last executing test programs: 2.712147024s ago: executing program 1 (id=1799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x8}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x1a000201d}) close(r3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r6}, 0x38) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x67}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) 2.226480253s ago: executing program 2 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x12d, &(0x7f0000000100)={@random="be4d7c686877", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x36, 0x4, 0x0, 0x1e, 0x117, 0x64, 0x0, 0x2, 0x21, 0x0, @multicast2, @multicast1, {[@noop, @end, @rr={0x7, 0xf, 0x7a, [@multicast1, @remote, @multicast1]}, @timestamp_addr={0x44, 0x4, 0xaf, 0x1, 0x6}, @end, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0xc, [{@loopback, 0x6}, {@empty, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0x2}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xb4}, {@loopback}, {@loopback, 0x7ff}]}, @generic={0x44, 0x4, "f45a"}, @timestamp_addr={0x44, 0x54, 0xb1, 0x1, 0xa, [{@multicast1, 0x8}, {@multicast2, 0x8}, {@broadcast, 0x4}, {@loopback, 0x9}, {@empty, 0xfffffffb}, {@loopback, 0x909f}, {@loopback, 0x3ff}, {@empty, 0x4}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0xec4}]}, @lsrr={0x83, 0xb, 0x24, [@empty, @multicast2]}, @rr={0x7, 0x7, 0x85, [@multicast1]}]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x0, "e77599", 0x51, "525383"}, "b2385ac3ffe1ebab3008c12cdced46ae2f7f61e19bb2ba7aa2f834c3295d554e8b4a2c03ae2142a6c864cf01cf052a"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0xff, 0xb45, 0x239, 0x974]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000000000000000000000000000006050001"], 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x0) 2.029146526s ago: executing program 2 (id=1812): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x3c, r7, 0x607, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x4008000) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x50) 1.975216399s ago: executing program 1 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r0) 1.873207855s ago: executing program 3 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 1.833718302s ago: executing program 0 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r0, @ANYBLOB="590123809542d4912acea6c2a67d2baa4aa8043fe21dae7c2c095655b2fa25cc65a17fc77fa653210b7c0fce9c96f3e60f82eaa7bd8dbb3fff64c0f3b6029345ad92ce2bc4f40a4ef463dfa58d4b002f2f9ba78811a69294da38c9d1f56bf4a8c60e8a8f852036a60aba986804009f8008001e000600000067ca43cec3ad3fffcb4f4ead06be3ff342037b3565bb4e6a7408e629e42e4e80cccad28015d25cbe59315c3bbb49e2bc2d5f3d36708a8023c3401d3dd8a348b591d9654f94e8965119f7355ec5b058b1599b9daffeee0056088600be00708f351745d53e502e56356916b733c51db948d6769ce7f52e7c5cd4a32d898f5cbb7776d60a9d41972931ddaf957cef1388b3775364d48e2bc64798a17a43ff3ec4adfba0f2dac85fa0675767d5489fcd66f581ae0492db512a2ec19a723432a391ffd1bb26c4fb339892b4860b67245d3590579f1f68b83097f53ccf94e0e2dfa00000000000f7c275d0093816ad1560f29cf45c1faa05436f722dd3ec0259c8e387658641be12dc21d2815f0441efc9d61d7a07369532c79023ed006fbe5d1e1ece72fd969d956f704e62fecb9e61fef78f1a6dff894d9adee12d08c151f5f67302be6f021d84a5c60f8f1b502e70b527327ccac8c989018eddedee145291d2bdb4e7c4cbd32fd49e7d7a8bd0f87167a5b529660dc89b9c9f968ead0facea4be31a8eaa491900080002"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.799225308s ago: executing program 4 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x9c, &(0x7f0000000340)=""/156, 0x41100, 0x10, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x3ed9, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000540)=[r6], &(0x7f0000000580)=[{0x3, 0x3, 0x0, 0x3}, {0x4, 0x4, 0x3, 0x6}, {0x4, 0x3, 0x4}, {0x1, 0x4, 0xc, 0x1}, {0x2, 0x5, 0xc}, {0x1, 0x1, 0x0, 0x5}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x2, 0x2, 0x9}, {0x2, 0x1, 0x5}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0x9}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x6c, 0xb, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x3ff, [0x401, 0x9]}}, @generic={0x20, 0x3c, "1073a485d7288ad769e163030e1c47e76c564e84dda84751dc8445df18381a536a898e97404342756af90869671e256cb15e7a9c70005a9b1b5fa4b3"}]}, 0x60) syz_extract_tcp_res(&(0x7f0000000700)={0x41424344, 0x41424344}, 0x6, 0x7e) syz_emit_ethernet(0x8a, &(0x7f0000000740)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x54, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, r7, 0x0, 0x4, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "fbfe331abf39566a672d843d4240008c"}, @generic={0xdd, 0x6, "fc5549cc"}, @fastopen={0x22, 0x6, "41804c0f"}, @exp_fastopen={0xfe, 0x13, 0xf989, "5a520c98c4f110a6a9d1ad685f1f73"}, @timestamp={0x8, 0xa, 0x7, 0x40}]}}}}}}}}, 0x0) 1.649060026s ago: executing program 2 (id=1817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x7}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x18c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x3, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @broadcast, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x205, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @broadcast, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc010) 1.646970998s ago: executing program 3 (id=1818): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x53f2}]}}]}, 0x48}}, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r6, 0x0, {0x1, 0x1, 0x1}, 0x1}, 0x18) 1.644354044s ago: executing program 0 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000003c0)=0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a919733469"], 0x28}}, 0xc000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a494}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x28004000) 1.555108876s ago: executing program 1 (id=1820): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xc5) (rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48c32f8fdfdd8b0427acde3bd4c532c838f3bba91b8979f4f94e31564c63017f6750760caa7cd6bea51a3eb904f322110d89dc80020ecdae907a494d3b0c2b0342199cfbc0b7566738d1fec51db87e34d99a7e3b9b90daae06a853538978c21d5619ccd66663dccbbb3bba34ae4e6adaece99a89e5cbd20bdc8648a60bd812e4245b8e0a75de39f76851acf63ab7aa7f50e18dec0aff37dac48a0a55fc1dfb28300e1c8ad1de83edd0d11ed31fb0", 0xcf, 0x8000000, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1.545685303s ago: executing program 4 (id=1821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173d6642b742d6c69"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000002c0)={r5, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)={r5, 0x2, 0xcd, "01aa350aafe0e1d3275e448e049fef80deb20d42c7bb7312bb681f8c5c2384503be6a1481b6af37c69fe2a6e4f6413013130f97204a13dd153486821277cb6c92415efe25a9b9c636daba41db2e6de8c5b2b203f183a5427f9e05a463d8fc7cca35a3148e76007e2502bb40df556bfe865e635a981af1fc24d984b53a96d0bd1e5d3a05d5438bcdba172f28e8eeb1f604dded4d55d5c140823b40100567cdc5a794d175dc5b72bf230aeb4ceeabb0ab8e3d1d435d2d4f320a06156f0d6ba21251c50e2d11b7f56ddddaf386ed2"}, 0xd5) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xf}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) 1.477188912s ago: executing program 2 (id=1822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, 0x0, 0x0) 1.297225398s ago: executing program 1 (id=1823): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) 1.092688101s ago: executing program 3 (id=1824): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) ioctl(r2, 0x2800000, &(0x7f0000000100)="397a6875cd37e18b30274b35e2b83e7fd55efaa5459ece8db19577541432b8c2453593983991b3ce6e1a4d089b74aefe48fe266f1c92506bd80f21d00b69c5e0ed1569394f887b12de879bd35c592c8bd9733833c361400793d0429937cdb1") write$cgroup_int(r1, &(0x7f0000000180)=0x7ff, 0x12) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000001c0)={0x0, 0x8, 0xea4d}) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='block_plug\x00', r1, 0x0, 0x1}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) r5 = getpid() write$cgroup_pid(r1, &(0x7f0000000ac0)=r5, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000b00)={0x0, 'wlan0\x00', 0x4}, 0x18) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000b40)="f2f7646ac7dd1320ca7f50ef53c96da4c0fcb02b7e45e2f30b893af58dfd22e55ddd18d796092a493cc268250f72c11676c9e6ad1912bf61a56cb2add92eb735f1e439812eb6491b0e3513c08664207d1d1060a017e43eea10", 0x59) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000c00)) r7 = accept$inet(r1, 0x0, &(0x7f0000000c40)) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x802) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, 0x1, 0x4, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4084) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001040)) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf49b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000001180)={0xfa, 0x2, 0x2}, 0xc) 1.021050742s ago: executing program 0 (id=1825): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x3, [@float={0x3, 0x0, 0x0, 0x10, 0x4}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x5}, {0x10, 0xd00}]}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @struct={0x2, 0x5, 0x0, 0x4, 0x1, 0xfffffff7, [{0x4, 0x5, 0x80}, {0x2, 0x4, 0xa}, {0x2, 0x1, 0x100}, {0xf, 0x1, 0x2}, {0x7, 0x5, 0x3ff}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0xc}, {0xf, 0x4}, {0x8, 0x5}, {0x8, 0x5}]}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xa}, {0x1}, {0x12, 0x4}, {0x8, 0xfffffff7}, {0x7, 0x5}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/24, 0x10b, 0x18, 0x1, 0xc}, 0x28) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="71050528024bc854705c01ec710604034ecb8d"], 0x13) unshare(0x26020480) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1.019285447s ago: executing program 4 (id=1826): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}]}}]}, 0x3c}}, 0x24000041) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x48880) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x1548, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x8ddd}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x14f8, 0x2, [@TCA_CGROUP_ACT={0x210, 0x1, [@m_nat={0x120, 0x4, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x1, 0x10000003, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0xe}, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x12, 0x1, 0x8, 0x8, 0x9b43}, @broadcast, @local, 0xff}}]}, {0xa8, 0x6, "2c3de40c49275a4f8d81a3342023d56a7401b9d1c3265f71fc1774df3d3d279e8820c38fca79745367a70688d897f71614641625a48492b52ef454bf1c6a01d10dbdd0ec8130f14971fab6fbd479af827aa5c5ef244265efe876be1a6241694779fddb05bc63a1ddd4bcac036ccaac86df5644a4686e204781079a79c788d9781f6b46073d06530ac908a0c40b9da4fca8ca563eb45f6b479388fd8e368a048de7243b8e"}, {0xc, 0x7, {0xf68a6cf83c266796, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xec, 0xb, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4d, 0x5, 0x4, 0x275}}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}]}, {0x82, 0x6, "a4b1d2a1aefbdb14ffd19525d4701554d31c1de771943c9417a10cfcb560a6e126a628a5736fa85bbd9a737671ebdc327cda536a96263f92721ef8be2af16e054bad718c475af693daa71cac292631f26409a302da128b1cc0ade38ca1ba52b2d10703afdab52d4cbd7d040eda379c218f93b5d94860ea69cb6b021fa7dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x104c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe3, 0x5, 0x3, 0x3, 0xfffffbff, 0x5, 0x1ff, 0x5, 0x80, 0x18, 0x3, 0x800, 0x8, 0x4547, 0x2436, 0xe, 0x1, 0x5, 0x5, 0xd, 0x101, 0x6, 0x7, 0x3, 0x1, 0x1, 0x2, 0x2, 0x7a, 0x7, 0x0, 0x5, 0x1ff, 0x19cc0, 0x9, 0x2000200, 0x3, 0xfff, 0x762, 0x2, 0xd1, 0x400, 0x3ff, 0x1, 0x81, 0x3, 0xff, 0x7, 0xfffffff9, 0x3, 0x9, 0x4, 0x8000, 0xc, 0x69c, 0x4, 0xd8b, 0x8, 0xe, 0x1, 0x0, 0x8, 0x4, 0xbf1, 0x17f80000, 0xff, 0x37800000, 0x8, 0x1, 0x9, 0xe51, 0x7, 0x200, 0x8, 0x5, 0x8, 0xae86, 0x8, 0x7db00000, 0x1, 0x6, 0xffffffff, 0x5, 0x6, 0x8, 0x55995dd7, 0xfffffffa, 0x3, 0x400, 0x2, 0x0, 0x55d8324b, 0xfffffffb, 0x80, 0x1, 0x58, 0x2, 0xb, 0x7f, 0x401, 0x1, 0x7, 0x4, 0x4, 0x4, 0x2, 0xfffffff5, 0xb52f, 0x81, 0x8, 0xfff, 0x5b48, 0xeed, 0x5, 0x1e0, 0x9, 0x3, 0x8, 0x3, 0x1, 0x3385df3c, 0x80, 0x4448, 0xfffffc42, 0x1, 0xc54, 0x5, 0x2, 0x5, 0x3, 0x200, 0x12, 0x80000000, 0x8, 0x0, 0x0, 0x6, 0x800, 0x101, 0x0, 0x8, 0x3, 0xff, 0x4, 0x1d8, 0x9, 0x8, 0x50, 0x4, 0x5, 0x10, 0x7, 0x4, 0x2, 0x7ff, 0x7, 0x5, 0x76f, 0x5, 0x74, 0x7fff, 0x3, 0x6, 0x7fffffff, 0x5, 0xcd2, 0x0, 0xa, 0x0, 0xfb, 0xa, 0x18000, 0x5, 0x8, 0x8, 0x7, 0x400, 0x2, 0x2, 0x4, 0xe, 0x5, 0x100, 0x2, 0x7, 0x1000, 0xfffffc92, 0xffff9e62, 0x2, 0x5, 0x2, 0x4308, 0x4, 0x7fff, 0x6, 0x38, 0x7f9a, 0x401, 0x6, 0x5, 0x400, 0x0, 0xffffffff, 0x9, 0x3ff, 0xb67, 0x4, 0x29a83361, 0x6, 0xfffffff7, 0x1646, 0xfffffffa, 0x3, 0x3, 0xaf9, 0x40, 0x0, 0x1b11, 0xc, 0xfffffeff, 0x9, 0x7, 0x80000000, 0x80, 0x9, 0x8, 0x3d, 0x0, 0x1ab, 0x40, 0xa3d7, 0xa, 0xf, 0x68907e22, 0xa30, 0xfffffffa, 0x7, 0x7, 0x8, 0x5c71d5a3, 0x80000000, 0xa, 0xf, 0x7, 0x8, 0xbd, 0x8d3, 0x923, 0x4, 0x8000, 0x3, 0x80000000, 0xda, 0x8, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x69a, 0xffffff63, 0xfffffffa, 0x401, 0xa8c, 0x8, 0x4, 0x8, 0x800, 0x3, 0x4, 0x8, 0x800, 0x9, 0x1, 0x5, 0x8, 0x9, 0x1, 0x4b64ab92, 0x7, 0x59e, 0x2, 0xff, 0x2, 0x7, 0x2, 0xb, 0x4, 0xfffffff0, 0x34, 0x48ab38c0, 0xfffffff9, 0x2, 0x0, 0x1, 0xfffffff9, 0x1, 0x0, 0x101, 0x9, 0x7, 0x7, 0x1, 0xff, 0x7f, 0xfffff761, 0x3, 0x2, 0x4, 0x401, 0xfffffffd, 0x5, 0xfffffffa, 0x3ff, 0x8, 0x4, 0x10, 0xfffffff7, 0x0, 0x147e, 0x2, 0x2, 0x200, 0x224, 0x9046, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7f, 0x3, 0x9, 0x4, 0x1, 0x8, 0x7, 0x1, 0x1f, 0x9, 0xfffffc01, 0x5, 0xee, 0x3, 0x1, 0x1, 0xfffffffe, 0x101, 0x80000001, 0x8, 0x6, 0x0, 0x9, 0x9, 0x5, 0x3, 0x34db, 0x9, 0x8, 0x3, 0x7ff, 0x8001, 0x5, 0x4, 0x0, 0xbf6, 0x1, 0x0, 0x9, 0x2, 0x8, 0x7fff, 0x8, 0x9, 0x7, 0xa6, 0x4, 0x3, 0x5, 0x400, 0x0, 0xfffff000, 0xd483, 0x0, 0x4, 0x5b7710db, 0x77, 0x1, 0x1, 0xc7, 0x2, 0x4, 0x9, 0x7f, 0x0, 0x1, 0x4, 0x8, 0x8, 0x3, 0x206c, 0xb47f, 0x8, 0x7, 0x7, 0x4, 0x0, 0x5, 0x7, 0x8, 0x9fd0, 0x8001, 0x5, 0x4, 0x8, 0x6, 0x9, 0x3ff, 0x6, 0x7f, 0x800, 0xfcb, 0xe, 0x8001, 0x1, 0x7f, 0x0, 0x63, 0x9, 0x4, 0x1e5de66f, 0x5, 0x2, 0x1, 0x1a3d7ede, 0xfffffffe, 0x9, 0xff, 0x3, 0x0, 0xf, 0xffffffff, 0xe, 0x3, 0xffffffeb, 0x8, 0x2, 0x9, 0x1, 0x9, 0x6, 0x10000, 0xfffffffa, 0x5, 0x7, 0x7, 0x5, 0x9, 0x80000000, 0x2, 0x9, 0x1, 0x2, 0x5, 0xfffffe01, 0x10, 0x9, 0x9, 0x3, 0xa1a5, 0x5, 0x8, 0x3, 0x8, 0x1, 0x1, 0x5c7f7f9c, 0x1ff, 0x6, 0x7fff, 0xd, 0x100, 0x4, 0xfffffffc, 0x6, 0xc, 0x3, 0x5, 0x31, 0x4, 0x7, 0xffffffff, 0x8, 0x6, 0x5, 0x8, 0x7, 0x400, 0x2, 0x10000, 0x1000, 0x4, 0x1800000, 0x8, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x7ff, 0x4, 0x7f, 0x9, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x59, 0xbbc, 0x3, 0xce, 0x0, 0x5, 0x5, 0x5, 0x0, 0x6, 0x6, 0x3, 0x6, 0xc, 0x8, 0x8, 0xa00, 0x10, 0x1c2e, 0x9, 0x3, 0x9fd, 0x7, 0x7f, 0x6, 0x50, 0x2, 0x1000, 0x7, 0x32b4, 0x1c21, 0x1, 0xf, 0x7869402d, 0x99, 0x0, 0x9, 0x6, 0x100, 0x80, 0x4, 0x6, 0xfffffffd, 0x8, 0x0, 0x7, 0x0, 0x8, 0x1, 0x1, 0xdf97, 0x37, 0x1, 0x3, 0x7, 0x8, 0x0, 0x1, 0x5, 0x8, 0x3, 0x8, 0x0, 0x5, 0x4877, 0x714, 0x9, 0x7, 0x10000, 0x6668, 0x7fff, 0xd8, 0x8001, 0x8000, 0x10000, 0xe, 0x9, 0x8000, 0x6b86, 0x3, 0x0, 0x2, 0x6, 0x4, 0x7ff, 0x101, 0x9a, 0x8, 0x10000, 0x0, 0x7ac3, 0x3, 0xc, 0x2, 0x6, 0x1, 0xa, 0x4, 0x3, 0x5, 0x243a, 0x4, 0x400, 0x3, 0x2711, 0x0, 0x7e0f, 0x10001, 0x5, 0x0, 0x1, 0x1, 0x43b, 0x0, 0x6, 0x1992, 0x2, 0x4, 0x1, 0x2c4, 0x3, 0xd, 0x0, 0x200, 0x1, 0x5, 0x5, 0x4, 0x109, 0x1ff, 0x4, 0x1, 0x80000000, 0x838, 0x5, 0x7, 0x8, 0xb0b, 0xc, 0x59f4, 0xb, 0x8, 0x3cb5, 0x5, 0x81, 0x4, 0x7, 0xf, 0x7, 0x6, 0x101, 0x200, 0x9, 0xfffffff8, 0x10, 0xc, 0x1, 0xb4, 0x4, 0x6, 0x1, 0xca, 0x0, 0x0, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x7, 0x0, 0x5b, 0x0, 0xf, 0x8, 0x1, 0x1bc, 0x1, 0x7, 0xffffffff, 0x8, 0xaef, 0xd, 0x8, 0x93b8, 0x1, 0x5, 0xa, 0x1, 0x3f6, 0x6, 0x7, 0x8, 0x6, 0x1, 0x9, 0x5, 0x4, 0x7, 0xe74, 0xb, 0xf9, 0x9, 0x2, 0x80000000, 0xc, 0x2f, 0x34, 0xb, 0x1, 0x0, 0x3f52, 0x7, 0x6, 0x4, 0xd, 0x93d, 0x1ff, 0x2, 0x0, 0x0, 0xfffffffa, 0x579, 0x6, 0x8, 0x8, 0x0, 0x1, 0x1, 0x10001, 0x4, 0x7fffffff, 0xfffffc00, 0xfffffff8, 0xff, 0x1cf, 0x0, 0x3, 0xffffff01, 0xff, 0x10000, 0x21bd1f0f, 0x6, 0x80000001, 0x0, 0xfffffffc, 0x5, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1, 0xb, 0x60, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbaeb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x36, 0xed, 0x1ff, 0x7, 0x9, 0x14, 0x6, 0xf0b5, 0x1, 0x4, 0x0, 0x57ae, 0x9363, 0x100, 0x2, 0x2, 0xd, 0x6, 0x1, 0x100, 0x4, 0x3ff, 0x6, 0xb2, 0xdb, 0x9, 0xfffffffa, 0x5, 0x9, 0x6, 0xe232, 0x4, 0x4da2, 0x2, 0x8, 0x2, 0x6, 0x4b7, 0xfffffff7, 0x6, 0x3, 0x7, 0x3, 0xfa, 0x8, 0x8001, 0x1, 0x3, 0x2, 0x101, 0xb86, 0x8, 0x4, 0x1, 0x8, 0xff, 0x6743, 0x8, 0x9, 0x1, 0x3, 0xd6, 0x1, 0x9, 0x6b, 0x3, 0x245, 0x8, 0x400, 0x3, 0x3, 0x3, 0x3, 0x2, 0x9, 0x0, 0x188a, 0x7, 0x10001, 0x436, 0x8000, 0x18, 0x5, 0x100, 