last executing test programs: 5.68801578s ago: executing program 1 (id=6618): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) write$nci(r0, &(0x7f0000000100)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x0, {0x1, 0x3}}, 0xffffffe0) 5.2902875s ago: executing program 1 (id=6622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000200)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x5c}, {0x0, 0x100000000, 0x0, 0x7fffffff, 0x0, 0x2, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x24001000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000080)=""/60, &(0x7f0000000140)=0x3c) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="00012dbd7000fcdbdf250d000000080004000100000008000400950000000800060005000000540003801400020062617461647630000000000048000000080001000200000008000500ffffffff1400020076657468315f746f5f7465616d00000006000400050000000800010002000000060007004e21000008000500040000007f32f247385a88e44295f8b1ac113705757d103af1e17ff4c8d6985a87020cf10327b7c79bbabcc0a6e9b07b3251f2b2cb08547a496286de95e95800677cfb83092834c00961d0d50a5ae549a727af348fef12e23ec45db3584a1053f1734a19a34c742afef879004f9c0d996b2470ccf8f3ae4600c6b11dc65cfe7111721926f93f7c33aff87b53418b5c6536036b8e4697e9807674bc261c36182f57"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000b32d7430c50000000000000000000000000000000000000000000000000000000000000a001000000000000000000008001f0000000000db206a88a056b3db2057605b860ded2751ffc95917ca9269f80fad2b20836468fed36ecc11c631645223e270db0112c0b314255749bc52c5"], 0xd4}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000005956010400000000000000000200000004000180"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYRESDEC=r7, @ANYBLOB="05"], 0x10) close(r10) close(0x4) 4.748415584s ago: executing program 1 (id=6625): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000ea"], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000480)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, {0x74c9e7b8c49a9e21}, 0x2, {0x2, 0x4e26, @private=0xa010101}}) r9 = socket$netlink(0x10, 0x3, 0x5) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_PHYS_SWITCH_ID={0x1b, 0x24, "b93ac7c49d1d6ef7ebf3b0d6597bb718ae2c8d45d9a058"}]}, 0x64}}, 0x4000) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.898664977s ago: executing program 1 (id=6634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) socket$inet(0x2, 0x2, 0xd3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x40030, r3, 0xbff33000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x0, 0x0, 0x1, 0x7, 0xd, @mcast2, @local, 0x700, 0x0, 0xfffffff9}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_DF={0x5, 0xd, 0x8}]}}}]}, 0x44}}, 0x40800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000200)="b7c256b7b8a1b45a0d1c87059fa57d28e6d94f4e3b989c", &(0x7f0000001000)=""/4096, 0x4}, 0x20) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x2d, r5}) 3.417908906s ago: executing program 1 (id=6641): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "51df6cc6be311fa6f6f245e15cd6b756"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20048000) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket(0x1, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x4000040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000001a40)={0x0, 0x0, 0x2, 0x1ff, @vifc_lcl_ifindex=r6, @multicast2}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b80)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x40) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0x5, 0x4) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001000000000000000000ac1414000000000000000000000000000000000000002a0014000d0020010000000000000000000c001500"/72], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010403000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e6400a3c73f635e0600e9001400ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) socket(0x10, 0x3, 0x0) 3.263772243s ago: executing program 1 (id=6642): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x100000a3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0x4, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="112f626e175ee1e7a701b903452aa4c0244106945d7a1043ebcac1b0aa19899843bfe577edddbb7c77529aee3e7731d85c1561a4ca0d0b02a41f9d3ab4be51c9bb6185aade5d10b1f7f0c328b36a2a55bdd5ca0aa6ecb1ce99b6e9014169cd6a5adf36839f75ab55d390c9f964c087afd20becdfc2f40dce743479d2f801f2ad413b9c18a961f9f457d779a1501638a625eb0fb8639dd39640b87663af5c4b2e3bdf7244294670bff1c740d67c38afe0e8d4d49e8dfc994464cc5f29435a2da8f77532628a7266393c11aadc147b866e61441f55b42670c8b3beb6ee8d97", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000000000000, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0) socket(0x840000000002, 0x3, 0xff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) 3.080193203s ago: executing program 0 (id=6645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x9, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x3}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "baa9"}]}], {0x14}}, 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x44, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1b8, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_RULES={0xdc, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xdca}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x440}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x30}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe97e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9c4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfd78}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x50}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x90b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x586f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0xc004000) r7 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8080) 2.751673127s ago: executing program 0 (id=6650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000d48b34a50080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000b4000000060a010400000000000000000100000008000b40000000008c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000540001800c0001006269747769736500440002800800034000000002080001400000001408000240000000121c00058016000100273cb65d66c73a107b394b9b4ac19f45acde00000c000480060001008a9500000900010073797a3000000000140000001100010000000000000000000700000a"], 0x128}}, 0x0) 2.673481677s ago: executing program 3 (id=6652): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="f6d052ce", 0x4}, {&(0x7f0000000780)="97da35658d3fcc041b482f03a9850d57489f6dddb140838f91ff56f71427590e165287d64824b353a1b999cacda0974a064c321d36e8cd1cb1f33551ffd2781526bc76654ac42d70020fb7defdd4d5d4c03a4004b4a2b2db3aff849cf559f2418a111b9704f94280630b0e57f50a39f7a4bbe9f4b88743927b7237d66d5d68a42faf8d5f0c2014f042f73c8b720b6419772cb84e874c7d77d1894e967278951260c76cdd1f80b14e6ea66c0ff9be742fea6bce052f0e07b4ef9a3e8f034f1cf1f742323f116666bf4943d066e93dbd50098262fbb4957c1ffb13cc084d069fc53a68c1815b71932b2b9e0ca4abac502e6bec08dad47700", 0xf7}], 0x2, 0x7fffffff, 0x3) 2.542513819s ago: executing program 0 (id=6654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0b000010001fff0000feff0000000e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 2.306083169s ago: executing program 3 (id=6655): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_netdev_private(r2, 0x8970, &(0x7f0000000000)="956b8c763a") recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0xff, @loopback, 0x9}, @in6={0xa, 0x4e21, 0x2, @local}], 0x38) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000100)={0xbffff000, 0x10}, 0x8) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x3, 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c000480080001400000000508000640000000015700020014000180080001000000000008000200ac14143a06000340000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000bb0c000280050001002f0000000c00"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r7 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0xf6, 0x7, 0x1a, @mcast1, @loopback, 0x7800, 0x7, 0xfffffff9, 0x3}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@migrate={0xac, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1000, 0x4e24, 0xa61f, 0x2, 0x0, 0x80, 0x29}, 0x6e6bb0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x50, 0x11, [{@in=@rand_addr=0x64010101, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@rand_addr=0x64010100, 0xff, 0x4, 0x0, 0x3506, 0x2, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.030425447s ago: executing program 4 (id=6656): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14, 0x29, 0x43, 0xffffff8e}}], 0x18}, 0x440e0) (fail_nth: 4) 1.567173123s ago: executing program 4 (id=6657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)="be84", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)='s', 0x1}], 0x1}}], 0x2, 0x2000c044) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0x58, 0x29, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {0xb, 0xfffd}, {0x1ffe6, 0xe}}, [@TCA_RATE={0x65, 0x5, {0x5, 0xd2}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9}}, @tclass_kind_options=@c_red, @tclass_kind_options=@c_netem={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.566637614s ago: executing program 2 (id=6658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) (async) 1.536700841s ago: executing program 0 (id=6659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x399e, &(0x7f00000002c0)=0x2) unshare(0x22020400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000004180)=0x3, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r7, 0x0, 0x0, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r9 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) 1.267859872s ago: executing program 3 (id=6660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0) 1.196017149s ago: executing program 2 (id=6661): r0 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x8, 0x8, 0xa, 0x7}, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1, 0x1}, {0xf0, 0x7}, {0x2, 0x7}, {0xb, 0x3}, {0x0, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {0x7f, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x10, 0x1}], "22356a94f09f8185"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xe, 0x1}], "b650668aaa0a1df5"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8, 0x6}, {0x7f}, {0xca, 0x3}, {0xb, 0x3}, {0xeb, 0x6}, {0x7, 0x1}, {0x7d, 0x6}, {0xc9, 0x6}, {0xc, 0x2}, {0x4, 0x7}, {0x8f, 0x6}, {0xf}, {0x7, 0x3}, {0xff, 0x4}, {0x2, 0x4}, {0x6}, {0x0, 0x5}, {0xb1, 0x3}, {0x2, 0x3}], "359c056aac04e97f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x5}, {0x3, 0x1}, {0x9, 0x3}, {0x4}, {0x8, 0x5}, {0x6}, {0x6, 0x6}, {0xb5, 0x3}, {0x0, 0x4}, {0x5}, {0x8, 0x3}, {0xf, 0x3}, {0x9, 0x3}, {0xd, 0x3}, {0xd}, {0x39, 0x5}, {0x81, 0x2}, {0x8, 0x4}, {0xb, 0x4}], "21ec7a2d46b54e7d"}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004100}, 0x48084) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc080045) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3) r5 = accept4$rose(0xffffffffffffffff, &(0x7f00000003c0)=@short={0xb, @remote, @remote, 0x1, @bcast}, &(0x7f0000000400)=0x1c, 0x100000) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000440)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000480)={0x2, 0x7, 0x9, 0x3, 0xa}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "ee9bc71aa15679e56e17d92979120770"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x799722f14f41a5fc) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r2, &(0x7f0000000740)={0x2004}) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map, 0xf, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@map=r11, 0xffffffffffffffff, 0x14, 0x0, r9, @void, @value=r12, @void, @void, r10}, 0x20) socket$kcm(0x29, 0x0, 0x0) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x4000, r12}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r13, 0x8010661b, &(0x7f0000000b00)) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x600800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x5000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000000cc0)={0xffffffffffffffff, {0x1, 0x7, 0x9, 0x2, 0x830}}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000dc0)={0x0, 0x7}, 0x8) 1.195203938s ago: executing program 4 (id=6662): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0xc102, 0x29078}, [@IFLA_OPERSTATE={0x5, 0x10, 0x10}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_PROMISCUITY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x9, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={r5, 0x2}, &(0x7f0000000540)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000640)={r0, 0x7, 0x1, 0x5}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r2, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x9, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0xcb, 0x10000, 0xb, 0x18, 0x1, 0xa, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x22, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9ed}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @generic={0x9, 0x4, 0x2, 0x5, 0x7fffffff}, @exit]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000800)=""/232, 0x20680, 0x4, '\x00', 0x0, @cgroup_sockopt=0x15, r8, 0x8, &(0x7f0000000940)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x1, 0x400, 0x66}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[r10, r11, r12, r13, 0x1], 0x0, 0x10, 0x7}, 0x94) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe, 0x18}, 0xc) ioctl$BTRFS_IOC_RM_DEV(r13, 0x5000940b, &(0x7f0000000d00)={{r14}, "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"}) r15 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001d00)={'ipvlan1\x00'}) ioctl$FIOCLEX(r11, 0x5451) bind$rds(r7, &(0x7f0000001d40)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000001d80)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@multicast1, @local}, 0x10) r16 = getuid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000002a40)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) r19 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002b00)={0x0, 0x5, 0x8}, 0xc) sendmsg$netlink(r6, &(0x7f0000002e80)={&(0x7f0000001dc0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc, &(0x7f0000002a00)=[{&(0x7f0000001e00)={0x3d0, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x13f, 0x0, 0x0, @uid=r16}, @generic="fe8bcc83e4ce35309790a00841863680c98e54184634ffea1b451ca277eecdb319d4126a988ce202fc6d7603540968b1789a27490753a6d763db3d3bb886271e9f41", @typed={0x8, 0x132, 0x0, 0x0, @u32=0x9}, @generic="49918da2456d344101a3f942dd4a6d76381bcd0f167f8dc83577bc25b15833c7842d766490cdbd2d6b6c3d55d11adb646a4871fd5c162bcf8f160fb7ba61579d58ba7bb7f6d3ca474e8d018efa89b52fd8023b55a6c65abd9b0f39a93077e0593603aaa22feffaeeea8ea734b035b879acc3f61d534fc70fc08cd8dec9739e0b9261aabb4307d99392504aacfcd633129e8e3f4360def3174e236d50c6b2d030e774c37b8398972870c8dbe66a4d87134be3d245bb7384c74d76362f795a7adeea97c09163ddf14083fd6a42dc231f8a1b9ff8eb4125abcb74cd15cfc8e9b2a128e423dc75f4fd1023b055691584c568014f90f52f98906a74", @nested={0x274, 0x137, 0x0, 0x1, [@generic, @typed={0x6, 0x123, 0x0, 0x0, @str='*\x00'}, @generic="1d470f93f0c2be711af56c7c6c1cd7a87b32ee33cba7d8baa2b9ace1a435d71aaa827d33ee8350276c4435068cb5246ced51a566b2ea5f9f16a9d3679f26a22089dd0bce82939cf4dc78a879152963eb04955be9379dc786a54e49df6e302cc7f1230e7c600ff3e42639bdb9c7f91ef70feb7384804c8eef05dec1ecead963ce3264a9053a4aaeacfd9d452864ae27fa5fd378f8d4315f561b83", @typed={0x4a, 0x19, 0x0, 0x0, @binary="7224e1e1ca9dfc3d63a5ce6bbfc273d8f681f41d79b5dc16501010d4970eafad8c554b4b5648f6c34a2ac6bac7972685280a645fd6ddf454f1f879491064adc30d8c1c8a613d"}, @generic="fa5559b32ab4dbc6c9ab7aea1f43468a9b0f0e20e4e18e0266f06cf8d551ad87df9c76f3bf2be81d4a76e41e9471cfc53941daa20ab4f8dd713309c3d419a0a8f89ae80dedcf7aa9a50c0b09362f57b943e9754de3a831a34c19d5d467a3c3831fe818ef0ad410a987bef8a2f29862c1ba0c426a644bb41cb2d9ac2c5e98342f79df973c735d2d98371ad0f2c9ad0d1ea32de5d7eae7a98195b7c0b521b25b34f2a38ff07987ae38f2ebeebf6bc30a997ca86fb48a955ac52604da64d9f62be916d8f75ec01fe8d8fe1eedc44c2331a649893512e488e29ed9bdbdb5a9e3615a8194e4e3bf2ae38b8eb726e9da994d340b8e4af6b6107e28", @generic="8c7d62c155307bb234d6586fefcf1cb13039e4936d2774afd392154b9b572d896b2aa340b1cc78332dabff8186eda81517c3491fc257a8852995e7100bf9c06be22eb822252e4fc6a00a0b0488d3a1cb992d492f27cc7c2d0c47ab57a0ed0f63c0faa88433c878b112be4397334291d5526e85ebd317", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@local}]}]}, 0x3d0}, {&(0x7f0000002200)={0x1e4, 0x37, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x18f, 0x138, 0x0, 0x1, [@generic="7de935de62d5aa8f660274372be455ff57b2071551aa70586583b346363a2fe3a3a49435072bca193a6677e8ea43e758a691c5180bbc5c0fa42bc9d6c401ea66a48bc4972084dc470a60bcde938fbdc728b3f3664ee43a6cc62cdfbfa94dd194541345458229c044e916d5c12559b73a3a8dcc5914d60750522f9b4ca5558632c4513343da7c3b77d8bf7c25bf83f74a", @generic="6b60428a04e75a7d2dae33f947e6e9ee155cdba802338adc12d42c279665c67f1263b564412a7c263058c02272214b68f9820341321f42d69895f44c45fd23ae89aba41b0cca6f8e046902494214f30b126f411a340492cf28becf1de476940719e49de7b1134c4b7551b7de89476faacd0624b670429cfba2fbeea8a5dd96be094606982eaf4f1b6442fff5ff8716aba908e90c311372c51eab82ef4b967d51c093a05ff9931afdb45c48707f90c062b8e1b9c97bb2d211a0c0abab6cfc5c4b79b8d2e01039adefac571a3ef6ba14a1b2d111eed4e86f9b93493fa897ba58eea91e78", @nested={0x4, 0x123}, @typed={0x14, 0x137, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @typed={0x8, 0xc0, 0x0, 0x0, @pid}, @generic="11e82d9b16658277af4b4748d1689e2bfac26d0cbec94ed5d3242544f2ff977504439475d233a639c64cf4c3de6472f5b7995112553bd45eed412864"]}, 0x1e4}, {&(0x7f0000002400)={0x42c, 0x22, 0x810, 0x70bd25, 0x25dfdbfc, "", [@nested={0x355, 0xdd, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@mcast1}, @generic="ec8cd5079cbb115cfb7de5173cead31e5490571698b87c0008e95718c23c2955313aae4f63624713aee51a91ad1a95a8c229f35c416954579cb5d2ce79234b3b4f8ef6d4e9929010d3", @generic="699de721fe70854d0347acd962b22ab01c94dbb0d1192f6ec904e7f6b64c38eea3b28f35ccf542b1816556ebef354fc1b55306356786e1a4520385140870616aa067d5a332dc8b8553979b0104ebd14f49a0d10ffd92af505f9d1db27bbd35873adf4da116129908d7f9ab39e2a0a4eb9398f93f29eabac9", @typed={0x4, 0x8e}, @generic="8ba4bfd218df6f30cade51556e09e1c82c0f53e202ae8483ff96f717b593d8bcdcd4c463f50fa9de65308d60bd0fabb8f0f6c1e5b06097fee550067073ef4dce5ea770cf9cf6c63243c921977ccc09fa18fcabe445c16719bf143b80b5e89111962f12271a87aca1ab536c31dd68737cc71cba6054bec5b9c98d10219634e325aa0d870641e9e92da784b6513f177efa7eeb0373d65b889137fc4bd1014ed93e95e562a4532d9a6ca3d77ec753a0554ec586827f8e694c0e5f2411a45af9fc5e47223df3a6ab30a02e1ec383c38d01317767b21cff866eac531ee77f6c2df5978b57dba31fedbdb8dd95e4589298960920de5684639eb4", @generic="a47c7965e75d4607504e5b3771c6bce3e7760b9f7dd795b69e813f249e387f9fb2757bb3fce15fa21497777780b72a385c440c79723c2fd18c5eb50865e4b2c31ece89214f0d0c4a66f4b083064f1645f14d9e40fecb5dd8ff2dccab743c891633e94624b642b4660a0d23cb9d4f872c25b34ca754d7d19022d88ee3f9d11d9cce61a891c69a15eefdfd13dc0e0fa6566218be52463f2028f29e432bbc08", @generic="cceaf7947e0268421c351284dec272ab9a346495edec7b00f4516dc2422ecccada08bdf4aceb7a5951f9b1b5885eee1ae58eed890c31f11bb55c4492529e9ea411860a3adb942a92623993621f7e6c4d55487115eb4dd78fca47d17df284d2d895daf8ee81f8562d1739b6a5ea22c18048cf7cebfc65b769baefc20d15f9986e6dc9a33b7edb8088edcadff5ad36114e03d418d0af5d1dd79bd257c522ce3cd1651c0524ab1ecf7577f24d02a40e9d7ee7b8b3b91a4c7278024e11bd7287400948f80c38896f1caa170d3bdb3e1bda6ba2f327ece25208490cbba7", @nested={0x4, 0x13f}]}, @generic="5e02abfd8b70534ab790d6d4ad5eabdbf360acc7d6080b20a4e791f78f95095d00d1a3cf5799f3f1ad7bae4d88dd9d2c44f2fef26182c6752c1cfea21b7bfe0f6e969bfea7437b3abcc9a5dbad0fbf6a7e156e0fb11a7112341ab8f85c9e46713ad654f0e3280404b9c6989d68bdc2249a1cc93e4fa322afabd1b07be2f7e13e20c903992c362f47b3087ad5bb8186c5050e3465db41ccda331ea2aa0f651f623c33bd1b31facbd4b3e68d9d8774398c48cb1d90bb30caaf5b0638c1f7898f0fa2b7"]}, 0x42c}, {&(0x7f0000002840)={0x1bc, 