last executing test programs: 2.71127859s ago: executing program 4 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x1}}, 0x18}, 0x1, 0xba01, 0x0, 0x4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.434244816s ago: executing program 4 (id=933): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) gettid() (async) 1.860192035s ago: executing program 4 (id=937): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r3 = syz_open_procfs$namespace(r2, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008100000001000000edec52d6277110f958fd631e92baf51cc8448e8d4cb937ab72dc972f9b353e67dcd88c734c614d26ba7dc322b17f5fa130782f5a8cf7fcb1260286462ab3c8553c70cc165fde12bc47514b2cf9993dfa085e5b7aa496b9e800119c7e17f26944e7bbb815087e097c0f0b8994d5ff541c5fb35018f6b2aaa45fc907c07edb38714ce89102c702cd30ac427aeef9b3cb71bd2d0d7677f802218a044bba27bc140fa4be9ccc386a133867c5239e8f02f5d766431d2b1208b3e4", @ANYRES32=r3, @ANYRES32=r0], 0x18, 0x800}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r5) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000f1ffffffdd0a00000000000073019e00000000009500000000000000ece69e0aa39b23ac2d61fb9a6d88764c97479609f8e38c78da7cad0d3338a5363ddec5ec60e0e279fe452b80d7fbcecb2e65082679"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0xff08, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r6, 0x5, 0x5d6, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'dvmrp1\x00', &(0x7f0000000180)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0e0227bd7000ffdbdf2563690011000200303030303a30303a31302e300000000008008c0002000000c0175df249303a10f5395af6f6ed87adb3caab67c94dbbaaa610e3559b429380cd9666214ff5670d2168520faed538f5d0c2f770ce88af0dde92deef0283569f9f6653068273769a15ba43d2d9b4af762065da358f66f69618ac2913ce6ae9711d30e7f255f52a88a6b81df9cf6d44b8ae375deff481c4325870c4541bcb9b6d936e66ca3557b6fa476e5f17a3e8c958a6b75917a65918422abc7a2d16d01e033e44b0f6dc2466b0d9aa9f353c4dd36a3218e24ba5627d000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc815}, 0x80) 1.857152798s ago: executing program 3 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2b, 0xa, 0xb, 0x5, 0x71, @dev={0xfe, 0x80, '\x00', 0x2f}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x100}, 0x1, 0x8}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_getnexthop={0x54, 0x6a, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x9}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.768331919s ago: executing program 4 (id=941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000159e0d0300000000000000000c000000080001008f3502cbc9a60f956f81e940aa83484848f3175e05009465c0c43154baab04ccdeed997b63d46d820233f187153421fc60a35da14b5a227018f7d2656e5f6e449b2d81e5c5ee8fbf0f4517a4841f09bf55b0bcf561496393", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, r10, r11}, 0xc) 1.659228632s ago: executing program 2 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5001000010001304ffffffffffdbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000fffd00004e2300030200002002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000002032000000640101010000000000000000000000000000000000000000070000000000000000000000000000000400000000000000060000000000000004000000000000000a0000000002001e010000000000000001000000010000000a00000000000000cc000000000000000800000000000000f80000000000000001000000fdffffff063500000200000100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x844) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5001000010001304ffffffffffdbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000fffd00004e2300030200002002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000002032000000640101010000000000000000000000000000000000000000070000000000000000000000000000000400000000000000060000000000000004000000000000000a0000000002001e010000000000000001000000010000000a00000000000000cc000000000000000800000000000000f80000000000000001000000fdffffff063500000200000100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x7, 0x0, 0x9}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000000180c200000386dd6001070000111100fc01e9f5000000000000000000000000ff02000000000000000000000000000100000e220011907822090000800000005f"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) (async) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x0, 0x1}, 0x50) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x3, 0xf, 0x9, 0x28, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x4e21, 0x43, @local, 0x9}}, @sadb_x_sec_ctx={0x12, 0x18, 0x6, 0x4, 0x88, "1be3e6d9146e35b50d6afcd8f0380dd38f9365c0f6c5ca68c9450332567cc61f1d76546421027fe0517624b15c9da04469e52f82017e8c20c1fc19510d78378c8d71810df1fe502c0588b54c96aa75f70407d8171121d5b78f3fee09184d973a3cf274505a0ea3d2075de0069ff18b234938b1f74b54c865aa07f417e9c20efa616381b23526f80b"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_key={0xb, 0x9, 0x278, 0x0, "bf8a65f9d5536568df23a508d44f2ac4b18dc9a04621addcf7b35a339de0b84af0b0278cc8ed6d66f39ea0865865c4eb0c3baaee8e1ab4aee4a2a0b2bbb84484eaac0e5ed10e1abe04c7b0652b756b"}]}, 0x140}}, 0x4) (async) sendmsg$key(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x3, 0xf, 0x9, 0x28, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x4e21, 0x43, @local, 0x9}}, @sadb_x_sec_ctx={0x12, 0x18, 0x6, 0x4, 0x88, "1be3e6d9146e35b50d6afcd8f0380dd38f9365c0f6c5ca68c9450332567cc61f1d76546421027fe0517624b15c9da04469e52f82017e8c20c1fc19510d78378c8d71810df1fe502c0588b54c96aa75f70407d8171121d5b78f3fee09184d973a3cf274505a0ea3d2075de0069ff18b234938b1f74b54c865aa07f417e9c20efa616381b23526f80b"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_key={0xb, 0x9, 0x278, 0x0, "bf8a65f9d5536568df23a508d44f2ac4b18dc9a04621addcf7b35a339de0b84af0b0278cc8ed6d66f39ea0865865c4eb0c3baaee8e1ab4aee4a2a0b2bbb84484eaac0e5ed10e1abe04c7b0652b756b"}]}, 0x140}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) 1.59987752s ago: executing program 3 (id=944): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x3fa, 0x308, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = accept4(r2, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020057", 0x4}], 0x3) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000880)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8a3341b177a44f33}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5f74}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xf0a}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000480)=@in6={0xa, 0x4e24, 0x4812, @mcast2, 0xffff}, 0x80, &(0x7f00000005c0)}}], 0x1, 0x80) 1.330458876s ago: executing program 0 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r1, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}]}, 0x30}}, 0x44040) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x5}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 1.329633173s ago: executing program 4 (id=946): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000001c0)=0x84) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)={[{0x2d, 'io'}]}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="9997e0ffffffffff1839000002000000000000000000000018540000060000000000000020000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0xb4, &(0x7f00000003c0)=""/180, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000740)=[{0x2, 0x1, 0x3, 0xf}, {0x3, 0x1, 0x1, 0x7}, {0x1, 0x1, 0x3, 0x4}, {0x3, 0x1, 0x0, 0x6}, {0x3, 0x5, 0xf, 0x4}, {0x3, 0x3, 0x1, 0x6}, {0x1, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@ifindex, 0x35, 0x0, 0x4, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)={@map=r2, r1, 0x35, 0x10, r5, @void, @value=r0, @void, @void, r6}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd, 0xfffffffc}}, 0x44) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x8, 0x0, [0x1, 0x5, 0xfffffffffffffffb, 0x100000000], [0x4, 0x100000000, 0x100, 0x100000001, 0x100000000, 0x0, 0x0, 0x7, 0x9, 0x6, 0x9, 0x9, 0xfffffffffffffffb, 0x1, 0x6, 0x0, 0x5, 0xf, 0x5, 0x400, 0xffffffffffffffff, 0x2, 0x8, 0x416a, 0x7ff, 0x4, 0xf6, 0x1, 0x8, 0x1bf1, 0x9, 0x400, 0x9, 0x8e3, 0x400, 0x4, 0xff, 0x4, 0xfffffffffffffffe, 0x1, 0x82a, 0x6, 0x4, 0x9e, 0x7, 0x8000, 0x8000000000000001, 0xbc32, 0x5, 0xea, 0x16f1, 0x2, 0x0, 0x6, 0xce, 0xbd51, 0xc833, 0x7fff, 0x1000, 0x1000000001, 0x6, 0x2f, 0xfff, 0x7fffffff, 0x9, 0x71d2, 0xb7, 0x7, 0x1, 0x5, 0x6, 0x40, 0x63, 0x8, 0x4000000004, 0x8, 0x1, 0x2, 0x400, 0x800007f, 0x49, 0x0, 0x9c8f, 0x752a, 0x4, 0x356, 0x32, 0x10001, 0xbee, 0x1, 0x8, 0xfc1, 0x8000000000000001, 0x0, 0xd, 0x2, 0x100, 0x4, 0x3, 0x8, 0xbf4e, 0x100000001, 0x4, 0x0, 0xffffffffffffffff, 0xc, 0x2, 0x9, 0x0, 0x1, 0x85, 0x5, 0x0, 0x2, 0x1, 0x8, 0x6, 0x5, 0x0, 0xfffffffffffffff9, 0xd3]}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x1, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x7, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000cc0)={r8, 0xfffffffffffffffb, 0xb01a}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000140)="cb0152f9d99c3cd59d2993dea3c9eaa65d5fdb3f7becfbb0370f8e6ae431db0283a2fb371efae8fd6b9eb1f996fe67b7ce794fa86e11e4507eb6129c8dd0633e7a2a99b0b656569ec68f948c6c0a4bc6877a823e859f8fe5fc94dc27bc333f5cafa01411e0ff15aef6aeee50a94762e27497f627d400e2fe2b251a986173c056d89698b4065326890a046265d9b4b2edaecf56bdd9cefbc1cd7ab03ec1809ca5fe148181673ece3fe63dcba2972cfde85929ebad62277ab52881", &(0x7f0000000200)=""/254, &(0x7f0000000300), &(0x7f0000000340)="e587b6f56cd2ff69df933b7e0d937b88a74ee0cd13f83fc30c6a495bd4d4964ec8a04bbf87c1beae0f5161f14c81c6bf08b52179beee133c63199b1057c2", 0x2, r2, 0x4}, 0x38) 1.159046298s ago: executing program 1 (id=947): write(0xca, &(0x7f0000000800)="040e0a0160200a00000000000000", 0xe) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write(0xca, &(0x7f0000000800)="040e0a0160200a00000000000000", 0xe) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) 1.12990647s ago: executing program 0 (id=948): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x119502, &(0x7f0000000140)={@_ha_fsid={[0x80100000, 0x6]}, {0x12, 0xffff, 0x40, 0x4}}, 0xf9b, &(0x7f0000000180), &(0x7f00000001c0)=0xb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001700010026bd7000fddbdf2508000007000000"], 0xff2e}}, 0x0) 1.059071307s ago: executing program 2 (id=949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) 951.249174ms ago: executing program 0 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x400, 0xc11d, 0x6, 0x6000}, {0x4, 0x3, 0x800, 0x101, 0x524d, 0x4}, 0x5, 0x0, 0x1520}}]}}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x1, 0x6}) 934.037752ms ago: executing program 1 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES16=r1, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESOCT=r0], 0x90}}, 0x0) 863.426384ms ago: executing program 2 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r0, 0x4) 796.822104ms ago: executing program 3 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000884) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000815) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60ed0000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000001c0004800500030001000000050003000000000005000300800000000800020002000000"], 