0x101, 0x8, 0x8, 0x1, 0x20000000, 0x2, 0xffff, 0x9, 0x800, 0xfca, 0x4, 0x40, 0x8, 0x5, 0x1ff, 0x570000, 0x0, 0x4, 0xb, 0x10000, 0xc, 0x80000001, 0x8, 0x4, 0x6f, 0x340, 0x4, 0x0, 0x35b0800, 0x9, 0x0, 0x0, 0x8, 0x8, 0x7, 0xdd7, 0x12000, 0x1000000, 0xb85, 0x4010, 0xe426, 0x8, 0xfffffff9, 0x1, 0x400, 0x400, 0x3, 0xfffffff8, 0x8, 0x4, 0xffffffff, 0xc, 0x2aa6, 0xc, 0x4, 0x1, 0xcc43, 0x8, 0x81, 0x62d290a8, 0x3, 0xd2, 0x0, 0x0, 0xfffffff8, 0x2, 0xffffffff, 0x6c, 0x3, 0x206c5a68, 0x20003, 0xc0000000, 0x0, 0x81, 0x77, 0xbd, 0x8, 0x1, 0x0, 0x0, 0x4fa, 0x0, 0x7ff, 0x59b, 0x9, 0x3, 0x1, 0x9, 0x5, 0x6e, 0x7, 0x3, 0x47a, 0x80, 0x5, 0x5, 0x5, 0x7fffffff, 0x789, 0xf3e, 0x1000, 0x1ff, 0x3, 0xd, 0x0, 0xfe, 0x3, 0xffff, 0x269, 0x7, 0x5712, 0x2, 0x2, 0x9, 0x400, 0x9, 0x7, 0x3fe0, 0x7, 0xff, 0x7, 0x5, 0x1, 0x9, 0x5, 0x0, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x9, 0x92a0, 0x1, 0x8, 0xc71, 0x1000, 0x6, 0x7, 0x80, 0x5, 0xd2, 0x9, 0x0, 0x6, 0x5, 0x3ff, 0x32b8, 0x1, 0x2, 0x5, 0x1, 0xf, 0x3, 0x40, 0x800, 0x7f, 0xffffffff, 0x52049641, 0x4, 0x5, 0x3, 0x6, 0x9, 0x6d203538, 0x5, 0xfff, 0x9a, 0x8001, 0x5, 0x5, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x63}]}, @TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x8}, {0x92, 0x2, 0x0, "f768"}}}, @TCF_EM_META={0x8c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x81}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xe7, 0x1}, {0x4, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="db2b0bb2cf6bab023f41", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b5ea", @TCF_META_TYPE_VAR="b10c67e1b9b6b833", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="97dfc5c54ff5", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="87139d3a77fae8a6", @TCF_META_TYPE_VAR="ab30a88a14371c8a77", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="91", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x200}, {0x8, 0x6, 0x18c825ec1672ac01, "bf09719f89ac"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x17c7, 0x7, 0x4}, {{0x4, 0x1}, {0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x9}, {0x664, 0x9, 0x0, "8a5e1d38a496c431c8"}}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb5a5}]}, @TCA_CGROUP_ACT={0x17c, 0x1, [@m_tunnel_key={0xe8, 0x9, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xa, 0x7ff, 0x6, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x77, 0x6, "06c1ade58b1765296a73434a4fe224fed26b09bbc1a81cab2f811108bc8e5dc7541fa8dbcae1359dc6136a23e6d82ca9904260ed5b52bf03c92644124a1ab04b1f007a0d090f80e12ea78d03fd1c4d72bd66193dfe5ca1d9c4d90df615c324bac706f132e406cd2d34b0565171f98127cb1a73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x90, 0x16, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x834e4bc, 0x2, 0x87a, 0x200}, 0xf595}}]}, {0x43, 0x6, "63c24dc56aa5e6a54fab42a71da669554957efad0628ccb36287950f218df5fae94287db73a8e639e0b46bea613e62871e0a693017785b7096f8c34a1e2746"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb4, 0x13}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x1548}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) 994.882492ms ago: executing program 1 (id=1827): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200003"], 0x12c}, 0x1, 0x0, 0x0, 0x20006825}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200003"], 0x12c}, 0x1, 0x0, 0x0, 0x20006825}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140), 0x0, 0x8, 0x0) (async) preadv(r4, &(0x7f0000000140), 0x0, 0x8, 0x0) 739.682135ms ago: executing program 1 (id=1828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000c7000000000000000000850000006d00000095627a9d8081f1143aceb235bb5981a68b6f209d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/19, 0x13}, {&(0x7f0000005140)=""/4096, 0x721}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x2c010) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}}, 0x24}}, 0x0) r9 = accept(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r10, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x40}}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000380)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="4ead0000", @ANYRES16=r12, @ANYBLOB="000126bd7000fddbdf253100000008000100150000000800db00", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES64=0x0, @ANYBLOB="0c00990002000000680000000c009900090000005b00000008005200", @ANYRES32=r14, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x880) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000008000000001c0011d653d3bba43000"/36], 0x3c}}, 0x0) 665.047443ms ago: executing program 3 (id=1829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "00001c00f800", "5ab58ab1214ed09fb1bf73a229084e45b2a17ad35bc9ee4b2e899447096807da", "34c5f91a"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x48) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="6e37cff5b582e082d58cb23de3c19d", 0xf}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_256={{0x304}, "bdf794fb17c277d7", "df0d4b522148ed5d6436af05bc5e65961f0e3e5e5fb21e33cde7758219ba0fe4", "2e44a9ab", "b6c21b179a6ccc82"}, 0x38) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000400)={0xa, 0x4e23, 0x7, @mcast1, 0xa}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r8, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x8000) 644.300659ms ago: executing program 0 (id=1830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000700), 0x4) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000780)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x700, 0xcf, 0x1, 0xfffffff9, {{0x38, 0x4, 0x0, 0x1, 0xe0, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x1b, 0x3, 0x1, [{@remote, 0x7}, {@local, 0x2}, {@multicast1}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x40, 0x3, 0x5, [{@private=0xa010100, 0xe}, {@multicast1, 0x7}, {@multicast1}, {@loopback, 0x5}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}]}, @timestamp_addr={0x44, 0x24, 0xad, 0x1, 0x3, [{@local, 0x6}, {@local, 0x8}, {@remote, 0x100}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x69784808}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xd7, 0x3, 0xe, [{@loopback, 0x1}, {@broadcast, 0x1d77c85}, {@empty, 0x8001}, {@broadcast, 0x1}, {@remote, 0x8e5}, {@rand_addr=0x64010102, 0x60c6}]}, @rr={0x7, 0x13, 0xce, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8bbb}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x9e, &(0x7f0000000680)=""/158, 0x41000, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x176}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd09000100"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x5a1, 0x7fff}}]}]}]}, 0x4c}}, 0x24040800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x26, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x3, 0x1, 0x3, 0xb, 0x0, 0xffffffffffffffd4, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xcb8bb48697276e16}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xa, 0xa4, &(0x7f0000000480)=""/164, 0x40f00, 0x1, '\x00', r4, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x2, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r1, r1], &(0x7f0000000680)=[{0x2, 0x2, 0xe, 0x4}], 0x10, 0x5}, 0x94) bind$unix(r1, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xfffffdfb, 0x1e, 0x107, 0x70bd2a, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 585.910826ms ago: executing program 4 (id=1831): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c94400040000008f51a80e5f48fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000040900020073797a310000000005000100070000002c000780060004400200000005000700ff0000000c000180080001400a010e010c00028008000140e0000002"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 490.589971ms ago: executing program 2 (id=1832): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x17, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0xaf1de1edfc50aca2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x880) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 244.794082ms ago: executing program 3 (id=1833): r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "27bfcffca79a789ceab1c8b50785aeb1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3a00000000000000840000000500"/24], 0x18}}], 0x2, 0x0) 227.807562ms ago: executing program 0 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x24, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x8, 0x0, &(0x7f0000002c40)) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 141.158873ms ago: executing program 4 (id=1835): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e2b, @rand_addr=0x64010102}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) 136.972691ms ago: executing program 2 (id=1836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 64.053982ms ago: executing program 0 (id=1837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 58.1206ms ago: executing program 3 (id=1838): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) r2 = socket$phonet(0x23, 0x2, 0x1) write(r2, &(0x7f0000000340)="ce7292a7ab742dae26b104fdd998c0e746d539f11cc487b642f8849bd05436d3bfb167ecc61b8fd3300f1392e2839020bd4d90bf3183743437db63769523766d2e1af84a424a85d4a592ef02823a548b8d6cf4f0d2e93188cf9484d9a4386914ea793b6afa64c4063c568d17400c0c188c7b37a01e25b651ef3d00fc059e31f8f20fe628f1f5ff71f523be4d157d92d6db3e4ae939f5c3a965948decf847d1d8e6120e8a55c61c340cb3977410c1ffaeee7fb22d23f1205407177efaf0b6b29147b2298019fb835da1a83cfe21d508bc9933b932a6f7b2ea05f91346eb61", 0xde) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 0s ago: executing program 4 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000042000000200012800800010067747000140060b908000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r8, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) close(0x3) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 47.588003][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.613290][ T5536] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. syzkaller login: [ 65.776194][ T5854] cgroup: Unknown subsys name 'net' [ 65.928950][ T5854] cgroup: Unknown subsys name 'cpuset' [ 65.938091][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.380850][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.886995][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.887645][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.907387][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.915841][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.924411][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.924543][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.932126][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.941200][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.947425][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.954594][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.968427][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.977197][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.977431][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.991542][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.999551][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.006792][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.016120][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.024906][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.025258][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.047098][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.056844][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.089011][ T5888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.097157][ T5888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.105076][ T5888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.116590][ T5888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.802872][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 70.822047][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 70.844095][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 70.959206][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 70.984292][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 71.169783][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.177416][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.184811][ T5867] bridge_slave_0: entered allmulticast mode [ 71.193533][ T5867] bridge_slave_0: entered promiscuous mode [ 71.201507][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.209098][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.216384][ T5872] bridge_slave_0: entered allmulticast mode [ 71.223516][ T5872] bridge_slave_0: entered promiscuous mode [ 71.235659][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.242799][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.250254][ T5870] bridge_slave_0: entered allmulticast mode [ 71.257226][ T5870] bridge_slave_0: entered promiscuous mode [ 71.289822][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.297264][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.304418][ T5867] bridge_slave_1: entered allmulticast mode [ 71.311760][ T5867] bridge_slave_1: entered promiscuous mode [ 71.319142][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.326523][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.334020][ T5872] bridge_slave_1: entered allmulticast mode [ 71.341723][ T5872] bridge_slave_1: entered promiscuous mode [ 71.363783][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.371045][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.378639][ T5870] bridge_slave_1: entered allmulticast mode [ 71.386414][ T5870] bridge_slave_1: entered promiscuous mode [ 71.404761][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.412097][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.419745][ T5869] bridge_slave_0: entered allmulticast mode [ 71.427565][ T5869] bridge_slave_0: entered promiscuous mode [ 71.482724][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.489339][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.523501][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.530883][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.539103][ T5869] bridge_slave_1: entered allmulticast mode [ 71.546601][ T5869] bridge_slave_1: entered promiscuous mode [ 71.557325][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.569210][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.582421][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.591894][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.599392][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.606641][ T5868] bridge_slave_0: entered allmulticast mode [ 71.613596][ T5868] bridge_slave_0: entered promiscuous mode [ 71.622945][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.647453][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.683599][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.690900][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.698664][ T5868] bridge_slave_1: entered allmulticast mode [ 71.705729][ T5868] bridge_slave_1: entered promiscuous mode [ 71.718695][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.791898][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.805862][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.817618][ T5867] team0: Port device team_slave_0 added [ 71.825035][ T5872] team0: Port device team_slave_0 added [ 71.871667][ T5867] team0: Port device team_slave_1 added [ 71.893841][ T5872] team0: Port device team_slave_1 added [ 71.902258][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.915423][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.927945][ T5870] team0: Port device team_slave_0 added [ 71.989374][ T5870] team0: Port device team_slave_1 added [ 71.997359][ T5869] team0: Port device team_slave_0 added [ 72.004089][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.011349][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.037890][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.084796][ T5869] team0: Port device team_slave_1 added [ 72.103035][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.110500][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.116667][ T51] Bluetooth: hci4: command tx timeout [ 72.136613][ T5888] Bluetooth: hci3: command tx timeout [ 72.142241][ T51] Bluetooth: hci0: command tx timeout [ 72.148245][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.173215][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.180658][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.206897][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.206925][ T51] Bluetooth: hci1: command tx timeout [ 72.206934][ T5871] Bluetooth: hci2: command tx timeout [ 72.231622][ T5868] team0: Port device team_slave_0 added [ 72.240594][ T5868] team0: Port device team_slave_1 added [ 