized): Failed to send options change via netlink (err -105) [ 742.832219][ T1136] team6: entered promiscuous mode [ 742.838012][ T1136] team6: entered allmulticast mode [ 742.844381][ T1158] bridge_slave_1: default FDB implementation only supports local addresses [ 742.862503][ T1136] team7 (uninitialized): Failed to send options change via netlink (err -105) [ 742.890232][ T1136] team7: entered promiscuous mode [ 742.897772][ T1136] team7: entered allmulticast mode [ 742.932461][ T1136] team8 (uninitialized): Failed to send options change via netlink (err -105) [ 743.001524][ T1168] xt_TCPMSS: Only works on TCP SYN packets [ 743.020291][ T1136] team8: entered promiscuous mode [ 743.065989][ T1136] team8: entered allmulticast mode [ 743.072768][ T1136] team9 (uninitialized): Failed to send options change via netlink (err -105) [ 743.104401][ T1136] team9: entered promiscuous mode [ 743.109452][ T1136] team9: entered allmulticast mode [ 743.119814][ T1136] team10 (uninitialized): Failed to send options change via netlink (err -105) [ 743.182361][ T1136] team10: entered promiscuous mode [ 743.191884][ T1136] team10: entered allmulticast mode [ 743.211630][ T1136] team11 (uninitialized): Failed to send options change via netlink (err -105) [ 743.247337][ T1136] team11: entered promiscuous mode [ 743.252821][ T1136] team11: entered allmulticast mode [ 743.264731][ T1136] team12 (uninitialized): Failed to send options change via netlink (err -105) [ 743.345923][ T1136] team12: entered promiscuous mode [ 743.351229][ T1136] team12: entered allmulticast mode [ 743.535694][ T1209] netlink: 'syz.0.7550': attribute type 1 has an invalid length. [ 743.712202][ T1226] netlink: 'syz.2.7556': attribute type 1 has an invalid length. [ 743.903029][ T1247] veth0: entered allmulticast mode [ 744.279177][ T1278] netlink: 'syz.0.7571': attribute type 10 has an invalid length. [ 744.300391][ T1278] veth0_macvtap: left promiscuous mode [ 744.484701][ T1296] IPv6: sit1: Disabled Multicast RS [ 745.930711][ T6719] net_ratelimit: 26 callbacks suppressed [ 745.930730][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.953328][ T74] bond5: (slave bridge4): failed to get link speed/duplex [ 745.982020][ T1316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.999750][ T1315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.054202][ T1320] __nla_validate_parse: 23 callbacks suppressed [ 746.054224][ T1320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7584'. [ 746.070322][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 746.088783][ T1326] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7586'. [ 746.094279][ T1315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.158402][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7587'. [ 746.233930][T31262] bond5: (slave bridge4): failed to get link speed/duplex [ 746.257483][ T1337] C: renamed from lo (while UP) [ 746.323724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.332559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.407699][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.469484][ T1337] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 746.521661][T23042] bond5: (slave bridge4): failed to get link speed/duplex [ 746.654117][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 746.703636][ T1361] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7595'. [ 746.785052][ T1370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7599'. [ 746.848031][ T1372] : entered promiscuous mode [ 746.867159][ T1376] netlink: 'syz.4.7601': attribute type 32 has an invalid length. [ 746.875748][ T1376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7601'. [ 