0x40}}, 0xc000) 778.760646ms ago: executing program 0 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 654.152153ms ago: executing program 1 (id=955): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x90) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 578.45766ms ago: executing program 2 (id=956): r0 = socket(0xa, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a00"], 0x38}}, 0x40408c0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="500101"], 0x6) (async) write$nci(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="500101"], 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r10, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r10, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) 530.540979ms ago: executing program 0 (id=957): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = accept(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000300)=0x80) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x2, &(0x7f0000001840)=""/4096, 0x1000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xeffff034}, {0x16}]}, 0x10) sendmsg$inet(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ed8769cb", 0x4}], 0x1}, 0x0) sendto$inet(r6, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r6, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="89f3", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001800)="a9", 0x1}], 0x1}}], 0x2, 0x4000045) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) 489.504627ms ago: executing program 4 (id=958): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x11c, 0x4, 0x0, &(0x7f0000000380)) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r7, 0xe26509f95296d5cb, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r10 = epoll_create1(0x0) r11 = socket$key(0xf, 0x3, 0x2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r13, &(0x7f00000000c0), 0x18) sendmsg$key(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x5, 0x1, 0x6, 0x8, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x7, 0x33, 0x3, 0x40000000}, @sadb_x_nat_t_type={0x1}]}, 0x40}}, 0x400080c0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000100)) epoll_create1(0x0) 350.409602ms ago: executing program 3 (id=959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, &(0x7f0000000240)='\x00', 0x210040, &(0x7f0000000280)={@align=0x5, {0x6, 0x905, 0x5, 0x6}}, 0x9, &(0x7f0000000380), &(0x7f0000000400)=0xfffffffb}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="9f0c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x4040815) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 319.349437ms ago: executing program 1 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x64, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) 254.516217ms ago: executing program 0 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) 206.725492ms ago: executing program 2 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25030000000c000600e15014950000000005000a0000000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x40008000}, 0x4800) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '^}'}]}, 0x34}, 0x1, 0x0, 0x0, 0x70}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "bd3d13746078e05fb6a2112ea9e93b498f4bdefc"}}]}, 0x154}}, 0x0) 206.068424ms ago: executing program 3 (id=963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000e276a83de2e000e0dca64465f88269000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000000)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xf, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x45}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 199.146961ms ago: executing program 1 (id=964): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="170f85aeff90711cb337a824ef95fa9bebbd1d8eb0d5bbf6e81a22d3f7bbbc78c8b0f4769967ff2903c3512b822ba31dde606dee61746645c63e0229bd6c7fef48c51f417f76e75740350048f9ce95d1bc16cba814b698e5f3f7a908a5006ef481023cbd1e848076957db162750b0f277c104aedfdb8036f909474ed477ed206c21441cc881d01b885997946a5699b49f7f34b5e0ab040d8a5e1b2f919bc8ea4bd2ec90c2ade38fc0e25c73bfed2390fc310a3ee20638c", 0xb7}, {&(0x7f00000000c0)="d44dfb07644cf42e4f0042dbac93d5d70179fefc1120afe5793560b47ea0efe863b8946223efca773fcf0b54121a646f8adc", 0x32}, {&(0x7f0000000100)="f325cbb50a339dfd6767f4a7f5dca7044b7962335cd0d66811870da7aa22ead42fcbd7a617b881ce27986642a558fe96c375a97f89a7eed256397caf3024cbca1db26f81aed0946eba34d4251633271d05275bd21991d1424c994579f5740d32f91f4d76c8c199c405404b5f8de8e3bdeb1b0eaba75f09253619bd76356b438f1fb40214adc59d6c51555fed1166b8838b0e071ebe7094530a981e249997aee7fd59ab3d83d7378d7cd5502e628b8ba245f0ad4b88d0134197dc0f80e2cadd0684fb95def7d2160e88adb0e5186a9342cda51e50a2c6f5d35a2222155a11b2f2222c66931b", 0xe5}, {&(0x7f0000000200)="90b8dea10c546b872cc8b4bb6026b50d63094cf803ac454b4390690f5fffd5e197c2fecc9901b85b5b5d1ca505d0d10e4ac415a97a0acc54563c35b9960d0c969ae486f0f922048223656f20cbe91284c6612e86029fc3b943b00e34b5b7b1f7dc7c793281d6aa0a80a28e9b42f9a6dffe9349504d7727e36bb00418c6bd8742b942a0bce31a7fc54a08a5fb755932b6773de9", 0x93}, {&(0x7f00000002c0)="e37ea8a839a45b7c1a100d503b90763a02f70f246816ad14c4c77014a78b703d0ad662", 0x23}, {&(0x7f0000000300)="8032d7d919499a48e105179d2fc279ecbdf9be8fcdb2d6992731215c5f5cbb565f3e69f8358f861725e338d287863852fd7b528da3055f125a237ababfdeef0b4e5bc96564ef97105dd9e4b9b5366d331b394478182932244776f0b57f1f1313c610678eb344bb4512bf3be909725975393e38d1efbc893acb6c3ac71e6c010bc5685d22687d9863a4826e1948848c36fc71b99f6c71e500eef633253209dfa4808068b373aec4e71a65c2b284baefdd4009c9cb5c4c06552673bc9d2f4b5798cee0f60d47f33a3f2cf47c725dcee361e89c2698cac6e94bdecdefaf9121aebdb4f7285a4edd7f8fc74db9a6f35228c344494f713a", 0xf5}], 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 116.393594ms ago: executing program 2 (id=965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x2) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="10007e0000000000280012800b00010062720e44676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 26.575894ms ago: executing program 3 (id=966): r0 = socket(0x23, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) socket(0x23, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) (async) 0s ago: executing program 1 (id=967): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="86082b9827c1", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @dev={0xac, 0x14, 0x14, 0x32}, @remote, @rand_addr=0x64010100}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 78.284733][ T5604] cgroup: Unknown subsys name 'net' [ 78.400100][ T5604] cgroup: Unknown subsys name 'cpuset' [ 78.403477][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.071719][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.789866][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.793993][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.794702][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.805471][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.806747][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.814878][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.814994][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.816098][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.823601][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.831397][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.832810][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.833480][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.839263][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.839852][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.843575][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.851053][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.854494][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.858094][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.860823][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.864337][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.867299][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.867898][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.869313][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.876965][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.905629][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.957391][ T4934] Bluetooth: hci3: command tx timeout [ 85.966143][ T4934] Bluetooth: hci0: command tx timeout [ 85.966436][ T4934] Bluetooth: hci2: command tx timeout [ 85.979498][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.980071][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.980719][ T5618] bridge_slave_0: entered allmulticast mode [ 85.984254][ T5618] bridge_slave_0: entered promiscuous mode [ 86.036431][ T52] Bluetooth: hci4: command tx timeout [ 86.036449][ T4934] Bluetooth: hci1: command tx timeout [ 86.059835][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.059996][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.060126][ T5618] bridge_slave_1: entered allmulticast mode [ 86.061539][ T5618] bridge_slave_1: entered promiscuous mode [ 86.161452][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.161553][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.161673][ T5620] bridge_slave_0: entered allmulticast mode [ 86.163463][ T5620] bridge_slave_0: entered promiscuous mode [ 86.170037][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.170322][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.171328][ T5620] bridge_slave_1: entered allmulticast mode [ 86.176786][ T5620] bridge_slave_1: entered promiscuous mode [ 86.248579][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.304193][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.304429][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.304525][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.304637][ T5621] bridge_slave_0: entered allmulticast mode [ 86.318176][ T5621] bridge_slave_0: entered promiscuous mode [ 86.332328][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.332725][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.333153][ T5621] bridge_slave_1: entered allmulticast mode [ 86.340110][ T5621] bridge_slave_1: entered promiscuous mode [ 86.370338][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.389998][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.390107][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.390245][ T5619] bridge_slave_0: entered allmulticast mode [ 86.392030][ T5619] bridge_slave_0: entered promiscuous mode [ 86.444335][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.444573][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.444672][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.444827][ T5617] bridge_slave_0: entered allmulticast mode [ 86.450103][ T5617] bridge_slave_0: entered promiscuous mode [ 86.462660][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.462932][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.463328][ T5619] bridge_slave_1: entered allmulticast mode [ 86.476763][ T5619] bridge_slave_1: entered promiscuous mode [ 86.538744][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.538880][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.538996][ T5617] bridge_slave_1: entered allmulticast mode [ 86.540593][ T5617] bridge_slave_1: entered promiscuous mode [ 86.576002][ T5618] team0: Port device team_slave_0 added [ 86.578707][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.628926][ T5618] team0: Port device team_slave_1 added [ 86.631238][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.633233][ T5620] team0: Port device team_slave_0 added [ 86.662399][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.694456][ T5620] team0: Port device team_slave_1 added [ 86.702574][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.705242][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.758065][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.778341][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.778355][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.778380][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.782241][ T5621] team0: Port device team_slave_0 added [ 86.854718][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.854739][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.854767][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.867039][ T5619] team0: Port device team_slave_0 added [ 86.879559][ T5621] team0: Port device team_slave_1 added [ 86.915672][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.915691][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.915718][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.977421][ T5619] team0: Port device team_slave_1 added [ 87.002929][ T5617] team0: Port device team_slave_0 added [ 87.003690][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.003705][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.003733][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.120659][ T5617] team0: Port device team_slave_1 added [ 87.165698][ T5618] hsr_slave_0: entered promiscuous mode [ 87.172823][ T5618] hsr_slave_1: entered promiscuous mode [ 87.184595][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.184627][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.184654][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.212055][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.212116][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.212177][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.278074][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.278091][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.278114][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.281400][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.281416][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.281439][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.526333][ T5619] hsr_slave_0: entered promiscuous mode [ 87.527152][ T5619] hsr_slave_1: entered promiscuous mode [ 87.527724][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 87.527802][ T5619] Cannot create hsr debugfs directory [ 87.528707][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.528720][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.528743][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.607628][ T5620] hsr_slave_0: entered promiscuous mode [ 87.609005][ T5620] hsr_slave_1: entered promiscuous mode [ 87.609632][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 87.609646][ T5620] Cannot create hsr debugfs directory [ 87.644726][ T5621] hsr_slave_0: entered promiscuous mode [ 87.645624][ T5621] hsr_slave_1: entered promiscuous mode [ 87.651348][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 87.651413][ T5621] Cannot create hsr debugfs directory [ 87.659339][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.659384][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.659470][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.869734][ T5617] hsr_slave_0: entered promiscuous mode [ 87.870754][ T5617] hsr_slave_1: entered promiscuous mode [ 87.871363][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 87.871385][ T5617] Cannot create hsr debugfs directory [ 88.036614][ T4934] Bluetooth: hci2: command tx timeout [ 88.036652][ T4934] Bluetooth: hci0: command tx timeout [ 88.036676][ T4934] Bluetooth: hci3: command tx timeout [ 88.115989][ T52] Bluetooth: hci4: command tx timeout [ 88.116026][ T52] Bluetooth: hci1: command tx timeout [ 88.400371][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.418869][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.419967][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.423354][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.425609][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.457411][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.458350][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.462111][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.553078][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.566382][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.570093][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.574812][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.600185][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.604851][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.634324][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.645238][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.748590][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.752740][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.753666][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.760828][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.775106][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.798429][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.815550][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.827531][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.932776][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.947636][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.949071][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.953916][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.954795][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.985643][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.003533][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.009109][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.024234][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.140513][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.190847][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.190959][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.234715][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.248002][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.249102][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.252811][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.254606][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.284510][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.285415][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.304704][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.322506][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.322582][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.425419][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.510483][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.524795][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.552419][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.552577][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.609829][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.640490][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.640640][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.714153][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.714333][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.744852][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.783798][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.783911][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.875492][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.923999][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.924150][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.994457][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.008921][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.009666][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.065546][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.116101][ T52] Bluetooth: hci3: command tx timeout [ 90.116136][ T52] Bluetooth: hci0: command tx timeout [ 90.116161][ T52] Bluetooth: hci2: command tx timeout [ 90.196923][ T52] Bluetooth: hci1: command tx timeout [ 90.197011][ T4934] Bluetooth: hci4: command tx timeout [ 90.204280][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.282556][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.282672][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.338634][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.338750][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553967][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.841550][ T5618] veth0_vlan: entered promiscuous mode [ 90.929790][ T5618] veth1_vlan: entered promiscuous mode [ 91.062604][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.120564][ T5618] veth0_macvtap: entered promiscuous mode [ 91.162416][ T5618] veth1_macvtap: entered promiscuous mode [ 91.277467][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.280599][ T5619] veth0_vlan: entered promiscuous mode [ 91.301229][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.370706][ T5619] veth1_vlan: entered promiscuous mode [ 91.552729][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.553230][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664652][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.708703][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708766][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712800][ T5619] veth0_macvtap: entered promiscuous mode [ 91.794657][ T5619] veth1_macvtap: entered promiscuous mode [ 91.820545][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.820569][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.936286][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.970712][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.989324][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989348][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.992685][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.032748][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.049058][ T976] cfg80211: failed to load regulatory.db [ 92.077932][ T1281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.078028][ T1281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.078060][ T1281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.078090][ T1281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196584][ T52] Bluetooth: hci0: command tx timeout [ 92.196596][ T5631] Bluetooth: hci3: command tx timeout [ 92.196641][ T4934] Bluetooth: hci2: command tx timeout [ 92.206008][ T5621] veth0_vlan: entered promiscuous mode [ 92.276378][ T5631] Bluetooth: hci1: command tx timeout [ 92.276433][ T4934] Bluetooth: hci4: command tx timeout [ 92.302163][ T5621] veth1_vlan: entered promiscuous mode [ 92.375828][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.481938][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.481962][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.543648][ T5617] veth0_vlan: entered promiscuous mode [ 92.569627][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.569652][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.615157][ T5617] veth1_vlan: entered promiscuous mode [ 92.629365][ T5621] veth0_macvtap: entered promiscuous mode [ 92.670408][ T5621] veth1_macvtap: entered promiscuous mode [ 92.793677][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.853687][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.864600][ T5620] veth0_vlan: entered promiscuous mode [ 92.908302][ T5617] veth0_macvtap: entered promiscuous mode [ 92.923203][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938746][ T5617] veth1_macvtap: entered promiscuous mode [ 92.942066][ T5620] veth1_vlan: entered promiscuous mode [ 93.027102][ T1281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.027155][ T1281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.088585][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.116825][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.118943][ T5620] veth0_macvtap: entered promiscuous mode [ 93.167431][ T5620] veth1_macvtap: entered promiscuous mode [ 93.198372][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.198396][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.292186][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.292209][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.325025][ T5828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.339572][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.376838][ T1281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.418073][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.456524][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456600][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456656][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.456694][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.516556][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.516580][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.597952][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.598003][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632320][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.632344][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.669320][ T977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698671][ T977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.797377][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 93.797415][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 93.867874][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.867900][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.897260][ T5832] Cannot find del_set index 0 as target [ 94.032239][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.032263][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.164551][ T5840] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 94.177485][ T5841] Zero length message leads to an empty skb [ 94.180500][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 94.729000][ T5855] netlink: 'syz.4.5': attribute type 13 has an invalid length. [ 95.180122][ T5891] netlink: 80 bytes leftover after parsing attributes in process `syz.4.24'. [ 95.214180][ T5893] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 95.364070][ T5901] openvswitch: netlink: Unknown key attributes 1 [ 95.364840][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.043016][ T5917] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 96.095731][ T5919] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20000 [ 96.123922][ T5922] sctp: [Deprecated]: syz.3.33 (pid 5922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.123922][ T5922] Use struct sctp_sack_info instead [ 96.152929][ T5925] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 96.187486][ T5925] team0: Port device dummy0 added [ 96.194754][ T5923] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33'. [ 96.250618][ T5923] team0: Port device dummy0 removed [ 96.351032][ T5934] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.495934][ T5943] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 96.514916][ T5943] team0: Device veth0_macvtap failed to register rx_handler [ 96.535294][ T5946] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 96.561280][ T5946] team0: Device veth0_macvtap failed to register rx_handler [ 96.604580][ T5940] xt_CT: No such helper "pptp" [ 96.678797][ T5945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.704587][ T5949] 8021q: VLANs not supported on lo [ 96.705135][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 96.705475][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 96.761251][ T5940] bond2: option xmit_hash_policy: invalid value (64) [ 96.777421][ T5940] bond2 (unregistering): Released all slaves [ 96.893245][ T5956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.182248][ T5969] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 97.271619][ T5970] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 97.330559][ T5980] netlink: 'syz.1.49': attribute type 9 has an invalid length. [ 97.405785][ T5989] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 97.439683][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 97.439713][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 97.678372][ T5999] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 97.678511][ T5999] syzkaller1: linktype set to 823 [ 97.873915][ T6010] macvlan0: entered promiscuous mode [ 98.304602][ T6028] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.315494][ T6028] netlink: 'syz.1.59': attribute type 12 has an invalid length. [ 98.329987][ T6030] TCP: TCP_TX_DELAY enabled [ 98.354537][ T6028] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.365729][ T6033] netlink: 'syz.1.59': attribute type 12 has an invalid length. [ 98.542563][ T6035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.568620][ T6035] bond0: (slave bond1): Enslaving as an active interface with an up link [ 98.626302][ T6054] netlink: 'syz.0.66': attribute type 17 has an invalid length. [ 99.015245][ T6070] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20003 [ 99.025116][ T50] IPVS: starting estimator thread 0... [ 99.135208][ T6088] IPVS: using max 23 ests per chain, 55200 per kthread [ 99.242956][ T6090] tipc: Started in network mode [ 99.243002][ T6090] tipc: Node identity ac14142f, cluster identity 4711 [ 99.244202][ T6090] tipc: Enabled bearer , priority 10 [ 99.268565][ T6090] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 99.287066][ T6093] tipc: Enabling of bearer rejected, already enabled [ 99.292328][ T6094] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 99.379095][ T6102] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 99.403369][ T6101] __nla_validate_parse: 7 callbacks suppressed [ 99.403394][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.403452][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.492634][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 99.492927][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 99.644679][ T6116] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 99.789437][ T6125] ÿÿÿÿÿÿ: renamed from veth0_to_bond (while UP) [ 99.809125][ T6129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.87'. [ 99.961840][ T6137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.964112][ T6137] batman_adv: batadv0: Adding interface: veth0 [ 99.964133][ T6137] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.964171][ T6137] batman_adv: batadv0: Interface activated: veth0 [ 100.067259][ T6137] warning: `syz.0.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.069720][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 100.069747][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.069776][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.075132][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.075161][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.132706][ T6137] batman_adv: batadv0: Interface deactivated: veth0 [ 100.132732][ T6137] batman_adv: batadv0: Removing interface: veth0 [ 100.175207][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.225607][ T6150] syz.2.90 uses obsolete (PF_INET,SOCK_PACKET) [ 100.297569][ T6146] netlink: 'syz.1.93': attribute type 2 has an invalid length. [ 100.297594][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.349304][ T5607] tipc: Node number set to 2886997039 [ 100.646956][ T6174] x_tables: duplicate underflow at hook 2 [ 100.951818][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.102'. [ 100.951858][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.102'. [ 101.511566][ T6204] syz_tun: entered allmulticast mode [ 101.526577][ T6204] pimreg: entered allmulticast mode [ 101.589505][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.589549][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.589579][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.589607][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.647884][ T6203] syz_tun: left allmulticast mode [ 101.648640][ T6203] pimreg: left allmulticast mode [ 101.755133][ T6219] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.820982][ T6219] xt_hashlimit: size too large, truncated to 1048576 [ 101.918318][ T6223] netlink: 'syz.0.117': attribute type 11 has an invalid length. [ 101.961936][ T6223] netlink: 'syz.0.117': attribute type 11 has an invalid length. [ 102.173183][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012271000: rx timeout, send abort [ 102.175419][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888012271000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.282961][ T6242] vlan2: entered promiscuous mode [ 102.282988][ T6242] hsr0: entered promiscuous mode [ 102.283329][ T6242] vlan2: entered allmulticast mode [ 102.283346][ T6242] hsr0: entered allmulticast mode [ 102.283359][ T6242] hsr_slave_0: entered allmulticast mode [ 102.283376][ T6242] hsr_slave_1: entered allmulticast mode [ 102.350397][ T6242] hsr_slave_0: left promiscuous mode [ 102.378275][ T6242] hsr_slave_1: left promiscuous mode [ 102.384573][ T6246] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 102.474825][ T6249] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 102.747455][ T6260] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 102.911392][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.173974][ T6278] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 103.204960][ T6282] nbd: must specify a device to reconfigure [ 103.333762][ T6257] sctp: [Deprecated]: syz.1.126 (pid 6257) Use of int in maxseg socket option. [ 103.333762][ T6257] Use struct sctp_assoc_value instead [ 103.994666][ T6312] ip_tables: iptables: counters copy to user failed while replacing table [ 104.947691][ T6342] netlink: 'syz.3.150': attribute type 29 has an invalid length. [ 104.997233][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.999144][ T977] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.999211][ T977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.999264][ T977] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.143299][ T6356] netlink: 'syz.2.154': attribute type 7 has an invalid length. [ 105.220231][ T6351] netlink: 'syz.1.153': attribute type 30 has an invalid length. [ 105.538832][ T6381] tipc: Enabling of bearer rejected, already enabled [ 105.660613][ T6389] netlink: 'syz.4.164': attribute type 1 has an invalid length. [ 105.712625][ T6394] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 105.739483][ T6395] __nla_validate_parse: 13 callbacks suppressed [ 105.739507][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 105.780840][ T6397] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 105.816608][ T6400] ip6t_srh: unknown srh match flags 4000 [ 105.819818][ T6389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.854331][ T6397] veth1_macvtap: left promiscuous mode [ 105.872787][ T6397] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 105.982245][ T6398] bond2: (slave bridge1): making interface the new active one [ 106.009427][ T6398] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 106.093410][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 106.217290][ T6421] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 106.271834][ T6418] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 106.344262][ T6405] netlink: 344 bytes leftover after parsing attributes in process `syz.2.170'. [ 106.393016][ T6423] ip_tables: iptables: counters copy to user failed while replacing table [ 106.459411][ T6427] netlink: zone id is out of range [ 106.461258][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 106.465426][ T6427] netlink: zone id is out of range [ 106.465440][ T6427] netlink: zone id is out of range [ 106.465448][ T6427] netlink: zone id is out of range [ 106.465456][ T6427] netlink: zone id is out of range [ 106.465464][ T6427] netlink: zone id is out of range [ 106.465675][ T6427] netlink: set zone limit has 4 unknown bytes [ 106.553570][ T6427] xt_hashlimit: size too large, truncated to 1048576 [ 106.788319][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 107.104491][ T6453] netlink: 524 bytes leftover after parsing attributes in process `syz.0.183'. [ 107.440706][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.458555][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 107.458593][ T6473] netlink: 'syz.1.191': attribute type 9 has an invalid length. [ 107.459567][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 107.516220][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.516273][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.516319][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.516356][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.698545][ T6485] ip6t_srh: unknown srh match flags 5F28 [ 107.808087][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 107.808114][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 107.932382][ T1269] IPVS: starting estimator thread 0... [ 107.935133][ T6496] rdma_op ffff88803402ba38 conn xmit_rdma 0000000000000000 [ 107.999517][ T6492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.019152][ T6497] IPVS: using max 29 ests per chain, 69600 per kthread [ 108.297660][ T6516] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 108.452546][ T6526] netlink: 'syz.1.209': attribute type 3 has an invalid length. [ 108.636415][ T6536] gre1: entered promiscuous mode [ 108.741194][ T6538] syzkaller0: entered promiscuous mode [ 108.741219][ T6538] syzkaller0: entered allmulticast mode [ 108.789707][ T6543] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 108.825254][ T6547] IPv6: Can't replace route, no match found [ 108.878204][ T6543] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 108.985533][ T6547] sctp: [Deprecated]: syz.4.217 (pid 6547) Use of int in max_burst socket option deprecated. [ 108.985533][ T6547] Use struct sctp_assoc_value instead [ 109.183490][ T6565] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 109.482985][ T6565] bond1: entered promiscuous mode [ 109.483437][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.422041][ T6621] pim6reg: entered allmulticast mode [ 110.820938][ T1000] IPVS: starting estimator thread 0... [ 110.822565][ T6621] net_ratelimit: 3 callbacks suppressed [ 110.822591][ T6621] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 110.926189][ T6650] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.010580][ T6656] __nla_validate_parse: 14 callbacks suppressed [ 111.010598][ T6656] netlink: 124 bytes leftover after parsing attributes in process `syz.2.244'. [ 111.168521][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 111.168597][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 111.281669][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 111.322201][ T6670] Bluetooth: MGMT ver 1.23 [ 111.324568][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 111.413517][ T6673] netlink: 542 bytes leftover after parsing attributes in process `syz.0.251'. [ 111.512735][ T6678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.519067][ T6678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.604043][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 111.770339][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 111.865164][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.865188][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 112.109562][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.110635][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.111075][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.111578][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.112003][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.112412][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.114153][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.115174][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.115717][ T6721] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.234217][ T6723] nftables ruleset with unbound chain [ 112.395733][ T6729] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 112.427568][ T6729] bond2: entered promiscuous mode [ 112.427995][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.485365][ T6729] bond2: (slave bridge1): making interface the new active one [ 112.485426][ T6729] bridge1: entered promiscuous mode [ 112.500538][ T6729] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 112.695445][ T6742] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 112.695621][ T6743] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 112.972088][ T6763] syzkaller0: entered promiscuous mode [ 112.972126][ T6763] syzkaller0: entered allmulticast mode [ 112.990277][ T6763] tipc: Enabled bearer , priority 0 [ 113.110210][ T6769] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.534525][ T6795] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 113.678828][ T6800] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 113.723734][ T6809] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 113.977379][ T6812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.054783][ T6814] macvlan2: entered promiscuous mode [ 114.054812][ T6814] macvlan2: entered allmulticast mode [ 114.074627][ T6814] bond3: entered promiscuous mode [ 114.093465][ T6814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.133436][ T6814] bond3: left promiscuous mode [ 114.232716][ T6818] dvmrp0: entered allmulticast mode [ 114.263005][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3597000045/3597000047 [ 114.412171][ T6824] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 114.499421][ T6828] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 114.499445][ T6828] netlink: 'syz.1.298': attribute type 2 has an invalid length. [ 114.499775][ T6833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.657567][ T6840] netlink: 'syz.0.302': attribute type 32 has an invalid length. [ 114.675606][ T6841] netlink: 'syz.0.302': attribute type 32 has an invalid length. [ 115.282387][ T6876] tipc: Started in network mode [ 115.282422][ T6876] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 115.297695][ T6876] tipc: Enabled bearer , priority 10 [ 115.511877][ T6889] netlink: 'syz.3.312': attribute type 13 has an invalid length. [ 115.513704][ T6889] netlink: 'syz.3.312': attribute type 13 has an invalid length. [ 115.854102][ T6902] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 115.861790][ T6902] net_ratelimit: 26 callbacks suppressed [ 115.861845][ T6902] IPVS: sh: FWM 3 0x00000003 - no destination available [ 116.015470][ T6902] syzkaller1: entered promiscuous mode [ 116.015497][ T6902] syzkaller1: entered allmulticast mode [ 116.127460][ T6904] syzkaller0: entered promiscuous mode [ 116.127486][ T6904] syzkaller0: entered allmulticast mode [ 116.544889][ T190] tipc: Node number set to 10136234 [ 116.725308][ T6937] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 116.852260][ T6941] IPv6: addrconf: prefix option has invalid lifetime [ 117.582174][ T6973] __nla_validate_parse: 20 callbacks suppressed [ 117.582202][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 117.638815][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801efee800: rx timeout, send abort [ 117.676199][ T6977] validate_nla: 2 callbacks suppressed [ 117.676220][ T6977] netlink: 'syz.3.341': attribute type 83 has an invalid length. [ 118.112035][ T7004] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 118.138971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801efee800: abort rx timeout. Force session deactivation [ 118.140929][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801efef000: rx timeout, send abort [ 118.198845][ T7003] block nbd0: not configured, cannot reconfigure [ 118.404138][ T7008] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.414575][ T7008] bond3 (unregistering): Released all slaves [ 118.525524][ T7015] bridge1: entered promiscuous mode [ 118.548593][ T7015] bond2: (slave bridge1): making interface the new active one [ 118.553576][ T7015] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 