0x12, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@generic="400d9ee93cab735bdece50e655ef084c85669fc0843c5f79d442c34f54b961930237f5aa204c1c7522217a86adc0615601f7cb843164faf13952fa651706d77d7ce7bec33a0946e616058c167c5035a61385bb70537aecb37018b23f08d79e46bd3fd631ff74cf2c0b65fca6390a154faac6a3ee8a1ece10d47887ce0360b1335c0d573c875b4ef373b221dbdbbc83072109b4d37a42a0e70cc76373b3390f9c26d1a4cd50ba246ded94dea2e92bdc322e61cccf6d360e23f3291af4c8cbd90b2439570753f87100dbd7cea23c35", @generic="78f0d71bd7580ab51972d92c46b5fd32960208c80681947590486f5cec33069cb78c8e8fbb912bfec4fae973399c76b68a56b09547d5d112c3db80b823f4bf4fc8fb69c93158aa6c2cd125ff259f666a5c017118495e2db5a6a7df5579657f6278afe7f723f12b12a008323a66dbadc879f91996eed68232429af3724f90469a26ffccfe164862c181a77f3d693388ae5c917618a216d233b4f3f9636c084addb257be69c1d3d2d709f16dfa83c1a6267e73029965112ebd9b4e8fda230499c4549cec45e55b2096430abbcecd69feb66f919170a78793e6ff28e63928"]}, 0x1bc}], 0x4, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r13, r0, r6, r11]}}, @rights={{0x24, 0x1, 0x1, [r19, r12, r10, r6, r14]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, r15]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xd8, 0x10}, 0x4040800) 1.035148696s ago: executing program 2 (id=6663): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000000000030000000001000000020000000000000000000000da"], &(0x7f0000000040)=""/148, 0x52, 0x99, 0x1}, 0x86) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000000000030000000001000000020000000000000000000000da"], &(0x7f0000000040)=""/148, 0x52, 0x99, 0x1}, 0x86) socket(0x9, 0x4, 0x1) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x28044899}, 0x20048004) socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/139, 0x8b}, 0x100) (async) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/139, 0x8b}, 0x100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x44014) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000a000000060000000210466d38547aa140db9a2000000000238c7cb7a1c00040002004e244e240000fe80000000000000000000000000002e"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x44014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 982.968603ms ago: executing program 4 (id=6664): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002e0000000a0000080000000000000700000000000000000000000903000000080000000000000f0100000000000000000000005f00"], 0x0, 0x46}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r1}, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000c51800000002000000001000e7b7bf049e4a48d276dd975aca2d0001000093083bd31875b1b950700000000600000002"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) 924.078062ms ago: executing program 3 (id=6665): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000009c80)={'team_slave_0\x00', &(0x7f0000009c40)=@ethtool_pauseparam={0x26, 0x0, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0xe, 0x10, 0xb388, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x5201ab2332c33268, 0x81, 0x10000}}) sendmmsg$inet6(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="cff63020f264a89d8a68aa5921429bbae5e3031592dfc7d6d2b67ae4a1dccebf86dd08b34e917571e73b56599a9d1115b0694e49b31ff650d09aeabdd339574132c53d127d18b9f782f244db4eb4d4e75c59bc65c27c602c63ed73fefe05724570c59805148314aa1438979d705b3f786ab2656df7b92b362734ff696a050d0948fd79399df865b6d18a2afcc43d1170ba898da30fd389178f5d97f6", 0x9c}, {&(0x7f0000000100)="908d5de273be6b825b880be2918bde5b19cb5c8918a6a82cf9b564218f470d7bb846", 0x22}, {&(0x7f0000000140)="77065a0ddaac7abdbc6a32dcc8ede185ca383bef867d7ed968c34fa992540e95d6d18d7637701a3bed52f4c41a8bfe725108", 0x32}, {&(0x7f0000000440)="559d2d462b629482cd10c596e63fe7816bd36fcc011abd13fc5f5b083fb2f32a156bf34aca459db57e8cba137814c6221bf5", 0x32}, {&(0x7f0000000480)="a13621f326ea83ac5ae1f3d86fedf19ad3204a6e83890b6e4e5157b9517f1f950b3d6148539d802b5decea5a27a639b7c7f455b6bbf0977499509b3d1231a9a60a5db2eeee34cd7fa056280ba577d2e86a35d3c04f87fa7c7f128645c8a74f17046d9d30eb1f2ec2eafec86b08f36410ca203cef999d761c98796478c02ae75d9999afb80e7edca8b5a51cbdfc278d93806a8e540db754adcb85b903ebfa9d9a7556cae90778accabf34eac2398f44614d6692149c9f326e19bb37339ec8e9eee1717c6df0e2258a934f35e69f460c83b7dd56ff0f8ad0ac4b7d2d5b4a5fe1f570", 0xe1}, {&(0x7f0000000580)="a556f20ac542426a141484338de9e2b85bfcc897a753e6dbca536331a954ece17665048c9601d5fb6bda28d50b1493290b81378cdeb58473aacf2ba0c4dadbba312a1dc9fc1cf7b35096854c31db339169460228c9e85494b348e8", 0x5b}, {&(0x7f0000000600)="d858cc4ed05f4a6c061621b40d7765903abba23dc543f188917e643f14e4fd1b9e210a03a7f1cc50ac70029be1a6593632da436937e8ba6cf10c4757a739f7267af9555b1ad649fb66d876bf2f59a2095f48bd2301f053c9deb45b6c83cc0ceb1df4c105707fe3f2bab96c5500aba3bd544322a471118090be14befecd55d208f01fb7ab72bc85a818cf2927190b7e6fce5ee0af4da7e51c5b17782a25689d823adf17b533fda601e24feb916c", 0xad}, {&(0x7f00000006c0)="265e8e1c5c4d17a0eebc28d07eb61055d6c43d253503862ed165b43316b3da3ca8fb764c369202ce72f036582c1d9a25a0929b5c8a2447100a21a0f0fa8d3446a7ec7fc8115cb17e87cb231d979f0945d793ec7186b51cf3fec087fe132e72262b6413dfc6e4256d88fc22c196aead878461a525e92024e460006c56dae805488922ab1571f542240afeef2131ede4ba7e8678c39595d4a4c619b3800e6e2d4ddd36e9ecd0b427e43879091f663ab755f74e7c8ba3a1", 0xb6}, {&(0x7f0000000780)="832b2e54ed01e0ab6d7bbc81f0916a388360bc6d041840ed406251675b0f49fcc707230e98760ff789bd2dc80a35ea20d9fa1085b2a52e27dddcbc58024d02da573f05bea5d22bd747976c62fe835f04cd4a882be1b4789f2dd73ae61b810162274c6c32cc1da26a736370934ebfbe616f2e9e21f82457a999dd9bd6c9e237b5113642dbe4faf025af1c6b09d5a2756c558182e56b69bfa14c4271d2d79ef3e99bdfa7512588ecfe338fb4082d0902cec813ea2fbd825f08a2ca176b5de6fb68f3d74b97a1c341b08fe2ddb1c8d5a8570bd097f69e", 0xd5}], 0x9, &(0x7f0000000a00)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x36}, r3}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x1, 0xa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback, @mcast1]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}, @pad1, @ra={0x5, 0x2, 0xe}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffc00}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000ac0)="d2484b67ac4016212519c104d40dc2211fd52c19f7d88e8b9647aaa067f2b58a482b43bce53d4e2d3c5caa786734d03d654f69afd684c457e6eddf9321901d2f699fbfe9778db0116c5e5e617b5fb03b59c5b88f5cda6783fb2a9d0af92b5b7eef00aa6d2b58eb9e4b036832c764d34cec6c02f9d8e0caf8fbcb252be469ce82825e2590ec9906fb782c1577a8a0ab3959533007517ce9bf7974cac9a7476ab9884b9e7287a92b1d1cc4c545534f52b6bf7562f3788ada66909d28189b92c2adcbe2", 0xc2}, {&(0x7f0000000bc0)="4c3cca5b502f4682bad293f43f2f0dc58e1a09c42d1e8a539b27f23ab48b2cf63e16cbb7ff65217db352f370a380f527a2afe26419b0d3ab3c5c9b55cef87db029c0792d914f4c0f8d491e1339a35bb1a8071e4433b13814cc967f4fe8e0620317b2899c1bf94fcf8fcf9247a12d91bfbf95", 0x72}, {&(0x7f0000000c40)="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", 0xfb}, {&(0x7f0000000d40)="b30743b4544674d070f44dfabd75f55a5004c6926dc4d6c96f950e4029284c755914e26f9cc783903db5b7678001fbda1640a4fe88c607f3e9d9060b50dd49e0ddccbd8bb4182d0d645e82", 0x4b}, {&(0x7f0000000dc0)="0da67e8ca04e97f32a784020a61829339c1c395a75581f08b51fafb33ead5134e7a243012bccfd14e22c00a6f1dd1372a4412848b42b78832ed9357b61d5dd588fe806d1e62dec5a4fcba2966a161866c8927523b22054c820d06f9a3b3cc4314520fd54415c970a08fbf33fe8ef2a20be82f170e35481fab2cdf84af85756850eb508a7941e7f66430c549932b035a8886c0f4c90074c365abeafd7f38e85f755bf30ebd6da446bbeb231e95a21fa7711b053ec2a8c0b500e5330e380f0241592664b1828c167a63ae573f0ea749c6d58597301d771cfca602c976712bf69eaa27906a861f1fce5e697cae110690f8820400e", 0xf3}, {&(0x7f0000000ec0)="ca1f4657dbca3b0a230367e5fbd61c8c1a84aa74ae92ef4270608140a18009448d145ad3418e0db5f37b427d2f09ee8119ddfd1f706af42988063065416d7d30b1d0288e1a141f409b5d08c65e4b0916ce3dbc489f000707b5477b7010ee340919004a07c1e43bd95b4db24374abb29ca60bd91424a45ebf12f917e8ea4ef2a5026b45f65d7578f210701d682c23bd0c046c3083c1a1d06547f38777696e301a215e9bd77d91d1ce81cb5386f34b378aa69946cf68ff021f", 0xb8}, {&(0x7f0000000f80)="9589e3e335a9e60bcd92cf97911f03f3b7cb0026ba8650fcbbd9ff8fdbe1be5a74b516493c4eb4857024ab9bb89678df7bd1dfba4b1fc1971f2fb4a1cd4acdc95e095f33fa1cbad8a0e4254d6c71fbaeede04738a1d4e39a9dabd5b03bd0d24e1aec3f8b70d38f541b69fb8cadb765bad1446812760963ddc96850ce36de40f19b9211788a499d6d3bd428d2752b84e047a5e56c06f7b9c31267201f701ee53de5921bd6be2efc4a21a622b0d1fac3eef9fcb03dccfd43798a2868fd640df86aeb9de903d1a55b2b88", 0xc9}, {&(0x7f0000001080)="aff4f99c5ae9151bf0b9e598459d4e538c65b4b145b1e04f3690324566fe2376adbed7dc8d49509b1d75712a3d6ee8a8ea35495dc8a9a66c8c53c769b569a43cc7501d4dc6eacb407b3fb1e1ff0c7abec2b1", 0x52}, {&(0x7f0000001100)="27ae55a8b5381df506d257e660f073631b4934c8a292c0d90a575bd0611ee5efc761e70781797f46f7234227c5a08dfa4ae0397865db6c0a893f4647e482ab01da0bd444f2e336ca802cc5d551623999331501f2170d75c70c5370281a10bf2dd31cdae1416a8f75317a0f382180b9f844f40274703035381de491e1fd4bc4ef0f1d9d36253d109fdca32b427385cb39bcafa8f142d970f9b3966421327c04907a05f5cae05817ba19351df1df507699f58b6a1daea27b9bf3bc8ddab6245eddc86646ccc1e273b259bc8fefe96d7b0f90baf61e734d7be466052a2cf53a47ec7b7e5ab51d", 0xe5}], 0x9, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xdc}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@ra={0x5, 0x2, 0x5dfe}, @enc_lim]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x38, 0x29, 0x39, {0x2, 0x4, 0x0, 0x1, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x11}]}}}], 0xa0}}, {{&(0x7f0000001380)={0xa, 0x4e23, 0x3cb, @local}, 0x1c, &(0x7f00000027c0)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="348d20ac2fb4837cb83ec33cf2761e19f05edf4e7947bdd2a59eaaf73f4627899a85ca4a7ea7a16b2aefc5e440d503b237d8471a93a816c2416401e6c5c68b229e7add85fd78b996f38c0d88f9e54bc4b628599752", 0x55}, {&(0x7f0000002440)="b089e7b9bb97d0be7ebe746727dff2978f068157ae0dde9e62d14d94704d045b448476c1210379c1705b0c5d4d2aeef635caf2fe5b55f2ab192d46f56858c2e169bd3d3e86cbbf6367139e8e0a5f0f3bfef7bb62cfeeccfe768bf1d1d86b81ac25bd352a1e7e573d662e7d301fcc2b8ce3b247ac76ad9afebf1f5218787f98e1f8b5b29986e3b21a5e9a6735e5fd8818fbc7d552da4ad09fb095faca1503d8942d518765314b2d32feaf0716119cbe9e1c", 0xb1}, {&(0x7f0000002500)="2d2d4a376a3c6c19a08c530c603d0e691230caadc6fdcc8a3d4efb1710d578f7cc4029ce352c4864a6448223245c0213f4b42c94efda10eee85c7043a9427851d2de725ec4e1e75ad74dd7dbd0c1e126a4b9cb4413beafbce19d7acb7fde87466a0a87ede742fc78e7cd988c4c9dc45035aefade0f19a45dfdef89117bead3c773b652dd135d5b4adbd4e7a964", 0x8d}, {&(0x7f00000025c0)="0e26a1f7438b6c6aef59b8bffed03dcfb888961cf27399a26a", 0x19}, {&(0x7f0000002600)="034d7780becd60c572700c680ff515c3ee06fded42263b4896096747cfc43e67ecb0c80992c7993bf41871478ba7fa50136d5bc720489fc72ca70e8c52dc59947fb8add4931accd4918e610ace1b9a553a0310244e954c343ecdf52f660422e1da43cb10cd40a8062ef32c69ae8beec8c974f8f370aeae9debb057d4a43f186ef8a9bd358a83fc806d0ca05ec25259d8936a9e9dd0978f16c616a7a6dd2477c28747da18cf5733a7ece48e170e5bc98f1994fdd49dc3d2bba3f20d28049e70206929d5c68c91942272b18c7b1f8939c37b11820426396132b75733370513b2cb767cd1988dffd9f058f0e258c2946bdb36714c", 0xf3}, {&(0x7f0000002700)="ea57209c22be084b0a6848e68af966884714db67dbc0815c4998fa84a4258e9d6cc296c0047db614515a4865c81ef0bce8aba3a367b472bdbb7432deae245e8572b2683a0eda9f4d89630d50ace293dfab06dbcb3519ec6118", 0x59}, {&(0x7f0000002780)="1b7dc360194360825f3a754fc8bf136f2e2fa2a6d3b363bbfd15fc9190069422ef41bd673f6725810ca4e8476ce67d7b0d7ed622c90d3852e53dd1", 0x3b}], 0x8, &(0x7f0000002840)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x6c, 0xa, 0x0, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @private2, @local, @mcast1]}}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x0, 0x24, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}}, @generic={0x7, 0x76, "ffb680f5e120a106b660c94ebb1633bfa2ad5d207d2576b952cd500cc7451c9476575c0deecea377ff5d9dd23f4bb9a6996f3c9c1898f031c99efe16cf59045c82178a47cf2cf404ee762e57d7dfc38e1ae89536bfd5d9d4887b7bdc3a1d026d3f25cc441b2c3cd54399fb08ffed438959672038b1f7"}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x20, {0x3, 0x6, 0xff, 0x2, [0x1, 0xa3, 0x2]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7, 0x8000, [0x1]}}, @ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x58, {0x2, 0x14, 0xc6, 0x0, [0x0, 0x1ff, 0xc, 0x2, 0x200, 0x78, 0xb, 0x8001, 0xa2, 0x5]}}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x3}]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x2, 0x1f, '\x00', [@ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @mcast1}, @generic={0x5, 0xbe, "1bf50e49689467b46e23410b38dea3e8079dfaaba74a8260575915702989d099ed36b3048541f023f85da3cca380b31d95b9869810e8e0e353ff4cc8dd64a7b9c4fb1335ba32d2107223161f0b9c4815b4b93bae34f1eceb58afd7f5349e92842af61635579c526093ad493ec1556dbe4586edb13ed7065535eefc148e4fa049294a77b7e6bb4cb8eaa08280e55c1b8e2f4d2c3e89920d2480768a95ae2b5b648189077a090b6e8e7268e4d547a4d000bbd60d727cc5c0ea60cb9933824d"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x0, [0x2, 0x394]}}, @pad1, @enc_lim={0x4, 0x1, 0xee}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x697}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0x80, 0x29, 0x36, {0x2, 0xc, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x8000, [0x1a0000, 0x6, 0x145d, 0x10001, 0x1]}}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x4}, @pad1, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0xf7}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x87, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0xbc8b, [0x7, 0x1, 0x84f, 0x74, 0x2]}}, @ra={0x5, 0x2, 0xe2}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}}}], 0x440}}], 0x3, 0x840) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x31) 744.452014ms ago: executing program 2 (id=6666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd133816000000000000", @ANYRES32=0x0, @ANYBLOB="08000500040000000500530001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r4, 0x800, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x600040c0) 669.635077ms ago: executing program 3 (id=6667): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x38b, 0x6, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r7, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000240)='b', &(0x7f00000000c0), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000006c0)={&(0x7f0000000000)=@l2={0x1f, 0x8, @none, 0xff, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000180)="a3c648c284ea272697942dd86a022763874d2de19c70993f8da502dc8f4558a9137a273488543355e43a577a209d937b786b75e9ca6fb385364c59379303eef2", 0x40}, {&(0x7f00000001c0)="f907e06604ef5fcc317c25829210d5561bc68a4c36a3d8fdb5a1408398966c2980c9a2254b6d7c0768c672422e946cdea08727c4d4d4651712f95a66987d289f78b77b41b48abc8ef9d5e54ed874bdb4995ac06139842402c72ddf", 0x5b}, {&(0x7f0000000240)="6e2bff1d46382591a53ed724bdbca6b0f03492f54fe367e2959aa9dc6a271f474032b33eb1ca33cc07a1f6fd7a1daac3fd165fe4d165bfb12411cedd2d9b641c849d41a596968f8f19e172d2d71a502249e677940bd466a24650c75bdd639af4ac0a4db44af199a29a21b48e0a8d806d62469ec7036715490d4efb1fc939c0c1bcb7b90720f354151ce66b091b39", 0x8e}, {&(0x7f0000000300)="dc60fb868d29cafc0d93e189c22cfaf0db9534a8824b27e5a24114188c752db272bfc875d0daf7827dfc129c077fe910b76f946060d399554f625982e932db77be18f49b328989be7a2d94d42ae076d03385fce93457b77caad71f3f341c42fd6d9e7f5d61e977ffc37247ddbbc35af1d0e713fd5f9e1b81334ac51321559dcad1b13767f86216f6f68cfae75afb4f24dcf0df57a80e984611", 0x99}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="16ef672dc46317a32c7c73af590b5ba7956f1cbf7942410a781e3eea5c925f35fc8684a7a29193bee792f119484ccfd7c5e0f485cfcd628f001b8c8775", 0x3d}, {&(0x7f0000000500)="11c1a71cd0135c71ac103e8bbd414e1ab795dee16f374937fde1332b91d45e2ac5d72964ebaa1dfa3fd182f29fd68ad2de71e036c480d30089ba3d6ea2514ec71a57624fae91a06fe462dc37dbb69162ed3a276a032d9d62017172acdc20e43ac0c69282143cfa", 0x67}, {&(0x7f0000000580)="75bd207ab138fac14a84d0fa74d382b50b5f073cfae2f411968963a7cdfa51bb13d1751a238c5449922782eea678fb96504652c85666836075ef5dbfea4fc059d3c64044dc9f4a59dc4f20a1f7d233cd59c67c9057747b862f80df3f3686e53d24594bf490281d8dbf9ab3c04d4bfbe3f81d87784b8fc4d76c8a5df9a0a3f3f01e015ca4701af85677548fb58ef35c021425630e60f02c62aac63706355bf21711821370a7746260e5830cb06b057f4457508cfd3f400ed69669a837fbddb95944f1a578f870f0b8df603748582bc75652a1e1b6f5db58384190521b5c5de8d258d9cb4dbc", 0xe5}, {&(0x7f0000000680)="9580", 0x2}], 0xa}, 0x24040800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f000001c140)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)='Q', 0x1}], 0x1}}], 0x1, 0x24008080) 529.262005ms ago: executing program 4 (id=6668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 528.896915ms ago: executing program 2 (id=6669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r2, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r7) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x48, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x14523bdce1f5240f}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000004c0)="6f42389c8f3fd7359bcc409fa9e2efd0", 0x10) (async) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0xe2a, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x7fffffff}}], 0x18}}], 0x1, 0x4014010) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:udev_tbl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r10, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r10, 0x9a903000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) (async) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) 478.041583ms ago: executing program 0 (id=6670): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10, 0x80], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x8d2}}], 0x18}, 0x24004800) 328.584519ms ago: executing program 3 (id=6671): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) getuid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000020000000000000001000006040000000b0000e9"], 0x0, 0x2e, 0x0, 0x1, 0x7fff}, 0x28) shutdown(r0, 0x0) 248.449228ms ago: executing program 4 (id=6672): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) 245.819301ms ago: executing program 2 (id=6673): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x5864a523, 0x1, [0x9, 0x743d, 0xffffffffffffffff, 0x719, 0x9], [0x7fffffffffffffff, 0x3, 0x4, 0x6, 0xf065, 0x7f, 0x0, 0x1, 0x9, 0x4, 0x4, 0x8, 0x9, 0x8, 0x460, 0x3, 0x1, 0xb6f3, 0x7, 0xffffffffc957622f, 0x9, 0x5, 0x5, 0x5, 0xca79, 0x7, 0xb4, 0x10001, 0x5, 0x4, 0x4, 0xc, 0x41, 0x2, 0x0, 0x2, 0x6, 0x9, 0x6, 0x6, 0x101, 0x3d, 0x7fff, 0x6, 0x3, 0x6, 0x0, 0x1, 0x6, 0x8, 0x556, 0x8000000000000000, 0x7fffffff, 0x7518, 0x828, 0x6, 0x7, 0x33, 0x81, 0xffff, 0x3, 0x6, 0x0, 0xa528, 0x3, 0x3, 0x3ff, 0xbd03, 0x9, 0x10000, 0x5, 0x4, 0xff, 0x7ff, 0x4, 0x4, 0x100000001, 0x3, 0xb, 0x9, 0x5, 0xfffffffffffffffa, 0x2, 0x3, 0x8, 0xf7e9, 0x7, 0x80000000, 0x3, 0xa, 0x4, 0x7fffffff0000, 0xf58, 0x8, 0x96f, 0x800, 0x7, 0x7, 0x8, 0x2, 0x7, 0x3, 0xfffffffffffffffa, 0x8, 0x5, 0x5, 0x8, 0x9, 0x3, 0x182b093c, 0x4, 0x80, 0x6, 0xfffffffffffffff7, 0x8, 0x4800000, 0x6, 0xb60, 0x400, 0x8404, 0x6]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x6031d746, 0x8000, 0x1}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="272fecf8943d778f838cf206bf4cae28271cc2192ff970963e49b2b83fc007b4ce8dd1c0326d2c08f562858fba59b4fa84d01bddbea1446d3176e40bf5d72e377489661f03a37efa5e348a5c65019d84640c53d41cf15cd3b5525c94ee6c9264baeaa1998559b152e13b7cf109c0ab0216c217188e2e3df2a9d21f83f6198686e2efa34c477d1a8f3fe690ad94d1ae86781ac258fe93ea5230b832f2aa3cbc6c828a8fbd10224f24af159de7faea625d2c03ae6bfc782a2b63df46e3c4a10814cb2c9742a78d", 0xc6}, {&(0x7f0000000940)="8806facd9085af", 0x7}], 0x2, &(0x7f00000009c0)="fffe5478a40b3902947af8bccdd2fd4d06f05d6df22b9c12e269a29b1dab3affe7a92df70270da2c15a845a67f49d59c2bd950ef2abb94a7555b93bd5c4120d69a7a9cbc409ef629ee67566ab80131a984f4ad74063564abb3bfa5818433ee0b01e471a8fa909b22d184520c4915ef2726b14a1ad0cba4032bfbf8a29b66c43aaf06acaf22d333f64815b36bb59c54943a2c11213a79fa431e9fe65772e4a36803475a3ea47ed7ffffd73e9fcfabede3d4d5fd74b53a102b0213677dce4f47a67ba937d81c59d70e85a4259be1e2124490b8added3fc5173b3fbfa37a7", 0xdd, 0x4000040}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000b00)={0x43, 0x4, 0x2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000b40)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x9, 0x0, 0xff, 0x2, 0x6, 0x706}, {0x6, 0x8, 0x4, 0x5, 0x6, 