746.929321][ T1376] bond6: option coupled_control: invalid value (2) [ 746.938520][ T1381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7603'. [ 746.949715][ T1376] bond6 (unregistering): Released all slaves [ 747.031745][ T1386] bond0: entered promiscuous mode [ 747.037516][ T1386] bond_slave_0: entered promiscuous mode [ 747.068889][ T1386] bond_slave_1: entered promiscuous mode [ 747.078460][ T1386] batadv0: entered promiscuous mode [ 747.084880][ T1386] debugfs: 'hsr1' already exists in 'hsr' [ 747.090684][ T1386] Cannot create hsr debugfs directory [ 747.096495][ T1386] hsr1: entered promiscuous mode [ 747.101461][ T1386] hsr1: entered allmulticast mode [ 747.108066][ T1386] bond0: entered allmulticast mode [ 747.114594][ T1386] bond_slave_0: entered allmulticast mode [ 747.120770][ T1386] bond_slave_1: entered allmulticast mode [ 747.128054][ T1386] batadv0: entered allmulticast mode [ 747.134711][ T1386] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 747.142790][ T1386] bond0: left promiscuous mode [ 747.149178][ T1386] bond_slave_0: left promiscuous mode [ 747.155590][ T1386] bond_slave_1: left promiscuous mode [ 747.164489][ T1386] batadv0: left promiscuous mode [ 747.642102][ T1434] tipc: Enabled bearer , priority 0 [ 747.726263][ T1436] netlink: 18 bytes leftover after parsing attributes in process `syz.1.7617'. [ 747.795673][ T1434] syzkaller0: entered promiscuous mode [ 747.801230][ T1434] syzkaller0: entered allmulticast mode [ 747.816884][ T1434] tipc: Resetting bearer [ 747.938988][ T1450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7621'. [ 748.014916][T31262] tipc: Resetting bearer [ 748.117297][ T1439] tipc: Resetting bearer [ 748.169989][ T1461] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7624'. [ 748.390673][ T1469] netlink: 'syz.0.7623': attribute type 1 has an invalid length. [ 748.399705][ T1469] netlink: 'syz.0.7623': attribute type 3 has an invalid length. [ 748.412254][ T1469] NCSI netlink: No device for ifindex 813332851 [ 749.124532][T23136] Bluetooth: hci0: command 0x0c1a tx timeout [ 749.678352][ T1439] tipc: Disabling bearer [ 749.697307][ T6719] tipc: Node number set to 870764705 [ 750.150283][ T5880] hid-generic 0005:14C0:5508.0005: item fetching failed at offset 0/1 [ 750.176286][ T5880] hid-generic 0005:14C0:5508.0005: probe with driver hid-generic failed with error -22 [ 750.298655][ T1537] gtp1: entered promiscuous mode [ 750.316731][ T1537] gtp1: entered allmulticast mode [ 750.401134][ T1526] vxcan1 speed is unknown, defaulting to 1000 [ 750.727445][ T30] audit: type=1107 audit(1772894970.475:15): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 750.978671][ T1584] [ 750.981037][ T1584] ====================================================== [ 750.988041][ T1584] WARNING: possible circular locking dependency detected [ 750.995146][ T1584] syzkaller #0 Not tainted [ 750.999548][ T1584] ------------------------------------------------------ [ 751.006546][ T1584] syz.3.7653/1584 is trying to acquire lock: [ 751.012505][ T1584] ffffffff8fd49bf8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 751.022138][ T1584] [ 751.022138][ T1584] but task is already holding lock: [ 751.029491][ T1584] ffffffff8fd49b98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 751.039069][ T1584] [ 751.039069][ T1584] which lock already depends on the new lock. [ 751.039069][ T1584] [ 751.049455][ T1584] [ 751.049455][ T1584] the existing dependency chain (in reverse order) is: [ 751.058451][ T1584] [ 751.058451][ T1584] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 751.066449][ T1584] _raw_spin_lock_bh+0x36/0x50 [ 751.071771][ T1584] nr_rt_ioctl+0x40c/0xf90 [ 751.076707][ T1584] sock_do_ioctl+0x101/0x320 [ 751.081894][ T1584] sock_ioctl+0x5c6/0x7f0 [ 751.086731][ T1584] __se_sys_ioctl+0xfc/0x170 [ 751.091842][ T1584] do_syscall_64+0x14d/0xf80 [ 751.096951][ T1584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.103360][ T1584] [ 751.103360][ T1584] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 751.111360][ T1584] _raw_spin_lock_bh+0x36/0x50 [ 751.116640][ T1584] nr_rt_ioctl+0x215/0xf90 [ 751.121573][ T1584] sock_do_ioctl+0x101/0x320 [ 751.126675][ T1584] sock_ioctl+0x5c6/0x7f0 [ 751.131511][ T1584] __se_sys_ioctl+0xfc/0x170 [ 751.136613][ T1584] do_syscall_64+0x14d/0xf80 [ 751.141718][ T1584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.148119][ T1584] [ 751.148119][ T1584] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 751.155931][ T1584] __lock_acquire+0x15a5/0x2cf0 [ 751.161297][ T1584] lock_acquire+0xf0/0x2e0 [ 751.166223][ T1584] _raw_spin_lock_bh+0x36/0x50 [ 751.171502][ T1584] nr_rt_device_down+0xbe/0x860 [ 751.176866][ T1584] nr_device_event+0x137/0x150 [ 751.182145][ T1584] notifier_call_chain+0x1be/0x400 [ 751.187803][ T1584] __dev_notify_flags+0x16d/0x310 [ 751.193468][ T1584] netif_change_flags+0xe8/0x1a0 [ 751.198932][ T1584] dev_change_flags+0x130/0x260 [ 751.204334][ T1584] dev_ioctl+0x7b4/0x1150 [ 751.209237][ T1584] sock_do_ioctl+0x23e/0x320 [ 751.214336][ T1584] sock_ioctl+0x5c6/0x7f0 [ 751.219179][ T1584] __se_sys_ioctl+0xfc/0x170 [ 751.224278][ T1584] do_syscall_64+0x14d/0xf80 [ 751.229386][ T1584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.235789][ T1584] [ 751.235789][ T1584] other info that might help us debug this: [ 751.235789][ T1584] [ 751.245999][ T1584] Chain exists of: [ 751.245999][ T1584] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 751.245999][ T1584] [ 751.259808][ T1584] Possible unsafe locking scenario: [ 751.259808][ T1584] [ 751.267267][ T1584] CPU0 CPU1 [ 751.272613][ T1584] ---- ---- [ 751.277971][ T1584] lock(nr_neigh_list_lock); [ 751.282640][ T1584] lock(&nr_node->node_lock); [ 751.289911][ T1584] lock(nr_neigh_list_lock); [ 751.297109][ T1584] lock(nr_node_list_lock); [ 751.301703][ T1584] [ 751.301703][ T1584] *** DEADLOCK *** [ 751.301703][ T1584] [ 751.309839][ T1584] 2 locks held by syz.3.7653/1584: [ 751.314938][ T1584] #0: ffffffff8fbcd788 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 751.323735][ T1584] #1: ffffffff8fd49b98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 751.333752][ T1584] [ 751.333752][ T1584] stack backtrace: [ 751.339644][ T1584] CPU: 1 UID: 0 PID: 1584 Comm: syz.3.7653 Not tainted syzkaller #0 PREEMPT(full) [ 751.339668][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 751.339679][ T1584] Call Trace: [ 751.339687][ T1584] [ 751.339695][ T1584] dump_stack_lvl+0xe8/0x150 [ 751.339722][ T1584] print_circular_bug+0x2e1/0x300 [ 751.339749][ T1584] check_noncircular+0x12e/0x150 [ 751.339774][ T1584] __lock_acquire+0x15a5/0x2cf0 [ 751.339803][ T1584] ? __lock_acquire+0x6b5/0x2cf0 [ 751.339827][ T1584] lock_acquire+0xf0/0x2e0 [ 751.339846][ T1584] ? nr_rt_device_down+0xbe/0x860 [ 751.339872][ T1584] ? nr_rt_device_down+0xbe/0x860 [ 751.339896][ T1584] _raw_spin_lock_bh+0x36/0x50 [ 751.339917][ T1584] ? nr_rt_device_down+0xbe/0x860 [ 751.339940][ T1584] nr_rt_device_down+0xbe/0x860 [ 751.339963][ T1584] ? nr_device_event+0x12f/0x150 [ 751.339988][ T1584] nr_device_event+0x137/0x150 [ 751.340010][ T1584] notifier_call_chain+0x1be/0x400 [ 751.340038][ T1584] __dev_notify_flags+0x16d/0x310 [ 751.340063][ T1584] ? __pfx___dev_notify_flags+0x10/0x10 [ 751.340085][ T1584] ? __dev_change_flags+0x4c6/0x690 [ 