118.641116][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801efef000: abort rx timeout. Force session deactivation [ 119.146170][ T7057] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 119.150992][ T7057] bond2 (unregistering): Released all slaves [ 119.203907][ T7066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.813404][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.371'. [ 120.463259][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 121.199880][ T7149] netlink: 232 bytes leftover after parsing attributes in process `syz.0.385'. [ 121.311920][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 121.311956][ T7156] block nbd0: Unsupported socket: should be TCP or UNIX. [ 121.424016][ T7156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.386'. [ 121.505212][ T7161] Unsupported ieee802154 address type: 0 [ 121.551532][ T7158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.660019][ T7168] ip_tables: iptables: counters copy to user failed while replacing table [ 121.804676][ T4934] Bluetooth: hci3: ISO packet for unknown connection handle 2723 [ 121.867341][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 121.913074][ T4934] block nbd0: Receive control failed (result -107) [ 122.252501][ T7212] netlink: 'syz.0.402': attribute type 2 has an invalid length. [ 122.252527][ T7212] netlink: 'syz.0.402': attribute type 8 has an invalid length. [ 122.252542][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.402'. [ 122.312937][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 122.345584][ T7215] tipc: Started in network mode [ 122.345622][ T7215] tipc: Node identity fe80000000000000000000000000001, cluster identity 6 [ 122.364874][ T7215] tipc: Enabled bearer , priority 10 [ 122.527792][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 122.685081][ T7231] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 122.685106][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 122.685121][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 122.696765][ T7231] netlink: 284 bytes leftover after parsing attributes in process `syz.0.408'. [ 122.879619][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 122.879648][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 123.074519][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 123.087845][ T7248] netlink: 92 bytes leftover after parsing attributes in process `syz.0.412'. [ 123.356863][ T976] tipc: Node number set to 4269801488 [ 123.396108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.726770][ T7276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.418'. [ 123.793487][ T7283] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.012971][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.424'. [ 124.048825][ T7294] openvswitch: netlink: Flow key attribute not present in set flow. [ 124.307956][ T7316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.409252][ T4934] Bluetooth: hci0: unexpected cc 0x2003 length: 0 < 9 [ 124.453474][ T7323] geneve2: entered promiscuous mode [ 124.453501][ T7323] geneve2: entered allmulticast mode [ 124.466799][ T59] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.466856][ T59] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.466896][ T59] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.466928][ T59] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.506410][ T7323] syzkaller0: entered promiscuous mode [ 124.506435][ T7323] syzkaller0: entered allmulticast mode [ 124.724651][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 124.957358][ T7348] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 125.177468][ T7358] block nbd1: Unsupported socket: should be TCP or UNIX. [ 125.822807][ T7386] IPv6: sit1: Disabled Multicast RS [ 126.567122][ T7425] netlink: 'syz.0.461': attribute type 11 has an invalid length. [ 126.626762][ T7421] ip_tables: iptables: counters copy to user failed while replacing table [ 126.627917][ T7429] Bluetooth: ISO socket layer initialized [ 126.772457][ T7443] xt_TCPMSS: Only works on TCP SYN packets [ 126.772700][ T7444] xt_TCPMSS: Only works on TCP SYN packets [ 127.119164][ T7437] v: renamed from veth0_vlan [ 127.279324][ T7464] veth0: entered promiscuous mode [ 127.279639][ T7464] veth0: left promiscuous mode [ 127.536975][ T7480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.668970][ T7488] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 127.761626][ T7494] __nla_validate_parse: 6 callbacks suppressed [ 127.761648][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 128.013311][ T7511] netlink: 'syz.3.486': attribute type 6 has an invalid length. [ 128.062578][ T7512] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 128.098497][ T7515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.485'. [ 128.200064][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 128.200104][ T7527] netlink: 'syz.3.489': attribute type 5 has an invalid length. [ 128.200122][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 128.215129][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 128.322654][ T7515] bond3 (unregistering): Released all slaves [ 128.430996][ T7527] geneve2: entered promiscuous mode [ 128.431022][ T7527] geneve2: entered allmulticast mode [ 128.440388][ T4934] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 128.440623][ T4934] Bluetooth: hci0: Injecting HCI hardware error event [ 128.448063][ T5631] Bluetooth: hci0: hardware error 0x00 [ 128.488028][ T7531] IPv6: sit1: Disabled Multicast RS [ 128.493028][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 128.510502][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 128.510549][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 128.510583][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 128.685456][ T7540] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 128.728898][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 128.914719][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 129.079397][ T5280] v: left promiscuous mode [ 129.134454][ T5714] v: entered promiscuous mode [ 129.224830][ T7569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.499'. [ 129.459828][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 129.461443][ T7580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.511728][ T7583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.843334][ T7602] netlink: 108 bytes leftover after parsing attributes in process `syz.4.508'. [ 129.864713][ T7600] xt_hashlimit: size too large, truncated to 1048576 [ 129.864923][ T7600] xt_hashlimit: max too large, truncated to 1048576 [ 129.865004][ T7600] xt_hashlimit: overflow, rate too high: 0 [ 130.392336][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.393298][ T7633] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 130.425577][ T7622] bond3: (slave bond0): making interface the new active one [ 130.434521][ T7622] bond3: (slave bond0): Enslaving as an active interface with an up link [ 130.464264][ T7635] hsr0: entered allmulticast mode [ 130.464289][ T7635] hsr_slave_0: entered allmulticast mode [ 130.464309][ T7635] hsr_slave_1: entered allmulticast mode [ 130.510291][ T7633] .`: renamed from bond0 (while UP) [ 130.602300][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 131.282540][ T7677] netlink: 'syz.4.532': attribute type 10 has an invalid length. [ 131.303275][ T7677] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 131.303316][ T7677] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 131.338371][ T7677] team0: Port device wlan0 added [ 131.872993][ T7707] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 132.493383][ T7740] ovs-s: entered promiscuous mode [ 132.795141][ T7773] erspan0: entered promiscuous mode [ 132.908773][ T7779] __nla_validate_parse: 13 callbacks suppressed [ 132.908795][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 133.000817][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064774][ T7786] ip6t_srh: unknown srh match flags 4000 [ 133.523387][ T7810] xt_hashlimit: size too large, truncated to 1048576 [ 133.556494][ T5631] Bluetooth: hci2: command tx timeout [ 133.681429][ T7809] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 133.698705][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'. [ 133.722501][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'. [ 133.838223][ T7828] ip_tables: iptables: counters copy to user failed while replacing table [ 134.180110][ T7810] xt_hashlimit: size too large, truncated to 1048576 [ 134.374378][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 134.680646][ T7875] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 134.681275][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.810863][ T7883] sit2: entered promiscuous mode [ 134.811010][ T7883] sit2: entered allmulticast mode [ 134.937204][ T7887] bridge0: port 3(veth0) entered blocking state [ 134.937400][ T7887] bridge0: port 3(veth0) entered disabled state [ 134.937587][ T7887] veth0: entered allmulticast mode [ 134.939914][ T7887] veth0: entered promiscuous mode [ 134.940729][ T7887] bridge0: port 3(veth0) entered blocking state [ 134.940894][ T7887] bridge0: port 3(veth0) entered forwarding state [ 135.073469][ T7893] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.592'. [ 135.143777][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 135.190113][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 135.322733][ T7909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.595'. [ 135.326453][ T7910] netlink: 52 bytes leftover after parsing attributes in process `syz.1.595'. [ 135.565623][ T7916] netlink: 'syz.0.599': attribute type 3 has an invalid length. [ 135.753203][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 136.301431][ T7957] netlink: 'syz.4.611': attribute type 3 has an invalid length. [ 136.549958][ T7963] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 136.549997][ T7963] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 136.550040][ T7963] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 136.642674][ T7963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.684252][ T7963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.964919][ T7984] bond0: option min_links: invalid value (18446744073709551614) [ 136.964945][ T7984] bond0: option min_links: allowed values 0 - 2147483647 [ 136.976608][ T7984] bond0 (unregistering): Released all slaves [ 137.418705][ T8007] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 137.511592][ T8017] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 138.066472][ T8051] __nla_validate_parse: 5 callbacks suppressed [ 138.066495][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'. [ 138.224150][ T8057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.636'. [ 138.432637][ T8032] syzkaller1: entered promiscuous mode [ 138.432665][ T8032] syzkaller1: entered allmulticast mode [ 138.594854][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 