0xffff}], ['\x00']}) syz_emit_ethernet(0x32, &(0x7f0000000c40)={@empty, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x8}], @generic="c11fd2875e587726952f3c14d9f342f63eda8877b5848daac3506bec"}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000c80)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @multicast, @private2, @empty, @mcast2}}}}, &(0x7f0000000d00)={0x1, 0x3, [0x68f, 0x695, 0x780, 0xbe1]}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000d40), 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000010c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e00)={0x25c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private0, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @empty, 0x4000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_ID={0x26, 0x3, "73433b5f6a8a512bb87eda4d82b0a9d3d345accbc89c4e99ae5b35c00ffb14539ba0"}, @TIPC_NLA_NODE_ID={0x49, 0x3, "8ff12f33393e7391ab6069e1e426cbff79cb456f9b06db85de5f51099e6a3cc9e36ab783c81fcf0754d7790c147f36c8dcdeab0b1f742dddcdc423e277ea5df94ad2ff48f2"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c0) setsockopt$inet6_int(r4, 0x29, 0xd0, &(0x7f0000001100)=0x5, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001140)={0x41, 0x0, 0x1}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000001180)={{0xa, 0x4e23, 0xc359, @remote, 0x5}, {0xa, 0x4e20, 0x1000, @remote, 0x7}, 0x0, {[0x6, 0x1, 0x6, 0x37, 0x5a, 0x49, 0x5, 0x5]}}, 0x5c) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000001200)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x15, &(0x7f0000001640)=@raw=[@jmp={0x5, 0x0, 0x1, 0x7, 0x8, 0x18, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8e41}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @exit], &(0x7f0000001700)='GPL\x00', 0x80000001, 0x37, &(0x7f0000001740)=""/55, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0xf, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001800)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001900)={r9, r2}, 0xc) syz_80211_inject_frame(&(0x7f0000001940)=@broadcast, &(0x7f0000001980)=@ctrl_frame=@ba={{}, {0x8}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0xf, {0x1, 0xd15}, "60c595eeeb1ab7a2"}, {0x0, 0x3, {0x4}, "83002d90c207e9a6"}, {0x0, 0x1, {0x0, 0x1}, "45977ad951d437c5"}], {0x0, 0x9, {0x0, 0x4}, "bdcee5f30d8c70b3"}}}, 0x42) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r10, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48dd}, 0x4040091) 0s ago: executing program 0 (id=6674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4cae00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$kcm(0x2, 0xa, 0x2) (async) write$tun(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c200000088a80000810000000800400000a4000000000011905dac1e0001e000000144241f8000007aa20000ffff0000000800000000000000070000e2a20000000a000000069404010000000000000017c100649078020000000100000000000000f78597f14aeafc9529712a9bb84de804b45276f42cebfab53949192593c1b14f808d776bd15684533c8dc06be1efd6ebe3a7680c689f194e40a36e6c2886b20ea3ab73c5648e791686ba9f6517d926eb"], 0xba) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socketpair(0x23, 0x4, 0x8006, &(0x7f00000005c0)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, 0x0, 0x0) (async) sendmmsg$unix(r7, 0x0, 0x0, 0x404) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r8) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000012", @ANYRES16=r11, @ANYBLOB="3b9001000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="0c00990003000000110000004200330040000000080211000000080211000000505050505050000001002d1a02881b06000000000000000d00c0001c0000000100ce9500000972060303030303030000"], 0x6c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@delneigh={0x0, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x10}, [@NDA_PORT={0x0, 0x6, 0x4e21}, @NDA_DST_IPV4={0x0, 0x1, @loopback}, @NDA_VLAN={0x0, 0x5, 0x1}, @NDA_FLAGS_EXT]}, 0x40}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) kernel console output (not intermixed with test programs): [T27398] ? __pfx_netdev_run_todo+0x10/0x10 [ 721.032371][T27398] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 721.032402][T27398] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 721.032439][T27398] ieee80211_register_hw+0x3571/0x4220 [ 721.032459][T27398] ? __lock_acquire+0x6b5/0x2cf0 [ 721.032503][T27398] ? ieee80211_register_hw+0x1421/0x4220 [ 721.032535][T27398] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 721.032576][T27398] ? __hrtimer_setup+0x181/0x200 [ 721.032596][T27398] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 721.032631][T27398] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 721.032696][T27398] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 721.032723][T27398] ? kstrndup+0xbf/0x160 [ 721.032759][T27398] hwsim_new_radio_nl+0xf35/0x1bd0 [ 721.032814][T27398] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 721.032863][T27398] ? rcu_is_watching+0x15/0xb0 [ 721.032888][T27398] ? __nla_parse+0x40/0x60 [ 721.032929][T27398] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 721.032971][T27398] genl_family_rcv_msg_doit+0x22a/0x330 [ 721.033011][T27398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 721.033058][T27398] ? bpf_lsm_capable+0x9/0x20 [ 721.033085][T27398] ? security_capable+0x7e/0x2c0 [ 721.033119][T27398] genl_rcv_msg+0x61c/0x7a0 [ 721.033158][T27398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 721.033188][T27398] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 721.033235][T27398] netlink_rcv_skb+0x232/0x4b0 [ 721.033260][T27398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 721.033293][T27398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 721.033313][T27398] ? genl_rcv+0x19/0x40 [ 721.033363][T27398] ? down_read+0x272/0x2e0 [ 721.033380][T27398] ? genl_rcv+0xd/0x40 [ 721.033411][T27398] genl_rcv+0x28/0x40 [ 721.033438][T27398] netlink_unicast+0x80f/0x9b0 [ 721.033470][T27398] ? __pfx_netlink_unicast+0x10/0x10 [ 721.033493][T27398] ? netlink_sendmsg+0x650/0xb40 [ 721.033515][T27398] ? skb_put+0x11b/0x210 [ 721.033546][T27398] netlink_sendmsg+0x813/0xb40 [ 721.033581][T27398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.033610][T27398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 721.033637][T27398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 721.033661][T27398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.033684][T27398] ____sys_sendmsg+0xa68/0xad0 [ 721.033713][T27398] ? __might_fault+0xaf/0x130 [ 721.033751][T27398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.033789][T27398] ? import_iovec+0x73/0xa0 [ 721.033825][T27398] ___sys_sendmsg+0x2a5/0x360 [ 721.033852][T27398] ? __lock_acquire+0x6b5/0x2cf0 [ 721.033886][T27398] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.033930][T27398] ? futex_wake+0x4ac/0x580 [ 721.033985][T27398] ? __fget_files+0x2a/0x420 [ 721.034008][T27398] ? __fget_files+0x3a0/0x420 [ 721.034045][T27398] __x64_sys_sendmsg+0x1bd/0x2a0 [ 721.034078][T27398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.034121][T27398] ? rcu_is_watching+0x15/0xb0 [ 721.034156][T27398] do_syscall_64+0xe2/0xf80 [ 721.034186][T27398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.034206][T27398] ? trace_irq_disable+0x37/0x100 [ 721.034226][T27398] ? clear_bhb_loop+0x60/0xb0 [ 721.034253][T27398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.034274][T27398] RIP: 0033:0x7f4406d9aeb9 [ 721.034294][T27398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.034312][T27398] RSP: 002b:00007f4407bf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.034336][T27398] RAX: ffffffffffffffda RBX: 00007f4407015fa0 RCX: 00007f4406d9aeb9 [ 721.034352][T27398] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 721.034365][T27398] RBP: 00007f4406e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 721.034378][T27398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.034391][T27398] R13: 00007f4407016038 R14: 00007f4407015fa0 R15: 00007ffdacbd8c68 [ 721.034428][T27398] [ 721.497860][T27402] IPVS: length: 126 != 8 [ 721.857920][T27414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.884666][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5331'. [ 721.923206][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5331'. [ 722.118811][T27428] syzkaller0: entered promiscuous mode [ 722.143851][T27428] syzkaller0: entered allmulticast mode [ 722.167862][T27427] tipc: Enabled bearer , priority 0 [ 722.178112][T27427] syzkaller0: entered promiscuous mode [ 722.197239][T27427] syzkaller0: entered allmulticast mode [ 722.322954][T27427] tipc: Resetting bearer [ 722.340962][T27426] tipc: Resetting bearer [ 722.402861][T27426] tipc: Disabling bearer [ 722.645034][T27436] netlink: 'syz.4.5338': attribute type 3 has an invalid length. [ 722.663335][T27436] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5338'. [ 722.703078][T27436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.753299][T27436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 722.762586][T27436] bond4: entered allmulticast mode [ 722.768950][T27436] team0: Port device bond4 added [ 723.057271][T27463] syzkaller0: entered promiscuous mode [ 723.063151][T27463] syzkaller0: entered allmulticast mode [ 723.163022][T27470] x_tables: duplicate underflow at hook 1 [ 723.174520][T27470] x_tables: duplicate underflow at hook 1 [ 723.317579][T27480] netlink: 'syz.1.5355': attribute type 1 has an invalid length. [ 723.353853][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 723.359107][T27480] bond7: entered promiscuous mode [ 723.369406][T27480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 723.397578][T27486] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 723.410124][T27486] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 723.421918][T27486] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 723.855913][T27507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 724.147798][T27519] batman_adv: batadv0: Adding interface: dummy0 [ 724.154581][T27519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.181668][T27519] batman_adv: batadv0: Interface activated: dummy0 [ 724.199804][T27519] batadv0: mtu less than device minimum [ 724.207091][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.218978][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.230428][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.242326][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.253846][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.265445][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.276805][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.288385][T27519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 724.846489][T27544] xfrm0 speed is unknown, defaulting to 1000 [ 724.888298][T27546] netlink: 'syz.1.5376': attribute type 39 has an invalid length. [ 725.230219][T27552] __nla_validate_parse: 5 callbacks suppressed [ 725.230239][T27552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5378'. [ 725.239846][T27544] lo speed is unknown, defaulting to 1000 [ 725.255340][T27544] lo speed is unknown, defaulting to 1000 [ 725.378996][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5380'. [ 725.559795][T27566] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 725.603334][T27571] xfrm0 speed is unknown, defaulting to 1000 [ 725.761300][T27582] netlink: 'syz.0.5384': attribute type 1 has an invalid length. [ 725.826362][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 725.842793][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 725.935018][T27582] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.043585][T27588] veth7: entered promiscuous mode [ 726.252220][T27595] erspan0: entered allmulticast mode [ 726.319521][T27571] lo speed is unknown, defaulting to 1000 [ 726.387502][T27571] lo speed is unknown, defaulting to 1000 [ 726.761556][T27637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5396'. [ 726.762973][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'. [ 726.795299][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5396'. [ 726.825356][T27638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5393'. [ 726.841552][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5393'. [ 727.207129][ T30] audit: type=1800 audit(1770481583.210:24): pid=27648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5398" name="memory.events" dev="tmpfs" ino=2196 res=0 errno=0 [ 727.278303][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5399'. [ 727.287634][T27654] netlink: 'syz.4.5399': attribute type 1 has an invalid length. [ 727.563936][T27659] xfrm0 speed is unknown, defaulting to 1000 [ 729.563114][T27671] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 729.564879][T27659] lo speed is unknown, defaulting to 1000 [ 729.584608][T27659] lo speed is unknown, defaulting to 1000 [ 729.715235][T27681] lo: Caught tx_queue_len zero misconfig [ 729.760912][T27681] netlink: 'syz.0.5405': attribute type 9 has an invalid length. [ 729.782353][T27681] netlink: 'syz.0.5405': attribute type 6 has an invalid length. [ 729.843184][T27689] erspan0: left promiscuous mode [ 729.848574][T27689] wg1: left promiscuous mode [ 729.860975][T27689] wg1: left allmulticast mode [ 729.869886][T27689] macvlan2: left promiscuous mode [ 729.875991][T27689] macvlan2: left allmulticast mode [ 729.883463][T27689] geneve3: left promiscuous mode [ 729.918971][T27689] bond7: left promiscuous mode [ 729.963059][T17468] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.986203][T17468] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.027456][T17468] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.047012][T17468] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.114608][T27695] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 730.585690][T27703] vlan2: entered promiscuous mode [ 730.596431][T27703] geneve1: entered promiscuous mode [ 730.603503][T27703] vlan2: entered allmulticast mode [ 730.608828][T27703] geneve1: entered allmulticast mode [ 730.802653][T27713] syzkaller0: entered promiscuous mode [ 730.808865][T27713] syzkaller0: entered allmulticast mode [ 731.086606][T27726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5420'. [ 731.356116][T27742] xt_cgroup: xt_cgroup: no path or classid specified [ 731.664925][T27754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5424'. [ 732.069939][T27783] tunl0: Caught tx_queue_len zero misconfig [ 732.183364][T27787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5435'. [ 732.193121][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5435'. [ 732.286040][T27794] netlink: 179344 bytes leftover after parsing attributes in process `syz.3.5437'. [ 732.343224][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5438'. [ 732.350696][T27794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5437'. [ 732.606335][T27807] xfrm0 speed is unknown, defaulting to 1000 [ 732.829889][T27787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5435'. [ 733.149482][T27807] lo speed is unknown, defaulting to 1000 [ 733.163261][T27807] lo speed is unknown, defaulting to 1000 [ 733.513041][T27845] batman_adv: batadv0: Adding interface: macvtap0 [ 733.532052][T27845] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.589252][T27845] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 733.633071][T27840] xfrm0 speed is unknown, defaulting to 1000 [ 734.003108][T27867] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5457'. [ 734.019679][T27867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5457'. [ 734.039340][T27847] xfrm0 speed is unknown, defaulting to 1000 [ 734.227372][T27874] net_ratelimit: 11 callbacks suppressed [ 734.227388][T27874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.307906][T27840] lo speed is unknown, defaulting to 1000 [ 734.438425][T27876] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 734.453224][T27876] bond11 (unregistering): Released all slaves [ 734.519657][T27847] lo speed is unknown, defaulting to 1000 [ 734.519691][T27840] lo speed is unknown, defaulting to 1000 [ 734.796690][T27847] lo speed is unknown, defaulting to 1000 [ 735.423731][T27912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.003623][T27934] batadv_slave_0: Caught tx_queue_len zero misconfig [ 736.202808][T27942] __nla_validate_parse: 2 callbacks suppressed [ 736.202832][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5479'. [ 736.271246][T27942] openvswitch: netlink: Invalid VLAN frame [ 736.487938][T27945] xfrm0 speed is unknown, defaulting to 1000 [ 736.979195][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.001711][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.011165][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.033093][T27967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.053316][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.067705][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.087629][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.119885][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.154978][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.197853][T27962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5486'. [ 737.493290][T27972] bond6: option ad_select: invalid value (34) [ 737.513801][T27972] bond6 (unregistering): Released all slaves [ 737.600984][T27945] lo speed is unknown, defaulting to 1000 [ 737.656641][T27985] 8021q: adding VLAN 0 to HW filter on device bond11 [ 737.669468][T27985] bond0: (slave bond11): Enslaving as an active interface with an up link [ 737.678841][T27945] lo speed is unknown, defaulting to 1000 [ 737.938043][T27995] xfrm0 speed is unknown, defaulting to 1000 [ 737.986597][T28003] netlink: 'syz.3.5495': attribute type 6 has an invalid length. [ 738.493398][T28027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.550973][T28032] netlink: 'syz.0.5499': attribute type 1 has an invalid length. [ 738.703775][T28032] 8021q: adding VLAN 0 to HW filter on device bond12 [ 738.762751][T28037] dummy0: Caught tx_queue_len zero misconfig [ 738.794862][T28044] netlink: 'syz.3.5500': attribute type 10 has an invalid length. [ 738.851031][T28037] netlink: 'syz.3.5500': attribute type 2 has an invalid length. [ 739.072455][T27995] lo speed is unknown, defaulting to 1000 [ 739.148948][T27995] lo speed is unknown, defaulting to 1000 [ 740.468579][T28084] openvswitch: netlink: Key type 195 is out of range max 32 [ 740.688918][T28088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.914177][T28092] netlink: 'syz.4.5512': attribute type 1 has an invalid length. [ 741.213043][T28104] __nla_validate_parse: 34 callbacks suppressed [ 741.213063][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5514'. [ 741.256831][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5515'. [ 741.292047][T28104] ip6tnl0: Caught tx_queue_len zero misconfig [ 741.298190][T28104] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5514'. [ 741.532261][T28110] netlink: 488 bytes leftover after parsing attributes in process `syz.2.5516'. [ 741.562260][T28110] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5516'. [ 741.894557][T28138] sctp: [Deprecated]: syz.3.5522 (pid 28138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.894557][T28138] Use struct sctp_sack_info instead [ 742.145704][T28108] ip6gretap0: entered promiscuous mode [ 742.151934][T28108] ip6gretap0: entered allmulticast mode [ 742.733328][T28169] tipc: Resetting bearer [ 742.935309][T28184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5533'. [ 742.948740][T28184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5533'. [ 742.985414][T28187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5534'. [ 743.178834][T28197] syzkaller1: entered promiscuous mode [ 743.216045][T28197] syzkaller1: entered allmulticast mode [ 743.364888][T28193] xfrm0 speed is unknown, defaulting to 1000 [ 743.594604][T28227] xt_cgroup: invalid path, errno=-2 [ 743.936384][T28193] lo speed is unknown, defaulting to 1000 [ 743.974606][T28193] lo speed is unknown, defaulting to 1000 [ 744.225710][T28244] netlink: 'syz.4.5550': attribute type 10 has an invalid length. [ 744.277302][T28246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5550'. [ 744.667560][T28253] tipc: Enabled bearer , priority 0 [ 