last executing test programs: 13m56.245417086s ago: executing program 4 (id=2349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x200, 0x8000, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x13, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 13m56.05101889s ago: executing program 4 (id=2351): syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={r1}, 0x4) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xfe}, @from_mac=@broadcast, @broadcast, @initial, {0x2, 0x329}, "", @value={0x0, 0x1, 0x1, 0x1, 0x9a}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xe4, "a19af3de8458019c1141f75baabd65eb470e4b5df0a70183cfad43c5079ef23447644706ec5c8411ffce6c7e5c9b4ba0ae8e3dffbd8b3eac2d277ed2ede59574e35258ff3520be32bf318fc3f4d2be01f1c3daada16a335377b192af618d218a585e936a49459e6e256f1e58488c6a31d59ea53d9afd730ac08e91c99c180385a1a46455e11da72a4d1a769eb2ea7c8fa2ef680d486104c7960258e4f803e831ef4e51295855169f8b953aa990413e2bd121cc0db20cc8c31e501b0742281cb36f2ec64aaa4f0a473d87e1b3b8a3c5d918fb532dde45e4d9c7d870a328c4a12e032b91bd"}, {@device_b, @broadcast, 0x51, "19a3ad81cae962b9634009399b3f198a2c297f6b0c50b36f3c9939485f38d1af5706fb0348449d15866fe17c9797722713488122c28ab6ebfc98a34878ff6b6c19378ca22933d018e2a3d6aa97a0a8e977"}, {@device_b, @broadcast, 0xb6, "5183f2ef205d73cb04b48ae227be53f2165bca45a595aef86fc66e57fe0f7a6b550dc8baffc779309d13f2501fb8c2c392d19e94a6b8f8ede1e6d7fa7ff7eee4c953321d769f2d19a8cca1c3d94a251721909c21ef8a65afedca0a3b2e243007b080116373fbfc7d388acc555595975fc900d281346a24d6d62068f3e4a7666576b8ace33abaeab4049a3a565873d6da110ce8babb40371fbd68922a16327678942f200552b9211f49b49f6a52e3a0d222ccac6830c5"}, {@device_a, @broadcast, 0x6d, "fda79772ce255a21997739b4360b23318796881c9095b48bf1a4d03a41fd8f0d130c24e4ba6c9c6df1c3e843bd3901c2c906303aa1572248cfc2ad460a3db4fe9ab24e433963762475ec4ea430a86c665059ff786f479da26cff720d2708c1b277e8acf33894b14fa8cafd964b"}, {@device_a, @device_a, 0x1000, "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"}, {@device_b, @device_a, 0x14, "7a7e8fc05f872fc87dc136877f7c14423d36451f"}, {@device_b, @device_a, 0x33, "0e65e1dd5e2edc5c658eb59500192045aca3c62c8bed52200bc3f3ba779c24c0a886416625c321d1dc3e184abd372b3de0dc8f"}]}, 0x132a) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/925], 0x396) socket$inet_udp(0x2, 0x2, 0x0) 13m55.120606978s ago: executing program 4 (id=2356): r0 = socket$netlink(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'veth1_virt_wifi\x00', 0x100}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000400)={0x9, 0x80000000, 0xfffffffffffffffc, 0x1}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000780)=0x8, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000440)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x1, 0x68, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x7, @empty, 0xcff}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e21, 0xdc, @private0, 0xfff}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000580)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x1, 0x68, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x7, @empty, 0xcff}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e21, 0xdc, @private0, 0xfff}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x7, 0x6}, 0x8) close(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000380)='0', 0x1, 0x40000, &(0x7f00000003c0)={0x11, 0x6, r7, 0x1, 0x2, 0x6, @local}, 0x14) (async) sendto$packet(r8, &(0x7f0000000380)='0', 0x1, 0x40000, &(0x7f00000003c0)={0x11, 0x6, r7, 0x1, 0x2, 0x6, @local}, 0x14) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000840)={0x3b, 0x10, 0x0, 0x4, 0x0, [@empty, @empty, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x19}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, @loopback]}, 0x88) r9 = socket(0x2000000015, 0x80005, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000600)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r9, 0x0, 0x0, 0x40000022, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 13m53.887162319s ago: executing program 4 (id=2364): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close(0x3) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet(r2, &(0x7f00000015c0)={&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}, 0x20000000) 13m52.626761433s ago: executing program 4 (id=2375): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, r1, 0x4000, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x8, 0x8, 0x0, 0xe09, 0x0, 0x9, 0x717a, 0x2, 0xd, 0x8, 0x5, 0x10a1, 0x80000001, 0x200, 0x3, 0xeeb, 0x81, 0xc, 0x3ff, 0xffffffff, 0xdff, 0x1, 0x99bd, 0xc, 0x10000, 0x9, 0xfc57c70, 0x3ff, 0x8, 0x6, 0xc, 0xa00, 0x1b, 0x8e, 0x4, 0x4, 0x9, 0x7, 0x6, 0xa160, 0xbee, 0x4, 0x100, 0xc2, 0x800, 0x3b1, 0x6, 0x100, 0x1000, 0x5, 0x9, 0xec4, 0x8000, 0x0, 0xedf, 0x5, 0xd, 0x2, 0x97, 0x7fffffff, 0x7, 0xd85, 0x81, 0x3, 0x6, 0x101, 0x6, 0x4, 0x2, 0x7, 0x9, 0x6, 0x4, 0x7c, 0x3, 0x10d84e, 0x0, 0x1, 0x8, 0x7, 0xffffffff, 0xf8, 0x4, 0x5, 0x401, 0x440, 0xb3, 0x7fff, 0x400, 0x6, 0x7ff, 0x6, 0x3, 0x1, 0x5, 0x3, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0x375f, 0x8, 0x1, 0x4, 0x4, 0x0, 0x6, 0x0, 0xaa5, 0x9, 0x800, 0x2, 0x81, 0x4, 0x9, 0x4a20a1a8, 0x8, 0x80000001, 0x0, 0xfffffffa, 0x3, 0x7, 0x4, 0x5, 0xc, 0x36, 0xf, 0xff9b, 0x68, 0x80000001, 0x401, 0x4, 0xff, 0x2e3, 0xc, 0x9, 0x3, 0x2, 0x0, 0x2452, 0xab, 0x5, 0x8, 0x8, 0x9, 0x10000, 0x1000, 0x7, 0x9, 0x1ff, 0x4a0, 0x0, 0x3, 0xc0, 0xffffffff, 0x7, 0x1, 0xa94a, 0x4, 0x101, 0xffffffff, 0xd7, 0x5, 0x8, 0x395, 0x7, 0x8, 0x6, 0x7fff, 0x10000, 0x80000001, 0x0, 0x5, 0x18000, 0x5, 0x6, 0x5, 0x2, 0xd146, 0x8, 0x6, 0x1, 0xf17, 0x9, 0x7, 0xffffffff, 0x7, 0xff, 0x1, 0x7, 0x81, 0x2, 0x8, 0x101, 0xfff, 0x2, 0x6, 0xffff99a7, 0x5, 0xac000000, 0x8000, 0x9, 0xe, 0x9, 0xa39, 0x9, 0x25, 0x5, 0x7, 0x9, 0x928800, 0x7fffffff, 0x2, 0x0, 0x1, 0x1, 0x8ef1, 0x9, 0x4, 0x0, 0x0, 0x2, 0x10, 0x1, 0x7fffffff, 0x6, 0x5, 0x7, 0x200, 0x80, 0x7, 0x1000, 0x9, 0x71, 0x6, 0x7, 0x7, 0x3, 0x1, 0x5, 0x4cd, 0x0, 0x9, 0x7f, 0x800, 0x8, 0x0, 0x1, 0xfffffffd, 0x4, 0x80000000, 0x4cd, 0x1fd]}, @TCA_TBF_PARMS={0x16, 0x1, {{0xfc, 0x2, 0x7f, 0x2, 0x7, 0xffffa9d9}, {0x0, 0x0, 0x6, 0x100, 0x972}, 0x7, 0xb95, 0x5b9}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000000) pipe(&(0x7f0000000c40)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0xd, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ec0)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x2, &(0x7f0000000fc0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000), 0x4) (async) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000010c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)='%pi6 \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0x10, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0x10, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x16, 0x16, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed03, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x6a, 0x6d, &(0x7f0000000580)=""/109, 0x41100, 0x20, '\x00', r6, @fallback=0x19, r7, 0x8, &(0x7f0000000c80)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f0000001380)=[r12, r13], 0x0, 0x10, 0x8}, 0x94) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_ADT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_ADT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 13m51.60404853s ago: executing program 4 (id=2382): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0x4, 0x3}, 0x6) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000800)=0x8, r2, 0x0, 0x2000000000000e, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xa, 0x10000, 0x13, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x708, 0x5, 0x8000}}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x6}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x3, 0x20400, r5, 0xfffffff7, '\x00', r4, r5, 0x0, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x13, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r6, 0x6, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map=r6, r8, 0x24, 0x14, 0x0, @void, @value=r8, @void, @void, r9}, 0x20) 13m36.238234266s ago: executing program 32 (id=2382): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0x4, 0x3}, 0x6) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000800)=0x8, r2, 0x0, 0x2000000000000e, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xa, 0x10000, 0x13, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x708, 0x5, 0x8000}}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x6}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x3, 0x20400, r5, 0xfffffff7, '\x00', r4, r5, 0x0, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x13, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r6, 0x6, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map=r6, r8, 0x24, 0x14, 0x0, @void, @value=r8, @void, @void, r9}, 0x20) 25.727232668s ago: executing program 1 (id=5920): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x42731000) r1 = socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x5000, @loopback}, 0x10) listen(r2, 0xa) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x5000, @loopback}, 0x10) accept4$inet(r2, 0x0, &(0x7f0000000180), 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x80, @loopback, 0xfffffffb}]}, &(0x7f0000000280)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000340)="44000000410001000300160000010000030100002a0000002c0001001000040000030000000400000000000006000c000800000010000700010101010202020206eb4000", 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 21.575642625s ago: executing program 1 (id=5929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x2c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000100000000008100000018530000070000000000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000d84b00", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000508000018110000d25e43c8bbb58ffe96f1c7205fe55914212fe919f0821e06da2644fe70397042a19a2336b8d3818e9120fb4588897a1a605d956a1092baa54e7920a6f16ed008cad6df42d849c814f8910515bf", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000ac0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009500000000000000"], &(0x7f0000001640)='GPL\x00', 0xf, 0x6d, &(0x7f0000001680)=""/109, 0x41000, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x5, 0xa, 0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001780)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000017c0)=[{0x5, 0x3, 0x10, 0xa}, {0x2, 0x5, 0xc, 0xb}], 0x10, 0x48000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000018c0)=r0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000001480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000014c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x161042, 0x0) tee(0xffffffffffffffff, r4, 0x21, 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000240)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1e, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000003c0)=0x10) getsockopt$bt_hci(r5, 0x84, 0x2, &(0x7f0000000400)=""/4143, &(0x7f0000001440)=0x102f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x4080) 18.765389715s ago: executing program 1 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x39, 0x40400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000040)="4749c2368bb8dd2c7f17323cf53a") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x800000000000005c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x58) 17.847803508s ago: executing program 1 (id=5937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "56dcd895ba70ed0c", "3ff3213c74ff223cb1fa4f861b62a3d1264299c6bcbf21f9563bf1e85d6540a9", "df3c6f4a", "94140c150e9e787c"}, 0x38) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f00000003c0)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000480)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000004c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000012c0)=0xffff1884, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001300)) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x14, 0xfc, 0x0, 0xfffffffc}, {0x6, 0x6, 0x7, 0x6}]}, 0x10) 17.517266738s ago: executing program 1 (id=5938): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)=':}\x00', 0xa0000, &(0x7f0000000080)={@align=0x80000001, {0x10, 0x0, 0x3, 0x9}}, 0x973, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x40}) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000900)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000940)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000980)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000a00)) ioctl$PPPIOCSMRRU(r1, 0x4004743c, 0x0) (async) unshare(0x22020600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000a80)=';', 0x1, 0x20008005, &(0x7f0000000ac0)={0x2, 0x4e20}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000805000000000000000100008426010000040000000400000000294678c1707e6cd8000012050000000400000000000012030000000300000000000010080000000030305f5f3000"], 0x0, 0x67, 0x0, 0x1}, 0x28) (async, rerun: 32) recvmsg(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x43) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x1f, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x3, 0x8, &(0x7f00000020c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f00000032c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003300)={@fallback=r3, r3, 0x2f}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r7 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r7, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x102) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="0500000005000000020000000900000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ec00000000000000000000000100611a000000000000001000000000"], 0x50) (async, rerun: 64) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r6, 0x80000000) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r4, @ANYBLOB="35ebe57060a100000000a8a3", @ANYRES64=0x0], 0x20) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000003440)=0x3fa, 0x4) (async) bind$inet6(r8, &(0x7f0000003480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r8, 0x8000) (async) listen(r0, 0x5) 15.934824942s ago: executing program 1 (id=5942): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0xa8, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_INIT={0xfffffffffffffdfa, 0x2, {0x3, 0x1, 0x2}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xef1, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa356, 0x3d}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4e, 0xd}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xa, 0xf}, {0xffff, 0xe}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4c, 0x2, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x9}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x2}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) close(0xffffffffffffffff) 5.951039386s ago: executing program 2 (id=5966): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff"], 0x50) (async) r0 = socket(0x10, 0x3, 0x3) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000b80)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="700200", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000000c0)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) unshare(0x20400) (async) ioctl(r4, 0x40047438, &(0x7f0000000140)) (async) ioctl$sock_inet_SIOCRTMSG(r4, 0x40047435, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1d, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000640)={0x7, 'ip6_vti0\x00', {0x64184994}, 0x2}) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890c, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x2c, r7, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x3000000, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.24934856s ago: executing program 2 (id=5970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000240)={0x4, 0x4, '\x00', [@generic={0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}}, @ra={0x5, 0x2, 0xa}, @jumbo={0xc2, 0x4, 0x45e}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x8000}, @padn]}, 0x30) 4.960427196s ago: executing program 0 (id=5972): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x22e, 0x10, &(0x7f00000004c0), 0x1dd}, 0x48) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x7, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x28000}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004840}, 0x80) 4.877245418s ago: executing program 2 (id=5973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000063f9fffe000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009100000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000740)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000400)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x24040000, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @remote, 0x71af}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f00000004c0)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002740)={0x0, 0x5, 0x0, [0x271, 0x4, 0x4, 0x7, 0x7fffffff], [0xffffffff, 0x0, 0xa4e, 0x10001, 0x0, 0xa, 0x7, 0x401, 0x7fff, 0x1c, 0x100, 0x0, 0x100000000, 0x4, 0x9, 0x1000, 0x40, 0xc, 0x100000000, 0x80, 0x5a3, 0x4, 0x7, 0x7, 0x0, 0x7f, 0xe, 0x1ff, 0x8, 0xfffffffffffffff1, 0x8001, 0x1, 0x6, 0x3, 0x9, 0x4, 0x81, 0x1, 0xf, 0xe6f, 0x2, 0x7, 0x5, 0x9, 0x8, 0x100000000, 0xf8, 0x0, 0x1004, 0x3, 0x8000, 0x10001, 0x800, 0x7ff, 0x3, 0x305, 0x7f, 0x3, 0x4, 0x57f, 0x9, 0xc833, 0x1, 0x7ff, 0x3, 0x7fff, 0x101, 0x1b7f, 0xf933, 0x4, 0x26, 0x9, 0x0, 0x0, 0x2, 0x3ff, 0x2, 0x2, 0x101, 0xd, 0x4791, 0xff, 0xc, 0x4, 0x100, 0x4, 0x10001, 0x0, 0x9, 0x508, 0xd5f0, 0x0, 0x4, 0x85, 0x1, 0x4, 0xe5, 0x7, 0xfff, 0x0, 0xf, 0x7, 0x7f, 0xffffffff7fffffff, 0x6, 0xffffffffffffffff, 0x1, 0x7, 0x6, 0xff, 0xcfe8, 0x4, 0x101, 0x1, 0x1, 0x5, 0x200, 0x1, 0x4, 0x3, 0x6]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002b80)={r10, "e08459262bdf248bfd2ff6d5e1eaa68d"}) 4.700032772s ago: executing program 0 (id=5974): socket(0x2, 0xa, 0x300) (async) socket(0x2, 0xa, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x4, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000440)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_emit_ethernet(0x47, &(0x7f0000000480)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="7758e6a9e3e9f02473"}}}}}}, 0x0) 4.631417622s ago: executing program 5 (id=5975): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbdb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x65f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c011}, 0x8000) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x0, 0x10, &(0x7f0000000a00)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a006da800000000000000001c"], 0x24}}, 0x0) 4.413100269s ago: executing program 3 (id=5976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) (async) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8400) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8400) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xcb}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 4.195020419s ago: executing program 5 (id=5977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, r0, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000000)="c3a40fdc8c200495b7ddb1346581bd7afcb881af15a3d20c376c3b95deb8f1f81ac2ba1bd01a0274cff65c2de615b166c4834a4355d2fe5f93d0158df0984f02520e42f199e0a38f2da8d9e9e9da0d47a150ff2a8be61cf3bd1458a72b3048414e11c2a16bb76edc8a2d329f51172373e7ee4305327d81297e806ad7808df7eae0b3a2e6fd676862095b5c9a49d32ac430dd598b4fbff0339adb5cb43dda137364c0f57a625bb863ad542979f579fe22065207b0e7f55319e9429285d8c24e8d77bf96c6bd0e", &(0x7f0000000100)=""/129, &(0x7f00000001c0)="d204dca7ac6ea6aa64c11f086f8e96320e52f058bd834d3a90d673263aa117cbb225dac9d3251c9e964cdcb40bf2f269306cbf32652a1d8c461485b7e5ba7b15251bf9ef207c4bc872f02e85dd914da399ac1d8edbb252a163d84002c0e8acaf02856ddf40e1cbc0744b05ade7c115de294a2bd2f7a3630bd0b38161fbda49894cbace214684df0ce72c2e0b69c7a9528508cfd3950a53e9087267ade937746e6e7d9b7e86ecbd38257b25bd594442ae87af9e8eb2815d6c2a4ea2e572f73ec9c35b0eb664e0ec44d8552f8c05576bab886af5dfbd999d306750882f", &(0x7f00000002c0)="c4625aca320a616e222b3ebc105a568974864f4e803e35e47db892af1084ee779a19c9dd66e8a72d348d63c483e981d8fddd5c8482b71c8458dccb505f5d691b57e473ad1b791096b0313bcdc0de717f99f36d0d3fbdc6b6c45b66b62f43a80217628c10df73998c1103643902fd5eacb21b06972624650155e4c89248dc2e2970f622a24e3acad8ee79b939ae315e65a5745573bced416d3cc3b37afe10ba1b48cffdfb18809f275e7e4f77bf452215", 0xae3, r1}, 0x38) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) 4.040718925s ago: executing program 2 (id=5978): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff04"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) epoll_pwait(r5, &(0x7f00000010c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x68, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x440}}, 0x50) epoll_pwait(r5, &(0x7f0000001100)=[{}], 0x1, 0x29c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000001180)={0x20000014}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) (async) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) ioctl$int_in(r10, 0x5452, &(0x7f0000000140)=0x8000) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.681260327s ago: executing program 0 (id=5979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10008810) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.530996752s ago: executing program 3 (id=5980): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206030000000000000000000500000011000300686173683a69702c6d61726b000000000500010007000000050005000a0000000900020073797a300000000005000400010000000c00078008000b"], 0x58}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x6, 0x4e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x21, 0x890d, 'veth1_to_team\x00', 'caif0\x00', 'dvmrp0\x00', 'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x4, 0x8, 0x4, 0x4, 0x2000, 0x18}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x11, 0x4, 0x806, 'tunl0\x00', 'bridge_slave_1\x00', 'macsec0\x00', 'bond_slave_0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x5, 0x2, 'veth0\x00', 'lo\x00', 'wlan1\x00', 'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @random="d2f580b796aa", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7ff}}}}, {0x11, 0x2, 0x883e, 'macvtap0\x00', 'team0\x00', 'vcan0\x00', 'syz_tun\x00', @random="1030412de767", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xaf5b}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x1, 'veth0_to_team\x00', 'wlan1\x00', 'ipvlan1\x00', 'veth0_macvtap\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x1, [{0x5, 0x4, 0x8, 'team_slave_1\x00', 'syzkaller0\x00', 'team0\x00', 'ip6_vti0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', {0xeaf}}}}}]}]}, 0x560) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.480810869s ago: executing program 5 (id=5981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7f, 0x1, 0x3, 0xa, 0x800, 0xdc0d}, {0x3, 0x0, 0xfeb, 0x10, 0x2}, 0x5, 0xf712, 0x3, 0x6, 0x7}}]}}]}, 0x60}}, 0x448c0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) (async) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f905ffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) 2.152759515s ago: executing program 3 (id=5982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc000000180001002abd7000fcdbdf251c14000f"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'batadv_slave_1\x00', {0x2}, 0x620f}) 1.721455309s ago: executing program 0 (id=5983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002140)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002180), 0x8c00, 0x0) close(r2) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000021c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002200)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002240)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x81, 0x8}) 1.706923376s ago: executing program 2 (id=5984): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000015c0)={{r0, &(0x7f0000000040)='^(\x00', 0x40300, &(0x7f0000000080)={@_ha_fsid={[0x10001, 0x200]}, {0x5, 0x4, 0x8, 0x2}}, 0x80000000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, 0x4, &(0x7f0000001540)=[{0x3, 0x7, &(0x7f0000000140), &(0x7f0000000180)="95bc75e33f0aedc58cec35050d21cf8fc3e41b4e5016eab64e60a5b13c6baa59a7eea16b34bf629ff609c5bb1136f4d511b24688578cc3f70c600c59d4e90ee21f1756557c6922654077534558ad9f1afad839b019e21bc1922b9ad4fa6eaccd5c1b06665a478a8df390bdbeb26e1464242713d4d58495470fef7ef4dcec9b435c146d7b556ceee0aa6759884a00fc4ad50babcf521ceb870572416874e9370f8572f7430f08fe7475d9c8a698a230623859d705de487f2579c3c66df8128386010ce02108b9f44029e636d9eccfb478189377a44399", 0xd6, 0xa}, {0x1, 0x0, &(0x7f0000000280)='$\x00', &(0x7f00000002c0)="66ceb86035eefd1eec538d6aad9c7ea5ff179cc2eb526f4b7be7aabcf2aff4489a2e914d8d4727199775906799043ccd405d49ef1cbb800a27ddef7b5db41d7394a6e502221f9c24eb8f48bbdf577c14edb1d4bfa79167096da9186360fd94aea28245d3b3b310569128929c95a26b6347a7ad64d9e640ffd7c6922eaf2b09365ec2fc82a3ac23c46ec95a06dfcb3d5355a664b90e2a955b9ec458a760a7ed6cbf0b38b5dc001792e0ce01cda3ecbb5fadb95ce0222006619fe98142d6f89c954c20e0b68e3f4e51354463777cdb136cc0aecffa43bb16e2a33fbd7390ebfa9aaae7a64e29ab1b70f9e7f628d349b00e08931e9df1965299ea", 0xf9, 0x78}, {0x2, 0xfffffffe, &(0x7f00000003c0)='veth0_to_bond\x00', &(0x7f0000000400)="e5249d9b51a71062888a42bb607ca74448453b7f52f1236571425775fa95bc4a9f4690d2406550affd5510e7976e256f4a10cea372254368398cf90429bd9c5cac4946dcf8d932dbc41242b1db9e07746b7babc8df466b9dd56b435ef82812bda1d6e37e5d97aab672fa262cc2fbb4f0d0f64d386b436a1bd662dd4d6368b7620ec2ba778e161816bf136507eded119bee8c68fed1b17c4ab5d08cd6628e3145237cd358214625508cd65a85f20df9053cc7f4cb83563c44a56af267264611d6c9db45c6022229eaef7791e7c2a3cfc7505df192bdb1507c86", 0xd9, 0x2}, {0x1, 0xb, &(0x7f0000000500)='{-\'!.*,*\xe3(\x03\\::\x9f\x00', &(0x7f0000000540)="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", 0x1000, 0x12}]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000016c0)={'wg2\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001840)={0x2, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x2, 0x18, 0x7f, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000001840), 0x11000) writev(r7, &(0x7f0000001880)=[{&(0x7f00000018c0)='^', 0x1}], 0x1) pselect6(0x40, &(0x7f0000001900)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000001980)={0x0, 0xfffffffffffffe21, &(0x7f00000019c0)={&(0x7f0000001a00)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001740)={r1}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r10, 0x8008f513, &(0x7f0000001780)) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x3c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) vmsplice(r6, &(0x7f0000001b40)=[{&(0x7f0000001b80), 0x3528a9c0}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001c40)={0x70, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x2001) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @empty}}) 1.545313932s ago: executing program 3 (id=5985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 1.511661894s ago: executing program 5 (id=5986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0020000000000058b709000000ddfa63c011cc42dbde750dd30000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.318649725s ago: executing program 3 (id=5987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000700)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x20121}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_VTI_REMOTE={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_VTI_REMOTE={0x14, 0x5, @private0}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.15647285s ago: executing program 5 (id=5988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x4000000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a00)={r6}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000180), 0x4000000000001f2, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x8800) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x4000000) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a00)={r6}, 0xc) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r1, &(0x7f0000000180), 0x4000000000001f2, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x8800) (async) close(r0) (async) 978.520169ms ago: executing program 0 (id=5989): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xffff, 0x1, 0x1, 0x1, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x807}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) 948.126797ms ago: executing program 3 (id=5990): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae5af847cf809c4ee3c41512cb02c31c01801b7fdb1", 0x55}], 0x1}, 0x44000) write(r0, &(0x7f0000001800)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000200000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c00028008000440000000fe0800034000000a000000054000000014080008400000000008000240000000020900020073797a3200000000140000001100010000000000000000000000000ac6bba8bb7539cf356fd7"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x0, 0x10, &(0x7f00000009c0), 0x36}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x1002}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtfilter={0x64, 0x2c, 0x401, 0x3ffe, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x64}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001840)=@newlink={0x284, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x11c33, 0x2009}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_LINK={0x0, 0x5, r6}, @IFLA_AF_SPEC={0x9c, 0x1a, 0x0, 0x1, [@AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xf7}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1e1a6}, @IFLA_ALT_IFNAME={0x35, 0x35, 'bridge_slave_0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x284}, 0x1, 0x0, 0x0, 0x1}, 0x4004001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="600000000101010200000000000000000a000000300002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa08001a40000400090c00198008000200020000000800034000000000"], 0x60}}, 0x0) poll(&(0x7f0000000c00)=[{r10, 0x11}, {r2, 0x8000}, {r3, 0x2000}, {r3, 0x21}, {r2, 0x4073}], 0x5, 0x1000) socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r11) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x5) 168.804617ms ago: executing program 5 (id=5991): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delchain={0x34, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000840)={0x1, {{0xa, 0x4e21, 0x0, @private0, 0x4}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x9, @private0, 0xa7}}, {{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}}, {{0xa, 0x4e23, 0x7, @empty, 0x9}}, {{0xa, 0x4e23, 0xffffffff, @loopback, 0xf}}, {{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}]}, 0x310) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07002dbd70000000000005000000180001801400020073797a5f74756e000000000000000000180003801400038010000180040003"], 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 44.179584ms ago: executing program 2 (id=5992): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') read(r1, &(0x7f0000000180)=""/207, 0xcf) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=5993): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)=""/215, 0xd7}, {&(0x7f0000001bc0)=""/4101, 0x1005}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}], 0x3, 0x40002040, 0x0) kernel console output (not intermixed with test programs): 21691][T30485] bridge0: port 2(vlan2) entered blocking state [ 966.832381][T30485] bridge0: port 2(vlan2) entered disabled state [ 966.832586][T30485] vlan2: entered allmulticast mode [ 966.832603][T30485] bridge_slave_0: entered allmulticast mode [ 966.877930][T30485] vlan2: entered promiscuous mode [ 967.166539][T30500] netlink: 'syz.2.4727': attribute type 39 has an invalid length. [ 967.768788][T30507] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4728'. [ 967.795746][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4730'. [ 967.821175][T30538] hsr_slave_0: left promiscuous mode [ 967.824657][T30538] hsr_slave_1: left promiscuous mode [ 968.401848][T30560] veth4: entered allmulticast mode [ 968.429833][T30564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4736'. [ 968.429867][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 968.720137][T30572] 8021q: VLANs not supported on ip_vti0 [ 968.797840][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 969.177575][T30585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4739'. [ 969.284266][T30396] udevd[30396]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 969.364118][T30585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 969.498676][T30591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.521893][T30591] bond9: (slave bond0): Enslaving as an active interface with an up link [ 969.620497][T30588] syzkaller0: entered promiscuous mode [ 969.620524][T30588] syzkaller0: entered allmulticast mode [ 969.718472][T30600] netlink: 'syz.1.4741': attribute type 11 has an invalid length. [ 969.856473][T30592] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 970.040525][T30615] syzkaller0: entered promiscuous mode [ 970.040550][T30615] syzkaller0: entered allmulticast mode [ 970.107544][T30615] tipc: Started in network mode [ 970.107578][T30615] tipc: Node identity d238c492139, cluster identity 4711 [ 970.107825][T30615] tipc: Enabled bearer , priority 0 [ 970.141082][T30615] tipc: Resetting bearer [ 970.327048][T30625] netlink: 'syz.2.4746': attribute type 2 has an invalid length. [ 970.389211][T30634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4746'. [ 971.117237][T13673] tipc: Node number set to 3249063058 [ 972.606950][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.657192][T31863] tipc: Enabling of bearer rejected, already enabled [ 1011.726235][T31863] sch_tbf: burst 173 is lower than device syzkaller0 mtu (313) ! [ 1011.870413][T31870] syz.5.4752 (31870) used obsolete PPPIOCDETACH ioctl [ 1011.872709][T31870] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1011.873218][T31870] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4752'. [ 1012.163867][T31886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.274921][T31901] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1012.312484][T31906] IPVS: Unknown mcast interface: veth0_to_batadv [ 1012.312750][T31906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1012.340495][T31912] IPVS: Unknown mcast interface: veth0_to_batadv [ 1012.340696][T31912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1012.773099][T31921] bridge_slave_0: entered promiscuous mode [ 1013.068723][T31937] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4762'. [ 1013.639952][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1013.640109][T31966] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1013.640512][T31966] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1013.643796][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1013.643945][T31967] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1013.973036][T31977] syzkaller1: entered promiscuous mode [ 1013.973060][T31977] syzkaller1: entered allmulticast mode [ 1014.081245][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1014.564603][T32001] bond6: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 1014.564638][T32001] bond6: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1014.592559][T32001] bond6: entered allmulticast mode [ 1014.593215][T32001] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1014.833868][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834041][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834193][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834337][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834484][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834643][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834786][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.834960][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1014.835133][T32013] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1015.572693][T32043] batadv_slave_1: entered promiscuous mode [ 1015.656383][T32041] batadv_slave_1: left promiscuous mode [ 1016.321079][T32080] erspan0: left promiscuous mode [ 1016.958287][T32110] __nla_validate_parse: 11 callbacks suppressed [ 1016.958343][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1016.958364][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1017.074657][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1017.074685][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1017.095682][ T51] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1017.095733][ T51] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1017.095770][ T51] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1017.488649][T32126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4804'. [ 1018.821890][T32166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1018.821933][T32166] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1018.821952][T32166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1018.978621][T32174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4812'. [ 1019.908863][T32215] net_ratelimit: 24 callbacks suppressed [ 1019.908887][T32215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1020.857094][ T8666] Bluetooth: hci4: command 0x0405 tx timeout [ 1022.222599][T32219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1022.450673][T32196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.835971][T32232] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.939277][T32234] netlink: 320 bytes leftover after parsing attributes in process `syz.5.4827'. [ 1022.994897][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1023.039727][T32234] vlan3: entered promiscuous mode [ 1023.039753][T32234] hsr0: entered promiscuous mode [ 1023.039991][T32234] vlan3: entered allmulticast mode [ 1023.040008][T32234] hsr0: entered allmulticast mode [ 1023.040020][T32234] hsr_slave_0: entered allmulticast mode [ 1023.040037][T32234] hsr_slave_1: entered allmulticast mode [ 1023.190259][T32242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4828'. [ 1024.005999][T32279] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 1024.074548][T32279] bond5: entered promiscuous mode [ 1024.083007][T32279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1024.174274][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4839'. [ 1024.176958][T32296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4836'. [ 1024.434096][T32279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1024.434589][T32279] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 1024.434615][T32279] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1024.481395][T32279] bond5: (slave gre2): making interface the new active one [ 1024.481422][T32279] gre2: entered promiscuous mode [ 1024.502916][T32279] bond5: (slave gre2): Enslaving as an active interface with an up link [ 1025.023233][T32325] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4845'. [ 1025.066217][T32321] tipc: Failed to remove unknown binding: 66,0,0/0:3362779852/3362779854 [ 1025.066253][T32321] tipc: Failed to remove unknown binding: 66,0,0/0:3362779852/3362779853 [ 1025.083698][T32321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1025.103178][T32321] tipc: Failed to remove unknown binding: 66,0,0/0:3362779852/3362779854 [ 1025.103215][T32321] tipc: Failed to remove unknown binding: 66,0,0/0:3362779852/3362779853 [ 1025.882336][T32364] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1026.133649][T32375] geneve3: entered promiscuous mode [ 1026.169748][T30369] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.173366][T30370] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.173420][T30370] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.173460][T30370] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.319332][T32420] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 1027.319416][T32420] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 1028.242231][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1028.242274][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1028.351024][T32444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1028.409931][T32434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1028.432728][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1028.432770][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1029.198273][T32441] workqueue: Failed to create a rescuer kthread for wq "nfc23_nci_tx_wq": -EINTR [ 1029.295762][T32539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4874'. [ 1029.391320][T32538] Bluetooth: hci0: unsupported parameter 5161 [ 1029.391347][T32538] Bluetooth: hci0: unsupported parameter 8192 [ 1029.391361][T32538] Bluetooth: hci0: unsupported parameter 5161 [ 1029.391376][T32538] Bluetooth: hci0: unsupported parameter 8192 [ 1029.503434][T32543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1030.129562][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 1030.136128][T32557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1030.136156][T32557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.176332][T32550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.251987][T32550] bridge_slave_0 (unregistering): left allmulticast mode [ 1030.252016][T32550] bridge_slave_0 (unregistering): left promiscuous mode [ 1030.252088][T32550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.781771][T32567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.555880][T32596] pimreg9: entered allmulticast mode [ 1031.686940][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.686965][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.770264][T32614] syzkaller1: entered promiscuous mode [ 1031.770290][T32614] syzkaller1: entered allmulticast mode [ 1032.136178][T32624] batman_adv: batadv0: Adding interface: veth0 [ 1032.136198][T32624] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.136234][T32624] batman_adv: batadv0: Interface activated: veth0 [ 1032.936385][T32658] sctp: [Deprecated]: syz.5.4900 (pid 32658) Use of int in maxseg socket option. [ 1032.936385][T32658] Use struct sctp_assoc_value instead [ 1033.660109][T32680] __nla_validate_parse: 3 callbacks suppressed [ 1033.660133][T32680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1033.902530][T32682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1033.910131][T32682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1033.941410][T32682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1033.941446][T32682] nbd: device at index 64 is going down [ 1033.968161][T32666] syzkaller0: entered promiscuous mode [ 1033.968188][T32666] syzkaller0: entered allmulticast mode [ 1034.010978][T32685] udevd[32685]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1038.023342][T32735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1038.146326][T32739] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1038.146352][T32739] tc_dump_action: action bad kind [ 1038.188500][T32739] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1038.188525][T32739] tc_dump_action: action bad kind [ 1038.189051][T32745] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1038.189069][T32745] tc_dump_action: action bad kind [ 1038.315818][T32748] x_tables: duplicate underflow at hook 2 [ 1038.849827][ T8666] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1041.478261][T32762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1041.953150][ T359] netlink: 'syz.2.4933': attribute type 1 has an invalid length. [ 1043.085870][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1043.085975][ T380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1043.086012][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1043.222995][ T385] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 1043.236194][ T386] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 1043.662825][ T385] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1044.170499][ T398] bond10: (slave geneve2): making interface the new active one [ 1044.205956][ T398] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 1044.231955][ T403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4943'. [ 1045.420406][ T440] x_tables: duplicate underflow at hook 3 [ 1045.516148][ T441] TCP: TCP_TX_DELAY enabled [ 1045.531441][ T408] scsi_nl_rcv_msg: discarding partial skb [ 1045.925476][ T447] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1046.304096][ T397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.984229][ T466] netlink: 'syz.5.4953': attribute type 33 has an invalid length. [ 1046.984257][ T466] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4953'. [ 1047.022356][ T462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 1047.170677][ T469] netlink: 'syz.5.4953': attribute type 33 has an invalid length. [ 1047.170705][ T469] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4953'. [ 1047.310521][ T471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1047.533946][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880571a9000: rx timeout, send abort [ 1048.034006][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880571a9000: abort rx timeout. Force session deactivation [ 1048.035991][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880571ab400: rx timeout, send abort [ 1048.536043][ C1] vxcan1 (unregistering): j1939_tp_rxtimer: 0xffff8880571ab400: abort rx timeout. Force session deactivation [ 1050.233768][ T528] netlink: 'syz.0.4965': attribute type 1 has an invalid length. [ 1050.820173][ T544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4966'. [ 1051.091864][ T529] bond11: (slave veth0_to_bond): making interface the new active one [ 1051.110282][ T529] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1051.439357][ T560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4968'. [ 1051.605199][ T551] tipc: Started in network mode [ 1051.605238][ T551] tipc: Node identity 4acdeca2635c, cluster identity 4711 [ 1051.605428][ T551] tipc: Enabled bearer , priority 0 [ 1052.050319][ T536] tipc: Disabling bearer [ 1052.363103][ T571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1052.520787][ T571] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1052.521371][ T571] netlink: 'syz.3.4970': attribute type 2 has an invalid length. [ 1052.521390][ T571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1054.545057][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4983'. [ 1055.685802][ T647] tipc: Enabled bearer , priority 0 [ 1055.732867][ T647] tipc: Resetting bearer [ 1056.270091][ T662] tunl0: left promiscuous mode [ 1056.414053][ T668] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4991'. [ 1056.567913][ T662] gre0: left promiscuous mode [ 1056.656211][ T662] gretap0: left promiscuous mode [ 1056.702877][ T662] ip_vti0: left promiscuous mode [ 1056.758513][ T662] ip6_vti0: left promiscuous mode [ 1056.823088][ T662] sit0: left promiscuous mode [ 1056.901032][ T662] ip6tnl0: left promiscuous mode [ 1056.935718][ T662] ip6gre0: left promiscuous mode [ 1057.079339][ T662] syz_tun: left promiscuous mode [ 1057.131416][ T662] ip6gretap0: left promiscuous mode [ 1057.190979][ T662] bridge0: left promiscuous mode [ 1057.206557][ T662] vcan0: left promiscuous mode [ 1057.220095][ T662] dummy0: left promiscuous mode [ 1057.254058][ T662] nlmon0: left promiscuous mode [ 1057.272146][ T662] vxcan0: left promiscuous mode [ 1057.289156][ T662] vxcan1: left promiscuous mode [ 1057.314921][ T662] veth0: left promiscuous mode [ 1057.343380][ T662] veth1: left promiscuous mode [ 1057.380558][ T662] wg0: left promiscuous mode [ 1057.404677][ T662] wg2: left promiscuous mode [ 1057.438568][ T662] veth0_to_bridge: left promiscuous mode [ 1057.465792][ T662] veth1_to_bridge: left promiscuous mode [ 1057.499561][ T662] bridge_slave_1: left promiscuous mode [ 1057.518025][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1057.518078][ T687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1057.521082][ T662] veth0_to_bond: left promiscuous mode [ 1057.563304][ T662] bond_slave_0: left allmulticast mode [ 1057.565175][ T662] veth0_to_team: left promiscuous mode [ 1057.592382][ T662] team_slave_0: left promiscuous mode [ 1057.594506][ T662] veth1_to_team: left promiscuous mode [ 1057.620831][ T662] team_slave_1: left promiscuous mode [ 1057.622467][ T662] veth0_to_batadv: left promiscuous mode [ 1057.651982][ T662] batadv_slave_0: left promiscuous mode [ 1057.679061][ T662] veth1_to_batadv: left promiscuous mode [ 1057.701204][ T662] batadv_slave_1: left promiscuous mode [ 1057.714897][ T662] xfrm0: left promiscuous mode [ 1057.723883][ T662] veth0_to_hsr: left promiscuous mode [ 1057.743176][ T662] hsr_slave_0: left promiscuous mode [ 1057.760040][ T662] veth1_to_hsr: left promiscuous mode [ 1057.766217][ T662] hsr_slave_1: left promiscuous mode [ 1057.785511][ T662] geneve0: left promiscuous mode [ 1057.803195][ T662] geneve1: left promiscuous mode [ 1057.895528][ T662] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1057.963069][ T662] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 1057.993347][ T662] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 1058.115578][ T662] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 1058.133369][ T662] ip6gretap1: left promiscuous mode [ 1058.133397][ T662] ip6gretap1: left allmulticast mode [ 1058.164541][ T662] bond1: left promiscuous mode [ 1058.174122][ T662] sit1: left promiscuous mode [ 1058.452192][ T662] bond3: left promiscuous mode [ 1058.452223][ T662] bond3: left allmulticast mode [ 1058.453225][ T662] ip6tnl1: left promiscuous mode [ 1058.512096][ T662] syzkaller0: left promiscuous