138.829792][ T8089] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 138.852131][ T8092] SET target dimension over the limit! [ 138.999633][ T8097] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 139.258869][ T8115] x_tables: duplicate underflow at hook 1 [ 139.382952][ T8103] can: request_module (can-proto-0) failed. [ 139.780683][ T8127] syzkaller1: entered promiscuous mode [ 139.780708][ T8127] syzkaller1: entered allmulticast mode [ 139.942978][ T8143] can: request_module (can-proto-0) failed. [ 140.031247][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 140.031287][ T8152] netlink: 'syz.3.658': attribute type 8 has an invalid length. [ 140.031301][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 140.370893][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 140.370927][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 141.003384][ T8196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.028130][ T8201] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 141.121810][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.171386][ T8211] x_tables: unsorted underflow at hook 4 [ 141.224803][ T8217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.358307][ T8223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.395084][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 141.414094][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 141.742362][ T8240] netlink: 'syz.1.681': attribute type 2 has an invalid length. [ 141.897297][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.683'. [ 141.960468][ T8248] syzkaller1: entered promiscuous mode [ 141.960495][ T8248] syzkaller1: entered allmulticast mode [ 142.242581][ T8261] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 142.729802][ T8281] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 142.929913][ T8296] netlink: 'syz.4.692': attribute type 83 has an invalid length. [ 143.027040][ T8287] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 143.214836][ T8292] veth3: entered promiscuous mode [ 143.229563][ T8292] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 143.348475][ T8314] __nla_validate_parse: 3 callbacks suppressed [ 143.348497][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.695'. [ 143.463673][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 143.565171][ T8325] netlink: 'syz.2.698': attribute type 2 has an invalid length. [ 143.659216][ T8327] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 143.663021][ T8327] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 143.708709][ T8334] netlink: 'syz.2.700': attribute type 2 has an invalid length. [ 143.738180][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 143.824408][ T8334] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 143.865412][ T8334] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 143.865760][ T8334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.875087][ T8334] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.700'. [ 144.238758][ T8354] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.257340][ T8360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.302868][ T8348] bond5: entered promiscuous mode [ 144.302924][ T8348] bond5: entered allmulticast mode [ 144.303588][ T8348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.364524][ T8351] bond6: entered promiscuous mode [ 144.364552][ T8351] bond6: entered allmulticast mode [ 144.367050][ T8351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.455062][ T8371] openvswitch: netlink: Unknown key attributes 1 [ 144.783430][ T8384] netlink: 'syz.2.715': attribute type 58 has an invalid length. [ 144.783454][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.715'. [ 144.809130][ T8390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.810693][ T8390] xt_hashlimit: size too large, truncated to 1048576 [ 145.066208][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 145.066446][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 145.066653][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 145.066870][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 145.611118][ T8443] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 145.876091][ T8454] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 145.908582][ T8454] veth1_macvtap: entered promiscuous mode [ 145.912955][ T8454] .`: (slave macsec0): Enslaving as an active interface with an up link [ 146.973716][ T8479] syzkaller0: entered promiscuous mode [ 146.973742][ T8479] syzkaller0: entered allmulticast mode [ 147.962182][ T8557] x_tables: unsorted entry at hook 4 [ 148.506842][ T8597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.558160][ T8600] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 148.608616][ T8600] bond7: entered promiscuous mode [ 148.609097][ T8600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.713097][ T8600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.713612][ T8600] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.713635][ T8600] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 148.811978][ T8608] ip_tables: iptables: counters copy to user failed while replacing table [ 148.850154][ T8600] bond7: (slave wireguard0): making interface the new active one [ 148.850179][ T8600] wireguard0: entered promiscuous mode [ 148.871317][ T8600] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 148.901884][ T8608] tipc: Can't bind to reserved service type 1 [ 149.338744][ T8624] __nla_validate_parse: 14 callbacks suppressed [ 149.338778][ T8624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.771'. [ 149.382248][ T8631] ip6t_srh: unknown srh match flags 4000 [ 149.428958][ T8631] syzkaller1: entered promiscuous mode [ 149.428985][ T8631] syzkaller1: entered allmulticast mode [ 149.448909][ T8631] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.448933][ T8631] syzkaller1: Linktype set failed because interface is up [ 150.008931][ T8671] openvswitch: netlink: ct_state flags ffffffff unsupported [ 150.410246][ T8682] netlink: 'syz.2.787': attribute type 3 has an invalid length. [ 150.410272][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 150.644117][ T8706] sctp: [Deprecated]: syz.0.794 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.644117][ T8706] Use struct sctp_sack_info instead [ 150.645312][ T8706] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 150.727684][ T8711] netlink: 14 bytes leftover after parsing attributes in process `syz.0.794'. [ 150.865162][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.797'. [ 150.915770][ T8716] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 150.915797][ T8716] tipc: Invalid UDP bearer configuration [ 150.930216][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 151.176830][ T8731] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 151.177277][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.178288][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.218105][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.218343][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.218839][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.219554][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.220400][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'. [ 151.270144][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 151.272915][ T8731] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.372732][ T8736] bridge_slave_1: left allmulticast mode [ 151.372764][ T8736] bridge_slave_1: left promiscuous mode [ 151.373020][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.399299][ T8736] bridge_slave_0: left allmulticast mode [ 151.399329][ T8736] bridge_slave_0: left promiscuous mode [ 151.399569][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.450513][ T8736] bond0: (slave bridge0): Releasing backup interface [ 151.595641][ T8752] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 151.630975][ T8753] trusted_key: syz.0.808 sent an empty control message without MSG_MORE. [ 151.800055][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 151.852266][ T8772] IPv6: sit2: Disabled Multicast RS [ 151.957244][ T8778] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 151.957268][ T8778] netlink: 'syz.2.816': attribute type 3 has an invalid length. [ 151.957282][ T8778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.816'. [ 151.961941][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 152.041290][ T8782] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 152.143046][ T8786] tipc: Started in network mode [ 152.143081][ T8786] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 152.143676][ T8786] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 152.172178][ T8786] tipc: Enabled bearer , priority 10 [ 152.357686][ T8795] syzkaller0: entered promiscuous mode [ 152.357704][ T8795] syzkaller0: entered allmulticast mode [ 152.483087][ T8797] syzkaller1: entered promiscuous mode [ 152.483115][ T8797] syzkaller1: entered allmulticast mode [ 152.526041][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.527225][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.895662][ T8825] netlink: 'syz.1.831': attribute type 24 has an invalid length. [ 153.091132][ T8831] sctp: [Deprecated]: syz.4.834 (pid 8831) Use of int in max_burst socket option. [ 153.091132][ T8831] Use struct sctp_assoc_value instead [ 153.246067][ T8843] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 153.246094][ T8843] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 153.251904][ T8843] xt_l2tp: invalid flags combination: 8 [ 153.279863][ T5753] tipc: Node number set to 1 [ 153.403861][ T8854] gtp1: entered promiscuous mode [ 153.403888][ T8854] gtp1: entered allmulticast mode [ 153.953879][ T8882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.577957][ T8898] __nla_validate_parse: 18 callbacks suppressed [ 154.577982][ T8898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 154.856421][ T8901] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 155.081926][ T8906] bond0: (slave gretap1): making interface the new active one [ 155.084873][ T8906] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 155.411730][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 155.529509][ T8952] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 155.532310][ T8952] xt_hashlimit: size too large, truncated to 1048576 [ 156.036797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.139387][ T8977] IPVS: Scheduler module ip_vs_sip not found [ 156.254369][ T8999] validate_nla: 1 callbacks suppressed [ 156.254392][ T8999] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 156.281833][ T8987] netlink: 388 bytes leftover after parsing attributes in process `syz.2.878'. [ 156.282269][ T9000] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 156.439210][ T8999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.583629][ T9006] bond4: (slave veth3): Enslaving as an active interface