744.690932][T28253] syzkaller0: entered promiscuous mode [ 744.705872][T28253] syzkaller0: entered allmulticast mode [ 744.715811][T28253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5553'. [ 744.744317][T28258] netlink: 'syz.1.5555': attribute type 3 has an invalid length. [ 744.754257][T28258] netlink: 'syz.1.5555': attribute type 3 has an invalid length. [ 744.794513][T28261] tipc: Resetting bearer [ 744.887069][T28252] tipc: Resetting bearer [ 744.945480][T28252] tipc: Disabling bearer [ 745.142264][T28272] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 745.316888][T28274] veth4: entered allmulticast mode [ 745.815366][T28288] xfrm0 speed is unknown, defaulting to 1000 [ 746.445127][T28303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.512564][T28288] lo speed is unknown, defaulting to 1000 [ 746.513394][T28286] xfrm0 speed is unknown, defaulting to 1000 [ 746.524043][T28288] lo speed is unknown, defaulting to 1000 [ 746.879484][T28312] __nla_validate_parse: 8 callbacks suppressed [ 746.879504][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5568'. [ 746.927690][T28311] netlink: 'syz.3.5569': attribute type 1 has an invalid length. [ 746.995893][T28316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5569'. [ 747.037242][T28316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.224447][T28318] batadv_slave_0: Caught tx_queue_len zero misconfig [ 747.365258][T28312] xfrm0 speed is unknown, defaulting to 1000 [ 747.426574][T28286] lo speed is unknown, defaulting to 1000 [ 747.501485][T28286] lo speed is unknown, defaulting to 1000 [ 747.879760][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5571'. [ 748.169725][T28312] lo speed is unknown, defaulting to 1000 [ 748.219716][T28312] lo speed is unknown, defaulting to 1000 [ 748.516811][T28346] syzkaller0: entered promiscuous mode [ 748.522884][T28346] syzkaller0: entered allmulticast mode [ 749.032164][T28350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.425268][T28361] IPVS: set_ctl: invalid protocol: 137 172.20.20.26:20002 [ 749.435031][T28361] mac80211_hwsim hwsim51 wlan1: Caught tx_queue_len zero misconfig [ 749.888453][T28371] gretap1: entered promiscuous mode [ 749.964502][T28371] batman_adv: batadv0: Adding interface: gretap1 [ 749.970906][T28371] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 750.000429][T28371] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 750.020826][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5584'. [ 750.080412][T28377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5584'. [ 750.090325][T28377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5584'. [ 750.341226][T28396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5588'. [ 750.350828][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5588'. [ 750.361541][T28396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5588'. [ 750.370660][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5588'. [ 750.495434][T28403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.683733][T28414] team0: Port device syz_tun added [ 750.723593][T28414] team0: Port device syz_tun removed [ 750.730409][T28414] bond0: (slave bridge0): Releasing backup interface [ 750.762736][T28414] bond2: (slave bond0): Releasing backup interface [ 750.796099][T28414] bond0: (slave dummy0): Releasing backup interface [ 750.824583][T28414] bridge_slave_0: left allmulticast mode [ 750.841766][T28414] bridge_slave_0: left promiscuous mode [ 750.852409][T28414] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.874826][T28414] bridge_slave_1: left allmulticast mode [ 750.880545][T28414] bridge_slave_1: left promiscuous mode [ 750.901702][T28414] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.998997][T28414] bond0: (slave bond_slave_0): Releasing backup interface [ 751.034751][T28414] bond0: (slave bond_slave_1): Releasing backup interface [ 751.067427][T28414] team0: Port device team_slave_0 removed [ 751.094565][T28414] team0: Port device team_slave_1 removed [ 751.115924][T28414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.124116][T28414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.139741][T28414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.148244][T28414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.166955][T28414] bond3: (slave veth3): Releasing active interface [ 751.186768][T28414] bond4: (slave ip6gretap1): Removing an active aggregator [ 751.197770][T28414] bond4: (slave ip6gretap1): Releasing backup interface [ 751.217414][T28414] batman_adv: batadv0: Interface deactivated: geneve3 [ 751.225187][T28414] batman_adv: batadv0: Removing interface: geneve3 [ 751.251014][T28413] macvtap1: entered promiscuous mode [ 751.258539][T28413] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 751.405419][T28426] tipc: Enabled bearer , priority 0 [ 751.448328][T28426] tipc: Resetting bearer [ 751.473034][T28425] tipc: Disabling bearer [ 751.698453][T28443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.769724][T28449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.823786][T28449] netlink: 'syz.4.5606': attribute type 11 has an invalid length. [ 751.901052][T28449] __nla_validate_parse: 8 callbacks suppressed [ 751.901071][T28449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5606'. [ 751.922096][T28454] netlink: 'syz.1.5607': attribute type 3 has an invalid length. [ 751.940499][T28453] netlink: 'syz.1.5607': attribute type 3 has an invalid length. [ 751.969769][T28454] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 752.017624][T28462] netlink: 'syz.0.5608': attribute type 10 has an invalid length. [ 752.096185][T28460] bond13: ARP target 9.0.0.0 is already present [ 752.111909][T28460] bond13: option arp_ip_target: invalid value (9) [ 752.129637][T28460] bond13 (unregistering): Released all slaves [ 752.201691][T13956] lec:lec_start_xmit: lec0:No lecd attached [ 752.271063][T28454] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 752.378803][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5612'. [ 752.399666][T28469] xfrm0 speed is unknown, defaulting to 1000 [ 752.400785][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5612'. [ 752.432431][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5612'. [ 752.460546][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5612'. [ 752.500915][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 752.834570][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5618'. [ 752.974037][T28500] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 752.991207][T28469] lo speed is unknown, defaulting to 1000 [ 752.993213][T28494] xfrm0 speed is unknown, defaulting to 1000 [ 753.024732][T28469] lo speed is unknown, defaulting to 1000 [ 753.061725][T28502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.487404][T28494] lo speed is unknown, defaulting to 1000 [ 753.493533][T28509] xfrm0 speed is unknown, defaulting to 1000 [ 753.567062][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'. [ 753.597638][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5625'. [ 753.633813][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'. [ 753.750905][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5625'. [ 753.872114][T28494] lo speed is unknown, defaulting to 1000 [ 753.912795][T28506] xfrm0 speed is unknown, defaulting to 1000 [ 753.918955][T28509] lo speed is unknown, defaulting to 1000 [ 754.186140][T28527] xt_hashlimit: size too large, truncated to 1048576 [ 754.295869][T28509] lo speed is unknown, defaulting to 1000 [ 754.690840][T28506] lo speed is unknown, defaulting to 1000 [ 754.727029][T28506] lo speed is unknown, defaulting to 1000 [ 755.148436][T28549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.359020][T28582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.932373][T28594] xfrm0 speed is unknown, defaulting to 1000 [ 757.166499][T28605] netlink: 'syz.1.5652': attribute type 6 has an invalid length. [ 757.212152][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 757.220266][ C0] lec:lec_tx_timeout: lec0 [ 757.225921][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 757.273790][T22332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.288224][T22332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.297805][T22332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.309905][T22332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.318554][T22332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.320855][T28609] __nla_validate_parse: 9 callbacks suppressed [ 757.320903][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5653'. [ 757.368966][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.380227][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.389769][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.405745][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.410233][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5653'. [ 757.417657][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.590284][T28614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5654'. [ 757.841715][T28594] lo speed is unknown, defaulting to 1000 [ 757.849972][T28602] xfrm0 speed is unknown, defaulting to 1000 [ 757.853964][T28594] lo speed is unknown, defaulting to 1000 [ 757.958681][T28628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.279320][T28636] policy can only be matched on NF_INET_PRE_ROUTING [ 758.279344][T28636] unable to load match [ 758.312605][T28636] ipt_REJECT: ECHOREPLY no longer supported. [ 758.415306][T28602] lo speed is unknown, defaulting to 1000 [ 758.435631][T28606] xfrm0 speed is unknown, defaulting to 1000 [ 758.447315][T28602] lo speed is unknown, defaulting to 1000 [ 758.886151][T28649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5665'. [ 758.904228][T28649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5665'. [ 758.938654][T28649] dummy0: entered promiscuous mode [ 758.965313][T28649] syz_tun: entered promiscuous mode [ 758.986966][T28649] debugfs: 'hsr0' already exists in 'hsr' [ 758.996046][T28649] Cannot create hsr debugfs directory [ 759.004083][T28649] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 759.015226][T28649] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 759.040590][T28606] lo speed is unknown, defaulting to 1000 [ 759.103748][T28606] lo speed is unknown, defaulting to 1000 [ 759.452478][ T5833] Bluetooth: hci3: command tx timeout [ 760.122586][T28680] xfrm0 speed is unknown, defaulting to 1000 [ 760.689865][T28699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5674'. [ 760.736277][T28686] ip6gre0: Caught tx_queue_len zero misconfig [ 760.761561][T28686] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 760.840346][T28686] netlink: 'syz.0.5672': attribute type 9 has an invalid length. [ 760.854474][T28606] chnl_net:caif_netlink_parms(): no params data found [ 760.936879][T28680] lo speed is unknown, defaulting to 1000 [ 761.043436][T28680] lo speed is unknown, defaulting to 1000 [ 761.250228][T28606] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.285943][T28606] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.314805][T28606] bridge_slave_0: entered allmulticast mode [ 761.345072][T28606] bridge_slave_0: entered promiscuous mode [ 761.380062][T28606] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.405621][T28606] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.434536][T28606] bridge_slave_1: entered allmulticast mode [ 761.461026][T28606] bridge_slave_1: entered promiscuous mode [ 761.534217][ T5833] Bluetooth: hci3: command tx timeout [ 761.645594][T28606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.658516][T28606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.750210][T28724] only policy match revision 0 supported [ 761.750236][T28724] unable to load match [ 761.766695][T28606] team0: Port device team_slave_0 added [ 761.777701][T28725] xfrm0 speed is unknown, defaulting to 1000 [ 761.784751][T28606] team0: Port device team_slave_1 added [ 761.914102][T28606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.931952][T28606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.976040][T28606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.044737][T28734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5685'. [ 762.078533][T28606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.094916][T28606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.123137][T28606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.142881][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5686'. [ 762.197268][T28606] hsr_slave_0: entered promiscuous mode [ 762.218151][T28737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5686'. [ 762.230529][T28606] hsr_slave_1: entered promiscuous mode [ 762.237890][T28606] debugfs: 'hsr0' already exists in 'hsr' [ 762.244238][T28606] Cannot create hsr debugfs directory [ 762.272045][T28725] lo speed is unknown, defaulting to 1000 [ 762.279817][T28725] lo speed is unknown, defaulting to 1000 [ 762.475667][T28743] netlink: 'syz.3.5687': attribute type 2 has an invalid length. [ 762.555970][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 762.663292][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 762.680632][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 762.799115][T28756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 763.051358][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 763.059434][ C0] lec:lec_tx_timeout: lec0 [ 763.078186][T28606] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.299419][T28606] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.410277][T28606] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.540286][T28606] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.607370][T28774] tipc: Enabling of bearer rejected, failed to enable media [ 763.621858][ T5833] Bluetooth: hci3: command tx timeout [ 763.996870][T28790] bond0: (slave sit0): Error: Device type is different from other slaves [ 764.017257][T28606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 764.052413][T28606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 764.095674][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 764.099732][T28606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 764.149036][T28606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 764.378163][T28818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5707'. [ 764.395696][T28606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.448518][T28606] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.548738][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.556015][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.659816][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.667086][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.737233][T28834] netlink: 'syz.2.5710': attribute type 3 has an invalid length. [ 764.762325][T28834] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5710'. [ 764.905008][T28618] udevd[28618]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.335741][T28877] netlink: 212352 bytes leftover after parsing attributes in process `syz.1.5720'. [ 765.371051][T28881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 765.417371][T28606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.554860][T28891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5723'. [ 765.702246][ T5833] Bluetooth: hci3: command tx timeout [ 765.807012][T28904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.822889][T28891] syzkaller1: entered promiscuous mode [ 765.828462][T28891] syzkaller1: entered allmulticast mode [ 765.915953][T28899] xfrm0 speed is unknown, defaulting to 1000 [ 766.212254][T28606] veth0_vlan: entered promiscuous mode [ 766.243777][T28606] veth1_vlan: entered promiscuous mode [ 766.350048][T28606] veth0_macvtap: entered promiscuous mode [ 766.394489][T28606] veth1_macvtap: entered promiscuous mode [ 766.441793][T28606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.509824][T28913] xfrm0 speed is unknown, defaulting to 1000 [ 766.509833][T28899] lo speed is unknown, defaulting to 1000 [ 766.523683][T28606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.534405][T28899] lo speed is unknown, defaulting to 1000 [ 766.556649][ T166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.566192][ T166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.600634][ T166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.630255][ T166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.822347][T28913] lo speed is unknown, defaulting to 1000 [ 766.837660][T28918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5730'. [ 766.954515][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.992824][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.045623][T28913] lo speed is unknown, defaulting to 1000 [ 767.083593][T17468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.103342][T17468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.504020][T28935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 767.864081][T28949] __nla_validate_parse: 4 callbacks suppressed [ 767.864103][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5737'. [ 768.087333][T28954] tipc: Enabled bearer , priority 0 [ 768.115479][T28954] syzkaller0: entered promiscuous mode [ 768.121037][T28954] syzkaller0: entered allmulticast mode [ 768.259109][T28954] tipc: Resetting bearer [ 768.281520][T28954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.297006][T28957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5739'. [ 768.321537][T28953] tipc: Resetting bearer [ 768.348666][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5739'. [ 768.404301][T28953] tipc: Disabling bearer [ 768.903978][T24216] IPVS: starting estimator thread 0... [ 768.911823][T28975] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.939056][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5744'. [ 768.969063][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5746'. [ 769.012937][T28985] IPVS: using max 26 ests per chain, 62400 per kthread [ 769.053329][T28986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 769.126236][T28994] bond8: (slave batadv1): Opening slave failed [ 769.161805][T28999] : renamed from bond_slave_0 [ 769.545853][T29026] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5756'. [ 769.605276][T29026] nbd: must specify a size in bytes for the device [ 769.802950][T29034] xfrm0 speed is unknown, defaulting to 1000 [ 769.809086][T29037] vlan0: entered promiscuous mode [ 770.006324][T29047] syzkaller0: entered promiscuous mode [ 770.032073][T29047] syzkaller0: entered allmulticast mode [ 770.044420][T29047] TC_ACT_REPEAT abuse ? [ 770.163377][T29051] netlink: 'syz.1.5763': attribute type 2 has an invalid length. [ 770.171192][T29051] netlink: 'syz.1.5763': attribute type 1 has an invalid length. [ 770.336881][T29034] lo speed is unknown, defaulting to 1000 [ 770.365712][T29034] lo speed is unknown, defaulting to 1000 [ 770.670577][T29073] netlink: 'syz.3.5770': attribute type 1 has an invalid length. [ 770.835170][T29085] tunl0: Caught tx_queue_len zero misconfig [ 771.177328][T29096] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 771.775624][T29123] netlink: 'syz.2.5785': attribute type 1 has an invalid length. [ 771.785368][T29123] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5785'. [ 771.799437][T29124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5784'. [ 771.864028][T29123] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.5785'. [ 772.009248][T29123] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 772.300484][T29155] netlink: 'syz.2.5794': attribute type 33 has an invalid length. [ 772.309408][T29155] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5794'. [ 773.228098][T29200] syzkaller0: entered promiscuous mode [ 773.246545][T29200] syzkaller0: entered allmulticast mode [ 775.104889][T29231] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 775.259632][T29245] __nla_validate_parse: 3 callbacks suppressed [ 775.259656][T29245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5811'. [ 