751.340109][ T1584] ? kasan_quarantine_put+0xbb/0x1f0 [ 751.340126][ T1584] ? __pfx___dev_change_flags+0x10/0x10 [ 751.340150][ T1584] ? full_name_hash+0x92/0xe0 [ 751.340174][ T1584] netif_change_flags+0xe8/0x1a0 [ 751.340200][ T1584] dev_change_flags+0x130/0x260 [ 751.340224][ T1584] dev_ioctl+0x7b4/0x1150 [ 751.340246][ T1584] sock_do_ioctl+0x23e/0x320 [ 751.340265][ T1584] ? __pfx_sock_do_ioctl+0x10/0x10 [ 751.340282][ T1584] ? do_futex+0x395/0x420 [ 751.340309][ T1584] sock_ioctl+0x5c6/0x7f0 [ 751.340326][ T1584] ? __pfx_sock_ioctl+0x10/0x10 [ 751.340344][ T1584] ? __fget_files+0x2a/0x420 [ 751.340367][ T1584] ? __fget_files+0x3a0/0x420 [ 751.340388][ T1584] ? __fget_files+0x2a/0x420 [ 751.340412][ T1584] ? bpf_lsm_file_ioctl+0x9/0x20 [ 751.340433][ T1584] ? __pfx_sock_ioctl+0x10/0x10 [ 751.340449][ T1584] __se_sys_ioctl+0xfc/0x170 [ 751.340469][ T1584] do_syscall_64+0x14d/0xf80 [ 751.340493][ T1584] ? trace_irq_disable+0x3b/0x150 [ 751.340516][ T1584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.340533][ T1584] ? clear_bhb_loop+0x40/0x90 [ 751.340551][ T1584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.340567][ T1584] RIP: 0033:0x7fd44e99c799 [ 751.340584][ T1584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.340599][ T1584] RSP: 002b:00007fd44cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.340618][ T1584] RAX: ffffffffffffffda RBX: 00007fd44ec16090 RCX: 00007fd44e99c799 [ 751.340630][ T1584] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 751.340642][ T1584] RBP: 00007fd44ea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 751.340652][ T1584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.340662][ T1584] R13: 00007fd44ec16128 R14: 00007fd44ec16090 R15: 00007ffffcc44418 [ 751.340680][ T1584] [ 751.632039][ T6041] net_ratelimit: 25 callbacks suppressed [ 751.632055][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.645830][ T6712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.661235][T23042] bond5: (slave bridge4): failed to get link speed/duplex [ 751.670372][ T1526] C speed is unknown, defaulting to 1000 [ 751.678244][ T1586] __nla_validate_parse: 3 callbacks suppressed [ 751.678258][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7655'. [ 751.694872][ T1579] siw: device registration error -23 [ 751.710644][ T1586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7655'. [ 751.778755][ T1052] bond5: (slave bridge4): failed to get link speed/duplex [ 751.893606][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 752.003606][ T6712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.003764][ T1052] bond5: (slave bridge4): failed to get link speed/duplex [ 752.123597][ T1052] bond5: (slave bridge4): failed to get link speed/duplex [ 752.233569][T31262] bond5: (slave bridge4): failed to get link speed/duplex [ 752.343291][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 756.703617][T23372] net_ratelimit: 43 callbacks suppressed [ 756.703638][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 756.803904][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.823566][ T1052] bond5: (slave bridge4): failed to get link speed/duplex [ 756.933580][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 757.043569][ T1052] bond5: (slave bridge4): failed to get link speed/duplex [ 757.153648][T23372] bond5: (slave bridge4): failed to get link speed/duplex [ 757.273573][T31262] bond5: (slave bridge4): failed to get link speed/duplex [ 757.283464][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.383756][T31262] bond5: (slave bridge4): failed to get link speed/duplex [ 757.493595][ T12] bond5: (slave bridge4): failed to get link speed/duplex