72.257866][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.264832][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.290840][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.315936][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.322901][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.349153][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.373973][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.381364][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.407839][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.419700][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.427235][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.453298][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.466502][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.473460][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.499451][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.538284][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.545257][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.571871][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.641022][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.648188][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.674557][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.699768][ T5867] hsr_slave_0: entered promiscuous mode [ 72.706414][ T5867] hsr_slave_1: entered promiscuous mode [ 72.719033][ T5872] hsr_slave_0: entered promiscuous mode [ 72.725214][ T5872] hsr_slave_1: entered promiscuous mode [ 72.732239][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 72.738301][ T5872] Cannot create hsr debugfs directory [ 72.854114][ T5870] hsr_slave_0: entered promiscuous mode [ 72.860471][ T5870] hsr_slave_1: entered promiscuous mode [ 72.867085][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 72.872815][ T5870] Cannot create hsr debugfs directory [ 72.896260][ T5869] hsr_slave_0: entered promiscuous mode [ 72.903137][ T5869] hsr_slave_1: entered promiscuous mode [ 72.909327][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 72.915049][ T5869] Cannot create hsr debugfs directory [ 72.926220][ T5868] hsr_slave_0: entered promiscuous mode [ 72.932413][ T5868] hsr_slave_1: entered promiscuous mode [ 72.938700][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 72.944426][ T5868] Cannot create hsr debugfs directory [ 73.528964][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.543563][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.556871][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.577703][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.632798][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.643826][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.661244][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.672356][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.771633][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.783744][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.810004][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.840138][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.919639][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.952932][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.963968][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.986715][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.023958][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.110974][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.119566][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.129899][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.148236][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.170790][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.181048][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.197520][ T51] Bluetooth: hci0: command tx timeout [ 74.197552][ T5871] Bluetooth: hci3: command tx timeout [ 74.202941][ T51] Bluetooth: hci4: command tx timeout [ 74.241491][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.248754][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.261967][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.269202][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.280583][ T51] Bluetooth: hci1: command tx timeout [ 74.286311][ T5888] Bluetooth: hci2: command tx timeout [ 74.311899][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.370525][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.377702][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.407324][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.414457][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.456165][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.480659][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.532110][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.543261][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.578672][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.585859][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.604269][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.611480][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.627500][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.634676][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.690061][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.697271][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.740959][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.899801][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.988630][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.061112][ T5867] veth0_vlan: entered promiscuous mode [ 75.094842][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.119917][ T5867] veth1_vlan: entered promiscuous mode [ 75.134980][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.142146][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.200680][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.207869][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.248297][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.360945][ T5867] veth0_macvtap: entered promiscuous mode [ 75.377985][ T5867] veth1_macvtap: entered promiscuous mode [ 75.392776][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.458242][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.484126][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.509740][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.536580][ T3604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.571328][ T3604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.581448][ T3604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598324][ T3604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.613178][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.661773][ T5872] veth0_vlan: entered promiscuous mode [ 75.704294][ T5872] veth1_vlan: entered promiscuous mode [ 75.792884][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.822504][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.840171][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.872627][ T5870] veth0_vlan: entered promiscuous mode [ 75.907086][ T5872] veth0_macvtap: entered promiscuous mode [ 75.920620][ T5872] veth1_macvtap: entered promiscuous mode [ 75.964827][ T5869] veth0_vlan: entered promiscuous mode [ 75.976499][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.977786][ T5870] veth1_vlan: entered promiscuous mode [ 75.984333][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.019092][ T5869] veth1_vlan: entered promiscuous mode [ 76.032470][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.071840][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.134107][ T3497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.144984][ T3497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.175548][ T3497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.207434][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.231533][ T3497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.251092][ T5870] veth0_macvtap: entered promiscuous mode [ 76.277911][ T51] Bluetooth: hci4: command tx timeout [ 76.280451][ T5871] Bluetooth: hci0: command tx timeout [ 76.285690][ T5888] Bluetooth: hci3: command tx timeout [ 76.315282][ T5869] veth0_macvtap: entered promiscuous mode [ 76.356355][ T5888] Bluetooth: hci1: command tx timeout [ 76.361790][ T5888] Bluetooth: hci2: command tx timeout [ 76.366099][ T5870] veth1_macvtap: entered promiscuous mode [ 76.410891][ T5869] veth1_macvtap: entered promiscuous mode [ 76.428403][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.444664][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.479298][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.532903][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.557242][ T5989] tipc: Started in network mode [ 76.562335][ T5989] tipc: Node identity 92580371b529, cluster identity 4711 [ 76.571381][ T5989] tipc: Enabled bearer , priority 0 [ 76.580596][ T3492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.592502][ T3492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.604014][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.615373][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.616913][ T5989] syzkaller0: entered promiscuous mode [ 76.623407][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.629995][ T5989] syzkaller0: entered allmulticast mode [ 76.651858][ T3492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.661740][ T3492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.673073][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.696949][ T5989] tipc: Resetting bearer [ 76.711171][ T5868] veth0_vlan: entered promiscuous mode [ 76.727192][ T5989] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 76.744130][ T3532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.782704][ T3532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807764][ T3532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.829004][ T3532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872403][ T5868] veth1_vlan: entered promiscuous mode [ 76.897431][ T5992] Zero length message leads to an empty skb [ 76.924421][ T5988] tipc: Resetting bearer [ 76.977627][ T5988] tipc: Disabling bearer [ 77.056964][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.064810][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.171723][ T5868] veth0_macvtap: entered promiscuous mode [ 77.179971][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.187422][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.191720][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.202202][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 77.232276][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.261609][ T6002] bridge_slave_1 (unregistering): left allmulticast mode [ 77.269544][ T6002] bridge_slave_1 (unregistering): left promiscuous mode [ 77.278065][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.314785][ T5868] veth1_macvtap: entered promiscuous mode [ 77.353247][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.370020][ T5998] bond0: (slave rose0): Enslaving as an active interface with an up link [ 77.480188][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.507786][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.534957][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.614056][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.651185][ T3492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.670539][ T3492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679441][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.698137][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.711377][ T3492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.731813][ T3492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.978863][ T6025] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 78.126217][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.234978][ T6034] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 78.243284][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.355625][ T5888] Bluetooth: hci3: command tx timeout [ 78.356570][ T5871] Bluetooth: hci4: command tx timeout [ 78.361072][ T51] Bluetooth: hci0: command tx timeout [ 78.435724][ T51] Bluetooth: hci1: command tx timeout [ 78.441164][ T51] Bluetooth: hci2: command tx timeout [ 78.457890][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.488219][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.525619][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.552650][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.107978][ T6058] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 79.117055][ T6058] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 79.124627][ T6058] netlink: 9406 bytes leftover after parsing attributes in process `syz.0.18'. [ 79.396519][ T6074] trusted_key: syz.4.5 sent an empty control message without MSG_MORE. [ 79.457520][ T6074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.523437][ T6084] tc_dump_action: action bad kind [ 79.561613][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 79.587090][ T6088] syzkaller0: entered promiscuous mode [ 79.592600][ T6088] syzkaller0: entered allmulticast mode [ 79.653392][ T6081] tipc: Enabled bearer , priority 0 [ 79.799382][ T6078] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.907474][ T6081] tipc: Resetting bearer [ 79.991342][ T6081] tipc: Disabling bearer [ 80.059275][ T6113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.28'. [ 80.286166][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.330839][ T6120] netlink: 80 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.461651][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 80.542198][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 80.598255][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 80.648659][ T6133] geneve2: entered promiscuous mode [ 80.656480][ T6133] geneve2: entered allmulticast mode [ 80.934565][ T6155] netlink: 'syz.3.37': attribute type 17 has an invalid length. [ 80.972317][ T6156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.994089][ T5969] IPVS: starting estimator thread 0... [ 81.004802][ T6158] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 81.106715][ T6159] IPVS: using max 35 ests per chain, 84000 per kthread [ 81.366309][ T3532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.412355][ T3532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.422098][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.517762][ T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.682798][ T6189] veth0_macvtap: left promiscuous mode [ 81.806167][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.223224][ T6223] __nla_validate_parse: 7 callbacks suppressed [ 82.223242][ T6223] netlink: 64 bytes leftover after parsing attributes in process `syz.2.52'. [ 82.471224][ T6221] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 82.498731][ T6221] netlink: 228 bytes leftover after parsing attributes in process `syz.0.53'. [ 82.519784][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 82.540017][ T6233] Unsupported xt match [ 82.540035][ T6233] unable to load match [ 83.030352][ T6257] netlink: 'syz.4.62': attribute type 4 has an invalid length. [ 83.448360][ T6276] netlink: 2 bytes leftover after parsing attributes in process `syz.3.69'. [ 83.641260][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 83.711672][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 83.943054][ T6298] netlink: 'syz.1.76': attribute type 2 has an invalid length. [ 84.145168][ T6307] netlink: 'syz.4.81': attribute type 27 has an invalid length. [ 84.178480][ T6307] netlink: 'syz.4.81': attribute type 4 has an invalid length. [ 84.224180][ T6307] netlink: 144 bytes leftover after parsing attributes in process `syz.4.81'. [ 84.232949][ T6308] tipc: Enabled bearer , priority 0 [ 84.244029][ T6308] syzkaller0: entered promiscuous mode [ 84.305040][ T6308] syzkaller0: entered allmulticast mode [ 84.410150][ T6322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.531489][ T6304] tipc: Resetting bearer [ 84.581622][ T6304] tipc: Disabling bearer [ 84.653879][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 84.818322][ T6336] syzkaller1: entered promiscuous mode [ 84.829194][ T6336] syzkaller1: entered allmulticast mode [ 84.984216][ T6352] netlink: 256 bytes leftover after parsing attributes in process `syz.0.91'. [ 85.046425][ T6350] syzkaller0: entered promiscuous mode [ 85.052027][ T6350] syzkaller0: entered allmulticast mode [ 85.469433][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.97'. [ 85.478875][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 85.543347][ T6384] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 85.590060][ T6384] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 85.622287][ T6384] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 85.656968][ T6389] tipc: Enabling of bearer rejected, failed to enable media [ 85.688573][ T6384] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 86.032145][ T6403] syzkaller1: entered promiscuous mode [ 86.057535][ T6403] syzkaller1: entered allmulticast mode [ 86.840169][ T43] cfg80211: failed to load regulatory.db [ 86.854825][ T6438] bond1: entered promiscuous mode [ 86.875075][ T6438] bond1: entered allmulticast mode [ 86.881862][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.913240][ T6449] openvswitch: netlink: EtherType 50a is less than min 600 [ 87.260875][ T6473] __nla_validate_parse: 7 callbacks suppressed [ 87.260895][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 87.385979][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 87.471598][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.644771][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 87.941437][ T6515] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 87.964031][ T6516] tipc: Cannot configure node identity twice [ 87.996218][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 88.000861][ T6515] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.137'. [ 88.020051][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.050865][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.110588][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.145654][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.224420][ T6525] bridge1: entered promiscuous mode [ 88.260129][ T6525] bridge1: entered allmulticast mode [ 88.353830][ T6533] can: request_module (can-proto-0) failed. [ 88.480684][ T6540] netlink: 'syz.3.144': attribute type 8 has an invalid length. [ 88.793789][ T6558] netlink: 'syz.3.152': attribute type 23 has an invalid length. [ 88.935264][ T6558] netlink: 'syz.3.152': attribute type 17 has an invalid length. [ 88.971126][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 88.997715][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 89.025902][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 89.279293][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.161'. [ 89.448735][ T6597] netlink: 9 bytes leftover after parsing attributes in process `syz.2.164'. [ 89.479100][ T6597] gretap0: entered promiscuous mode [ 89.495255][ T6598] netlink: 'syz.1.165': attribute type 5 has an invalid length. [ 89.574370][ T6594] netlink: 80 bytes leftover after parsing attributes in process `syz.4.163'. [ 90.090364][ T6631] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 90.344214][ T6643] netlink: 'syz.4.178': attribute type 11 has an invalid length. [ 90.360060][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.412654][ T6647] bridge_slave_1 (unregistering): left allmulticast mode [ 90.421906][ T6647] bridge_slave_1 (unregistering): left promiscuous mode [ 90.430190][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.969718][ T6712] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 92.094816][ T6715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.104586][ T6715] bond1: (slave bond2): making interface the new active one [ 92.113541][ T6715] bond1: (slave bond2): Enslaving as an active interface with an up link [ 92.214952][ T6712] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 92.468021][ T6733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.539278][ T6737] syz_tun: entered allmulticast mode [ 92.554128][ T43] IPVS: starting estimator thread 0... [ 92.572805][ T6736] syz_tun: left allmulticast mode [ 92.660207][ T6740] IPVS: using max 29 ests per chain, 69600 per kthread [ 92.786219][ T6745] __nla_validate_parse: 8 callbacks suppressed [ 92.786237][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 93.214835][ T6770] tipc: Enabling of bearer rejected, failed to enable media [ 93.289230][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'. [ 93.728875][ T6793] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.876537][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.136656][ T6820] netlink: 'syz.0.219': attribute type 21 has an invalid length. [ 94.144442][ T6820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.219'. [ 94.150021][ T6818] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.217'. [ 94.185299][ T6818] openvswitch: netlink: Message has 5 unknown bytes. [ 94.312990][ T6822] tipc: Started in network mode [ 94.324710][ T6822] tipc: Node identity 3ad4634a00c, cluster identity 4711 [ 94.332360][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 94.362362][ T6822] tipc: Enabled bearer , priority 0 [ 94.384860][ T6827] syzkaller0: entered promiscuous mode [ 94.403816][ T6827] syzkaller0: entered allmulticast mode [ 94.468995][ T6835] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 94.518552][ T6835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.224'. [ 94.553135][ T6827] tipc: Resetting bearer [ 94.561638][ T6835] block nbd1: not configured, cannot reconfigure [ 94.600194][ T6827] tipc: Disabling bearer [ 94.612646][ T6838] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 94.628498][ T6838] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 94.744078][ T6849] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 94.778226][ T6849] netlink: 152 bytes leftover after parsing attributes in process `syz.1.227'. [ 94.868228][ T6849] `: renamed from bond0 (while UP) [ 94.903564][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 95.399527][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 95.495345][ T6891] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 96.244250][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'. [ 96.397064][ T6929] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.423861][ T6933] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 96.601855][ T6953] netlink: 'syz.2.255': attribute type 7 has an invalid length. [ 96.610476][ T6953] netlink: 'syz.2.255': attribute type 8 has an invalid length. [ 96.716169][ T6955] gre0: entered promiscuous mode [ 96.755708][ T6955] gre0: entered allmulticast mode [ 96.762130][ T6959] tipc: Enabling of bearer rejected, failed to enable media [ 96.838793][ T6962] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 97.188171][ T6986] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20003 [ 97.742311][ T7017] syzkaller1: entered promiscuous mode [ 97.800074][ T7017] syzkaller1: entered allmulticast mode [ 97.964495][ T7026] __nla_validate_parse: 5 callbacks suppressed [ 97.964514][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 98.045039][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 98.105863][ T7025] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 98.131637][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.134383][ T7031] syzkaller1: entered promiscuous mode [ 98.179128][ T7031] syzkaller1: entered allmulticast mode [ 98.278838][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 98.354712][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 98.411464][ T7050] netlink: 120 bytes leftover after parsing attributes in process `syz.3.284'. [ 98.650702][ T7069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.290'. [ 98.882224][ T7077] tipc: Enabled bearer , priority 0 [ 98.941685][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 99.014690][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 99.034695][ T7077] syzkaller0: entered promiscuous mode [ 99.040668][ T7077] syzkaller0: entered allmulticast mode [ 99.047187][ T7077] tipc: Resetting bearer [ 99.053140][ T7087] netlink: 88 bytes leftover after parsing attributes in process `syz.2.296'. [ 99.064261][ T7088] tipc: Resetting bearer [ 99.086176][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 99.137945][ T7076] tipc: Resetting bearer [ 99.977007][ T5979] tipc: Node number set to 661717873 [ 100.614861][ T7076] tipc: Disabling bearer [ 100.630236][ T7107] tipc: Enabling of bearer rejected, failed to enable media [ 100.679672][ T7118] bridge0: entered promiscuous mode [ 100.698278][ T7118] macvtap0: entered allmulticast mode [ 100.704288][ T7118] bridge0: entered allmulticast mode [ 100.714456][ T7118] bridge0: port 2(macvtap0) entered blocking state [ 100.724106][ T7118] bridge0: port 2(macvtap0) entered disabled state [ 100.745332][ T7118] bridge0: left allmulticast mode [ 100.752475][ T7118] bridge0: left promiscuous mode [ 101.020515][ T7156] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 101.080498][ T7158] Unsupported ieee802154 address type: 0 [ 101.094318][ T7160] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 101.161987][ T7166] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 101.300822][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.408188][ T7179] team0: entered allmulticast mode [ 101.413352][ T7179] team_slave_0: entered allmulticast mode [ 101.431359][ T7179] team_slave_1: entered allmulticast mode [ 101.570343][ T7184] netlink: 'syz.2.318': attribute type 7 has an invalid length. [ 101.677615][ T7194] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 101.714701][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.749428][ T7194] bond1: (slave geneve2): making interface the new active one [ 101.761326][ T7194] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 101.999885][ T7212] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 102.030108][ T7212] netlink: 'syz.4.323': attribute type 4 has an invalid length. [ 102.043887][ T7211] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 102.062603][ T7212] NCSI netlink: No device for ifindex 458760 [ 102.110634][ T7211] netlink: 'syz.0.325': attribute type 11 has an invalid length. [ 102.293780][ T7222] netlink: 'syz.3.329': attribute type 3 has an invalid length. [ 102.330216][ T7221] pim6reg1: entered allmulticast mode [ 103.022249][ T7266] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 103.067769][ T7266] __nla_validate_parse: 15 callbacks suppressed [ 103.067786][ T7266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.342'. [ 103.103720][ T7272] netlink: 'syz.1.346': attribute type 11 has an invalid length. [ 103.111739][ T7272] netlink: 224 bytes leftover after parsing attributes in process `syz.1.346'. [ 103.124644][ T7274] 8021q: VLANs not supported on ip_vti0 [ 103.132941][ T7266] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 103.156156][ T7272] Bluetooth: MGMT ver 1.23 [ 103.409305][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 103.624617][ T7293] Bluetooth: MGMT ver 1.23 [ 103.633506][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'. [ 103.659555][ T7297] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.677037][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'. [ 103.706404][ T7297] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.240503][ T7317] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 104.260293][ T7317] netlink: 128 bytes leftover after parsing attributes in process `syz.0.361'. [ 104.329757][ T7317] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 104.674526][ T7339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.365'. [ 104.835775][ C1] syz_tun: tun_net_xmit 58 [ 104.971883][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 105.002633][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 105.015706][ C1] syz_tun: tun_net_xmit 58 [ 105.550112][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 105.715762][ T5888] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.715890][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.748672][ T7376] syz.2.379 (7376) used greatest stack depth: 16872 bytes left [ 105.875756][ C1] syz_tun: tun_net_xmit 58 [ 105.961968][ T7390] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 106.271025][ T7412] validate_nla: 2 callbacks suppressed [ 106.271046][ T7412] netlink: 'syz.3.389': attribute type 6 has an invalid length. [ 106.321138][ T7412] netlink: 'syz.3.389': attribute type 5 has an invalid length. [ 106.710523][ T7428] Illegal XDP return value 3424003924 on prog (id 56) dev N/A, expect packet loss! [ 106.748116][ T7430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.755697][ T7430] IPv6: NLM_F_CREATE should be set when creating new route [ 106.762958][ T7430] IPv6: NLM_F_CREATE should be set when creating new route [ 106.905049][ T7430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.261487][ T7448] netlink: 'syz.4.403': attribute type 12 has an invalid length. [ 108.293413][ T7452] tipc: Enabled bearer , priority 0 [ 108.363362][ T7452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.416096][ T7452] tipc: Resetting bearer [ 108.633034][ T7450] tipc: Disabling bearer [ 109.030094][ T7467] __nla_validate_parse: 8 callbacks suppressed [ 109.030119][ T7467] netlink: 112 bytes leftover after parsing attributes in process `syz.4.409'. [ 109.092835][ T7466] netlink: 112 bytes leftover after parsing attributes in process `syz.4.409'. [ 109.129191][ T7464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.756848][ T7495] syz_tun: tun_net_xmit 1514 [ 109.771855][ T7495] syz_tun: tun_net_xmit 1514 [ 109.781156][ T7495] syz_tun: tun_net_xmit 1514 [ 109.798821][ T7495] syz_tun: tun_net_xmit 1514 [ 109.803481][ T7495] syz_tun: tun_net_xmit 1514 [ 109.849039][ T7495] syz_tun: tun_net_xmit 1514 [ 109.852065][ T7504] syzkaller0: refused to change device tx_queue_len [ 109.853691][ T7495] syz_tun: tun_net_xmit 1514 [ 109.885123][ T7505] syzkaller1: entered promiscuous mode [ 109.899410][ T7505] syzkaller1: entered allmulticast mode [ 109.918740][ T7495] syz_tun: tun_net_xmit 1514 [ 109.923402][ T7495] syz_tun: tun_net_xmit 1514 [ 109.944074][ T7495] syz_tun: tun_net_xmit 1514 [ 109.963099][ T7495] syz_tun: tun_net_xmit 1514 [ 109.970741][ T7495] syz_tun: tun_net_xmit 1514 [ 109.977717][ T7508] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 109.981875][ T7495] syz_tun: tun_net_xmit 1514 [ 110.014199][ T7495] syz_tun: tun_net_xmit 1514 [ 110.019476][ T7495] syz_tun: tun_net_xmit 1514 [ 110.024191][ T7495] syz_tun: tun_net_xmit 1514 [ 110.035447][ T7495] syz_tun: tun_net_xmit 1514 [ 110.041211][ T7495] syz_tun: tun_net_xmit 1514 [ 110.046374][ T7495] syz_tun: tun_net_xmit 1514 [ 110.051067][ T7495] syz_tun: tun_net_xmit 1514 [ 110.057388][ T7495] syz_tun: tun_net_xmit 1514 [ 110.062100][ T7495] syz_tun: tun_net_xmit 1514 [ 110.082722][ T7508] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 110.085316][ T7495] syz_tun: tun_net_xmit 1514 [ 110.098858][ T7495] syz_tun: tun_net_xmit 1514 [ 110.110981][ T7495] syz_tun: tun_net_xmit 1514 [ 110.130279][ T7495] syz_tun: tun_net_xmit 1514 [ 110.151777][ T7495] syz_tun: tun_net_xmit 1514 [ 110.173414][ T7495] syz_tun: tun_net_xmit 1514 [ 110.232255][ T7495] syz_tun: tun_net_xmit 1514 [ 110.242200][ T7495] syz_tun: tun_net_xmit 1514 [ 110.252456][ T7495] syz_tun: tun_net_xmit 1514 [ 110.292408][ T7495] syz_tun: tun_net_xmit 1514 [ 110.297446][ T7495] syz_tun: tun_net_xmit 1514 [ 110.302083][ T7495] syz_tun: tun_net_xmit 1514 [ 110.308790][ T7495] syz_tun: tun_net_xmit 1514 [ 110.313443][ T7495] syz_tun: tun_net_xmit 1514 [ 110.349171][ T7495] syz_tun: tun_net_xmit 1514 [ 110.353921][ T7495] syz_tun: tun_net_xmit 1514 [ 110.398799][ T7495] syz_tun: tun_net_xmit 1514 [ 110.403472][ T7495] syz_tun: tun_net_xmit 1514 [ 110.441044][ T7495] syz_tun: tun_net_xmit 1514 [ 110.469531][ T7495] syz_tun: tun_net_xmit 1514 [ 110.474193][ T7495] syz_tun: tun_net_xmit 1514 [ 110.516375][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.535531][ T7495] syz_tun: tun_net_xmit 1360 [ 110.650510][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 110.780496][ T7548] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 110.789341][ T7548] netlink: 'syz.4.432': attribute type 3 has an invalid length. [ 110.799926][ T7548] netlink: 216 bytes leftover after parsing attributes in process `syz.4.432'. [ 110.813362][ T7548] NCSI netlink: No device for ifindex 813332851 [ 110.833572][ T7548] netlink: 'syz.4.432': attribute type 39 has an invalid length. [ 111.010813][ T7560] netlink: 165 bytes leftover after parsing attributes in process `syz.2.435'. [ 111.069188][ T7558] netlink: 165 bytes leftover after parsing attributes in process `syz.2.435'. [ 111.204763][ T7566] netlink: 'syz.3.437': attribute type 5 has an invalid length. [ 111.227921][ T7568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.446998][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 111.458144][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 111.474485][ T7585] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 111.522971][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 111.533632][ T7589] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 111.609104][ T7585] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 111.709646][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.745113][ T7585] bridge_slave_1: left allmulticast mode [ 111.762209][ T7585] bridge_slave_1: left promiscuous mode [ 111.783546][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.819884][ T7585] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.126763][ T7616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.832551][ T7657] tipc: Started in network mode [ 112.859132][ T7657] tipc: Node identity 925a7978aebd, cluster identity 4711 [ 112.881746][ T7657] tipc: Enabled bearer , priority 0 [ 113.007815][ T7660] syzkaller0: entered promiscuous mode [ 113.017348][ T7660] syzkaller0: entered allmulticast mode [ 113.024323][ T7660] tipc: Resetting bearer [ 113.069271][ T7660] tipc: Resetting bearer [ 113.517379][ T7683] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 113.569221][ T7684] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 113.901883][ T7697] netlink: 'syz.2.472': attribute type 33 has an invalid length. [ 113.943257][ T980] tipc: Node number set to 1021802872 [ 114.636130][ T7660] tipc: Disabling bearer [ 114.682274][ T7683] team0: Port device dummy0 added [ 114.711795][ T7684] team0: Port device dummy0 removed [ 114.731656][ T7684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.744339][ T7687] macsec0: entered promiscuous mode [ 114.751098][ T7687] macsec0: entered allmulticast mode [ 114.766148][ T7687] veth1_macvtap: entered allmulticast mode [ 114.782172][ T7687] bridge0: port 3(macsec0) entered blocking state [ 114.790704][ T7687] bridge0: port 3(macsec0) entered disabled state [ 114.809216][ T7687] bridge0: port 3(macsec0) entered blocking state [ 114.815974][ T7687] bridge0: port 3(macsec0) entered forwarding state [ 114.965807][ C0] syz_tun: tun_net_xmit 66 [ 115.077211][ T7723] __nla_validate_parse: 4 callbacks suppressed [ 115.077228][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 115.355846][ C0] syz_tun: tun_net_xmit 66 [ 115.416639][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'. [ 115.628987][ T7755] tipc: Started in network mode [ 115.659398][ T7755] tipc: Node identity 1610a7ab788c, cluster identity 4711 [ 115.681625][ T7755] tipc: Enabled bearer , priority 0 [ 115.703868][ T7756] syzkaller0: entered promiscuous mode [ 115.737448][ T7756] syzkaller0: entered allmulticast mode [ 115.738246][ T7761] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 115.758607][ T7761] netlink: 232 bytes leftover after parsing attributes in process `syz.3.490'. [ 115.768556][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 115.805973][ T7755] tipc: Resetting bearer [ 115.938413][ T7755] tipc: Resetting bearer [ 115.989359][ T7755] tipc: Disabling bearer [ 116.022895][ T7766] netlink: 128 bytes leftover after parsing attributes in process `syz.1.492'. [ 116.041912][ T7766] netlink: 1 bytes leftover after parsing attributes in process `syz.1.492'. [ 116.044852][ T7769] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 116.058857][ T7766] xt_policy: neither incoming nor outgoing policy selected [ 116.266122][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 116.309815][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'. [ 116.369824][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 116.391361][ T7785] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 116.477034][ T7792] netlink: 9 bytes leftover after parsing attributes in process `syz.4.500'. [ 116.601271][ T7792] gretap0: entered promiscuous mode [ 116.949575][ T7818] openvswitch: netlink: Unknown key attributes 2 [ 116.989982][ T7822] netlink: 'syz.2.511': attribute type 58 has an invalid length. [ 117.040360][ T7824] netlink: 'syz.1.512': attribute type 11 has an invalid length. [ 117.717475][ T7862] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 118.549406][ T7916] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 118.639360][ T7921] gretap1: entered promiscuous mode [ 118.708183][ T7871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.430196][ T51] Bluetooth: hci4: link tx timeout [ 119.436422][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.446808][ T51] Bluetooth: hci4: link tx timeout [ 119.452047][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.536141][ T43] syz_tun: tun_net_xmit 130 [ 119.705226][ T7984] tipc: Enabling of bearer rejected, media not registered [ 119.906904][ T7997] netlink: 'syz.0.557': attribute type 4 has an invalid length. [ 119.936849][ T980] syz_tun: tun_net_xmit 130 [ 120.065395][ T8002] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 120.239230][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.354088][ T8029] __nla_validate_parse: 11 callbacks suppressed [ 120.354105][ T8029] netlink: 692 bytes leftover after parsing attributes in process `syz.2.566'. [ 120.394675][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 120.404576][ T8021] veth3: entered promiscuous mode [ 121.009102][ T8066] ipvlan0: entered promiscuous mode [ 121.014360][ T8066] ipvlan0: entered allmulticast mode [ 121.046067][ T8066] veth0_vlan: entered allmulticast mode [ 121.057647][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 121.090674][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 121.384998][ T8083] tipc: Started in network mode [ 121.397170][ T8083] tipc: Node identity 22afe9504f64, cluster identity 4711 [ 121.425192][ T8083] tipc: Enabled bearer , priority 0 [ 121.452477][ T8087] syzkaller0: entered promiscuous mode [ 121.480320][ T8087] syzkaller0: entered allmulticast mode [ 121.485079][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 121.547133][ T8083] tipc: Resetting bearer [ 121.688645][ T8082] tipc: Resetting bearer [ 121.716838][ T8082] tipc: Disabling bearer [ 122.376796][ T8122] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 122.418732][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 122.740864][ T8144] netlink: del zone limit has 4 unknown bytes [ 122.853743][ T8148] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 123.791265][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 123.800090][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.912106][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 125.006943][ T8176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.275048][ T8199] netlink: 'syz.2.617': attribute type 3 has an invalid length. [ 125.523869][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 125.712221][ T8213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.744307][ T8218] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 126.087588][ T8247] netlink: 'syz.4.628': attribute type 7 has an invalid length. [ 126.257054][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.257054][ T8264] Use struct sctp_assoc_value instead [ 126.361337][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.361337][ T8264] Use struct sctp_assoc_value instead [ 126.390185][ T8268] netlink: 596 bytes leftover after parsing attributes in process `syz.3.637'. [ 126.429314][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.429314][ T8264] Use struct sctp_assoc_value instead [ 126.451611][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.451611][ T8264] Use struct sctp_assoc_value instead [ 126.472929][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.472929][ T8264] Use struct sctp_assoc_value instead [ 126.495035][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.495035][ T8264] Use struct sctp_assoc_value instead [ 126.522324][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.522324][ T8264] Use struct sctp_assoc_value instead [ 126.540094][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.540094][ T8264] Use struct sctp_assoc_value instead [ 126.646071][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.646071][ T8264] Use struct sctp_assoc_value instead [ 126.702017][ T8264] sctp: [Deprecated]: syz.2.635 (pid 8264) Use of int in max_burst socket option deprecated. [ 126.702017][ T8264] Use struct sctp_assoc_value instead [ 126.774554][ T8282] netem: unknown loss type 0 [ 126.779588][ T8282] netem: change failed [ 127.257556][ T8306] netlink: 248 bytes leftover after parsing attributes in process `syz.0.648'. [ 127.298535][ T8308] netlink: 'syz.2.650': attribute type 13 has an invalid length. [ 127.332042][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 127.364539][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 127.387944][ T8308] netlink: 'syz.2.650': attribute type 13 has an invalid length. [ 127.412736][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 127.429719][ T3513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.441721][ T3513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.532537][ T8317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.544477][ T8323] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.652'. [ 127.591982][ T3513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.608347][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 127.640581][ T3513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.691351][ T8332] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 127.703073][ T8321] vlan2: entered allmulticast mode [ 127.710607][ T8321] bond1: entered allmulticast mode [ 127.739970][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 127.834896][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.855925][ T8336] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 127.900716][ T8337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.907935][ T8337] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.920477][ T8337] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 128.127261][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 128.151901][ T8349] can: request_module (can-proto-5) failed. [ 128.192669][ T8351] IPVS: Scheduler module ip_vs_sip not found [ 128.226927][ T8353] netlink: 'syz.1.659': attribute type 23 has an invalid length. [ 128.235799][ T8360] netlink: 'syz.3.663': attribute type 8 has an invalid length. [ 128.430238][ T8371] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 128.620427][ T8387] dummy0: entered promiscuous mode [ 128.658599][ T8387] batadv_slave_1: entered promiscuous mode [ 128.700624][ T8392] tipc: Enabled bearer , priority 10 [ 128.908548][ T8402] netlink: 'syz.3.677': attribute type 18 has an invalid length. [ 128.982367][ T8401] bridge_slave_0: left allmulticast mode [ 128.994867][ T8401] bridge_slave_0: left promiscuous mode [ 129.008338][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.056709][ T8401] `: (slave bond_slave_0): Releasing backup interface [ 129.101704][ T8401] `: (slave bond_slave_1): Releasing backup interface [ 129.131164][ T8401] team0: Port device team_slave_0 removed [ 129.180335][ T8401] team0: Port device team_slave_1 removed [ 129.190198][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.209740][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.229349][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.237713][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.276992][ T8401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.315103][ T5969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.347627][ T8420] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 129.495079][ T8423] bridge_slave_0: default FDB implementation only supports local addresses [ 129.625817][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.815888][ T980] tipc: Node number set to 974414666 [ 130.396341][ T8466] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 130.515100][ T8470] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 130.589761][ T8466] bond2: entered promiscuous mode [ 130.606523][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.659962][ T8468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.686276][ T8468] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 130.707588][ T8468] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 130.734708][ T8468] bond2: (slave wireguard0): making interface the new active one [ 130.748293][ T8468] wireguard0: entered promiscuous mode [ 130.761929][ T8468] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 130.909546][ T8485] veth0: entered promiscuous mode [ 130.930318][ T8488] __nla_validate_parse: 10 callbacks suppressed [ 130.930334][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 131.042054][ T8489] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 131.066567][ T8490] netlink: 'syz.1.703': attribute type 21 has an invalid length. [ 131.279960][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.707'. [ 131.303061][ T8497] openvswitch: netlink: Invalid VLAN frame [ 131.453836][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.711'. [ 131.476775][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.709'. [ 131.486541][ T8507] netlink: 252 bytes leftover after parsing attributes in process `syz.2.709'. [ 131.500890][ T8509] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 132.180250][ T8543] nftables ruleset with unbound set [ 132.220986][ T8549] syzkaller0: entered promiscuous mode [ 132.228996][ T8549] syzkaller0: entered allmulticast mode [ 132.282913][ T8546] syzkaller0: refused to change device tx_queue_len [ 132.318145][ T5888] block nbd0: Receive control failed (result -32) [ 132.553797][ T8558] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 132.743378][ T8579] netlink: 'syz.2.728': attribute type 30 has an invalid length. [ 132.920762][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.933206][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939973][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091938][ T8589] netlink: 'syz.4.732': attribute type 4 has an invalid length. [ 133.102564][ T8592] netlink: 'syz.3.731': attribute type 2 has an invalid length. [ 133.128626][ T8589] netlink: 'syz.4.732': attribute type 4 has an invalid length. [ 133.154798][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 133.172680][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.733'. [ 133.201572][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 133.440601][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 133.505947][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 133.652156][ T8620] bond0: option ad_select: unable to set because the bond device is up [ 134.235563][ T8655] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 134.308697][ T8657] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 134.665022][ T8682] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.710865][ T8685] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 134.987016][ T8698] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 135.273301][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.720622][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.748373][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.999428][ T8706] ip6gre1: entered allmulticast mode [ 136.065936][ T1104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.104158][ T1104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.170854][ T3604] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.210932][ T3604] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.488332][ T8758] syz_tun: entered allmulticast mode [ 136.764062][ T8757] syz_tun: left allmulticast mode [ 136.954993][ T8785] __nla_validate_parse: 6 callbacks suppressed [ 136.955010][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 136.984395][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 137.086751][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.780'. [ 137.201783][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 137.205137][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'. [ 137.223620][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 137.234203][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 137.322401][ T8796] macvtap1: entered promiscuous mode [ 137.328002][ T8796] vlan0: entered promiscuous mode [ 137.333358][ T8796] macvtap1: entered allmulticast mode [ 137.338876][ T8796] vlan0: entered allmulticast mode [ 137.343994][ T8796] veth0_vlan: entered allmulticast mode [ 137.659090][ T8821] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 137.801263][ T8842] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 137.824283][ T8821] team0: Device veth0_vlan failed to register rx_handler [ 137.971030][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 138.019513][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 138.046756][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.800'. [ 138.290361][ T8862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.576101][ T8849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.611088][ T8889] veth0: entered promiscuous mode [ 138.832667][ T8902] raw_sendmsg: syz.2.810 forgot to set AF_INET. Fix it! [ 138.898484][ T8888] veth0: left promiscuous mode [ 139.490540][ T8915] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 139.548449][ T8918] macvlan4: entered