775.508743][T29260] syzkaller0: entered promiscuous mode [ 775.516665][T29260] syzkaller0: entered allmulticast mode [ 775.679447][T29274] netlink: 'syz.3.5821': attribute type 1 has an invalid length. [ 776.005053][T29295] xfrm0 speed is unknown, defaulting to 1000 [ 776.311516][T29305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5830'. [ 776.341890][T29305] vlan0: entered promiscuous mode [ 776.347792][T29305] gretap0: entered promiscuous mode [ 776.543963][T29311] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 776.625571][T29313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5834'. [ 776.642049][T29313] openvswitch: netlink: Flow key attr not present in new flow. [ 776.710996][T29295] lo speed is unknown, defaulting to 1000 [ 776.746516][T29295] lo speed is unknown, defaulting to 1000 [ 777.005761][T29321] syzkaller0: entered promiscuous mode [ 777.025914][T29321] syzkaller0: entered allmulticast mode [ 777.597676][T29333] netlink: zone id is out of range [ 777.606071][T29333] netlink: zone id is out of range [ 777.620709][T29333] netlink: zone id is out of range [ 777.629002][T29333] netlink: zone id is out of range [ 777.639096][T29333] netlink: zone id is out of range [ 777.645632][T29333] netlink: zone id is out of range [ 777.651973][T29333] netlink: zone id is out of range [ 779.960514][T29375] tipc: Enabling of bearer rejected, failed to enable media [ 780.266781][T29395] netlink: 'syz.2.5856': attribute type 4 has an invalid length. [ 780.293583][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5855'. [ 780.333198][T29396] net_ratelimit: 47 callbacks suppressed [ 780.333262][T29396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.558466][T29403] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5859'. [ 780.774934][T29410] tipc: Enabling of bearer rejected, already enabled [ 780.808961][T29413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5864'. [ 780.908585][T29413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5864'. [ 781.088082][T29424] veth14: entered allmulticast mode [ 781.131475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.366651][T29441] 8021q: VLANs not supported on wg1 [ 781.534132][T29440] xfrm0 speed is unknown, defaulting to 1000 [ 781.575316][T29443] tipc: Enabled bearer , priority 0 [ 781.814603][T29442] tipc: Disabling bearer [ 781.955297][T29440] lo speed is unknown, defaulting to 1000 [ 781.968572][T29440] lo speed is unknown, defaulting to 1000 [ 782.171376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.237272][T29476] hsr0: entered promiscuous mode [ 782.266396][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5883'. [ 782.377791][T29483] pimreg: left allmulticast mode [ 782.418273][T29487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5886'. [ 782.428552][T29484] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 782.667262][T29496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5888'. [ 783.211661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.743907][T29528] netlink: 'syz.1.5898': attribute type 2 has an invalid length. [ 783.855739][T29528] l24): entered promiscuous mode [ 783.898398][T22332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 783.935860][T22332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 783.947296][T22332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 783.972523][T22332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 783.990439][T22332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 784.085028][T29530] xfrm0 speed is unknown, defaulting to 1000 [ 784.170134][T29537] vcan0: tx address claim with dest, not broadcast [ 784.211167][T29540] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 784.251365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.363991][ T30] audit: type=1107 audit(1770481640.360:25): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 784.439898][T29550] gre0: left promiscuous mode [ 784.451536][T29550] gre0: left allmulticast mode [ 784.506966][T29550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.515463][T29553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5905'. [ 784.528501][T29550] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.570157][T29550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 784.702448][T29559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5907'. [ 784.839725][T29564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5908'. [ 784.930775][T29530] lo speed is unknown, defaulting to 1000 [ 784.937060][T29558] xfrm0 speed is unknown, defaulting to 1000 [ 785.010586][T29530] lo speed is unknown, defaulting to 1000 [ 785.150826][T29574] syzkaller0: entered promiscuous mode [ 785.172769][T29574] syzkaller0: entered allmulticast mode [ 785.291365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.420246][T29569] xfrm0 speed is unknown, defaulting to 1000 [ 785.438788][T29558] lo speed is unknown, defaulting to 1000 [ 785.443260][T29576] tipc: Enabled bearer , priority 0 [ 785.470970][T29576] syzkaller0: entered promiscuous mode [ 785.487454][T29576] syzkaller0: entered allmulticast mode [ 785.522437][T29575] tipc: Resetting bearer [ 785.546223][T29575] tipc: Disabling bearer [ 785.569085][T29558] lo speed is unknown, defaulting to 1000 [ 785.802951][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5912'. [ 786.024983][T29569] lo speed is unknown, defaulting to 1000 [ 786.058688][T29569] lo speed is unknown, defaulting to 1000 [ 786.092433][T22332] Bluetooth: hci2: command tx timeout [ 786.250623][T29530] chnl_net:caif_netlink_parms(): no params data found [ 786.331376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.583394][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5917'. [ 786.600627][T29530] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.617134][T29530] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.628097][T29530] bridge_slave_0: entered allmulticast mode [ 786.654745][T29530] bridge_slave_0: entered promiscuous mode [ 786.664646][T29602] xt_hashlimit: overflow, rate too high: 0 [ 786.685899][T29530] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.702260][T29530] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.714899][T29530] bridge_slave_1: entered allmulticast mode [ 786.745272][T29530] bridge_slave_1: entered promiscuous mode [ 786.921105][T29530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.037819][T29614] netlink: 'syz.1.5919': attribute type 10 has an invalid length. [ 787.068796][T29530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.105901][T29615] netlink: 'syz.1.5919': attribute type 10 has an invalid length. [ 787.184881][T29615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 787.235461][T29614] bridge0: entered promiscuous mode [ 787.241127][T29617] erspan0: entered promiscuous mode [ 787.265336][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5920'. [ 787.284920][T29530] team0: Port device team_slave_0 added [ 787.335466][T29530] team0: Port device team_slave_1 added [ 787.371366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.649255][T29530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.667247][T29530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.704508][T29530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.732978][T29530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.741699][T29530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.769374][T29530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.958406][T29530] hsr_slave_0: entered promiscuous mode [ 787.978132][T29530] hsr_slave_1: entered promiscuous mode [ 788.023183][T29530] debugfs: 'hsr0' already exists in 'hsr' [ 788.029076][T29530] Cannot create hsr debugfs directory [ 788.052404][T29634] netlink: 'syz.4.5925': attribute type 1 has an invalid length. [ 788.171497][T22332] Bluetooth: hci2: command tx timeout [ 788.411392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.469687][T29653] xt_ecn: cannot match TCP bits for non-tcp packets [ 788.747510][T29657] xfrm0 speed is unknown, defaulting to 1000 [ 788.849140][T29530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.881868][T29530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.111030][T29530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.282749][T29530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.328135][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.360177][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.415263][T29530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.442676][T29530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.451552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.499375][T29677] tc_dump_action: action bad kind [ 789.519678][T29657] lo speed is unknown, defaulting to 1000 [ 789.607081][T29530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.632574][T29681] xt_CONNSECMARK: invalid mode: 0 [ 789.653964][T29530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.802600][T29657] lo speed is unknown, defaulting to 1000 [ 789.902916][T29691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5936'. [ 790.253611][T22332] Bluetooth: hci2: command tx timeout [ 790.266433][T29530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.293858][T29530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.315181][T29704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5939'. [ 790.334147][T29711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5940'. [ 790.408479][T29530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.460240][T29709] xfrm0 speed is unknown, defaulting to 1000 [ 790.467919][T29530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.491359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.899509][T29530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.929787][T29530] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.955200][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.962497][T13398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.029512][T29730] xt_CT: No such helper "pptp" [ 791.043448][T13398] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.050686][T13398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.125090][T29709] lo speed is unknown, defaulting to 1000 [ 791.168129][T29709] lo speed is unknown, defaulting to 1000 [ 791.322910][T29738] SET target dimension over the limit! [ 791.531499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.609748][T29530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.696761][T29530] veth0_vlan: entered promiscuous mode [ 791.716130][T29530] veth1_vlan: entered promiscuous mode [ 791.765240][T29530] veth0_macvtap: entered promiscuous mode [ 791.784489][T29530] veth1_macvtap: entered promiscuous mode [ 791.879559][T29753] openvswitch: netlink: Message has 592 unknown bytes. [ 791.888116][T29753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.934697][T29530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.060938][T29530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.133527][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.143116][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.154078][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.182125][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.334102][T22332] Bluetooth: hci2: command tx timeout [ 792.430263][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.483199][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.571454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.596673][T29768] : renamed from lo (while UP) [ 792.759522][T29775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5954'. [ 792.775675][T19286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.792479][T19286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.870365][T29775] tipc: Enabled bearer , priority 0 [ 793.176011][T29787] tipc: Disabling bearer [ 793.186192][T29790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5956'. [ 793.241250][T29790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5956'. [ 793.254562][T29781] xfrm0 speed is unknown, defaulting to 1000 [ 793.274645][T29792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5957'. [ 793.384709][T29794] tipc: Enabled bearer , priority 0 [ 793.405046][T29794] syzkaller0: entered promiscuous mode [ 793.410582][T29794] syzkaller0: entered allmulticast mode [ 793.490768][T29794] tipc: Resetting bearer [ 793.585427][T29793] tipc: Resetting bearer [ 793.611362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.664724][T29793] tipc: Disabling bearer [ 793.822815][T29781] lo speed is unknown, defaulting to 1000 [ 793.831844][T29781] lo speed is unknown, defaulting to 1000 [ 793.972593][T29813] xt_l2tp: wrong L2TP version: 0 [ 794.006942][T29824] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5968'. [ 794.154506][T29824] netlink: 'syz.3.5968': attribute type 11 has an invalid length. [ 794.490826][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5974'. [ 794.651359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.891132][T29861] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5979'. [ 794.910369][T29860] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5979'. [ 794.944928][T29851] xfrm0 speed is unknown, defaulting to 1000 [ 795.049043][T29864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5980'. [ 795.061217][T29864] netlink: 'syz.4.5980': attribute type 7 has an invalid length. [ 795.091528][T29864] netlink: 'syz.4.5980': attribute type 8 has an invalid length. [ 795.099463][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5980'. [ 795.418808][T29872] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 795.462309][T29872] syzkaller1: linktype set to 260 [ 795.691649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.748943][T29851] lo speed is unknown, defaulting to 1000 [ 795.757688][T29851] lo speed is unknown, defaulting to 1000 [ 795.990852][T29887] netlink: 'syz.1.5986': attribute type 30 has an invalid length. [ 796.184454][T29893] netlink: 'syz.4.5988': attribute type 1 has an invalid length. [ 796.398976][T29895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.456950][T29895] bond1: (slave bond2): making interface the new active one [ 796.465191][T29895] bond1: (slave bond2): Enslaving as an active interface with an up link [ 796.497835][T29903] xt_l2tp: unknown flags: 51 [ 796.524178][T29897] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 796.573089][T29893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.731598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.772590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.090272][T29950] __nla_validate_parse: 4 callbacks suppressed [ 798.090295][T29950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6003'. [ 798.335739][T29962] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6007'. [ 798.347485][T29962] gretap0: entered promiscuous mode [ 798.360139][T29962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6007'. [ 798.443575][T29964] netem: unknown loss type 0 [ 798.449402][T29964] netem: change failed [ 798.455814][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'. [ 798.466511][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6008'. [ 798.476332][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'. [ 798.486540][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6008'. [ 798.795704][T29971] ip6t_srh: unknown srh invflags 4000 [ 798.811388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.853324][T29972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6011'. [ 798.880349][T29971] 8021q: VLANs not supported on wg2 [ 799.208254][T29985] xfrm0 speed is unknown, defaulting to 1000 [ 799.430443][T29997] netlink: 'syz.0.6019': attribute type 29 has an invalid length. [ 799.459355][T29985] lo speed is unknown, defaulting to 1000 [ 799.459386][T29986] xfrm0 speed is unknown, defaulting to 1000 [ 799.468820][T29985] lo speed is unknown, defaulting to 1000 [ 799.494800][T29998] netlink: 'syz.0.6019': attribute type 29 has an invalid length. [ 799.578663][T30001] netlink: 588 bytes leftover after parsing attributes in process `syz.0.6019'. [ 799.664517][T29998] atomic_op ffff88805545c998 conn xmit_atomic 0000000000000000 [ 799.798934][T29986] lo speed is unknown, defaulting to 1000 [ 799.808766][T29986] lo speed is unknown, defaulting to 1000 [ 799.851474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.743677][T29943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.894776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.929023][T30005] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6020'. [ 801.000676][T30012] netlink: 'syz.3.6023': attribute type 2 has an invalid length. [ 801.027366][T30012] : entered promiscuous mode [ 801.040735][T30005] syzkaller1: entered promiscuous mode [ 801.053707][T30005] syzkaller1: entered allmulticast mode [ 801.069781][T30012] netlink: 'syz.3.6023': attribute type 2 has an invalid length. [ 801.560595][T30032] syzkaller1: entered promiscuous mode [ 801.616761][T30032] syzkaller1: entered allmulticast mode [ 801.900397][T30038] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 801.928235][T30038] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 801.932365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.003005][T30038] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 802.056724][T30039] xfrm0 speed is unknown, defaulting to 1000 [ 802.249220][T30054] syzkaller0: entered promiscuous mode [ 802.291511][T30054] syzkaller0: entered allmulticast mode [ 802.931392][T30039] lo speed is unknown, defaulting to 1000 [ 802.952620][T30039] lo speed is unknown, defaulting to 1000 [ 802.971354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.299279][T30098] __nla_validate_parse: 5 callbacks suppressed [ 803.299301][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6037'. [ 803.445265][T30106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6043'. [ 803.667334][T30106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.724385][T30106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.799349][T30106] bond0 (unregistering): Released all slaves [ 804.011394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.102385][T30122] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6046'. [ 804.766067][T30131] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 804.781949][T30131] netlink: 'syz.1.6049': attribute type 2 has an invalid length. [ 805.020741][T30138] netlink: 71 bytes leftover after parsing attributes in process `syz.1.6051'. [ 805.051390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.444718][T30156] netlink: 'syz.0.6057': attribute type 7 has an invalid length. [ 806.083162][T30198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6070'. [ 806.092294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.424936][T30206] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 806.587606][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.599541][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 806.609037][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 806.619703][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 806.628931][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.757605][T30209] xfrm0 speed is unknown, defaulting to 1000 [ 806.830768][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'. [ 806.850534][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6075'. [ 806.966329][T30221] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.6073'. [ 807.131367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.415880][T30209] lo speed is unknown, defaulting to 1000 [ 807.500150][T30209] lo speed is unknown, defaulting to 1000 [ 807.875036][T30249] nbd: couldn't find device at index 536870912 [ 808.064826][T30257] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 808.171357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.199198][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6086'. [ 808.281062][T30258] xfrm0 speed is unknown, defaulting to 1000 [ 808.363446][ T34] tipc: Resetting bearer [ 808.731992][T22332] Bluetooth: hci5: command tx