with a down link [ 156.619989][ T9010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.633942][ T9010] bond4: (slave batadv0): making interface the new active one [ 156.673015][ T9010] batadv0: entered promiscuous mode [ 156.673618][ T9010] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 156.882093][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.885'. [ 157.064878][ T9046] lo: entered promiscuous mode [ 157.084031][ T9046] tunl0: entered promiscuous mode [ 157.091977][ T9046] gre0: entered promiscuous mode [ 157.115741][ T9046] gretap0: entered promiscuous mode [ 157.242694][ T9054] netlink: 248 bytes leftover after parsing attributes in process `syz.3.893'. [ 157.272417][ T9046] erspan0: entered promiscuous mode [ 157.318853][ T9046] ip_vti0: entered promiscuous mode [ 157.448162][ T9063] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 157.448186][ T9063] netlink: 'syz.4.896': attribute type 3 has an invalid length. [ 157.448200][ T9063] netlink: 172 bytes leftover after parsing attributes in process `syz.4.896'. [ 157.448242][ T9063] NCSI netlink: No device for ifindex 813332851 [ 157.638751][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 157.859505][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 158.015239][ T9093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 158.034671][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.905'. [ 158.184913][ T9104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 158.218787][ T9094] Bluetooth: hci0: unsupported parameter 5161 [ 158.218815][ T9094] Bluetooth: hci0: unsupported parameter 8192 [ 158.218834][ T9094] Bluetooth: hci0: unsupported parameter 5161 [ 158.218847][ T9094] Bluetooth: hci0: unsupported parameter 8192 [ 158.241247][ T9093] netlink: Unknown NAT attribute (type=15104, max=9) [ 158.241347][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.261758][ T9093] netlink: Unknown NAT attribute (type=15104, max=9) [ 158.261885][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.273180][ T9093] netlink: Unknown NAT attribute (type=15104, max=9) [ 158.273288][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.294040][ T9093] netlink: Unknown NAT attribute (type=15104, max=9) [ 158.309808][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.317318][ T9093] netlink: Unknown NAT attribute (type=15104, max=9) [ 158.350622][ T9099] syzkaller0: left promiscuous mode [ 158.350648][ T9099] syzkaller0: left allmulticast mode [ 159.090686][ T9143] syzkaller1: entered promiscuous mode [ 159.090711][ T9143] syzkaller1: entered allmulticast mode [ 159.478296][ T9170] netlink: 'syz.2.921': attribute type 39 has an invalid length. [ 160.151391][ T9197] __nla_validate_parse: 4 callbacks suppressed [ 160.151446][ T9197] netlink: 92 bytes leftover after parsing attributes in process `syz.4.925'. [ 160.151466][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 160.152938][ T9197] bond7: entered allmulticast mode [ 160.152961][ T9197] wireguard0: entered allmulticast mode [ 161.620755][ T9119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.806597][ T9206] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.867264][ T9214] tipc: Enabling of bearer rejected, failed to enable media [ 162.220653][ T9232] vcan0: tx address claim with different name [ 162.529040][ T9255] net_ratelimit: 121 callbacks suppressed [ 162.529066][ T9255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.844540][ T9269] netlink: 'syz.0.942': attribute type 20 has an invalid length. [ 162.844567][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 162.934988][ T9269] netlink: 'syz.0.942': attribute type 20 has an invalid length. [ 162.935016][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 163.470289][ T5631] Bluetooth: hci3: unexpected cc 0x2060 length: 8 > 7 [ 163.506810][ T5631] Bluetooth: hci3: unexpected cc 0x2060 length: 8 > 7 [ 163.604508][ T9310] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 163.724290][ T9312] netlink: 112 bytes leftover after parsing attributes in process `syz.1.951'. [ 163.816541][ T9292] netlink: 104 bytes leftover after parsing attributes in process `syz.4.946'. [ 164.079073][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 164.079548][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 164.344948][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 164.415099][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 164.469811][ T9357] netlink: 'syz.2.965': attribute type 30 has an invalid length. [ 164.518671][ C0] [ 164.521080][ C0] ================================ [ 164.526225][ C0] WARNING: inconsistent lock state [ 164.531383][ C0] syzkaller #0 Not tainted [ 164.535841][ C0] -------------------------------- [ 164.540981][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 164.547864][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 164.554163][ C0] ffff88807d1aa260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 164.563899][ C0] {SOFTIRQ-ON-W} state was registered at: [ 164.569686][ C0] lock_acquire+0x115/0x350 [ 164.574332][ C0] lock_sock_nested+0x41/0x100 [ 164.579244][ C0] x25_bind+0x209/0x450 [ 164.583555][ C0] __sys_bind+0x2e3/0x410 [ 164.588011][ C0] __x64_sys_bind+0x7a/0x90 [ 164.592632][ C0] do_syscall_64+0x166/0x520 [ 164.597369][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.603382][ C0] irq event stamp: 1647482 [ 164.607848][ C0] hardirqs last enabled at (1647482): [] __local_bh_enable_ip+0xd6/0x140 [ 164.617983][ C0] hardirqs last disabled at (1647481): [] __local_bh_enable_ip+0x72/0x140 [ 164.628098][ C0] softirqs last enabled at (1647422): [] run_ksoftirqd+0x36/0x60 [ 164.637531][ C0] softirqs last disabled at (1647431): [] run_ksoftirqd+0x36/0x60 [ 164.647034][ C0] [ 164.647034][ C0] other info that might help us debug this: [ 164.655296][ C0] Possible unsafe locking scenario: [ 164.655296][ C0] [ 164.662767][ C0] CPU0 [ 164.666076][ C0] ---- [ 164.669378][ C0] lock(sk_lock-AF_X25); [ 164.673768][ C0] [ 164.677242][ C0] lock(sk_lock-AF_X25); [ 164.681809][ C0] [ 164.681809][ C0] *** DEADLOCK *** [ 164.681809][ C0] [ 164.689989][ C0] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 164.696172][ C0] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 164.706241][ C0] [ 164.706241][ C0] stack backtrace: [ 164.712192][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 164.721420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.731526][ C0] Call Trace: [ 164.734874][ C0] [ 164.737837][ C0] dump_stack_lvl+0xe8/0x150 [ 164.742497][ C0] print_usage_bug+0x28c/0x2e0 [ 164.747308][ C0] valid_state+0xbe/0xf0 [ 164.751611][ C0] mark_lock_irq+0x36/0x380 [ 164.756181][ C0] mark_lock+0x117/0x190 [ 164.760476][ C0] __lock_acquire+0x71e/0x2de0 [ 164.765284][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 164.770610][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.775673][ C0] ? lock_acquire+0x115/0x350 [ 164.780392][ C0] lock_acquire+0x115/0x350 [ 164.784956][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 164.790122][ C0] ? x25_kill_by_neigh+0x103/0x250 [ 164.795272][ C0] lock_sock_nested+0x41/0x100 [ 164.800068][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 164.805221][ C0] x25_kill_by_neigh+0x10d/0x250 [ 164.810202][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 164.815618][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 164.821110][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 164.826601][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 164.832586][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 164.838047][ C0] lapbeth_napi_poll+0x42/0x90 [ 164.842871][ C0] __napi_poll+0xaa/0x330 [ 164.847239][ C0] net_rx_action+0x61d/0xf50 [ 164.851870][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 164.857013][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 164.862278][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 164.867611][ C0] handle_softirqs+0x226/0x860 [ 164.872422][ C0] ? schedule+0x90/0x2b0 [ 164.876699][ C0] ? run_ksoftirqd+0x36/0x60 [ 164.881354][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 164.886425][ C0] run_ksoftirqd+0x36/0x60 [ 164.890896][ C0] smpboot_thread_fn+0x565/0xa70 [ 164.895887][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 164.900954][ C0] kthread+0x38b/0x480 [ 164.905060][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 164.910559][ C0] ? __pfx_kthread+0x10/0x10 [ 164.915175][ C0] ret_from_fork+0x514/0xb70 [ 164.919794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 164.924939][ C0] ? __switch_to+0xc89/0x1420 [ 164.929659][ C0] ? __pfx_kthread+0x10/0x10 [ 164.934316][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.939128][ C0] [ 164.942306][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 164.942325][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 164.942343][ C0] preempt_count: 100, expected: 0 [ 164.942353][ C0] RCU nest depth: 1, expected: 0 [ 164.942362][ C0] INFO: lockdep is turned off. [ 164.942369][ C0] Preemption disabled at: [ 164.942375][ C0] [] handle_softirqs+0xab/0x860 [ 164.942416][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 164.942439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.942452][ C0] Call Trace: [ 164.942460][ C0] [ 164.942469][ C0] dump_stack_lvl+0xe8/0x150 [ 164.942503][ C0] __might_resched+0x36a/0x4c0 [ 164.942538][ C0] ? handle_softirqs+0xab/0x860 [ 164.942569][ C0] lock_sock_nested+0x56/0x100 [ 164.942597][ C0] x25_kill_by_neigh+0x10d/0x250 [ 164.942630][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 164.942665][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 164.942688][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 164.942712][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 164.942747][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 164.942776][ C0] lapbeth_napi_poll+0x42/0x90 [ 164.942811][ C0] __napi_poll+0xaa/0x330 [ 164.942848][ C0] net_rx_action+0x61d/0xf50 [ 164.942884][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 164.942912][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 164.942949][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 164.942980][ C0] handle_softirqs+0x226/0x860 [ 164.943011][ C0] ? schedule+0x90/0x2b0 [ 164.943038][ C0] ? run_ksoftirqd+0x36/0x60 [ 164.943075][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 164.943107][ C0] run_ksoftirqd+0x36/0x60 [ 164.943140][ C0] smpboot_thread_fn+0x565/0xa70 [ 164.943175][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 164.943211][ C0] kthread+0x38b/0x480 [ 164.943234][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 164.943266][ C0] ? __pfx_kthread+0x10/0x10 [ 164.943287][ C0] ret_from_fork+0x514/0xb70 [ 164.943308][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 164.943329][ C0] ? __switch_to+0xc89/0x1420 [ 164.943362][ C0] ? __pfx_kthread+0x10/0x10 [ 164.943384][ C0] ret_from_fork_asm+0x1a/0x30 [ 164.943426][ C0] [ 168.136205][ T977] batadv0: left promiscuous mode