promiscuous mode [ 139.570268][ T8918] macvlan4: entered allmulticast mode [ 139.587358][ T8918] bond3: entered promiscuous mode [ 139.593826][ T8934] ksmbd: Unknown IPC event: 3, ignore. [ 139.603498][ T8918] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 139.625257][ T8918] bond3: left promiscuous mode [ 139.661829][ T8934] IPVS: Scheduler module ip_vs_sip not found [ 139.794441][ T8926] veth1: entered allmulticast mode [ 140.295685][ T8971] openvswitch: netlink: Key type 85 is out of range max 32 [ 140.433492][ T8978] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 140.521657][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 140.684271][ T8994] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 140.748825][ T8997] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 140.787406][ T8997] netlink: 'syz.2.828': attribute type 10 has an invalid length. [ 140.814332][ T8999] (unnamed net_device) (uninitialized): (slave veth1): Device is not bonding slave [ 140.863866][ T8999] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1) [ 140.911002][ T9004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.391682][ T9025] netlink: 'syz.4.835': attribute type 5 has an invalid length. [ 141.398595][ T9022] syzkaller1: entered promiscuous mode [ 141.418911][ T9022] syzkaller1: entered allmulticast mode [ 141.584029][ T9035] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 141.625564][ T9035] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 141.875720][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.997116][ T9059] syz_tun: tun_net_xmit 62 [ 142.016091][ T9057] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 142.044484][ T9057] __nla_validate_parse: 16 callbacks suppressed [ 142.044501][ T9057] netlink: 236 bytes leftover after parsing attributes in process `syz.0.845'. [ 142.269848][ T9077] sctp: [Deprecated]: syz.0.850 (pid 9077) Use of int in max_burst socket option. [ 142.269848][ T9077] Use struct sctp_assoc_value instead [ 142.658600][ T9084] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 142.664926][ T9094] netlink: 244 bytes leftover after parsing attributes in process `syz.4.854'. [ 142.690828][ T9099] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 142.763416][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 143.090864][ T8711] syz_tun: tun_net_xmit 90 [ 143.100766][ T9127] netlink: 'syz.2.864': attribute type 11 has an invalid length. [ 143.127529][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 143.271305][ T9131] tipc: Enabling of bearer rejected, failed to enable media [ 143.339379][ T9141] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 143.364423][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 143.428304][ T8711] syz_tun: tun_net_xmit 90 [ 143.531641][ T9149] netlink: 45 bytes leftover after parsing attributes in process `syz.4.869'. [ 143.608822][ T9156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.870'. [ 143.619387][ T9157] netlink: 'syz.3.871': attribute type 3 has an invalid length. [ 143.650108][ T9157] netlink: 766 bytes leftover after parsing attributes in process `syz.3.871'. [ 144.055996][ T8713] syz_tun: tun_net_xmit 90 [ 144.070906][ T9178] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 144.119450][ T9178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.875'. [ 144.554981][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.879'. [ 145.039347][ T9219] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:65535 [ 145.200074][ T9225] tipc: Enabling of bearer rejected, failed to enable media [ 145.520964][ T9252] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 146.236573][ T9239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.269730][ T9239] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 146.319135][ T9239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.337799][ T9239] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.477899][ T9239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.503474][ T9239] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.601753][ T9239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.619648][ T9239] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 146.786223][ T9239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.802905][ T9239] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 147.187605][ T9328] unknown channel width for channel at 909000KHz? [ 147.656751][ T9350] __nla_validate_parse: 30 callbacks suppressed [ 147.656767][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 147.783201][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 147.946600][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 148.083146][ T9362] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 148.097555][ T9362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.916'. [ 148.283709][ T9367] syzkaller1: entered promiscuous mode [ 148.290706][ T9367] syzkaller1: entered allmulticast mode [ 148.300348][ T9377] bond0: (slave erspan0): Error: Device type is different from other slaves [ 148.450729][ T8714] IPVS: starting estimator thread 0... [ 148.545696][ T9388] netlink: 'syz.4.921': attribute type 142 has an invalid length. [ 148.556042][ T9384] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.786599][ T9402] netlink: 56 bytes leftover after parsing attributes in process `syz.0.926'. [ 149.022411][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 149.054332][ T9416] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.929'. [ 149.099170][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 149.100705][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'. [ 149.381574][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'. [ 149.431410][ T9425] netem: incorrect ge model size [ 149.450084][ T9427] netlink: 'syz.1.931': attribute type 2 has an invalid length. [ 149.468364][ T9425] netem: change failed [ 149.509132][ T9422] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.492262][ T9544] netlink: 'syz.2.967': attribute type 33 has an invalid length. [ 151.538298][ T9544] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 151.599991][ T9544] netlink: 'syz.2.967': attribute type 33 has an invalid length. [ 151.897011][ T9572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.954743][ T9572] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 151.984927][ T9574] netlink: 'syz.2.975': attribute type 15 has an invalid length. [ 152.041646][ T9572] bond3: entered promiscuous mode [ 152.047761][ T9572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.113029][ T9575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.123715][ T9575] bond3: (slave bond4): making interface the new active one [ 152.131629][ T9575] bond4: entered promiscuous mode [ 152.137585][ T9575] bond3: (slave bond4): Enslaving as an active interface with an up link [ 152.364335][ T9592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.444011][ T9596] netlink: 'syz.3.982': attribute type 5 has an invalid length. [ 152.481117][ T9604] tipc: Enabled bearer , priority 0 [ 152.483327][ T9596] netlink: 'syz.3.982': attribute type 3 has an invalid length. [ 152.515410][ T9604] syzkaller0: entered promiscuous mode [ 152.542281][ T9604] syzkaller0: entered allmulticast mode [ 152.759853][ T9604] tipc: Resetting bearer [ 152.848718][ T9604] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 152.883578][ T9598] tipc: Resetting bearer [ 153.082724][ T9598] tipc: Disabling bearer [ 153.099197][ T9637] __nla_validate_parse: 10 callbacks suppressed [ 153.099214][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 153.669753][ T9676] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 153.713076][ T9676] netlink: 128 bytes leftover after parsing attributes in process `syz.2.999'. [ 153.788928][ T9676] netlink: 'syz.2.999': attribute type 2 has an invalid length. [ 153.820589][ T9676] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 153.832998][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 153.863879][ T9688] xt_socket: unknown flags 0xe4 [ 153.871715][ T9681] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1001'. [ 154.288622][ T9709] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.357387][ T9717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.534183][ T9722] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 154.570210][ T9722] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1013'. [ 154.606906][ T9722] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 154.693213][ T9729] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.719569][ T9730] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.783432][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 154.802813][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 154.821990][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 154.876086][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 155.053832][ T9750] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 155.076985][ T9751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1020'. [ 155.113613][ T9756] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 156.937125][ T9831] 0{X: renamed from gretap0 [ 156.987802][ T9831] 0{X: left promiscuous mode [ 156.992945][ T9831] 0{X: entered allmulticast mode [ 157.018839][ T9831] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 158.332959][ T9896] IPVS: set_ctl: invalid protocol: 19 224.0.0.2:256 [ 158.350183][ T9901] __nla_validate_parse: 4 callbacks suppressed [ 158.350199][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 158.424243][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 158.534602][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 158.558087][ T9900] pim6reg: entered allmulticast mode [ 158.814985][ T9923] netlink: 'syz.2.1049': attribute type 21 has an invalid length. [ 158.852423][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1049'. [ 158.902628][ T9924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.969700][ T9928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 159.141427][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 159.184110][ T9938] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 159.257696][ T9938] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1054'. [ 159.315136][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 159.861862][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 159.961959][ T9975] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1065'. [ 160.025698][ T9977] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 160.163592][ T9977] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 160.471140][ T9992] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 160.719146][T10007] 8021q: VLANs not supported on ip_vti0 [ 160.875655][T10014] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 161.005689][T10023] IPVS: stopping backup sync thread 10014 ... [ 161.535325][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.975861][T10041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.055151][T10041] batadv_slave_1 (unregistering): left promiscuous mode [ 162.323246][T10085] bond0: (slave dummy0): Releasing backup interface [ 162.382204][T10085] bridge_slave_0: left allmulticast mode [ 162.428236][T10085] bridge_slave_0: left promiscuous mode [ 162.441835][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.468501][T10085] bond0: (slave bridge_slave_1): Releasing backup interface [ 162.484388][T10085] bond0: (slave bond_slave_0): Releasing backup interface [ 162.503318][T10085] bond0: (slave bond_slave_1): Releasing backup interface [ 162.530829][T10098] netlink: 'syz.2.1091': attribute type 12 has an invalid length. [ 162.532443][T10085] team0: Port device team_slave_0 removed [ 162.579139][T10085] team0: Port device team_slave_1 removed [ 162.621957][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.658489][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.392616][T10134] __nla_validate_parse: 4 callbacks suppressed [ 163.392633][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'. [ 163.412899][T10139] netlink: 'syz.4.1100': attribute type 3 has an invalid length. [ 164.106783][T10168] syz_tun: tun_net_xmit 42 [ 164.166509][T10167] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 164.209012][T10167] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 164.210387][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 164.538783][T10187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.555658][ C1] syz_tun: tun_net_xmit 58 [ 164.605634][ C1] syz_tun: tun_net_xmit 66 [ 164.695743][ C1] syz_tun: tun_net_xmit 66 [ 164.750136][T10196] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1113'. [ 164.797922][T10199] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1113'. [ 164.841074][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 164.863151][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 164.897161][T10200] netlink: 'syz.0.1114': attribute type 14 has an invalid length. [ 164.905014][T10200] netlink: 'syz.0.1114': attribute type 13 has an invalid length. [ 165.155556][ C0] syz_tun: tun_net_xmit 42 [ 165.279367][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 165.307929][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 165.347696][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 165.602387][T10234] netlink: 'syz.4.1121': attribute type 23 has an invalid length. [ 165.677381][T10236] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 166.196304][ C0] syz_tun: tun_net_xmit 42 [ 166.262935][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 166.338601][T10260] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 166.371443][T10261] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 166.483874][T10257] "syz.4.1125" (10257) uses obsolete ecb(arc4) skcipher [ 167.173264][T10282] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 167.244822][T10285] netlink: 'syz.2.1131': attribute type 3 has an invalid length. [ 167.329682][T10291] syzkaller1: entered promiscuous mode [ 167.342652][T10291] syzkaller1: entered allmulticast mode [ 167.648145][T10318] syz_tun: entered allmulticast mode [ 167.806569][T10318] dvmrp8: entered allmulticast mode [ 167.950036][T10318] syz_tun: left allmulticast mode [ 167.955215][T10318] dvmrp8: left allmulticast mode [ 168.038148][T10335] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 168.230631][T10340] hsr_slave_0: left promiscuous mode [ 168.295539][T10340] hsr_slave_1: left promiscuous mode [ 168.439968][T10350] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 168.517617][T10354] netlink: 'syz.1.1147': attribute type 6 has an invalid length. [ 168.596728][T10354] netlink: 'syz.1.1147': attribute type 7 has an invalid length. [ 168.895281][T10377] __nla_validate_parse: 4 callbacks suppressed [ 168.895300][T10377] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1153'. [ 169.084134][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 169.104353][T10394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1156'. [ 169.138360][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.187929][T10396] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1157'. [ 169.257162][T10396] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.1157'. [ 169.347431][T10396] openvswitch: netlink: Message has 5 unknown bytes. [ 169.632629][T10411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 169.812207][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 170.476124][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 170.547489][T10457] validate_nla: 1 callbacks suppressed [ 170.547506][T10457] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 170.584573][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'. [ 170.822963][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 172.815327][T10457] team0: Device hsr_slave_0 failed to register rx_handler [ 173.410249][T10505] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004 [ 174.067248][T10533] netlink: 'syz.4.1190': attribute type 12 has an invalid length. [ 174.210346][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 174.543725][T10566] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 174.864782][T10576] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1199'. [ 175.013440][T10585] netlink: 'syz.1.1201': attribute type 2 has an invalid length. [ 175.038978][T10585] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1201'. [ 175.199527][T10592] netlink: 'syz.4.1202': attribute type 29 has an invalid length. [ 175.247924][T10592] netlink: 'syz.4.1202': attribute type 29 has an invalid length. [ 175.281897][T10592] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1202'. [ 175.390279][T10596] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1203'. [ 175.611233][T10610] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 