timeout [ 809.054616][ T34] dvmrp0 (unregistering): left allmulticast mode [ 809.096088][ T34] bond6 (unregistering): (slave geneve0): Releasing active interface [ 809.170350][ T34] tipc: Disabling bearer [ 809.253893][ T34] team0: Port device bond0 removed [ 809.261198][ T34] bond0 (unregistering): (slave 30): Releasing backup interface [ 809.274732][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.285182][ T34] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 809.298877][ T34] bond0 (unregistering): (slave bond11): Releasing backup interface [ 809.308208][ T34] bond0 (unregistering): Released all slaves [ 809.323322][ T34] bond1 (unregistering): (slave veth3): Releasing backup interface [ 809.333873][ T34] bond1 (unregistering): Released all slaves [ 809.348668][ T34] bond2 (unregistering): Released all slaves [ 809.365684][ T34] bond3 (unregistering): Released all slaves [ 809.386194][ T34] bond4 (unregistering): Released all slaves [ 809.401728][ T34] bond5 (unregistering): Released all slaves [ 809.416440][ T34] bond6 (unregistering): Released all slaves [ 809.438948][ T34] bond7 (unregistering): Released all slaves [ 809.456408][ T34] bond8 (unregistering): Released all slaves [ 809.475361][ T34] bond9 (unregistering): Released all slaves [ 809.494948][ T34] bond10 (unregistering): Released all slaves [ 809.498313][T30279] delete_channel: no stack [ 809.514758][ T34] bond11 (unregistering): Released all slaves [ 809.530462][ T34] bond12 (unregistering): Released all slaves [ 809.546734][ T34] bond13 (unregistering): Released all slaves [ 809.639432][T30258] lo speed is unknown, defaulting to 1000 [ 809.749636][T30300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6092'. [ 809.774402][T30258] lo speed is unknown, defaulting to 1000 [ 809.803975][ T34] tipc: Left network mode [ 810.533767][T30333] netlink: 4764 bytes leftover after parsing attributes in process `syz.1.6097'. [ 810.573852][T30333] openvswitch: netlink: Flow key attr not present in new flow. [ 810.594765][T30329] vlan2: entered promiscuous mode [ 810.620202][T30329] vlan2: entered allmulticast mode [ 810.646188][T30329] hsr_slave_1: entered allmulticast mode [ 810.816452][T22332] Bluetooth: hci5: command tx timeout [ 810.836772][T30333] syzkaller0: entered promiscuous mode [ 810.848061][T30333] syzkaller0: entered allmulticast mode [ 810.908724][T30209] chnl_net:caif_netlink_parms(): no params data found [ 810.930995][T30345] netlink: 'syz.2.6100': attribute type 13 has an invalid length. [ 810.963264][T30346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6100'. [ 811.309129][T30345] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.316945][T30345] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.333093][T30357] netlink: 'syz.1.6101': attribute type 33 has an invalid length. [ 811.340968][T30357] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6101'. [ 811.553393][T30345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.588304][T30345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.924084][ T166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.951224][ T166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.058204][ T166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.072189][ T166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.087081][T30374] batadv0: entered promiscuous mode [ 812.104049][T30377] netlink: 83 bytes leftover after parsing attributes in process `syz.4.6105'. [ 812.116310][T30374] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 812.276213][T30370] xfrm0 speed is unknown, defaulting to 1000 [ 812.304634][T30209] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.337585][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.372823][T30209] bridge_slave_0: entered allmulticast mode [ 812.404204][T30209] bridge_slave_0: entered promiscuous mode [ 812.495399][T30209] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.513334][T30209] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.537595][T30209] bridge_slave_1: entered allmulticast mode [ 812.563338][T30209] bridge_slave_1: entered promiscuous mode [ 812.744072][T30404] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6111'. [ 812.841920][T30209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.892811][T22332] Bluetooth: hci5: command tx timeout [ 812.948006][T30209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.154996][T30418] tipc: Failed to remove unknown binding: 66,0,0/0:2568777411/2568777412 [ 813.185219][T30418] tipc: Failed to remove unknown binding: 66,0,0/0:2568777411/2568777412 [ 813.196916][T30370] lo speed is unknown, defaulting to 1000 [ 813.277679][T30209] team0: Port device team_slave_0 added [ 813.303480][T30370] lo speed is unknown, defaulting to 1000 [ 813.362572][T30209] team0: Port device team_slave_1 added [ 813.611188][T30209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.628614][T30209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.664565][T30209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.694145][T30209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.701823][T30209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.729814][T30209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.886631][T30209] hsr_slave_0: entered promiscuous mode [ 813.893738][T30209] hsr_slave_1: entered promiscuous mode [ 813.900361][T30209] debugfs: 'hsr0' already exists in 'hsr' [ 813.932142][T30209] Cannot create hsr debugfs directory [ 813.951544][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 813.978682][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 814.113304][T30437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6116'. [ 814.298838][T30437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.319058][T30439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.330197][T30439] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 814.350302][T30439] bond0: (slave sit1): Error -95 calling set_mac_address [ 814.467014][ T34] hsr_slave_0: left promiscuous mode [ 814.971592][T22332] Bluetooth: hci5: command tx timeout [ 815.033899][ T34] team0 (unregistering): Port device team_slave_1 removed [ 815.056092][ T34] team0 (unregistering): Port device C removed [ 815.285573][T30447] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 815.297948][T30457] tipc: Enabled bearer , priority 0 [ 815.307589][T30461] syzkaller0: entered promiscuous mode [ 815.328650][T30461] syzkaller0: entered allmulticast mode [ 815.391739][T30469] tipc: Resetting bearer [ 815.515705][T30446] tipc: Resetting bearer [ 815.549970][T30446] tipc: Disabling bearer [ 815.893297][T30495] netlink: 'syz.4.6125': attribute type 29 has an invalid length. [ 815.942013][T30496] netlink: 'syz.4.6125': attribute type 29 has an invalid length. [ 815.960357][T30495] netlink: 548 bytes leftover after parsing attributes in process `syz.4.6125'. [ 816.234887][T30514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6127'. [ 816.469926][T30514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.505114][T30519] macvlan2: entered allmulticast mode [ 816.533561][T30519] veth0_to_bond: entered allmulticast mode [ 816.552393][T30519] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 816.734923][ T34] IPVS: stop unused estimator thread 0... [ 816.778696][T30533] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6130'. [ 816.968449][T30547] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 816.985200][T30547] bond3 (unregistering): Released all slaves [ 817.231049][T30556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6134'. [ 817.607983][T30209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 817.662794][T30209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.683250][T30577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6138'. [ 817.720281][T30209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.729789][T30584] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 817.755158][T30209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 818.077083][T30611] bridge0: left promiscuous mode [ 818.092763][T30611] bridge0: entered allmulticast mode [ 818.198772][T30209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.223347][T30613] veth1_to_hsr: left allmulticast mode [ 818.227337][T30617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6137'. [ 818.236972][T30613] veth1_to_hsr: left promiscuous mode [ 818.264619][T30613] bridge0: port 3(veth1_to_hsr) entered disabled state [ 818.413100][T30613] veth3: left allmulticast mode [ 818.418467][T30613] veth3: left promiscuous mode [ 818.428709][T30613] bridge0: port 2(veth3) entered disabled state [ 818.449742][T30613] ip6gretap3: left allmulticast mode [ 818.461607][T30613] ip6gretap3: left promiscuous mode [ 818.476753][T30613] bridge0: port 1(ip6gretap3) entered disabled state [ 818.607624][T30209] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.649752][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.657001][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.687784][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.695042][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.794850][T30628] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6147'. [ 819.008897][T30643] siw: device registration error -23 [ 819.051326][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 819.059500][ C0] lec:lec_tx_timeout: lec0 [ 819.065510][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 819.314023][T30660] openvswitch: netlink: IP tunnel dst address not specified [ 819.325560][T30209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.364828][T30660] tipc: Enabling of bearer rejected, failed to enable media [ 819.367174][T30662] openvswitch: netlink: Duplicate or invalid key (type 0). [ 819.390680][T30662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.504604][T30209] veth0_vlan: entered promiscuous mode [ 819.530719][T30209] veth1_vlan: entered promiscuous mode [ 819.687924][T30209] veth0_macvtap: entered promiscuous mode [ 819.723113][T30676] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 819.728859][T30209] veth1_macvtap: entered promiscuous mode [ 819.755662][T30209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.768375][T30209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.779977][T30678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6159'. [ 819.817274][T30673] xfrm0 speed is unknown, defaulting to 1000 [ 819.830915][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.873142][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.904204][T30688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6159'. [ 819.927802][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.969287][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.006490][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6161'. [ 820.554269][T17468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.580646][T17468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.812749][T30673] lo speed is unknown, defaulting to 1000 [ 820.828530][T30673] lo speed is unknown, defaulting to 1000 [ 820.828568][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.867182][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.093791][T30726] __nla_validate_parse: 6 callbacks suppressed [ 821.093811][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6069'. [ 821.227274][T22332] block nbd5: Receive control failed (result -32) [ 822.007515][T30757] netlink: 'syz.0.6172': attribute type 16 has an invalid length. [ 822.051578][T30757] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6172'. [ 822.189440][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 822.200043][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 822.229959][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 822.246306][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 822.259323][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 822.618703][T19133] syz_tun (unregistering): left promiscuous mode [ 822.865994][T30760] xfrm0 speed is unknown, defaulting to 1000 [ 822.984682][T30797] gretap2: entered promiscuous mode [ 823.480607][T30760] lo speed is unknown, defaulting to 1000 [ 823.503762][T30760] lo speed is unknown, defaulting to 1000 [ 824.081911][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 824.089987][ C0] lec:lec_tx_timeout: lec0 [ 824.336878][ T5833] Bluetooth: hci0: command tx timeout [ 824.441161][T30841] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 824.742742][T30760] chnl_net:caif_netlink_parms(): no params data found [ 824.778410][T30794] infiniband !yz!: set active [ 824.800920][T30794] infiniband !yz!: added team_slave_0 [ 824.842835][T30794] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 824.845117][T30794] infiniband !yz!: Couldn't open port 1 [ 824.980876][T30794] RDS/IB: !yz!: added [ 824.986555][T30794] smc: adding ib device !yz! with port count 1 [ 824.994162][T30794] smc: ib device !yz! port 1 has no pnetid [ 825.072238][T30870] netlink: 10368 bytes leftover after parsing attributes in process `syz.1.6189'. [ 825.117113][T30870] openvswitch: netlink: Flow key attr not present in new flow. [ 825.149003][T30760] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.172150][T30760] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.185875][T30760] bridge_slave_0: entered allmulticast mode [ 825.204060][T30760] bridge_slave_0: entered promiscuous mode [ 825.222698][T30870] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6189'. [ 825.263123][T30760] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.290674][T30760] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.352343][T30760] bridge_slave_1: entered allmulticast mode [ 825.360347][T30760] bridge_slave_1: entered promiscuous mode [ 825.532534][T30760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.556855][T30760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.418073][T30760] team0: Port device team_slave_0 added [ 826.444819][T30760] team0: Port device team_slave_1 added [ 826.537222][T30760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.563585][T30760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.621102][T30760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.663992][T30760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.671142][T30760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.706005][T30760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.895846][T30760] hsr_slave_0: entered promiscuous mode [ 826.923424][T30760] hsr_slave_1: entered promiscuous mode [ 826.929936][T30760] debugfs: 'hsr0' already exists in 'hsr' [ 826.957697][T30760] Cannot create hsr debugfs directory [ 827.048407][T30915] netlink: 'syz.4.6198': attribute type 1 has an invalid length. [ 827.076730][T30915] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6198'. [ 827.087272][T30915] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6198'. [ 827.121462][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6200'. [ 827.267749][T30929] netlink: 'syz.2.6201': attribute type 1 has an invalid length. [ 827.438345][T30929] bond2: entered promiscuous mode [ 827.444950][T30929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 827.503945][T30938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 827.512667][T30938] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 827.534246][T30938] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 827.547868][T30938] bond2: (slave vcan1): making interface the new active one [ 827.555487][T30938] vcan1: entered promiscuous mode [ 827.562611][T30938] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 827.677507][T30760] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.721482][T30760] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.808743][T30943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6204'. [ 827.856169][T30760] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.887498][T30760] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.005100][T30760] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.043135][T30760] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.140945][T30760] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.162199][T30760] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.395590][T30760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 828.411260][T30760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 828.437160][T30760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 828.449345][T30760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 828.576391][T30760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.602863][T30760] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.617834][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.625072][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.658607][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.665881][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.951033][T30760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.020854][T30760] veth0_vlan: entered promiscuous mode [ 829.036457][T30760] veth1_vlan: entered promiscuous mode [ 829.072932][T30760] veth0_macvtap: entered promiscuous mode [ 829.085670][T30760] veth1_macvtap: entered promiscuous mode [ 829.109438][T30760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.127769][T30760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.142588][T17468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.153744][T17468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.175961][T17468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.187810][T17468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.289374][T19286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.477952][T19286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.512584][ T5922] x9: left allmulticast mode [ 829.517429][ T5922] x9: left promiscuous mode [ 829.526616][ T5922] bridge0: port 1(1x9) entered disabled state [ 829.833603][ T5922] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 829.935137][ T5922] dvmrp0 (unregistering): left allmulticast mode [ 830.166389][ T5922] bond3 (unregistering): (slave bridge4): Releasing active interface [ 830.359075][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.368088][ T5922] bond_slave_0: left promiscuous mode [ 830.375227][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.384751][ T5922] bond_slave_1: left promiscuous mode [ 830.392530][ T5922] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 830.402731][ T5922] bridge_slave_1: left promiscuous mode [ 830.408742][ T5922] bond0 (unregistering): Released all slaves [ 830.420279][ T5922] bond1 (unregistering): Released all slaves [ 830.436887][ T5922] bond2 (unregistering): Released all slaves [ 830.450607][ T5922] bond3 (unregistering): Released all slaves [ 830.464792][ T5922] bond4 (unregistering): left allmulticast mode [ 830.476588][ T5922] team0: Port device bond4 removed [ 830.489427][ T5922] bond4 (unregistering): Released all slaves [ 830.519522][T13398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.528070][T13398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.600580][ T5922] 9: left promiscuous mode [ 830.701739][ T5922] tipc: Left network mode [ 830.751594][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6170'. [ 830.846649][ T5922] mac80211_hwsim hwsim44 wlan1 (unregistering): left promiscuous mode [ 831.351210][ T5922] hsr_slave_1: left promiscuous mode [ 831.358488][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.369272][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.401141][ T5922] pim6reg (unregistering): left allmulticast mode [ 831.560826][ T5922] (unregistering): left allmulticast mode [ 831.567936][ T5922] team0 (unregistering): Port device 76 removed [ 831.584749][ T5922] team_slave_0 (unregistering): left allmulticast mode [ 831.603256][ T5922] team0 (unregistering): Port device team_slave_0 removed [ 831.719224][ T5922] dummy0 (unregistering): left allmulticast mode [ 831.728417][ T5922] team0 (unregistering): Port device dummy0 removed [ 832.064802][ T5922] IPVS: stop unused estimator thread 0... [ 874.383153][T30970] syzkaller0: entered promiscuous mode [ 874.390601][T30970] syzkaller0: entered allmulticast mode [ 874.418267][T30970] netlink: 'syz.2.6209': attribute type 1 has an invalid length. [ 874.458946][T30970] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6209'. [ 874.934962][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6219'. [ 875.043177][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6219'. [ 875.173386][T31020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6220'. [ 875.344310][T31030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6224'. [ 875.375657][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.393884][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 875.488797][T31041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6229'. [ 875.656531][T31041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6229'. [ 875.838739][T24201] IPVS: starting estimator thread 0... [ 875.846542][T31064] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 875.866721][T31064] IPVS: ip_vs_add_dest(): server weight less than zero [ 875.880707][T31054] syzkaller0: entered promiscuous mode [ 875.888049][T31064] IPVS: rr: FWM 3 0x00000003 - no destination available [ 875.947150][T31054] syzkaller0: entered allmulticast mode [ 875.952904][T31070] IPVS: using max 28 ests per chain, 67200 per kthread [ 876.003981][T31074] netlink: 'syz.3.6235': attribute type 4 has an invalid length. [ 876.023149][T31072] siw: device registration error -23 [ 876.043576][T31074] netlink: 'syz.3.6235': attribute type 1 has an invalid length. [ 876.051993][T31074] netlink: 15506 bytes leftover after parsing attributes in process `syz.3.6235'. [ 876.400333][T31092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6246'. [ 876.479339][T31092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6246'. [ 876.538282][T31100] syzkaller0: entered promiscuous mode [ 876.569684][T31100] syzkaller0: entered allmulticast mode [ 876.600035][T31101] syzkaller0: entered promiscuous mode [ 876.611194][T31104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.622039][T31101] syzkaller0: entered allmulticast mode [ 876.996351][T31124] xfrm0 speed is unknown, defaulting to 1000 [ 877.423791][T31124] lo speed is unknown, defaulting to 1000 [ 877.429699][T31137] xfrm0 speed is unknown, defaulting to 1000 [ 877.942993][T31154] syzkaller0: entered promiscuous mode [ 877.948557][T31154] syzkaller0: entered allmulticast mode [ 878.005199][T31157] tipc: Enabling of bearer rejected, already enabled [ 878.090113][T31137] lo speed is unknown, defaulting to 1000 [ 878.309066][T31162] tipc: Enabled bearer , priority 0 [ 878.323389][T31162] syzkaller0: entered promiscuous mode [ 878.329130][T31162] syzkaller0: entered allmulticast mode [ 878.389444][T31162] tipc: Resetting bearer [ 878.400139][T31161] tipc: Resetting bearer [ 878.473496][T31161] tipc: Disabling bearer [ 879.427574][T31201] netlink: 'syz.2.6276': attribute type 4 has an invalid length. [ 879.473845][T31202] netlink: 'syz.4.6277': attribute type 96 has an invalid length. [ 879.534077][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.563750][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.587071][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.602307][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.612160][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.630573][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.644355][T31185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.116181][T31210] xfrm0 speed is unknown, defaulting to 1000 [ 880.124029][T31217] batadv_slave_0: entered promiscuous mode [ 880.329410][T31218] batadv_slave_0: left promiscuous mode [ 880.634713][T22332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 880.645113][T22332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 880.654062][T22332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 880.664989][T22332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 880.672912][T22332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 880.867808][T31232] __nla_validate_parse: 11 callbacks suppressed [ 880.867832][T31232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6284'. [ 881.051375][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 881.051762][T31232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6284'. [ 881.059544][ C0] lec:lec_tx_timeout: lec0 [ 881.489503][T31243] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 881.700635][T31227] xfrm0 speed is unknown, defaulting to 1000 [ 881.721845][T31210] lo speed is unknown, defaulting to 1000 [ 882.466778][T13393] batman_adv: batadv0: Removing interface: gretap1 [ 882.811719][T22332] Bluetooth: hci4: command tx timeout [ 882.993085][T31267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'. [ 883.002265][T31267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'. [ 883.063671][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6294'. [ 883.143423][T13393] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 883.155889][T13393] bond0 (unregistering): Released all slaves [ 883.166700][T13393] bond1 (unregistering): Released all slaves [ 883.183745][T13393] bond2 (unregistering): Released all slaves [ 883.199886][T13393] bond3 (unregistering): Released all slaves [ 883.225860][T13393] bond4 (unregistering): Released all slaves [ 883.247650][T13393] bond5 (unregistering): Released all slaves [ 883.266532][T13393] bond6 (unregistering): Released all slaves [ 883.280800][T13393] bond7 (unregistering): Released all slaves [ 883.295388][T13393] bond8 (unregistering): Released all slaves [ 883.312218][T13393] bond9 (unregistering): Released all slaves [ 883.343700][T31227] lo speed is unknown, defaulting to 1000 [ 883.349848][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6294'. [ 883.360083][T31248] xfrm0 speed is unknown, defaulting to 1000 [ 883.557143][T13393] : left promiscuous mode [ 883.707459][T13393] : left promiscuous mode [ 883.848028][T13393] !: left promiscuous mode [ 883.885797][T31282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6296'. [ 883.952639][T13393] l24): left promiscuous mode [ 884.105975][T13393] tipc: Disabling bearer [ 884.135327][T13393] tipc: Left network mode [ 884.465496][T31248] lo speed is unknown, defaulting to 1000 [ 884.758644][T13956] lec:lec_start_xmit: lec0:No lecd attached [ 884.798591][T31303] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6299'. [ 884.823140][T31303] net_ratelimit: 58 callbacks suppressed [ 884.823160][T31303] openvswitch: netlink: Flow actions attr not present in new flow. [ 884.891844][T22332] Bluetooth: hci4: command tx timeout [ 885.653020][T31323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6303'. [ 885.836278][T24188] IPVS: starting estimator thread 0... [ 885.958488][T31323] tipc: Started in network mode [ 885.966145][T31333] IPVS: using max 24 ests per chain, 57600 per kthread [ 885.989961][T31323] tipc: Node identity ac1414aa, cluster identity 4711 [ 886.006027][T31323] tipc: Enabled bearer , priority 10 [ 886.205369][T31340] netlink: 'syz.0.6304': attribute type 10 has an invalid length. [ 886.396583][T31344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6305'. [ 886.720344][T31344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6305'. [ 886.972123][T22332] Bluetooth: hci4: command tx timeout [ 887.086301][T31351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6306'. [ 887.218175][T31359] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6308'. [ 887.373737][ T5942] tipc: Node number set to 2886997162 [ 887.444554][T31227] chnl_net:caif_netlink_parms(): no params data found [ 887.924233][T31376] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6311'. [ 887.943682][T31376] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 887.968725][ T30] audit: type=1107 audit(1770481743.970:26): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.004237][ T30] audit: type=1107 audit(1770481743.990:27): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.038006][ T30] audit: type=1107 audit(1770481743.990:28): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.081590][ T30] audit: type=1107 audit(1770481743.990:29): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.118010][ T30] audit: type=1107 audit(1770481743.990:30): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.155820][ T30] audit: type=1107 audit(1770481743.990:31): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.203013][ T30] audit: type=1107 audit(1770481743.990:32): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.262386][ T30] audit: type=1107 audit(1770481743.990:33): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.332032][ T30] audit: type=1107 audit(1770481743.990:34): pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 888.347804][T31402] openvswitch: netlink: Multiple metadata blocks provided [ 888.359736][T31402] openvswitch: netlink: Multiple metadata blocks provided [ 888.447730][T31408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'. [ 888.935088][ T166] smc: removing ib device syz0 [ 889.051707][T22332] Bluetooth: hci4: command tx timeout [ 889.061236][T31408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'. [ 889.203313][T31420] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 889.380335][T31420] sit0: entered promiscuous mode [ 889.402025][T31420] netlink: 'syz.3.6318': attribute type 1 has an invalid length. [ 889.409823][T31420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6318'. [ 889.534810][T31227] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.549444][T31227] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.588896][T31227] bridge_slave_0: entered allmulticast mode [ 889.609080][T31227] bridge_slave_0: entered promiscuous mode [ 889.697734][T31227] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.732351][T31227] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.779599][T31227] bridge_slave_1: entered allmulticast mode [ 889.794291][T31227] bridge_slave_1: entered promiscuous mode [ 889.841325][T31428] pimreg: tun_chr_ioctl cmd 1074025677 [ 889.848852][T31428] pimreg: linktype set to 1 [ 889.882260][T31435] xt_bpf: check failed: parse error [ 889.970431][T31432] team0: Device gtp0 is of different type [ 890.011331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 890.019494][ C0] lec:lec_tx_timeout: lec0 [ 890.225716][T31426] netlink: 'syz.0.6320': attribute type 12 has an invalid length. [ 890.238206][T31426] netlink: 'syz.0.6320': attribute type 29 has an invalid length. [ 890.265030][T31426] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6320'. [ 890.396628][T31227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.424205][T31227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.498527][T31451] ipvlan2: entered promiscuous mode [ 890.509626][T31451] bridge0: port 3(ipvlan2) entered blocking state [ 890.516348][T31451] bridge0: port 3(ipvlan2) entered disabled state [ 890.525486][T31451] ipvlan2: entered allmulticast mode [ 890.530927][T31451] bridge0: entered allmulticast mode [ 890.563373][T31451] ipvlan2: left allmulticast mode [ 890.590749][T31451] bridge0: left allmulticast mode [ 890.598544][T31459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.654953][T31453] wg1: entered promiscuous mode [ 890.671230][T31453] wg1: entered allmulticast mode [ 890.888273][T31227] team0: Port device team_slave_0 added [ 890.949926][T31227] team0: Port device team_slave_1 added [ 891.230306][T31227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.259898][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.324620][T31473] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6330'. [ 891.372156][T31473] netlink: 'syz.0.6330': attribute type 5 has an invalid length. [ 891.406711][T31227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.601172][T31227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.624600][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.711888][T31227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.949393][T31502] IPv6: addrconf: prefix option has invalid lifetime [ 892.134252][T31506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.227004][T31227] hsr_slave_0: entered promiscuous mode [ 892.279994][T31227] hsr_slave_1: entered promiscuous mode [ 892.312715][T31227] debugfs: 'hsr0' already exists in 'hsr' [ 892.321106][T31227] Cannot create hsr debugfs directory [ 892.352937][T31485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.383912][T31506] netlink: 'syz.0.6337': attribute type 10 has an invalid length. [ 892.412665][T31506] __nla_validate_parse: 2 callbacks suppressed [ 892.412684][T31506] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6337'. [ 892.644797][T31521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6340'. [ 892.675248][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6340'. [ 892.736237][T31521] netlink: 'syz.3.6340': attribute type 11 has an invalid length. [ 892.757269][T31524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.812475][T31518] netlink: 'syz.3.6340': attribute type 33 has an invalid length. [ 892.853846][T31518] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6340'. [ 892.973213][T31518] `: renamed from team0 (while UP) [ 893.419849][T13393] IPVS: stop unused estimator thread 0... [ 893.880956][T31568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.939763][T31577] Bluetooth: MGMT ver 1.23 [ 894.067182][T31583] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6357'. [ 894.156286][T31594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6357'. [ 894.439027][T31227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.477282][T31227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 894.540486][T31227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 894.594269][T31227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 894.803459][T31626] netlink: 'syz.0.6363': attribute type 29 has an invalid length. [ 894.845026][T31626] netlink: 'syz.0.6363': attribute type 29 has an invalid length. [ 894.868796][T31626] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6363'. [ 894.891204][T31626] unsupported nla_type 58 [ 894.943111][T31227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.026332][T31227] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.087374][T31634] netlink: 'syz.0.6367': attribute type 1 has an invalid length. [ 895.169390][T31634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 895.204641][T19286] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.211895][T19286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.300773][T31643] bond1: (slave veth5): Enslaving as an active interface with a down link [ 895.327626][T31649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6371'. [ 895.352250][T31650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6371'. [ 895.356593][T19286] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.368579][T19286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.658403][T31227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.826533][T31655] syzkaller0: entered promiscuous mode [ 895.832160][T31655] syzkaller0: entered allmulticast mode [ 895.932487][T31672] netlink: 'syz.0.6373': attribute type 10 has an invalid length. [ 895.964271][T31672] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.972082][T31672] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.987702][T31672] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.995005][T31672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.002642][T31672] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.009850][T31672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.038979][T31672] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 896.398235][T31227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.537474][T31227] veth0_vlan: entered promiscuous mode [ 896.587553][T31227] veth1_vlan: entered promiscuous mode [ 896.632371][T31706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6379'. [ 896.714501][T31227] veth0_macvtap: entered promiscuous mode [ 896.755604][T31227] veth1_macvtap: entered promiscuous mode [ 896.819696][T31227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.854135][T31227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.886071][T17468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.913431][T17468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.963791][T17468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.982079][T17468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.160477][T13393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.192646][T13393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.267121][T31730] sit0: mtu less than device minimum [ 897.285106][T13398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.313388][T13398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.725564][T31747] __nla_validate_parse: 2 callbacks suppressed [ 897.725587][T31747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6393'. [ 897.758499][T31748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6392'. [ 897.803969][T31748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6392'. [ 897.939552][T31755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6396'. [ 897.991029][T31758] xt_hashlimit: max too large, truncated to 1048576 [ 898.003347][T31758] xt_bpf: check failed: parse error [ 898.059607][T31760] vti0: entered promiscuous mode [ 898.080176][T31760] vti0: entered allmulticast mode [ 898.674301][T31802] syzkaller0: entered promiscuous mode [ 898.679862][T31802] syzkaller0: entered allmulticast mode [ 899.053571][T13393] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 899.168755][T31837] IPv6: addrconf: prefix option has invalid lifetime [ 899.474520][T31839] bond1 (unregistering): Released all slaves [ 899.882579][T31861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6415'. [ 899.939201][T31861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.024342][T31869] sctp: [Deprecated]: syz.3.6418 (pid 31869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.024342][T31869] Use struct sctp_sack_info instead [ 900.230924][T31879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6419'. [ 900.279549][T31876] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 900.612300][T31894] xfrm0 speed is unknown, defaulting to 1000 [ 900.666094][T31898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.765818][T31898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6421'. [ 900.858613][T31911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6428'. [ 900.936634][ T30] audit: type=1800 audit(1770481756.940:35): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6421" name="memory.events" dev="tmpfs" ino=291 res=0 errno=0 [ 900.979096][T31915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 901.857578][T31949] netlink: 'syz.4.6434': attribute type 10 has an invalid length. [ 901.904474][T31949] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.927036][T31950] Bluetooth: MGMT ver 1.23 [ 901.964385][T31949] bond0: (slave team0): Enslaving as an active interface with an up link [ 902.240667][T31953] xfrm0 speed is unknown, defaulting to 1000 [ 902.895265][T31988] m5n: entered promiscuous mode [ 903.059320][T31952] Bluetooth: hci3: command 0x0406 tx timeout [ 903.072538][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6444'. [ 903.148288][T24186] IPVS: starting estimator thread 0... [ 903.157244][T31999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6444'. [ 903.297343][T32005] IPVS: using max 33 ests per chain, 79200 per kthread [ 903.453032][T32019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6444'. [ 903.800622][T32028] SET target dimension over the limit! [ 904.018860][T31916] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 904.029776][T31916] Bluetooth: hci2: command 0x0401 tx timeout [ 904.078465][T32043] netlink: 'syz.0.6451': attribute type 1 has an invalid length. [ 904.259698][T32043] bond2: entered promiscuous mode [ 904.288116][T32043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 