175.715352][T10610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.728265][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1206'. [ 175.822414][T10623] bond3 (unregistering): Released all slaves [ 176.214338][T10637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.262581][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 176.651484][T10661] netlink: 'syz.3.1218': attribute type 23 has an invalid length. [ 177.325336][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'. [ 177.355017][T10691] openvswitch: netlink: Missing valid actions attribute. [ 177.419019][T10691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.677295][T10708] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1227'. [ 177.923787][T10718] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 178.017269][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 178.336506][T10743] unknown channel width for channel at 909000KHz? [ 178.748226][T10753] tipc: Enabled bearer , priority 0 [ 178.807729][T10761] syzkaller0: entered promiscuous mode [ 178.813236][T10761] syzkaller0: entered allmulticast mode [ 178.916265][T10753] tipc: Resetting bearer [ 178.953070][T10770] tipc: Enabling of bearer rejected, failed to enable media [ 179.062350][T10751] tipc: Resetting bearer [ 179.168774][T10751] tipc: Disabling bearer [ 179.234072][T10784] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 179.531750][T10784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.638718][T10801] tipc: Enabled bearer , priority 0 [ 179.778235][T10801] tipc: Disabling bearer [ 180.034951][T10821] __nla_validate_parse: 9 callbacks suppressed [ 180.034969][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 180.054738][T10823] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 180.127930][T10826] vlan2: entered promiscuous mode [ 180.161929][T10826] bridge0: entered promiscuous mode [ 180.606448][T10853] netlink: 'syz.3.1263': attribute type 4 has an invalid length. [ 180.625175][T10855] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 180.727185][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 180.756547][T10855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 181.107916][T10873] tipc: Enabled bearer , priority 0 [ 181.166444][T10873] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.261446][T10882] tipc: Resetting bearer [ 181.288405][T10881] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 181.323495][T10881] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1274'. [ 181.366913][T10872] tipc: Disabling bearer [ 182.055605][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 182.192832][T10930] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1287'. [ 182.228747][T10931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1287'. [ 182.243205][T10931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1287'. [ 182.551718][T10945] netlink: 'syz.3.1291': attribute type 3 has an invalid length. [ 182.579459][T10947] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 182.587772][T10945] netlink: 'syz.3.1291': attribute type 3 has an invalid length. [ 182.727566][T10947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.792814][T10953] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1293'. [ 182.889052][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 182.923718][T10949] bond2: (slave veth3): Enslaving as an active interface with a down link [ 182.990543][T10947] veth5: entered promiscuous mode [ 183.002064][T10947] bond2: (slave veth5): Enslaving as an active interface with a down link [ 183.018844][T10955] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 183.254468][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 183.347667][T10975] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 183.403785][T10975] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 183.530220][T10985] veth1_macvtap: left promiscuous mode [ 185.173840][T11072] __nla_validate_parse: 6 callbacks suppressed [ 185.173858][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 185.198973][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 185.333304][T11073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1330'. [ 185.339305][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 185.448881][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 185.527110][T11086] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 185.624218][T11088] pim6reg1: entered promiscuous mode [ 185.630422][T11088] pim6reg1: entered allmulticast mode [ 185.825131][T11098] netlink: 'syz.3.1339': attribute type 33 has an invalid length. [ 185.875053][T11098] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1339'. [ 186.046376][T11107] netlink: 'syz.0.1340': attribute type 10 has an invalid length. [ 186.051078][T11109] pim6reg: entered allmulticast mode [ 186.074237][T11107] dummy0: entered allmulticast mode [ 186.096650][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1343'. [ 186.121877][T11107] team0: Port device dummy0 added [ 186.904681][T11143] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1350'. [ 186.975758][T11143] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1350'. [ 187.041682][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 187.626828][T11174] tipc: Enabled bearer , priority 10 [ 187.670340][T11175] netem: change failed [ 187.813083][T11183] netlink: 'syz.3.1360': attribute type 15 has an invalid length. [ 187.926250][T11186] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 189.321577][T11247] IPv6: Can't replace route, no match found [ 189.478095][T11259] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.558943][T11263] netlink: 'syz.1.1380': attribute type 9 has an invalid length. [ 189.648481][T11265] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20001 [ 190.013264][T11286] erspan0: entered promiscuous mode [ 190.041447][T11286] erspan0: left promiscuous mode [ 190.364270][T11303] __nla_validate_parse: 8 callbacks suppressed [ 190.364288][T11303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 190.434405][T11306] openvswitch: netlink: Flow key attr not present in new flow. [ 190.644507][T11317] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 190.957201][T11336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1403'. [ 191.039365][T11346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1403'. [ 191.762557][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 191.990678][T11385] netlink: 'syz.1.1413': attribute type 1 has an invalid length. [ 192.041737][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 192.143554][T11395] sctp: [Deprecated]: syz.0.1417 (pid 11395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.143554][T11395] Use struct sctp_sack_info instead [ 192.212184][T11389] syz_tun: tun_net_xmit 42 [ 192.258431][T11393] bond3: (slave bridge5): making interface the new active one [ 192.325165][T11393] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 192.440373][T11414] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 192.540947][T11418] bond3: entered promiscuous mode [ 192.595338][T11418] bond3: entered allmulticast mode [ 192.602196][T11418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.641556][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1427'. [ 192.702549][T11423] tipc: New replicast peer: 255.255.255.255 [ 192.724847][T11423] tipc: Enabled bearer , priority 10 [ 192.742213][T11430] netlink: 'syz.4.1426': attribute type 2 has an invalid length. [ 192.752639][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 192.773366][T11430] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 192.859145][T11428] tipc: Enabled bearer , priority 0 [ 192.894969][T11423] syzkaller0: entered promiscuous mode [ 192.919824][T11423] syzkaller0: entered allmulticast mode [ 193.012601][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 193.063218][T11423] tipc: Resetting bearer [ 193.118132][T11422] tipc: Resetting bearer [ 193.180745][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 193.233601][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'. [ 193.242764][ C1] syz_tun: tun_net_xmit 42 [ 193.256316][T11422] tipc: Disabling bearer [ 193.325094][ C0] syz_tun: tun_net_xmit 42 [ 193.409664][T11456] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 193.534595][T11465] tipc: Bearer : already 2 bearers with priority 10 [ 193.544109][T11465] tipc: Bearer : trying with adjusted priority [ 193.562673][T11465] tipc: Enabled bearer , priority 9 [ 193.765337][T11487] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 193.794418][T11487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.275557][ C1] syz_tun: tun_net_xmit 42 [ 194.309688][T11509] pim6reg1: entered promiscuous mode [ 194.315028][T11509] pim6reg1: entered allmulticast mode [ 194.358447][ C0] syz_tun: tun_net_xmit 42 [ 194.363880][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.375997][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.736418][T11540] bond0: entered promiscuous mode [ 194.791024][T11540] bond_slave_0: entered promiscuous mode [ 194.802121][T11540] bond_slave_1: entered promiscuous mode [ 194.945395][T11556] syzkaller1: entered promiscuous mode [ 194.961428][T11556] syzkaller1: entered allmulticast mode [ 195.224119][T11566] gre2: entered promiscuous mode [ 195.229331][T11566] gre2: entered allmulticast mode [ 195.396812][ C0] syz_tun: tun_net_xmit 42 [ 195.511145][T11587] syz_tun: tun_net_xmit 86 [ 195.597424][T11587] __nla_validate_parse: 6 callbacks suppressed [ 195.597440][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 195.680688][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1472'. [ 195.854979][T11595] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1476'. [ 195.903369][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 195.962247][T11602] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.1478'. [ 195.989629][T11601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.056194][T11604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.136776][T11606] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 196.288827][T11612] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001 [ 196.515640][ C1] syz_tun: tun_net_xmit 86 [ 196.623351][T11627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1488'. [ 197.063944][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 197.149326][T11654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1497'. [ 197.193326][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 197.568269][ C1] syz_tun: tun_net_xmit 86 [ 197.753530][T11672] syzkaller0: entered promiscuous mode [ 197.764328][T11672] syzkaller0: entered allmulticast mode [ 199.542765][T11690] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.550275][T11690] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.683410][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 200.130877][T11738] tipc: Resetting bearer [ 200.696501][T11771] __nla_validate_parse: 5 callbacks suppressed [ 200.696519][T11771] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1527'. [ 200.748170][T11772] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1527'. [ 200.810154][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 201.077949][T11797] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1535'. [ 201.254812][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 201.304865][T11815] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1541'. [ 201.575705][T11819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.670846][T11819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.753218][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 201.821354][T11819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.935935][T11819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.336632][T11861] netlink: 'syz.0.1556': attribute type 17 has an invalid length. [ 202.364311][T10069] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.372973][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 202.382713][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1556'. [ 202.440602][T11861] gretap0: entered promiscuous mode [ 202.461795][T11861] gretap0: left promiscuous mode [ 202.491870][T10069] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.553625][ T2995] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.597914][T10069] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.862446][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 203.371961][T11919] sctp: [Deprecated]: syz.4.1576 (pid 11919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.371961][T11919] Use struct sctp_sack_info instead [ 204.293335][T11961] xt_l2tp: invalid flags combination: 0 [ 204.411122][ T2995] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.461660][ T2995] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.508451][ T2995] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.561832][ T2995] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.587700][T11966] netlink: 'syz.3.1592': attribute type 4 has an invalid length. [ 204.595717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.145290][T11998] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 205.216341][T11998] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 205.543085][T12014] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 205.577954][T12014] netlink: 'syz.1.1609': attribute type 2 has an invalid length. [ 205.919961][T12032] __nla_validate_parse: 4 callbacks suppressed [ 205.919979][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1615'. [ 206.114204][T12039] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 206.129465][T12039] syzkaller0: entered promiscuous mode [ 206.134959][T12039] syzkaller0: entered allmulticast mode [ 206.363244][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 206.381723][T12054] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1621'. [ 206.389511][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 206.425324][T12054] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1621'. [ 206.539976][T12061] tipc: Enabled bearer , priority 0 [ 206.550924][T12061] syzkaller0: entered promiscuous mode [ 206.570122][T12061] syzkaller0: entered allmulticast mode [ 206.633522][T12069] netlink: 'syz.1.1626': attribute type 11 has an invalid length. [ 206.637017][T12061] tipc: Resetting bearer [ 206.661192][T12062] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 206.724835][T12059] tipc: Resetting bearer [ 206.794494][T12059] tipc: Disabling bearer [ 206.841356][T12070] tipc: Enabled bearer , priority 0 [ 206.853591][T12078] syzkaller0: entered promiscuous mode [ 206.860281][T12078] syzkaller0: entered allmulticast mode [ 206.893207][T12060] tipc: Resetting bearer [ 206.973297][T12060] tipc: Disabling bearer [ 207.210014][T12099] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 207.263025][T12099] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1634'. [ 207.309729][T12102] syz_tun: entered allmulticast mode [ 207.311757][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 207.329643][T12102] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 207.344363][T12100] syz_tun: left allmulticast mode [ 207.610684][T12124] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1642'. [ 208.029882][T12154] syz_tun: tun_net_xmit 86 [ 208.030545][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 208.051103][T12154] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 208.125850][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.611118][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 208.645054][T12178] syzkaller0: entered promiscuous mode [ 208.674046][T12178] syzkaller0: entered allmulticast mode [ 208.695738][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.069682][T12203] syzkaller1: entered promiscuous mode [ 209.091045][T12203] syzkaller1: entered allmulticast mode [ 209.342257][T12223] bridge_slave_1: left allmulticast mode [ 209.351378][T12223] bridge_slave_1: left promiscuous mode [ 209.358336][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.367964][T12223] bridge_slave_0: left allmulticast mode [ 209.373653][T12223] bridge_slave_0: left promiscuous mode [ 209.379746][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.487303][T12221] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 210.267006][ T30] audit: type=1107 audit(1757598593.906:2): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' !s;ypN'(b*\tƧ [ 210.267006][ T30] z@rP5Yo׾#$iPeVpla/TN%?|Tz8=G썅mfuX.