904.302653][T32054] netlink: 'syz.4.6452': attribute type 3 has an invalid length. [ 904.368926][T32054] tipc: Started in network mode [ 904.381999][T32054] tipc: Node identity cad274f3ac8f, cluster identity 4711 [ 904.398476][T32054] tipc: Enabled bearer , priority 0 [ 904.419146][T32058] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 904.545623][T32049] tipc: Disabling bearer [ 904.673287][T32067] tipc: Started in network mode [ 904.678233][T32067] tipc: Node identity 4ae40557a116, cluster identity 4711 [ 904.689897][T32067] tipc: Enabled bearer , priority 0 [ 905.021743][T32064] tipc: Disabling bearer [ 905.060970][T32082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6458'. [ 905.197469][T32086] team0: entered promiscuous mode [ 905.212808][T32086] team_slave_0: entered promiscuous mode [ 905.219335][T32086] team_slave_1: entered promiscuous mode [ 905.237885][T32086] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 905.425210][T32088] veth0_virt_wifi: renamed from dummy0 (while UP) [ 905.586983][T32091] xfrm0 speed is unknown, defaulting to 1000 [ 905.658127][T32107] delete_channel: no stack [ 905.914691][T32116] netlink: 'syz.3.6466': attribute type 3 has an invalid length. [ 906.203422][T32129] syzkaller0: entered promiscuous mode [ 906.226124][T32129] syzkaller0: entered allmulticast mode [ 906.433527][T32140] tipc: Enabled bearer , priority 0 [ 906.631190][T32128] tipc: Resetting bearer [ 906.680137][T32128] tipc: Disabling bearer [ 906.739433][T32143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 906.964294][T32157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6470'. [ 906.999517][T32157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6470'. [ 907.066254][T32152] xfrm0 speed is unknown, defaulting to 1000 [ 907.277338][T32139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.322510][T32171] dvmrp0: entered allmulticast mode [ 908.181064][T31916] Bluetooth: hci2: command 0x0401 tx timeout [ 908.284391][T32178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6476'. [ 908.365911][T32180] netlink: ct family unspecified [ 908.371023][T32180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.387281][T32180] netlink: ct family unspecified [ 908.393466][T32180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.085842][T32218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6486'. [ 909.151018][T32220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6487'. [ 909.207912][T32223] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6488'. [ 909.314028][T32226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6489'. [ 909.325531][T32226] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6489'. [ 909.405756][T32143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.735495][T32238] ip6gretap1: entered promiscuous mode [ 910.318853][T32265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6500'. [ 910.364805][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6500'. [ 913.279588][T32237] veth3: entered promiscuous mode [ 913.292956][T32260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6499'. [ 913.331982][T32265] lo speed is unknown, defaulting to 1000 [ 913.337854][T32265] lo speed is unknown, defaulting to 1000 [ 913.389986][T32278] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 913.417470][T32265] lo speed is unknown, defaulting to 1000 [ 913.488774][T32265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 913.579365][T32265] lo speed is unknown, defaulting to 1000 [ 913.595729][T32287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.603037][T32287] IPv6: NLM_F_CREATE should be set when creating new route [ 913.610311][T32287] IPv6: NLM_F_CREATE should be set when creating new route [ 913.617635][T32287] IPv6: NLM_F_CREATE should be set when creating new route [ 913.633338][T32265] lo speed is unknown, defaulting to 1000 [ 913.653559][T32265] lo speed is unknown, defaulting to 1000 [ 913.682596][T32287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.693208][T32265] lo speed is unknown, defaulting to 1000 [ 913.708280][T32287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'. [ 913.723857][T32265] lo speed is unknown, defaulting to 1000 [ 913.740304][T32265] lo speed is unknown, defaulting to 1000 [ 913.762802][T32265] lo speed is unknown, defaulting to 1000 [ 913.793936][T32265] lo speed is unknown, defaulting to 1000 [ 913.834111][T32295] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20002 [ 913.882366][T32295] netlink: 'syz.2.6507': attribute type 4 has an invalid length. [ 913.906017][T32295] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6507'. [ 914.062523][T32302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6508'. [ 914.390361][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 914.409901][T32326] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6513'. [ 914.632183][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 915.477076][T32367] xfrm0 speed is unknown, defaulting to 1000 [ 915.955481][T32403] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6532'. [ 916.483763][T32427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.813712][T32367] lo speed is unknown, defaulting to 1000 [ 916.826959][T32435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6539'. [ 916.863804][T32435] netlink: 'syz.1.6539': attribute type 8 has an invalid length. [ 917.289923][T32469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6545'. [ 917.884397][T32488] vlan2: entered promiscuous mode [ 917.899825][T32488] geneve1: entered promiscuous mode [ 917.907954][T32488] vlan2: entered allmulticast mode [ 917.955608][T32488] geneve1: entered allmulticast mode [ 918.228822][T32500] xfrm0 speed is unknown, defaulting to 1000 [ 919.087849][T32533] IPVS: Scheduler module ip_vs_sip not found [ 919.097314][T32539] IPVS: length: 140 != 8 [ 919.180447][T32546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6565'. [ 919.541104][T32571] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.6569'. [ 919.582396][T32572] bond2: entered allmulticast mode [ 919.592933][T32572] vcan1: entered allmulticast mode [ 919.635469][T32571] openvswitch: netlink: Message has 6 unknown bytes. [ 919.658790][T32500] lo speed is unknown, defaulting to 1000 [ 919.705185][T32572] xfrm0 speed is unknown, defaulting to 1000 [ 919.908263][T32582] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20003 [ 920.357637][T32595] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6576'. [ 920.401645][T32595] netlink: 'syz.0.6576': attribute type 9 has an invalid length. [ 920.539757][T32607] Timeout policy `syz1' can only be used by L3 protocol number 24825 [ 920.872831][T32620] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6583'. [ 920.889299][T32622] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6582'. [ 920.932476][T32622] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6582'. [ 921.005112][T32572] lo speed is unknown, defaulting to 1000 [ 921.320958][T32632] netlink: 'syz.3.6585': attribute type 2 has an invalid length. [ 921.380675][T32632] netlink: 'syz.3.6585': attribute type 2 has an invalid length. [ 921.802289][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'. [ 921.937463][T32660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6590'. [ 921.976308][T32650] mac80211_hwsim hwsim87 wlan1: entered promiscuous mode [ 922.027477][T32650] macvtap0: entered promiscuous mode [ 922.276574][T32670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6593'. [ 922.323478][T32670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6593'. [ 922.436348][T32670] gtp0: entered promiscuous mode [ 922.481938][T32670] gtp0: entered allmulticast mode [ 922.853077][T32685] xfrm0 speed is unknown, defaulting to 1000 [ 923.795918][T32695] xfrm0 speed is unknown, defaulting to 1000 [ 924.213472][T32572] bond2: left allmulticast mode [ 924.236500][T32572] vcan1: left allmulticast mode [ 924.288079][T32721] pim6reg99999999: entered allmulticast mode [ 924.619763][T32685] lo speed is unknown, defaulting to 1000 [ 924.970752][T32749] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 925.055547][T32744] syzkaller0: entered promiscuous mode [ 925.081020][T32744] syzkaller0: entered allmulticast mode [ 927.978368][T32695] lo speed is unknown, defaulting to 1000 [ 928.176003][ T312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.209720][ T310] netlink: 'syz.1.6617': attribute type 1 has an invalid length. [ 928.230770][ T310] __nla_validate_parse: 4 callbacks suppressed [ 928.230799][ T310] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6617'. [ 928.425292][ T316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 928.462034][ T316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 928.495640][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 928.525996][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 928.541812][ T326] vlan3: entered promiscuous mode [ 928.557031][ T326] bridge0: entered promiscuous mode [ 928.810370][ T340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6623'. [ 928.889389][ T342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6622'. [ 929.294841][ T347] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6624'. [ 929.375129][ T358] tipc: Started in network mode [ 929.390748][ T358] tipc: Node identity aeaa55836268, cluster identity 4711 [ 929.400366][ T358] tipc: Enabled bearer , priority 0 [ 929.436598][ T362] syzkaller0: entered promiscuous mode [ 929.444944][ T362] syzkaller0: entered allmulticast mode [ 929.668136][ T358] team_slave_0: entered promiscuous mode [ 929.674329][ T358] team_slave_1: entered promiscuous mode [ 929.700327][ T358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 929.719460][ T368] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 929.752717][ T366] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 929.814210][ T357] tipc: Resetting bearer [ 929.874173][ T357] tipc: Disabling bearer [ 929.948165][ T374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6629'. [ 930.039947][ T385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6633'. [ 930.337218][ T395] vlan3: entered promiscuous mode [ 930.346353][ T395] bridge0: entered promiscuous mode [ 930.629922][ T420] syzkaller0: entered promiscuous mode [ 930.654365][ T420] syzkaller0: entered allmulticast mode [ 930.909272][ T430] xt_CT: No such helper "snmp" [ 931.095685][ T445] veth7: entered promiscuous mode [ 931.109389][ T440] xfrm0 speed is unknown, defaulting to 1000 [ 931.578288][ T483] netlink: 'syz.0.6654': attribute type 1 has an invalid length. [ 931.830226][ T483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.907757][ T497] netlink: 'syz.3.6655': attribute type 1 has an invalid length. [ 931.915638][ T497] netlink: 'syz.3.6655': attribute type 1 has an invalid length. [ 931.930931][ T497] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 931.965273][ T487] bond3: (slave batadv1): Opening slave failed [ 931.984523][ T492] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 932.056235][ T500] FAULT_INJECTION: forcing a failure. [ 932.056235][ T500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.101392][ T500] CPU: 1 UID: 0 PID: 500 Comm: syz.4.6656 Not tainted syzkaller #0 PREEMPT(full) [ 932.101424][ T500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 932.101439][ T500] Call Trace: [ 932.101448][ T500] [ 932.101459][ T500] dump_stack_lvl+0xe8/0x150 [ 932.101494][ T500] should_fail_ex+0x412/0x560 [ 932.101527][ T500] _copy_to_user+0x31/0xb0 [ 932.101570][ T500] simple_read_from_buffer+0xe1/0x170 [ 932.101600][ T500] proc_fail_nth_read+0x1bb/0x230 [ 932.101636][ T500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.101671][ T500] ? rw_verify_area+0x2a6/0x4d0 [ 932.101700][ T500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.101732][ T500] vfs_read+0x20c/0xa70 [ 932.101761][ T500] ? fdget_pos+0x246/0x320 [ 932.101790][ T500] ? __pfx___mutex_lock+0x10/0x10 [ 932.101827][ T500] ? __pfx_vfs_read+0x10/0x10 [ 932.101856][ T500] ? __fget_files+0x2a/0x420 [ 932.101885][ T500] ? __fget_files+0x3a0/0x420 [ 932.101908][ T500] ? __fget_files+0x2a/0x420 [ 932.101940][ T500] ksys_read+0x150/0x270 [ 932.101973][ T500] ? __pfx_ksys_read+0x10/0x10 [ 932.102016][ T500] do_syscall_64+0xe2/0xf80 [ 932.102045][ T500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.102065][ T500] ? trace_irq_disable+0x37/0x100 [ 932.102086][ T500] ? clear_bhb_loop+0x60/0xb0 [ 932.102132][ T500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.102154][ T500] RIP: 0033:0x7f800a15b78e [ 932.102174][ T500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 932.102192][ T500] RSP: 002b:00007f800af8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 932.102215][ T500] RAX: ffffffffffffffda RBX: 00007f800af8c6c0 RCX: 00007f800a15b78e [ 932.102231][ T500] RDX: 000000000000000f RSI: 00007f800af8c0a0 RDI: 0000000000000004 [ 932.102245][ T500] RBP: 00007f800af8c090 R08: 0000000000000000 R09: 0000000000000000 [ 932.102258][ T500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.102271][ T500] R13: 00007f800a416038 R14: 00007f800a415fa0 R15: 00007ffe8dc9f628 [ 932.102306][ T500] [ 932.451372][ T440] lo speed is unknown, defaulting to 1000 [ 932.564809][ T505] bond3: option xmit_hash_policy: invalid value (10) [ 932.574457][ T505] bond3 (unregistering): Released all slaves [ 933.443875][ T549] __nla_validate_parse: 13 callbacks suppressed [ 933.443897][ T549] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6667'. [ 933.774721][T31916] Bluetooth: hci5: command 0x0406 tx timeout [ 933.995097][ T568] [ 933.997502][ T568] ====================================================== [ 934.004547][ T568] WARNING: possible circular locking dependency detected [ 934.011605][ T568] syzkaller #0 Not tainted [ 934.016051][ T568] ------------------------------------------------------ [ 934.023081][ T568] syz.4.6672/568 is trying to acquire lock: [ 934.028987][ T568] ffffffff8fb282d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 934.038154][ T568] [ 934.038154][ T568] but task is already holding lock: [ 934.045533][ T568] ffff88804da42b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 934.054793][ T568] [ 934.054793][ T568] which lock already depends on the new lock. [ 934.054793][ T568] [ 934.065213][ T568] [ 934.065213][ T568] the existing dependency chain (in reverse order) is: [ 934.074268][ T568] [ 934.074268][ T568] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 934.082309][ T568] _raw_spin_lock_bh+0x36/0x50 [ 934.087646][ T568] nr_rt_device_down+0x153/0x860 [ 934.093139][ T568] nr_device_event+0x137/0x150 [ 934.098450][ T568] notifier_call_chain+0x19d/0x3a0 [ 934.104107][ T568] __dev_notify_flags+0x16d/0x310 [ 934.109680][ T568] netif_change_flags+0xe8/0x1a0 [ 934.115157][ T568] dev_change_flags+0x130/0x260 [ 934.120549][ T568] dev_ioctl+0x7b4/0x1150 [ 934.125420][ T568] sock_do_ioctl+0x23e/0x320 [ 934.130548][ T568] sock_ioctl+0x5c6/0x7f0 [ 934.135409][ T568] __se_sys_ioctl+0xfc/0x170 [ 934.140545][ T568] do_syscall_64+0xe2/0xf80 [ 934.145592][ T568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.152024][ T568] [ 934.152024][ T568] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 934.159894][ T568] _raw_spin_lock_bh+0x36/0x50 [ 934.165213][ T568] nr_rt_device_down+0xbe/0x860 [ 934.170614][ T568] nr_device_event+0x137/0x150 [ 934.175918][ T568] notifier_call_chain+0x19d/0x3a0 [ 934.181568][ T568] __dev_notify_flags+0x16d/0x310 [ 934.187143][ T568] netif_change_flags+0xe8/0x1a0 [ 934.192623][ T568] dev_change_flags+0x130/0x260 [ 934.198023][ T568] dev_ioctl+0x7b4/0x1150 [ 934.202888][ T568] sock_do_ioctl+0x23e/0x320 [ 934.208012][ T568] sock_ioctl+0x5c6/0x7f0 [ 934.212881][ T568] __se_sys_ioctl+0xfc/0x170 [ 934.218016][ T568] do_syscall_64+0xe2/0xf80 [ 934.223066][ T568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.229501][ T568] [ 934.229501][ T568] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 934.237427][ T568] __lock_acquire+0x15a5/0x2cf0 [ 934.242823][ T568] lock_acquire+0x106/0x330 [ 934.247867][ T568] _raw_spin_lock_bh+0x36/0x50 [ 934.253178][ T568] nr_rt_ioctl+0x40c/0xf90 [ 934.258185][ T568] sock_do_ioctl+0x101/0x320 [ 934.263313][ T568] sock_ioctl+0x5c6/0x7f0 [ 934.268174][ T568] __se_sys_ioctl+0xfc/0x170 [ 934.273313][ T568] do_syscall_64+0xe2/0xf80 [ 934.278367][ T568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.284797][ T568] [ 934.284797][ T568] other info that might help us debug this: [ 934.284797][ T568] [ 934.295045][ T568] Chain exists of: [ 934.295045][ T568] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 934.295045][ T568] [ 934.308906][ T568] Possible unsafe locking scenario: [ 934.308906][ T568] [ 934.316404][ T568] CPU0 CPU1 [ 934.321791][ T568] ---- ---- [ 934.327174][ T568] lock(&nr_node->node_lock); [ 934.331957][ T568] lock(nr_node_list_lock); [ 934.339098][ T568] lock(&nr_node->node_lock); [ 934.346405][ T568] lock(nr_neigh_list_lock); [ 934.351111][ T568] [ 934.351111][ T568] *** DEADLOCK *** [ 934.351111][ T568] [ 934.359268][ T568] 2 locks held by syz.4.6672/568: [ 934.364309][ T568] #0: ffffffff8fb28338 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 934.373834][ T568] #1: ffff88804da42b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 934.383531][ T568] [ 934.383531][ T568] stack backtrace: [ 934.389438][ T568] CPU: 1 UID: 0 PID: 568 Comm: syz.4.6672 Not tainted syzkaller #0 PREEMPT(full) [ 934.389460][ T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 934.389472][ T568] Call Trace: [ 934.389482][ T568] [ 934.389491][ T568] dump_stack_lvl+0xe8/0x150 [ 934.389515][ T568] print_circular_bug+0x2e1/0x300 [ 934.389536][ T568] check_noncircular+0x12e/0x150 [ 934.389556][ T568] __lock_acquire+0x15a5/0x2cf0 [ 934.389590][ T568] ? nr_rt_ioctl+0x40c/0xf90 [ 934.389615][ T568] lock_acquire+0x106/0x330 [ 934.389637][ T568] ? nr_rt_ioctl+0x40c/0xf90 [ 934.389663][ T568] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 934.389684][ T568] ? nr_rt_ioctl+0x40c/0xf90 [ 934.389707][ T568] _raw_spin_lock_bh+0x36/0x50 [ 934.389728][ T568] ? nr_rt_ioctl+0x40c/0xf90 [ 934.389751][ T568] nr_rt_ioctl+0x40c/0xf90 [ 934.389781][ T568] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 934.389810][ T568] ? apparmor_capable+0x137/0x1a0 [ 934.389838][ T568] ? capable+0x88/0xe0 [ 934.389853][ T568] ? nr_ioctl+0x1b1/0x3b0 [ 934.389875][ T568] sock_do_ioctl+0x101/0x320 [ 934.389894][ T568] ? __pfx_sock_do_ioctl+0x10/0x10 [ 934.389909][ T568] ? do_futex+0x395/0x420 [ 934.389939][ T568] sock_ioctl+0x5c6/0x7f0 [ 934.389955][ T568] ? __pfx_sock_ioctl+0x10/0x10 [ 934.389970][ T568] ? __fget_files+0x2a/0x420 [ 934.389988][ T568] ? __fget_files+0x3a0/0x420 [ 934.390006][ T568] ? __fget_files+0x2a/0x420 [ 934.390025][ T568] ? bpf_lsm_file_ioctl+0x9/0x20 [ 934.390046][ T568] ? __pfx_sock_ioctl+0x10/0x10 [ 934.390061][ T568] __se_sys_ioctl+0xfc/0x170 [ 934.390095][ T568] do_syscall_64+0xe2/0xf80 [ 934.390120][ T568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.390136][ T568] ? trace_irq_disable+0x37/0x100 [ 934.390152][ T568] ? clear_bhb_loop+0x60/0xb0 [ 934.390171][ T568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.390188][ T568] RIP: 0033:0x7f800a19aeb9 [ 934.390204][ T568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.390219][ T568] RSP: 002b:00007f800af8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.390238][ T568] RAX: ffffffffffffffda RBX: 00007f800a415fa0 RCX: 00007f800a19aeb9 [ 934.390251][ T568] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 934.390261][ T568] RBP: 00007f800a208c1f R08: 0000000000000000 R09: 0000000000000000 [ 934.390272][ T568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.390282][ T568] R13: 00007f800a416038 R14: 00007f800a415fa0 R15: 00007ffe8dc9f628 [ 934.390302][ T568] [ 934.724575][ T567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.813781][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 936.824279][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 942.011300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 942.019345][ C0] lec:lec_tx_timeout: lec0