[trvޓTDlI$"FM=c⟜G7ғ v֝K¥pT'' [ 210.557943][T12281] team_slave_0: left allmulticast mode [ 210.567394][T12281] team0 (unregistering): Port device team_slave_0 removed [ 210.574679][T12281] team_slave_1: left allmulticast mode [ 210.583504][T12281] team0 (unregistering): Port device team_slave_1 removed [ 210.591206][T12281] dummy0: left allmulticast mode [ 210.602186][T12281] team0 (unregistering): Port device dummy0 removed [ 255.800349][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.809567][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.790534][T12302] netlink: 'syz.4.1688': attribute type 2 has an invalid length. [ 256.798010][T12299] __nla_validate_parse: 6 callbacks suppressed [ 256.798026][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 256.830569][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 256.846165][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 256.914882][T12299] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 257.233281][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1693'. [ 257.613424][T12348] : entered promiscuous mode [ 257.983795][T12375] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1704'. [ 258.061455][T12375] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.100618][T12378] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.1705'. [ 258.253365][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 258.320486][T12394] netlink: 'syz.0.1708': attribute type 3 has an invalid length. [ 258.330285][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 258.344681][T12394] netlink: 722 bytes leftover after parsing attributes in process `syz.0.1708'. [ 258.355300][T12392] netlink: 'syz.1.1709': attribute type 7 has an invalid length. [ 258.376818][T12392] netlink: 'syz.1.1709': attribute type 8 has an invalid length. [ 258.410187][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 258.411576][T12398] openvswitch: netlink: Flow actions attr not present in new flow. [ 258.766180][T12414] syzkaller1: entered promiscuous mode [ 258.792103][T12414] syzkaller1: entered allmulticast mode [ 258.906735][T12422] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 259.351296][T12446] netlink: 'syz.1.1725': attribute type 22 has an invalid length. [ 259.377477][ T3513] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.377598][T12446] netlink: 'syz.1.1725': attribute type 22 has an invalid length. [ 259.401272][ T3513] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.413828][ T3513] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.524946][T12454] tipc: Enabled bearer , priority 0 [ 259.545056][T12454] syzkaller0: entered promiscuous mode [ 259.559532][T12454] syzkaller0: entered allmulticast mode [ 259.571682][T12454] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 259.667774][T12454] tipc: Resetting bearer [ 259.731960][T12454] 0{X: left allmulticast mode [ 259.904805][T12454] bridge0: port 3(macsec0) entered disabled state [ 259.911477][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.975332][T12477] IPVS: length: 8 != 1152 [ 260.114933][T12454] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.148428][T12452] tipc: Resetting bearer [ 260.206643][T12452] tipc: Disabling bearer [ 260.748826][T12513] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 260.813249][T12517] netlink: zone id is out of range [ 260.832996][T12517] netlink: zone id is out of range [ 260.846950][T12517] netlink: zone id is out of range [ 260.852093][T12517] netlink: zone id is out of range [ 260.876315][T12517] netlink: zone id is out of range [ 260.922158][T12517] netlink: zone id is out of range [ 260.932301][T12517] netlink: zone id is out of range [ 260.938359][T12517] netlink: zone id is out of range [ 260.958530][T12520] netlink: 'syz.1.1745': attribute type 4 has an invalid length. [ 260.985783][T12517] netlink: zone id is out of range [ 260.999528][T12517] netlink: zone id is out of range [ 261.312782][T12495] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 261.344748][T12537] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 261.582281][T12553] C: renamed from lo [ 262.123993][T12579] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.285756][T12589] team0: Device vti0 is of different type [ 262.364757][T12594] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 262.391553][T12595] dvmrp0: entered allmulticast mode [ 262.409533][T12597] syzkaller0: entered promiscuous mode [ 262.428829][T12597] syzkaller0: entered allmulticast mode [ 262.484262][T12595] dvmrp0: left allmulticast mode [ 262.530194][T12591] tipc: Enabled bearer , priority 0 [ 262.623331][T12590] tipc: Resetting bearer [ 262.739732][ T13] tipc: Resetting bearer [ 262.801715][T12618] __nla_validate_parse: 16 callbacks suppressed [ 262.801732][T12618] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1773'. [ 262.836710][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'. [ 262.850031][T12620] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 262.935756][T12620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.277800][T12650] netlink: 'syz.4.1783': attribute type 11 has an invalid length. [ 263.314919][T12650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1783'. [ 263.961794][T12676] netlink: 'syz.3.1789': attribute type 16 has an invalid length. [ 264.037196][T12676] netlink: 'syz.3.1789': attribute type 17 has an invalid length. [ 264.093444][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 264.097248][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 264.151672][T12702] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1796'. [ 264.232888][T12676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.244246][T12676] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.750006][T12735] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 264.897236][T12742] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 264.948366][T12742] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 265.520760][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 266.412783][T12814] net_ratelimit: 19 callbacks suppressed [ 266.412804][T12814] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 266.482094][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 266.495242][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'. [ 266.503550][T12823] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 266.598373][T12823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.007539][T12835] [ 267.009911][T12835] ====================================================== [ 267.016933][T12835] WARNING: possible circular locking dependency detected [ 267.023968][T12835] syzkaller #0 Not tainted [ 267.028379][T12835] ------------------------------------------------------ [ 267.035390][T12835] syz.2.1836/12835 is trying to acquire lock: [ 267.041449][T12835] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 267.051029][T12835] [ 267.051029][T12835] but task is already holding lock: [ 267.058380][T12835] ffff8881433b4f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 267.068649][T12835] [ 267.068649][T12835] which lock already depends on the new lock. [ 267.068649][T12835] [ 267.079043][T12835] [ 267.079043][T12835] the existing dependency chain (in reverse order) is: [ 267.088041][T12835] [ 267.088041][T12835] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 267.096633][T12835] lock_acquire+0x120/0x360 [ 267.101651][T12835] blk_alloc_queue+0x538/0x620 [ 267.106925][T12835] __blk_mq_alloc_disk+0x15c/0x340 [ 267.112546][T12835] nbd_dev_add+0x46c/0xae0 [ 267.117473][T12835] nbd_init+0x168/0x1f0 [ 267.122140][T12835] do_one_initcall+0x233/0x820 [ 267.127410][T12835] do_initcall_level+0x104/0x190 [ 267.132858][T12835] do_initcalls+0x59/0xa0 [ 267.137695][T12835] kernel_init_freeable+0x334/0x4b0 [ 267.143401][T12835] kernel_init+0x1d/0x1d0 [ 267.148235][T12835] ret_from_fork+0x3fc/0x770 [ 267.153330][T12835] ret_from_fork_asm+0x1a/0x30 [ 267.158612][T12835] [ 267.158612][T12835] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 267.165829][T12835] lock_acquire+0x120/0x360 [ 267.170862][T12835] fs_reclaim_acquire+0x72/0x100 [ 267.176317][T12835] prepare_alloc_pages+0x153/0x610 [ 267.181941][T12835] __alloc_frozen_pages_noprof+0x123/0x370 [ 267.188252][T12835] __alloc_pages_noprof+0xa/0x30 [ 267.193697][T12835] pcpu_populate_chunk+0x182/0xb30 [ 267.199320][T12835] pcpu_alloc_noprof+0xcbf/0x16b0 [ 267.204856][T12835] bpf_map_alloc_percpu+0xbc/0x1b0 [ 267.210481][T12835] prealloc_init+0x225/0x630 [ 267.215586][T12835] htab_map_alloc+0x6ce/0xc70 [ 267.220781][T12835] map_create+0xaa0/0x14d0 [ 267.225719][T12835] __sys_bpf+0x60f/0x870 [ 267.230472][T12835] __x64_sys_bpf+0x7c/0x90 [ 267.235398][T12835] do_syscall_64+0xfa/0x3b0 [ 267.240414][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.246815][T12835] [ 267.246815][T12835] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 267.254535][T12835] validate_chain+0xb9b/0x2140 [ 267.259816][T12835] __lock_acquire+0xab9/0xd20 [ 267.265011][T12835] lock_acquire+0x120/0x360 [ 267.270025][T12835] __mutex_lock+0x187/0x1350 [ 267.275123][T12835] pcpu_alloc_noprof+0x286/0x16b0 [ 267.280663][T12835] sbitmap_init_node+0x1e1/0x630 [ 267.286116][T12835] sbitmap_queue_init_node+0x3e/0x4d0 [ 267.292007][T12835] blk_mq_init_tags+0x110/0x280 [ 267.297369][T12835] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 267.303342][T12835] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 267.309657][T12835] nbd_start_device+0x17f/0xb10 [ 267.315024][T12835] nbd_genl_connect+0x135b/0x18f0 [ 267.320557][T12835] genl_family_rcv_msg_doit+0x215/0x300 [ 267.326610][T12835] genl_rcv_msg+0x60e/0x790 [ 267.331619][T12835] netlink_rcv_skb+0x205/0x470 [ 267.336895][T12835] genl_rcv+0x28/0x40 [ 267.341381][T12835] netlink_unicast+0x82f/0x9e0 [ 267.346650][T12835] netlink_sendmsg+0x805/0xb30 [ 267.351917][T12835] __sock_sendmsg+0x21c/0x270 [ 267.357109][T12835] ____sys_sendmsg+0x505/0x830 [ 267.362379][T12835] ___sys_sendmsg+0x21f/0x2a0 [ 267.367557][T12835] __x64_sys_sendmsg+0x19b/0x260 [ 267.373001][T12835] do_syscall_64+0xfa/0x3b0 [ 267.378010][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.384408][T12835] [ 267.384408][T12835] other info that might help us debug this: [ 267.384408][T12835] [ 267.394616][T12835] Chain exists of: [ 267.394616][T12835] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 267.394616][T12835] [ 267.408250][T12835] Possible unsafe locking scenario: [ 267.408250][T12835] [ 267.415680][T12835] CPU0 CPU1 [ 267.421026][T12835] ---- ---- [ 267.426371][T12835] lock(&q->q_usage_counter(io)#50); [ 267.431733][T12835] lock(fs_reclaim); [ 267.438220][T12835] lock(&q->q_usage_counter(io)#50); [ 267.446100][T12835] lock(pcpu_alloc_mutex); [ 267.450621][T12835] [ 267.450621][T12835] *** DEADLOCK *** [ 267.450621][T12835] [ 267.458744][T12835] 6 locks held by syz.2.1836/12835: [ 267.463921][T12835] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 267.472099][T12835] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 267.481044][T12835] #2: ffff888025578988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 267.492421][T12835] #3: ffff8880255788d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 267.503365][T12835] #4: ffff8881433b4f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 267.514059][T12835] #5: ffff8881433b4f60 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 267.525026][T12835] [ 267.525026][T12835] stack backtrace: [ 267.530915][T12835] CPU: 1 UID: 0 PID: 12835 Comm: syz.2.1836 Not tainted syzkaller #0 PREEMPT(full) [ 267.530938][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.530953][T12835] Call Trace: [ 267.530960][T12835] [ 267.530966][T12835] dump_stack_lvl+0x189/0x250 [ 267.530986][T12835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.531001][T12835] ? __pfx__printk+0x10/0x10 [ 267.531019][T12835] ? print_lock_name+0xde/0x100 [ 267.531037][T12835] print_circular_bug+0x2ee/0x310 [ 267.531053][T12835] check_noncircular+0x134/0x160 [ 267.531070][T12835] validate_chain+0xb9b/0x2140 [ 267.531091][T12835] __lock_acquire+0xab9/0xd20 [ 267.531111][T12835] ? pcpu_alloc_noprof+0x286/0x16b0 [ 267.531129][T12835] lock_acquire+0x120/0x360 [ 267.531145][T12835] ? pcpu_alloc_noprof+0x286/0x16b0 [ 267.531167][T12835] __mutex_lock+0x187/0x1350 [ 267.531179][T12835] ? pcpu_alloc_noprof+0x286/0x16b0 [ 267.531197][T12835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 267.531216][T12835] ? kasan_save_track+0x4f/0x80 [ 267.531231][T12835] ? kasan_save_track+0x3e/0x80 [ 267.531244][T12835] ? __kasan_kmalloc+0x93/0xb0 [ 267.531259][T12835] ? blk_mq_init_tags+0x85/0x280 [ 267.531274][T12835] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 267.531291][T12835] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 267.531304][T12835] ? pcpu_alloc_noprof+0x286/0x16b0 [ 267.531320][T12835] ? nbd_genl_connect+0x135b/0x18f0 [ 267.531337][T12835] ? genl_family_rcv_msg_doit+0x215/0x300 [ 267.531352][T12835] ? genl_rcv_msg+0x60e/0x790 [ 267.531366][T12835] ? __pfx___mutex_lock+0x10/0x10 [ 267.531377][T12835] ? ____sys_sendmsg+0x505/0x830 [ 267.531391][T12835] ? do_syscall_64+0xfa/0x3b0 [ 267.531404][T12835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.531423][T12835] pcpu_alloc_noprof+0x286/0x16b0 [ 267.531445][T12835] sbitmap_init_node+0x1e1/0x630 [ 267.531459][T12835] ? __kasan_kmalloc+0x93/0xb0 [ 267.531477][T12835] sbitmap_queue_init_node+0x3e/0x4d0 [ 267.531491][T12835] blk_mq_init_tags+0x110/0x280 [ 267.531508][T12835] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 267.531529][T12835] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 267.531542][T12835] ? kfree+0x18e/0x440 [ 267.531559][T12835] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 267.531579][T12835] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 267.531599][T12835] ? sysfs_add_file_mode_ns+0x259/0x300 [ 267.531622][T12835] nbd_start_device+0x17f/0xb10 [ 267.531642][T12835] ? device_create_file+0xf4/0x1c0 [ 267.531656][T12835] nbd_genl_connect+0x135b/0x18f0 [ 267.531677][T12835] ? __pfx_nbd_genl_connect+0x10/0x10 [ 267.531698][T12835] ? __nla_parse+0x40/0x60 [ 267.531718][T12835] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 267.531736][T12835] genl_family_rcv_msg_doit+0x215/0x300 [ 267.531755][T12835] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 267.531775][T12835] ? stack_trace_save+0x9c/0xe0 [ 267.531792][T12835] genl_rcv_msg+0x60e/0x790 [ 267.531809][T12835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.531823][T12835] ? __pfx_nbd_genl_connect+0x10/0x10 [ 267.531844][T12835] netlink_rcv_skb+0x205/0x470 [ 267.531862][T12835] ? __lock_acquire+0xab9/0xd20 [ 267.531880][T12835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.531895][T12835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.531919][T12835] ? down_read+0x1ad/0x2e0 [ 267.531944][T12835] genl_rcv+0x28/0x40 [ 267.531958][T12835] netlink_unicast+0x82f/0x9e0 [ 267.531978][T12835] ? __pfx_netlink_unicast+0x10/0x10 [ 267.531995][T12835] ? netlink_sendmsg+0x642/0xb30 [ 267.532006][T12835] ? skb_put+0x11b/0x210 [ 267.532020][T12835] netlink_sendmsg+0x805/0xb30 [ 267.532036][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.532049][T12835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.532062][T12835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.532077][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.532089][T12835] __sock_sendmsg+0x21c/0x270 [ 267.532107][T12835] ____sys_sendmsg+0x505/0x830 [ 267.532122][T12835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.532139][T12835] ? import_iovec+0x74/0xa0 [ 267.532155][T12835] ___sys_sendmsg+0x21f/0x2a0 [ 267.532170][T12835] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.532197][T12835] ? __fget_files+0x2a/0x420 [ 267.532208][T12835] ? __fget_files+0x3a0/0x420 [ 267.532223][T12835] __x64_sys_sendmsg+0x19b/0x260 [ 267.532237][T12835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.532255][T12835] ? rcu_is_watching+0x15/0xb0 [ 267.532269][T12835] ? do_syscall_64+0xbe/0x3b0 [ 267.532283][T12835] do_syscall_64+0xfa/0x3b0 [ 267.532295][T12835] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.532313][T12835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.532326][T12835] ? clear_bhb_loop+0x60/0xb0 [ 267.532341][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.532354][T12835] RIP: 0033:0x7fd7d458eba9 [ 267.532367][T12835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.532380][T12835] RSP: 002b:00007fd7d5432038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.532394][T12835] RAX: ffffffffffffffda RBX: 00007fd7d47d5fa0 RCX: 00007fd7d458eba9 [ 267.532405][T12835] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 267.532414][T12835] RBP: 00007fd7d4611e19 R08: 0000000000000000 R09: 0000000000000000 [ 267.532422][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.532431][T12835] R13: 00007fd7d47d6038 R14: 00007fd7d47d5fa0 R15: 00007ffccfbca068 [ 267.532446][T12835] [ 268.110086][ T5888] block nbd1: Receive control failed (result -32) [ 268.110101][ T51] block nbd1: Receive control failed (result -32) [ 268.131348][T12835] nbd1: detected capacity change from 0 to 127