mode [ 1058.512130][ T662] syzkaller0: left allmulticast mode [ 1058.959127][T30352] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.959173][T30352] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.959201][T30352] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1058.959434][T30352] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.959464][T30352] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.959489][T30352] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1058.959525][T30352] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.959553][T30352] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.959581][T30352] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1058.982884][T30370] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.982987][T30370] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.983059][T30370] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1059.812285][ T706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1060.109479][ T718] netlink: 'syz.2.5002': attribute type 1 has an invalid length. [ 1060.206097][ T722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1060.505319][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1060.731298][ T718] bond6: (slave bridge6): making interface the new active one [ 1060.731864][ T718] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1063.374720][ T789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5017'. [ 1063.428482][ T781] bridge4: entered promiscuous mode [ 1063.428507][ T781] bridge4: entered allmulticast mode [ 1063.484863][ T781] team0: Port device bridge4 added [ 1064.882715][ T5292] veth0_macvtap: left promiscuous mode [ 1064.928978][ T828] netlink: 'syz.1.5026': attribute type 1 has an invalid length. [ 1065.062499][ T828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.149659][ T833] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1067.597555][ T875] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1068.402263][ T889] x_tables: duplicate underflow at hook 1 [ 1068.406515][ T891] x_tables: duplicate underflow at hook 1 [ 1068.515387][ T907] netlink: 'syz.1.5038': attribute type 1 has an invalid length. [ 1068.515414][ T907] netlink: 'syz.1.5038': attribute type 2 has an invalid length. [ 1068.656611][ T906] netlink: 'syz.5.5037': attribute type 1 has an invalid length. [ 1068.658747][ T906] netlink: 'syz.5.5037': attribute type 4 has an invalid length. [ 1068.658769][ T906] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1068.761627][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 1068.761658][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 1069.316720][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1069.316749][ T913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1070.862100][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5050'. [ 1072.582562][ T992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5055'. [ 1072.632926][ T993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1073.569158][ T1011] ip_tables: iptables: counters copy to user failed while replacing table [ 1074.024669][ T1026] x_tables: duplicate underflow at hook 1 [ 1074.120601][ T1035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 1074.414130][ T1036] netlink: 82 bytes leftover after parsing attributes in process `syz.2.5070'. [ 1074.453210][ T1036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.686172][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1075.006896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.353125][ T1071] netlink: 'syz.0.5074': attribute type 1 has an invalid length. [ 1075.353152][ T1071] netlink: 'syz.0.5074': attribute type 2 has an invalid length. [ 1077.307971][ T1105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5078'. [ 1078.178183][ T1111] netlink: 'syz.0.5080': attribute type 1 has an invalid length. [ 1078.183575][ T1120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1078.245585][ T1111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5080'. [ 1078.314812][ T1127] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1079.472720][ T1148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5088'. [ 1079.583905][ T1145] ip6gretap2: entered allmulticast mode [ 1079.585436][ T1145] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1079.645326][ T1145] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1079.645345][ T1145] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.645383][ T1145] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1080.940647][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1080.940972][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1080.941262][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1080.941537][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1080.941832][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1080.942106][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1081.055505][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1081.055831][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1081.056147][ T1174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1081.099147][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099195][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099229][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099262][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099296][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099329][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099362][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099395][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099428][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.099460][ T1170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1081.659674][ T1186] bond12: Unable to set down delay as MII monitoring is disabled [ 1081.746284][ T1186] bond12 (unregistering): Released all slaves [ 1083.214218][ T1200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.741994][ T1200] bond_slave_0: left promiscuous mode [ 1083.943780][ T1200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1083.988289][ T1200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.008465][ T1200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.009815][ T1200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.083486][ T1200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1084.314119][ T1200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1084.334302][ T1200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.344881][ T1200] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1084.938308][T20310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.938367][T20310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.938407][T20310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.938447][T20310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.010534][ T1261] __nla_validate_parse: 24 callbacks suppressed [ 1086.010558][ T1261] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5105'. [ 1086.241265][ T1268] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1086.656204][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1086.656233][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1086.656260][ T1276] netlink: 'syz.0.5108': attribute type 12 has an invalid length. [ 1086.656276][ T1276] netlink: 'syz.0.5108': attribute type 11 has an invalid length. [ 1086.803207][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1087.025580][ T1283] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1087.155381][ T1285] pim6reg: entered allmulticast mode [ 1087.471327][ T1294] x_tables: duplicate underflow at hook 4 [ 1087.575369][ T1285] pim6reg: left allmulticast mode [ 1087.763297][ T1312] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1087.763335][ T1312] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1091.153351][ T1297] pim6reg: entered allmulticast mode [ 1091.163562][ T1313] netlink: 'syz.1.5112': attribute type 4 has an invalid length. [ 1091.179891][ T1329] syzkaller0: entered promiscuous mode [ 1091.179921][ T1329] syzkaller0: entered allmulticast mode [ 1091.180320][ T1329] tipc: Resetting bearer [ 1091.781725][ T1361] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1091.869000][ T1357] syzkaller0: entered promiscuous mode [ 1091.869028][ T1357] syzkaller0: entered allmulticast mode [ 1091.874959][T20302] hfsc: classify hop budget exhausted, dropping packet [ 1091.932850][ T1357] hfsc: classify hop budget exhausted, dropping packet [ 1092.672806][ T1378] netlink: 'syz.0.5124': attribute type 1 has an invalid length. [ 1092.672835][ T1378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5124'. [ 1092.998894][ T1378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5124'. [ 1094.205354][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5129'. [ 1094.288673][ T1417] ip_tables: iptables: counters copy to user failed while replacing table [ 1094.436541][ T1419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1094.503682][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1094.503710][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1094.547728][ T1419] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1094.866567][ T1432] netlink: 'syz.3.5133': attribute type 1 has an invalid length. [ 1094.994054][ T1419] bond8 (unregistering): Released all slaves [ 1095.769628][ T1432] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1096.394386][ T1454] netlink: 'syz.2.5137': attribute type 4 has an invalid length. [ 1096.892578][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5138'. [ 1096.892624][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5138'. [ 1096.972819][ T1435] netlink: 'syz.0.5134': attribute type 10 has an invalid length. [ 1098.009282][T30375] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.009342][T30375] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.009386][T30375] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.009429][T30375] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.073530][ T1435] team0: Device veth0_vlan failed to register rx_handler [ 1100.263823][ T1481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1100.414178][ T1512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1100.415379][ T1512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1100.749245][ T1500] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1101.487668][T26159] Bluetooth: hci0: command 0x040f tx timeout [ 1102.064074][ T1526] syzkaller0: entered promiscuous mode [ 1102.064114][ T1526] syzkaller0: entered allmulticast mode [ 1102.242788][ T1540] netlink: zone id is out of range [ 1102.318569][ T1540] netlink: zone id is out of range [ 1102.318613][ T1540] netlink: zone id is out of range [ 1102.318624][ T1540] netlink: zone id is out of range [ 1102.318654][ T1540] netlink: zone id is out of range [ 1102.318682][ T1540] netlink: zone id is out of range [ 1102.318692][ T1540] netlink: zone id is out of range [ 1102.318703][ T1540] netlink: zone id is out of range [ 1102.318713][ T1540] netlink: zone id is out of range [ 1102.318723][ T1540] netlink: zone id is out of range [ 1102.606567][ T1547] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.5153'. [ 1105.475981][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5156'. [ 1110.327831][ T1538] bridge_slave_0: default FDB implementation only supports local addresses [ 1110.341373][ T1547] 0ªX¹¦Dö»: renamed from gretap0 [ 1110.381333][ T1547] 0ªX¹¦Dö»: entered allmulticast mode [ 1111.093882][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1111.142465][ T1588] syzkaller1: entered promiscuous mode [ 1111.142494][ T1588] syzkaller1: entered allmulticast mode [ 1111.237959][ T1595] tipc: Resetting bearer [ 1111.389693][ T1600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1111.509048][ T1602] can: request_module (can-proto-0) failed. [ 1111.688681][ T1605] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1111.858408][ T1605] bond9 (unregistering): Released all slaves [ 1111.994322][ T1617] net_ratelimit: 3 callbacks suppressed [ 1111.994350][ T1617] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.185810][ T1611] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1112.380016][ T1611] bond9 (unregistering): Released all slaves [ 1112.663288][ T1591] tipc: Resetting bearer [ 1113.151084][T30375] tipc: Resetting bearer [ 1113.872630][ T1658] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1114.025532][ T1655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1114.226198][ T1662] syzkaller0: left promiscuous mode [ 1114.226225][ T1662] syzkaller0: left allmulticast mode [ 1114.582045][ T1665] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1116.112032][ T1710] ip_tables: iptables: counters copy to user failed while replacing table [ 1116.955188][ T1687] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1116.984321][ T1694] bridge0: port 1(syz_tun) entered blocking state [ 1116.984674][ T1694] bridge0: port 1(syz_tun) entered disabled state [ 1117.015529][ T1694] syz_tun: entered promiscuous mode [ 1117.024220][ T1694] bridge0: port 1(syz_tun) entered blocking state [ 1117.024347][ T1694] bridge0: port 1(syz_tun) entered forwarding state [ 1117.048846][ T1708] lo speed is unknown, defaulting to 1000 [ 1117.048949][ T1708] lo speed is unknown, defaulting to 1000 [ 1117.049771][ T1708] lo speed is unknown, defaulting to 1000 [ 1117.055132][ T1708] smbdirect: ib_dev[!!0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1117.055176][ T1708] smbdirect: ib_dev[!!0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1117.055223][ T1708] smbdirect: ib_dev[!!0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1118.762951][ T1719] tipc: Resetting bearer [ 1118.902089][T30369] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1118.902132][T30369] netdevsim netdevsim5 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1118.902726][T30369] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1118.902760][T30369] netdevsim netdevsim5 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1118.902805][T30369] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1118.902835][T30369] netdevsim netdevsim5 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1118.968730][ T1708] lo speed is unknown, defaulting to 1000 [ 1118.990999][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.009141][ T1728] bridge0: port 1(ip6gretap0) entered blocking state [ 1119.009277][ T1728] bridge0: port 1(ip6gretap0) entered disabled state [ 1119.009478][ T1728] ip6gretap0: entered allmulticast mode [ 1119.023880][ T1728] ip6gretap0: entered promiscuous mode [ 1119.056113][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.098097][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.115495][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.145570][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.163287][ T1708] lo speed is unknown, defaulting to 1000 [ 1119.541344][ T1751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1119.573038][ T1751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1119.573167][ T1748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5181'. [ 1120.288994][ T1775] xt_ipcomp: unknown flags 1D [ 1120.567793][ T1781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1120.704686][ T1769] bridge0: port 1(ip6gretap0) entered blocking state [ 1120.704891][ T1769] bridge0: port 1(ip6gretap0) entered forwarding state [ 1120.812446][ T1769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.951037][ T1787] sctp: [Deprecated]: syz.1.5188 (pid 1787) Use of int in maxseg socket option. [ 1120.951037][ T1787] Use struct sctp_assoc_value instead [ 1121.434595][ T1769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1121.434625][ T1769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1121.529682][ T1769] veth1_vlan: left promiscuous mode [ 1121.545086][ T1769] veth0_vlan: left promiscuous mode [ 1121.575637][ T1769] veth0_vlan: entered promiscuous mode [ 1121.621371][ T1769] veth1_vlan: entered promiscuous mode [ 1121.735152][ T1769] veth1_macvtap: left promiscuous mode [ 1121.750849][ T1769] veth0_macvtap: left promiscuous mode [ 1121.765653][ T1769] veth0_macvtap: entered promiscuous mode [ 1121.788096][ T1769] veth1_macvtap: entered promiscuous mode [ 1122.035963][ T1769] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1122.083166][ T1769] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1122.108477][ T1769] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1122.131393][ T1769] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1122.150510][ T1769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1122.159388][ T1769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1122.242909][ T1769] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1122.265707][ T1769] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1122.469354][ T1769] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1123.611063][ T1822] netlink: 'syz.2.5191': attribute type 13 has an invalid length. [ 1125.821717][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1126.190036][ T1874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.326513][ T1887] sit0: entered promiscuous mode [ 1127.341026][ T1887] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1129.235666][ T1922] xt_REDIRECT: bad rangesize 26624. [ 1129.754513][ T1932] bond12: entered allmulticast mode [ 1129.992960][ T1953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5212'. [ 1130.014455][ T1931] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1130.033177][ T1931] bond12: (slave wireguard0): Error -95 calling set_mac_address [ 1130.430334][ T1934] tipc: Enabling of bearer rejected, failed to enable media [ 1131.295217][ T1975] ip6t_hbh: Not strict - not implemented [ 1131.322571][ T1974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1131.349170][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1131.486155][ T1977] batadv0: entered promiscuous mode [ 1131.486416][ T1977] macvtap0: entered promiscuous mode [ 1131.514126][ T1977] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1131.540765][ T1990] netlink: 'syz.1.5221': attribute type 1 has an invalid length. [ 1131.655049][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1131.684342][ T1992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5223'. [ 1131.746274][ T1977] batadv0: left promiscuous mode [ 1133.228962][ T2015] netlink: 'syz.0.5226': attribute type 2 has an invalid length. [ 1133.434226][ T2018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5227'. [ 1133.784474][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5228'. [ 1134.305422][ T2033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1134.479893][ T2035] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1134.840099][ T2026] bond7 (unregistering): (slave geneve2): Releasing backup interface [ 1134.887137][ T2057] IPVS: set_ctl: invalid protocol: 59 172.20.20.23:20005 [ 1135.065796][ T2026] bond7 (unregistering): Released all slaves [ 1136.362280][ T2021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.251148][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5238'. [ 1137.282510][ T2094] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1137.626198][ T2108] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1138.241110][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.294931][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.333146][ T2124] FAULT_INJECTION: forcing a failure. [ 1138.333146][ T2124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.333188][ T2124] CPU: 1 UID: 0 PID: 2124 Comm: syz.1.5243 Not tainted syzkaller #0 PREEMPT(full) [ 1138.333215][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1138.333231][ T2124] Call Trace: [ 1138.333241][ T2124] [ 1138.333252][ T2124] dump_stack_lvl+0xe8/0x150 [ 1138.333299][ T2124] should_fail_ex+0x410/0x560 [ 1138.333344][ T2124] _copy_from_user+0x2d/0xb0 [ 1138.333518][ T2124] ___sys_sendmsg+0x1c6/0x360 [ 1138.333583][ T2124] ? __lock_acquire+0x747/0x2de0 [ 1138.333618][ T2124] ? __pfx____sys_sendmsg+0x10/0x10 [ 1138.333700][ T2124] ? __fget_files+0x3a2/0x420 [ 1138.333727][ T2124] ? __fget_files+0x2a/0x420 [ 1138.333764][ T2124] __x64_sys_sendmsg+0x1b1/0x290 [ 1138.333792][ T2124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1138.333862][ T2124] do_syscall_64+0x166/0x520 [ 1138.333889][ T2124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.333916][ T2124] ? clear_bhb_loop+0x70/0xc0 [ 1138.333946][ T2124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.333969][ T2124] RIP: 0033:0x7fa9bcf9f559 [ 1138.333993][ T2124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.334013][ T2124] RSP: 002b:00007fa9bb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.334039][ T2124] RAX: ffffffffffffffda RBX: 00007fa9bd225fa0 RCX: 00007fa9bcf9f559 [ 1138.334057][ T2124] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1138.334073][ T2124] RBP: 00007fa9bb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.334088][ T2124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.334103][ T2124] R13: 00007fa9bd226038 R14: 00007fa9bd225fa0 R15: 00007ffd96a2dc18 [ 1138.334142][ T2124] [ 1138.638288][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.682379][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.763204][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.814859][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.838620][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1138.870288][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1139.081318][ T2120] kthread_run failed with err -4 [ 1139.563221][ T2144] netlink: 'syz.5.5247': attribute type 1 has an invalid length. [ 1139.563247][ T2144] netlink: 'syz.5.5247': attribute type 2 has an invalid length. [ 1139.632753][ T2140] xt_connbytes: Forcing CT accounting to be enabled [ 1140.162517][ T2152] pim6reg: entered allmulticast mode [ 1140.550921][ T2161] syzkaller1: entered promiscuous mode [ 1140.550949][ T2161] syzkaller1: entered allmulticast mode [ 1143.312701][ T2147] pim6reg: left allmulticast mode [ 1144.275952][ T2205] sctp: [Deprecated]: syz.2.5258 (pid 2205) Use of int in maxseg socket option. [ 1144.275952][ T2205] Use struct sctp_assoc_value instead [ 1144.848554][ T2214] syzkaller0: left promiscuous mode [ 1144.848583][ T2214] syzkaller0: left allmulticast mode [ 1144.848960][ T2214] tipc: Resetting bearer [ 1145.174961][ T2222] netlink: 'syz.0.5261': attribute type 21 has an invalid length. [ 1145.174990][ T2222] __nla_validate_parse: 4 callbacks suppressed [ 1145.175005][ T2222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1145.175094][ T2222] netlink: 'syz.0.5261': attribute type 5 has an invalid length. [ 1145.175111][ T2222] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1145.178336][ T2222] xt_hashlimit: invalid rate [ 1145.298997][ T2231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1145.421168][ T2231] netlink: 'syz.2.5264': attribute type 1 has an invalid length. [ 1145.421197][ T2231] netlink: 'syz.2.5264': attribute type 2 has an invalid length. [ 1146.727451][ T2257] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1146.901003][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1147.254477][ T2260] bond13: entered promiscuous mode [ 1147.254936][ T2260] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1147.280117][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1147.501375][ T2282] netlink: 'syz.5.5271': attribute type 8 has an invalid length. [ 1147.822088][T30362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.822159][T30362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.822211][T30362] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.822250][T30362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.627777][ T2301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5274'. [ 1148.902586][ T2307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5275'. [ 1151.655786][ T2373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5285'. [ 1151.655826][ T2373] nbd: socks must be embedded in a SOCK_ITEM attr [ 1152.333441][ T2387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1152.508341][ T2393] netlink: 'syz.0.5290': attribute type 1 has an invalid length. [ 1152.660659][ T2406] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1152.684854][ T2397] syzkaller0: entered promiscuous mode [ 1152.684881][ T2397] syzkaller0: entered allmulticast mode [ 1152.784591][ T2405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1153.273675][ T2393] bond14: (slave veth11): Enslaving as an active interface with a down link [ 1153.304774][ T2403] bond11: (slave veth0_to_bond): Releasing active interface [ 1153.355242][ T2403] bond14: (slave veth0_to_bond): making interface the new active one [ 1153.356355][ T2403] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1153.404995][ T2405] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1153.751957][ T2411] netlink: 'syz.5.5294': attribute type 1 has an invalid length. [ 1153.752007][ T2411] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5294'. [ 1154.164781][ T2433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1154.164826][ T2433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1155.439532][ T2462] xt_hashlimit: size too large, truncated to 1048576 [ 1155.550921][ T2471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1156.053412][ T2491] syzkaller0: entered promiscuous mode [ 1156.053616][ T2491] syzkaller0: entered allmulticast mode [ 1158.343268][ T2483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1159.698464][ T2556] netlink: 23 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1159.698506][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1159.738801][ T2553] tipc: Resetting bearer [ 1160.366399][ T2575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5314'. [ 1160.558639][ T2587] sctp: [Deprecated]: syz.0.5316 (pid 2587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1160.558639][ T2587] Use struct sctp_sack_info instead [ 1160.569255][ T2587] sctp: [Deprecated]: syz.0.5316 (pid 2587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1160.569255][ T2587] Use struct sctp_sack_info instead [ 1160.658667][ T2587] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1160.719877][ T2587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5316'. [ 1162.069741][ T2620] netlink: 'syz.3.5321': attribute type 16 has an invalid length. [ 1162.069769][ T2620] netlink: 'syz.3.5321': attribute type 17 has an invalid length. [ 1162.159996][ T2627] ebt_among: dst integrity fail: 200 [ 1162.253243][ T2620] 0ªî{X¹¦: left allmulticast mode [ 1162.449059][ T2620] ip6gretap1: left allmulticast mode [ 1162.498184][ T2620] macsec1: left promiscuous mode [ 1162.553742][ T2620] bond1: left promiscuous mode [ 1162.685018][ T2620] ipvlan2: left promiscuous mode [ 1162.728806][ T2620] ip6gre1: left promiscuous mode [ 1162.728834][ T2620] ip6gre1: left allmulticast mode [ 1162.762247][ T775] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1162.786170][ T2620] bond0: left promiscuous mode [ 1162.786203][ T2620] bond0: left allmulticast mode [ 1162.824564][ T2620] ip6erspan1: left allmulticast mode [ 1162.854951][ T2620] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1162.881042][ T2620] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1162.884039][ T2620] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1162.903966][ T2620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1162.905180][ T2620] bond6: left allmulticast mode [ 1162.928927][ T2620] bridge4: left promiscuous mode [ 1162.928958][ T2620] bridge4: left allmulticast mode [ 1162.930061][ T2620] ip6gretap2: left allmulticast mode [ 1162.959958][ T2562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.230913][ T775] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1163.652411][ T694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.668970][T22563] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1163.741908][ T2651] netlink: 'syz.3.5324': attribute type 1 has an invalid length. [ 1163.741939][ T2651] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1163.887898][T30358] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1164.035971][ T2651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1164.160088][ T2665] xt_IDLETIMER: timeout value is zero [ 1164.806249][ T2673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5326'. [ 1165.426569][T30375] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1165.448116][T30375] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1165.908780][ T2695] xt_MASQUERADE: bad MAP_IPS. [ 1166.141818][ T2481] udevd[2481]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1166.198917][ T2706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1166.198946][ T2706] netlink: 'syz.2.5333': attribute type 2 has an invalid length. [ 1166.198962][ T2706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1166.449415][T22563] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1166.719311][ T2705] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5331'. [ 1166.773491][ T2722] syzkaller0: entered promiscuous mode [ 1166.773518][ T2722] syzkaller0: entered allmulticast mode [ 1167.838671][ T2732] veth12: entered allmulticast mode [ 1168.029488][ T2752] ip6erspan0: entered allmulticast mode [ 1168.947419][ T2778] Bluetooth: MGMT ver 1.23 [ 1169.337446][T20310] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1169.486032][ T2799] ip_tables: iptables: counters copy to user failed while replacing table [ 1169.806838][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1170.473875][ T2801] ip6erspan0: entered allmulticast mode [ 1171.008300][ T8666] Bluetooth: hci4: command 0x0405 tx timeout [ 1171.139603][ T2828] ip_tables: iptables: counters copy to user failed while replacing table [ 1171.351017][ T2830] syzkaller1: entered promiscuous mode [ 1171.351045][ T2830] syzkaller1: entered allmulticast mode [ 1173.566490][ T2895] tipc: Resetting bearer [ 1173.726791][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1174.315751][ T2892] tipc: Resetting bearer [ 1174.471656][T30370] tipc: Resetting bearer [ 1175.139798][ T2930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1175.444387][ T2922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.022217][ T2922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.089142][ T2922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.111004][ T2922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.181577][ T2922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.242962][ T2922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1176.431660][ T2922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1176.504546][ T2922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1176.531546][ T2922] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1176.531616][T22563] lo speed is unknown, defaulting to 1000 [ 1176.531657][T22563] !!0: Port: 1 Link ACTIVE [ 1176.580127][T30368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.789922][ T2940] netlink: 'syz.2.5371': attribute type 14 has an invalid length. [ 1176.840142][T30370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.842115][T30371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.009617][T22563] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.087873][T30371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.231979][ T2955] tipc: Resetting bearer [ 1177.438707][ T2955] x_tables: duplicate underflow at hook 2 [ 1177.474381][ T2964] ip6gre1: entered allmulticast mode [ 1177.553044][ T2968] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1177.627591][T22563] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.884736][ T2977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1178.069469][T20310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1178.686929][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1178.718558][ T2985] netlink: 964 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1179.486151][T30369] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1179.486424][T30369] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1179.771429][ T3002] tipc: Enabled bearer , priority 0 [ 1179.827253][T22563] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1180.151771][ T3020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1180.305577][ T3001] tipc: Disabling bearer [ 1180.449336][ T3020] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1181.178860][ T3036] nbd1: detected capacity change from 0 to 63 [ 1181.345080][ T3046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5389'. [ 1181.938429][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1182.032942][ T3053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1182.033099][ T3054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1182.527362][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1182.858831][T26159] block nbd1: Receive control failed (result -104) [ 1183.487324][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1184.830246][ T3092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1184.845374][ T3090] Bluetooth: hci0: unsupported parameter 5135 [ 1184.845448][ T3090] Bluetooth: hci0: unsupported parameter 8192 [ 1184.845491][ T3090] Bluetooth: hci0: unsupported parameter 5135 [ 1184.845524][ T3090] Bluetooth: hci0: unsupported parameter 8192 [ 1184.945385][ T3094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5404'. [ 1184.945419][ T3094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5404'. [ 1185.011143][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5402'. [ 1185.354417][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1185.378809][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1185.379171][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1185.379485][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1185.440360][ T3104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1186.670169][ T3121] syzkaller0: entered promiscuous mode [ 1186.670196][ T3121] syzkaller0: entered allmulticast mode [ 1186.930443][ T8666] Bluetooth: hci4: command 0x0405 tx timeout [ 1188.170461][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1188.215292][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1188.234495][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1188.249213][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1188.324170][ T3162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1189.842617][ T3188] tipc: Resetting bearer [ 1190.122317][ T3188] veth0_vlan: left promiscuous mode [ 1190.159320][ T3188] veth0_vlan: entered promiscuous mode [ 1190.685605][ T3188] bridge0: port 1(syz_tun) entered blocking state [ 1190.685799][ T3188] bridge0: port 1(syz_tun) entered forwarding state [ 1190.906532][ T3188] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1190.942459][ T3188] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1190.972780][ T3188] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1190.976443][ T3188] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1191.005081][ T3188] bridge0: port 2(vlan2) entered blocking state [ 1191.005229][ T3188] bridge0: port 2(vlan2) entered forwarding state [ 1191.148591][ T3188] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1191.184165][ T3188] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1191.725731][ T3224] tipc: Resetting bearer [ 1192.127223][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1192.276548][ T3224] bond6: left promiscuous mode [ 1192.285918][ T3224] bond7: left promiscuous mode [ 1192.333389][ T3224] bond8: left promiscuous mode [ 1192.516333][ T3224] bond13: left promiscuous mode [ 1192.703566][ T3194] syzkaller1: entered promiscuous mode [ 1192.703598][ T3194] syzkaller1: entered allmulticast mode [ 1192.896141][ T3256] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20000 [ 1192.972253][ T3258] __nla_validate_parse: 20 callbacks suppressed [ 1192.972279][ T3258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1193.129450][T30370] bond14: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 1193.132298][ T6067] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.469248][T20302] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1193.507994][ T3264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5429'. [ 1193.723734][ T3268] netlink: 'syz.0.5431': attribute type 1 has an invalid length. [ 1193.723765][ T3268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1193.752002][ T3268] netlink: 'syz.0.5431': attribute type 8 has an invalid length. [ 1194.605721][ T3298] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.890682][ T3302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5435'. [ 1195.415445][ T3315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1195.645974][ T3317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5438'. [ 1195.966950][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1196.193098][ T3330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5440'. [ 1196.926820][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1197.472517][ T3350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5444'. [ 1197.647022][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1198.088665][ T3366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1199.380648][ T3393] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 1199.925056][ T3405] netlink: 'syz.5.5452': attribute type 1 has an invalid length. [ 1200.391623][T22563] lo speed is unknown, defaulting to 1000 [ 1200.391676][T22563] !!0: Port: 1 Link DOWN [ 1200.413423][T30375] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.413462][T30375] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.413509][T30375] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.413540][T30375] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.413582][T30375] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.413619][T30375] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.413661][T30375] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.413690][T30375] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.457137][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1200.511828][ T3393] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1201.785910][ T3422] netlink: 'syz.3.5453': attribute type 322 has an invalid length. [ 1201.821327][ T3428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5454'. [ 1202.772246][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5459'. [ 1203.266069][ T3459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5461'. [ 1203.888208][ T3473] bridge_slave_0: entered promiscuous mode [ 1204.051032][ T3476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1204.082972][ T3474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1204.422958][ T3476] syzkaller1: entered promiscuous mode [ 1204.422985][ T3476] syzkaller1: entered allmulticast mode [ 1204.705009][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1204.926794][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1205.566873][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1205.780438][ T3496] veth1_to_team: entered promiscuous mode [ 1205.797050][ T3496] veth1_to_team: left promiscuous mode [ 1206.508975][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1206.509003][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1206.509032][ T3508] netlink: 'syz.3.5473': attribute type 19 has an invalid length. [ 1206.509048][ T3508] netlink: 'syz.3.5473': attribute type 20 has an invalid length. [ 1206.651436][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1206.651474][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1206.651502][ T3510] netlink: 'syz.3.5473': attribute type 19 has an invalid length. [ 1206.651519][ T3510] netlink: 'syz.3.5473': attribute type 20 has an invalid length. [ 1207.256378][ T3516] netlink: 'syz.0.5475': attribute type 1 has an invalid length. [ 1207.401362][ T3516] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1208.442874][ T3532] veth3: entered allmulticast mode [ 1208.950522][ T3543] IPv6: NLM_F_CREATE should be specified when creating new route [ 1209.147034][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.203492][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.204062][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.204587][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.205106][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.205670][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.206176][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.206664][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.372118][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.372301][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1209.671480][ T3561] netlink: 'syz.3.5484': attribute type 4 has an invalid length. [ 1210.087414][ T3567] syzkaller0: entered promiscuous mode [ 1210.087630][ T3567] syzkaller0: entered allmulticast mode [ 1211.978182][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 30 seconds [ 1211.979154][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 30 seconds [ 1211.979199][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 30 seconds [ 1211.979235][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 30 seconds [ 1212.705268][ T3577] syzkaller0: left promiscuous mode [ 1212.705295][ T3577] syzkaller0: left allmulticast mode [ 1212.799407][T30362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.799620][T30362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.800080][T30362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.800130][T30362] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.381172][ T3666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.723022][ T3681] batman_adv: batadv0: Adding interface: veth0 [ 1215.723046][ T3681] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.723316][ T3681] batman_adv: batadv0: Interface activated: veth0 [ 1215.728124][ T3666] batman_adv: batadv0: Interface deactivated: veth0 [ 1215.728151][ T3666] batman_adv: batadv0: Removing interface: veth0 [ 1216.377446][ T3634] __nla_validate_parse: 24 callbacks suppressed [ 1216.377474][ T3634] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1217.062922][ C1] TC_ACT_REPEAT abuse ? [ 1217.665496][ T3708] netlink: 'syz.0.5507': attribute type 1 has an invalid length. [ 1218.581920][ T3733] netlink: 'syz.2.5512': attribute type 1 has an invalid length. [ 1218.960527][ T3715] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5507'. [ 1219.272451][ T3733] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1219.411258][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'. [ 1219.675078][ T3734] bond9: (slave veth5): Enslaving as an active interface with a down link [ 1219.839174][ T3735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.896184][ T3735] bond9: (slave batadv0): making interface the new active one [ 1219.921604][ T3735] batadv0: entered promiscuous mode [ 1219.922136][ T3735] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 1220.142925][ T3741] bond9 (unregistering): (slave veth5): Releasing active interface [ 1220.221306][ T3741] bond9 (unregistering): (slave batadv0): Releasing active interface [ 1220.221343][ T3741] batadv0: left promiscuous mode [ 1220.273624][ T3741] bond9 (unregistering): Released all slaves [ 1220.926883][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1221.567060][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1221.762595][ T3783] netlink: 'syz.3.5522': attribute type 15 has an invalid length. [ 1221.849499][ T3785] netlink: 'syz.3.5522': attribute type 15 has an invalid length. [ 1222.571056][ T3799] x_tables: duplicate underflow at hook 2 [ 1223.236101][ T3809] Bluetooth: hci0: unsupported parameter 5135 [ 1223.236128][ T3809] Bluetooth: hci0: unsupported parameter 8192 [ 1223.236145][ T3809] Bluetooth: hci0: unsupported parameter 5135 [ 1223.236159][ T3809] Bluetooth: hci0: unsupported parameter 8192 [ 1223.777554][ T3826] ip_tables: iptables: counters copy to user failed while replacing table [ 1224.814497][ T3845] netlink: 'syz.3.5534': attribute type 31 has an invalid length. [ 1225.870551][ T3857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1226.087639][ T3862] syzkaller0: entered promiscuous mode [ 1226.087848][ T3862] syzkaller0: entered allmulticast mode [ 1226.244003][ T8666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.268437][ T8666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.273661][ T8666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.275833][ T8666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.293219][ T8666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1227.207090][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1228.447583][ T8666] Bluetooth: hci1: command tx timeout [ 1229.827648][ T3935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5547'. [ 1230.526967][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1230.529480][ T8666] Bluetooth: hci1: command tx timeout [ 1230.786055][ T3950] siw: device registration error -23 [ 1231.023760][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5550'. [ 1231.067097][ T3953] bridge0: port 1(syz_tun) entered disabled state [ 1231.385485][ T3958] x_tables: duplicate underflow at hook 1 [ 1231.439279][ T3958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1231.522584][ T3953] syz_tun (unregistering): left allmulticast mode [ 1231.522618][ T3953] syz_tun (unregistering): left promiscuous mode [ 1231.522720][ T3953] bridge0: port 1(syz_tun) entered disabled state [ 1231.693002][ T3962] @0Ù: renamed from bond_slave_1 (while UP) [ 1232.010201][ T3958] ip6erspan1: entered allmulticast mode [ 1232.308018][ T3865] wg2 speed is unknown, defaulting to 1000 [ 1232.608142][T26159] Bluetooth: hci1: command tx timeout [ 1232.693937][ T3865] lo speed is unknown, defaulting to 1000 [ 1232.727449][ T3963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1232.727479][ T3963] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1233.135094][ T3963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1233.135123][ T3963] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1233.414826][ T3963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1233.414855][ T3963] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1234.412618][ T4019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1234.613824][ T4009] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1234.687565][T26159] Bluetooth: hci1: command tx timeout [ 1235.362103][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5564'. [ 1235.437726][ T4022] netlink: 'syz.1.5562': attribute type 5 has an invalid length. [ 1235.437754][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1236.106178][ T4047] netlink: 'syz.3.5565': attribute type 4 has an invalid length. [ 1236.434337][ T4051] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 1236.434373][ T4051] netlink: 212380 bytes leftover after parsing attributes in process `syz.1.5568'. [ 1236.655131][ T4053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1237.030292][T30368] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1237.030324][T30368] ip6gre1 (unregistering): left promiscuous mode [ 1237.146457][ T4071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1237.883976][T30368] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 1238.152192][T30368] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1238.525403][T30368] bond0 (unregistering): Released all slaves [ 1238.610219][T30368] bond1 (unregistering): Released all slaves [ 1238.622672][T30362] smbdirect: ib_dev[syz1] removed [ 1238.673210][T30368] bond2 (unregistering): Released all slaves [ 1238.844563][T30368] bond3 (unregistering): Released all slaves [ 1238.913241][T30368] bond4 (unregistering): Released all slaves [ 1238.940938][T30368] bond5 (unregistering): Released all slaves [ 1238.970007][T30368] bond6 (unregistering): Released all slaves [ 1238.998502][T30368] bond7 (unregistering): Released all slaves [ 1239.016446][T30368] bond8 (unregistering): Released all slaves [ 1239.062658][T30368] bond9 (unregistering): (slave veth3): Releasing backup interface [ 1239.063300][T30368] veth3: left promiscuous mode [ 1239.063943][T30368] bond9 (unregistering): Released all slaves [ 1239.132050][T30368] bond10 (unregistering): Released all slaves [ 1239.289841][ T4065] bridge0: port 1(macsec0) entered blocking state [ 1239.289968][ T4065] bridge0: port 1(macsec0) entered disabled state [ 1239.290127][ T4065] macsec0: entered allmulticast mode [ 1239.290154][ T4065] bridge0: entered allmulticast mode [ 1239.335907][ T4065] macsec0: left allmulticast mode [ 1239.335936][ T4065] bridge0: left allmulticast mode [ 1239.830496][T30368] tipc: Disabling bearer [ 1239.830652][T30368] tipc: Disabling bearer [ 1239.861651][T30368] tipc: Left network mode [ 1239.915819][ T3963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1239.915846][ T3963] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1240.483212][ T30] audit: type=1804 audit(1793095672.004:94): pid=4088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5572" name="/newroot/494/cgroup.controllers" dev="tmpfs" ino=2545 res=1 errno=0 [ 1240.483274][ T30] audit: type=1800 audit(1793095672.004:95): pid=4088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5572" name="cgroup.controllers" dev="tmpfs" ino=2545 res=0 errno=-22 [ 1241.321350][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.321475][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.321654][ T3865] bridge_slave_0: entered allmulticast mode [ 1241.363722][ T3865] bridge_slave_0: entered promiscuous mode [ 1241.409155][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.409275][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.409456][ T3865] bridge_slave_1: entered allmulticast mode [ 1241.411363][ T3865] bridge_slave_1: entered promiscuous mode [ 1241.866033][ T3865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.926485][ T3865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.051516][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 60 seconds [ 1242.051568][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 60 seconds [ 1242.051600][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 60 seconds [ 1242.051633][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 60 seconds [ 1242.464704][ T3865] team0: Port device team_slave_0 added [ 1242.616361][ T3865] team0: Port device team_slave_1 added [ 1243.187966][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.187989][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.188020][ T3865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.232741][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.232761][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.232792][ T3865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.939559][ T3865] hsr_slave_0: entered promiscuous mode [ 1243.970883][ T3865] hsr_slave_1: entered promiscuous mode [ 1245.876435][T23688] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1247.684612][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1248.243900][ T4210] netlink: 'syz.3.5591': attribute type 2 has an invalid length. [ 1248.398335][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.398590][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.399091][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.399256][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.399651][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.399830][ T4198] netlink: 'syz.1.5590': attribute type 3 has an invalid length. [ 1248.572481][ T4211] netlink: 'syz.3.5591': attribute type 4 has an invalid length. [ 1248.572508][ T4211] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1248.852217][T30368] hsr_slave_0: left promiscuous mode [ 1248.871115][T30368] hsr_slave_1: left promiscuous mode [ 1249.727220][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1250.545736][ T4255] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1250.545768][ T4255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1250.813271][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1251.647154][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1252.470534][ T4289] netlink: 'syz.1.5600': attribute type 7 has an invalid length. [ 1252.644009][ T4284] SET target dimension over the limit! [ 1252.655753][ T4290] SET target dimension over the limit! [ 1253.479677][ T4289] netlink: 'syz.1.5600': attribute type 7 has an invalid length. [ 1253.883920][ T4309] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1253.889340][ T4309] netlink: 'syz.3.5604': attribute type 1 has an invalid length. [ 1254.057699][ T4314] netlink: 'syz.1.5605': attribute type 30 has an invalid length. [ 1254.207005][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1254.268705][ T4318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1255.079315][ T4332] sctp: [Deprecated]: syz.2.5608 (pid 4332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1255.079315][ T4332] Use struct sctp_sack_info instead [ 1257.031625][ T4997] udevd[4997]: worker [3047] /devices/virtual/block/nbd1 is taking a long time [ 1258.054074][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1261.080963][ T4309] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1261.091303][ T4314] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1261.160594][T30368] IPVS: stop unused estimator thread 0... [ 1261.869306][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1261.990748][ T4345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5612'. [ 1262.195188][ T4350] netlink: 'syz.2.5611': attribute type 1 has an invalid length. [ 1262.490262][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1262.699042][ T4350] bond9: entered promiscuous mode [ 1262.713072][ T4350] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1262.818885][ T4364] netlink: 'syz.3.5613': attribute type 1 has an invalid length. [ 1263.088398][ T4376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1263.470356][ T4360] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1263.470871][ T4360] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1263.498019][ T4360] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1263.622421][ T4360] bond9: (slave wireguard0): making interface the new active one [ 1263.622454][ T4360] wireguard0: entered promiscuous mode [ 1263.675038][ T4360] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 1263.695291][ T4364] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1263.792041][ T4388] Bluetooth: hci0: unsupported parameter 5135 [ 1263.792069][ T4388] Bluetooth: hci0: unsupported parameter 8192 [ 1263.792086][ T4388] Bluetooth: hci0: unsupported parameter 5135 [ 1263.792101][ T4388] Bluetooth: hci0: unsupported parameter 8192 [ 1263.796106][ T4366] bond4: (slave veth0_to_bond): Releasing active interface [ 1264.059250][ T3865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1264.117942][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.122923][ T3865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1264.162741][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.182615][ T3865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1264.359581][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1264.404606][ T3865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1264.563736][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.843882][ T4400] ip_tables: iptables: counters copy to user failed while replacing table [ 1265.719387][ T3865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.719837][ T4408] syzkaller0: entered promiscuous mode [ 1265.719859][ T4408] syzkaller0: entered allmulticast mode [ 1265.899159][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 1265.941612][ T3865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.016140][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.016274][T20310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.196082][T20310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.196216][T20310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.513199][ T4419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1267.295000][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1267.504722][ T4439] bridge4: entered promiscuous mode [ 1267.748992][ T4444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1267.842964][ T4449] tipc: Enabled bearer , priority 0 [ 1267.846018][ T4444] syzkaller0: entered promiscuous mode [ 1267.846044][ T4444] syzkaller0: entered allmulticast mode [ 1268.001321][ T4444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1268.412665][ T4449] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1268.433116][ T4454] tipc: Resetting bearer [ 1268.599669][ T4443] tipc: Resetting bearer [ 1268.745581][ T4443] tipc: Disabling bearer [ 1269.298951][ T4474] netlink: 'syz.2.5631': attribute type 1 has an invalid length. [ 1269.442666][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5631'. [ 1269.567725][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.898418][ T4485] bond10: (slave veth0_to_bond): making interface the new active one [ 1269.922061][ T4485] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1270.084009][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5634'. [ 1270.084053][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5634'. [ 1270.121017][ T4487] macvlan2: entered promiscuous mode [ 1270.121046][ T4487] macvlan2: entered allmulticast mode [ 1270.124994][ T4487] bond10: entered promiscuous mode [ 1270.125031][ T4487] veth0_to_bond: entered promiscuous mode [ 1270.164795][ T4487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1270.185565][ T4487] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1270.185790][ T4487] bond10: left promiscuous mode [ 1270.185810][ T4487] veth0_to_bond: left promiscuous mode [ 1270.271201][ T4492] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5634'. [ 1270.441325][ T4489] 8021q: VLANs not supported on gre0 [ 1271.594665][ T4513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5637'. [ 1271.652714][ T3865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.933884][ T4523] ip6_vti0: mtu less than device minimum [ 1272.128159][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 90 seconds [ 1272.128209][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 90 seconds [ 1272.128243][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 90 seconds [ 1272.128274][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 90 seconds [ 1272.813127][ T4536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.406920][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1274.591663][ T3865] veth0_vlan: entered promiscuous mode [ 1274.670449][ T3865] veth1_vlan: entered promiscuous mode [ 1274.671508][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1274.719937][ T4575] syzkaller1: entered promiscuous mode [ 1274.719964][ T4575] syzkaller1: entered allmulticast mode [ 1274.755300][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 1274.924203][ T30] audit: type=1804 audit(1793095706.464:96): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5652" name="/newroot/547/cgroup.controllers" dev="tmpfs" ino=2811 res=1 errno=0 [ 1274.924558][ T30] audit: type=1800 audit(1793095706.464:97): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5652" name="cgroup.controllers" dev="tmpfs" ino=2811 res=0 errno=-22 [ 1275.479568][ T4590] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1275.852840][ T3865] veth0_macvtap: entered promiscuous mode [ 1275.931845][ T3865] veth1_macvtap: entered promiscuous mode [ 1276.253865][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.401847][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.468413][ T6074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.468728][T30370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.479221][T30370] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.479271][T30370] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.198124][ T4622] netlink: 'syz.0.5659': attribute type 49 has an invalid length. [ 1278.165608][ T4622] ip6gretap0: entered promiscuous mode [ 1278.165638][ T4622] ip6gretap0: entered allmulticast mode [ 1278.950539][ T4650] sch_tbf: burst 48 is lower than device ip6gre0 mtu (1282) ! [ 1279.018446][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.018472][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.221297][ T4650] bridge4: entered promiscuous mode [ 1279.221324][ T4650] bridge4: entered allmulticast mode [ 1279.293429][ T4650] team0: Device bridge4 is of different type [ 1279.753234][ T4647] pimreg: entered allmulticast mode [ 1279.893913][T30375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.893940][T30375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.698739][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1280.836381][ T4668] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1281.442914][ T4678] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5535'. [ 1281.442941][ T4678] IPv6: NLM_F_CREATE should be specified when creating new route [ 1281.575174][ T4683] Bluetooth: hci0: unsupported parameter 5135 [ 1281.575205][ T4683] Bluetooth: hci0: unsupported parameter 8192 [ 1281.575220][ T4683] Bluetooth: hci0: unsupported parameter 5135 [ 1281.575236][ T4683] Bluetooth: hci0: unsupported parameter 8192 [ 1282.962881][ T4707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1283.925393][ T4736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1284.092783][ T4721] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1284.096424][ T4727] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1284.728358][ T4748] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5682'. [ 1285.136292][ T4756] netlink: 'syz.3.5685': attribute type 1 has an invalid length. [ 1285.136319][ T4756] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1285.240607][ T4758] syzkaller0: left promiscuous mode [ 1285.240839][ T4758] syzkaller0: left allmulticast mode [ 1288.392899][ T4818] bond7: option xmit_hash_policy: invalid value (10) [ 1288.500923][ T4818] bond7 (unregistering): Released all slaves [ 1288.890412][ T4820] bridge0: port 1(ip6gretap0) entered disabled state [ 1289.384858][ T4827] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1290.202982][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1290.503335][ T4871] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1290.605373][ T4879] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1290.642769][ T4877] syzkaller0: entered promiscuous mode [ 1290.642979][ T4877] syzkaller0: entered allmulticast mode [ 1290.660499][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5706'. [ 1291.432354][ T4895] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 1291.432386][ T4895] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5712'. [ 1291.467566][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 1292.035107][ T4911] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5714'. [ 1293.459977][ T4942] netlink: 'syz.1.5720': attribute type 21 has an invalid length. [ 1293.542202][ T4942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5720'. [ 1293.654908][ T4955] ip_tables: iptables: counters copy to user failed while replacing table [ 1294.033438][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1294.033466][ T4968] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1296.044741][ T5008] Bluetooth: hci0: unsupported parameter 5161 [ 1296.044768][ T5008] Bluetooth: hci0: unsupported parameter 8192 [ 1296.044784][ T5008] Bluetooth: hci0: unsupported parameter 5161 [ 1296.044800][ T5008] Bluetooth: hci0: unsupported parameter 8192 [ 1296.280395][ T5015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1298.012870][ T5031] syzkaller0: entered promiscuous mode [ 1298.012899][ T5031] syzkaller0: entered allmulticast mode [ 1298.245054][ T5053] x_tables: duplicate underflow at hook 4 [ 1298.986076][ T5071] __nla_validate_parse: 1 callbacks suppressed [ 1298.986102][ T5071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1299.034112][ T5072] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1299.427520][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1299.540965][ T5078] ip6gre2: entered allmulticast mode [ 1299.879877][ T5078] bond16 (unregistering): Released all slaves [ 1300.289055][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1300.349062][ T5098] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1300.735120][ T5111] netlink: 'syz.0.5750': attribute type 10 has an invalid length. [ 1300.950488][ T5114] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1301.191949][ T5127] netlink: 'syz.0.5750': attribute type 10 has an invalid length. [ 1302.210793][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 120 seconds [ 1302.210844][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 120 seconds [ 1302.210877][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 120 seconds [ 1302.210909][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 120 seconds [ 1302.611298][ T5152] sctp: [Deprecated]: syz.2.5753 (pid 5152) Use of int in max_burst socket option. [ 1302.611298][ T5152] Use struct sctp_assoc_value instead [ 1303.724149][ T5175] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 1305.128925][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1305.408234][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1305.892890][T13674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1306.044520][T13674] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1306.118756][T13674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1306.373016][ T5203] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1306.657598][ T3377] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1306.991075][ T5217] syzkaller0: entered promiscuous mode [ 1306.991105][ T5217] syzkaller0: entered allmulticast mode [ 1308.709570][ T5263] bond16 (unregistering): Released all slaves [ 1309.056505][ T5271] netlink: 'syz.5.5776': attribute type 16 has an invalid length. [ 1309.056657][ T5271] netlink: 'syz.5.5776': attribute type 17 has an invalid length. [ 1309.056672][ T5271] netlink: 'syz.5.5776': attribute type 27 has an invalid length. [ 1309.290890][ T5272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5775'. [ 1309.445086][ T5281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1309.846020][ T5283] Can't find ip_set type hash:net,po [ 1310.195225][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 1310.270002][ T5296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1310.475972][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1310.526798][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1310.549456][ T5304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1310.549484][ T5304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5780'. [ 1311.121447][ T5298] netlink: 'syz.1.5780': attribute type 11 has an invalid length. [ 1311.154101][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.281296][T30375] bond0: (slave geneve3): link status definitely down, disabling slave [ 1311.350857][T30375] bond0: now running without any active interface! [ 1312.421818][ T5332] batman_adv: batadv0: Adding interface: syzkaller0 [ 1312.435838][ T5332] batman_adv: batadv0: Interface activated: syzkaller0 [ 1313.460299][ T5350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5792'. [ 1315.386359][ T5376] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1315.494877][ T5376] bond6 (unregistering): Released all slaves [ 1316.159903][ T5404] netlink: 'syz.0.5801': attribute type 21 has an invalid length. [ 1316.557775][ T5404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1317.565383][ T5413] bridge_slave_0: entered allmulticast mode [ 1318.600528][ T5445] wg2 speed is unknown, defaulting to 1000 [ 1318.632732][ T5445] lo speed is unknown, defaulting to 1000 [ 1318.691743][ T5457] ip6gretap0: left allmulticast mode [ 1318.691775][ T5457] ip6gretap0: left promiscuous mode [ 1318.694314][ T5457] bridge0: port 1(ip6gretap0) entered disabled state [ 1318.735025][ T5461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.924254][ T5466] netlink: 'syz.3.5811': attribute type 1 has an invalid length. [ 1319.425205][ T5457] team0: Port device dummy0 removed [ 1319.469010][ T5457] bond10: (slave veth0_to_bond): Releasing active interface [ 1319.690857][ T5457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1319.913781][ T5493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5814'. [ 1320.240158][ T5466] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1320.292310][ T5470] vlan0: entered promiscuous mode [ 1320.355607][ T5470] team0: Port device vlan0 added [ 1320.370395][ T5486] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1321.123234][ T5499] syzkaller0: entered promiscuous mode [ 1321.123265][ T5499] syzkaller0: entered allmulticast mode [ 1321.387751][ T5520] netlink: 'syz.3.5816': attribute type 21 has an invalid length. [ 1321.387781][ T5520] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1321.714718][ T5529] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1321.817962][ T5520] netlink: 'syz.3.5816': attribute type 5 has an invalid length. [ 1321.817991][ T5520] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1322.322572][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 1322.414037][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1323.082165][ T5553] netlink: 'syz.0.5824': attribute type 30 has an invalid length. [ 1325.017905][ T5583] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1325.442854][ T5583] bond11 (unregistering): Released all slaves [ 1325.887773][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1326.173979][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f1c8000: rx timeout, send abort [ 1326.174203][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f1c8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1326.938656][ T5612] ip6gretap0: entered promiscuous mode [ 1326.941909][ T5612] batadv0: entered promiscuous mode [ 1328.344125][ T5649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1328.488598][ T5657] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1328.489965][ T5655] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1329.581553][ T5687] netlink: 'syz.5.5852': attribute type 12 has an invalid length. [ 1329.581583][ T5687] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5852'. [ 1330.449819][ T5693] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 1331.025498][ T5704] netlink: 'syz.5.5855': attribute type 1 has an invalid length. [ 1331.025524][ T5704] netlink: 'syz.5.5855': attribute type 2 has an invalid length. [ 1331.025543][ T5704] nbd: illegal input index -2130444140 [ 1332.297437][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 150 seconds [ 1332.297489][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 150 seconds [ 1332.297522][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 150 seconds [ 1332.297553][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 150 seconds [ 1333.275404][ T8666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1333.297916][ T8666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1333.319745][ T8666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1333.340080][ T8666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1333.340940][ T8666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1334.966165][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1335.031228][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.032032][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.032773][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.033468][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.034216][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.034955][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.035716][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.036347][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.037124][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.037823][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.038629][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.039389][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.040964][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.042685][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175597][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175640][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175670][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175702][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175733][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175764][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175795][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175826][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175866][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175897][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175928][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175960][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.175991][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176021][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176053][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176083][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176114][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176144][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176175][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176204][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176235][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176266][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176296][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176328][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176361][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176392][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176422][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176453][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.176484][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262503][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262551][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262585][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262619][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262652][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262685][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262719][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262753][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262802][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262843][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262876][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262909][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262941][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.262974][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263007][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263040][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263073][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263106][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263139][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263171][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263205][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.263237][ T5784] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20000 [ 1335.495652][T26159] Bluetooth: hci5: command tx timeout [ 1336.095437][ T5794] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 1337.407685][ T5818] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5870'. [ 1337.567853][T26159] Bluetooth: hci5: command tx timeout [ 1338.094237][ T5746] wg2 speed is unknown, defaulting to 1000 [ 1338.114232][ T5746] lo speed is unknown, defaulting to 1000 [ 1338.597714][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1338.603251][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1338.603618][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1339.045939][ T5837] syzkaller0: entered promiscuous mode [ 1339.045967][ T5837] syzkaller0: entered allmulticast mode [ 1339.094451][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.162610][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1339.649592][T26159] Bluetooth: hci5: command tx timeout [ 1339.788990][ T5813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1341.271377][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.271569][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.273357][ T5746] bridge_slave_0: entered allmulticast mode [ 1341.301511][ T5746] bridge_slave_0: entered promiscuous mode [ 1341.319070][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.321327][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.321789][ T5746] bridge_slave_1: entered allmulticast mode [ 1341.352793][ T5746] bridge_slave_1: entered promiscuous mode [ 1341.526202][ T5874] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1341.569753][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1341.728547][T26159] Bluetooth: hci5: command tx timeout [ 1341.775259][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.797415][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.881216][ T5746] team0: Port device team_slave_0 added [ 1341.896135][ T5746] team0: Port device team_slave_1 added [ 1342.622029][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.622052][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.622085][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.696255][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.696278][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.696312][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.301251][ T5746] hsr_slave_0: entered promiscuous mode [ 1343.318489][ T5746] hsr_slave_1: entered promiscuous mode [ 1343.319322][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 1343.319346][ T5746] Cannot create hsr debugfs directory [ 1343.499912][ T5898] syzkaller0: left promiscuous mode [ 1343.499940][ T5898] syzkaller0: left allmulticast mode [ 1344.191266][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.228385][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.435313][ T5923] netlink: 'syz.2.5887': attribute type 11 has an invalid length. [ 1344.435371][ T5923] netlink: 'syz.2.5887': attribute type 11 has an invalid length. [ 1344.435388][ T5923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5887'. [ 1345.502617][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5890'. [ 1345.584014][ T5930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1345.603831][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5889'. [ 1346.578275][ T5943] vlan0: left promiscuous mode [ 1346.616389][ T5943] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 1346.646321][ T5943] ip6tnl2: left promiscuous mode [ 1346.729624][ T5943] bond5: left promiscuous mode [ 1346.729652][ T5943] gre2: left promiscuous mode [ 1346.730885][ T5943] geneve3: left promiscuous mode [ 1346.760621][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.761482][ T5943] bond9: left promiscuous mode [ 1346.761502][ T5943] wireguard0: left promiscuous mode [ 1346.790871][ T5943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1346.792399][ T5943] syzkaller0: left promiscuous mode [ 1346.893432][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1346.920951][ T5938] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1347.276210][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 1347.641897][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5894'. [ 1348.135107][ T5969] netlink: ct family unspecified [ 1348.585307][ T5746] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.585358][ T5746] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.618124][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5897'. [ 1349.490210][ T5746] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.490254][ T5746] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.746422][ T6003] syzkaller0: left promiscuous mode [ 1349.746451][ T6003] syzkaller0: left allmulticast mode [ 1350.185985][ T5746] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.186027][ T5746] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.769105][ T5746] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.769149][ T5746] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.385949][ T30] audit: type=1800 audit(1793095782.924:98): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5903" name="blkio.bfq.time" dev="tmpfs" ino=260 res=0 errno=-22 [ 1351.448243][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1352.344029][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5908'. [ 1352.455047][ T6040] ipvlan2: entered allmulticast mode [ 1352.455075][ T6040] dummy0: entered allmulticast mode [ 1352.900501][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1352.900639][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1353.058376][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1353.650449][T26159] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1355.785754][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.801249][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1355.827552][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1355.991255][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1356.033394][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1356.050842][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1356.174621][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1356.481480][ T6086] netlink: 'syz.5.5917': attribute type 14 has an invalid length. [ 1356.725659][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1356.819494][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1357.296257][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.518883][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.701863][T20310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.701984][T20310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.836066][T30358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.836188][T30358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.363846][ T6110] netlink: 63 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1359.487279][ T6135] netlink: 'syz.2.5926': attribute type 1 has an invalid length. [ 1359.487306][ T6135] netlink: 'syz.2.5926': attribute type 3 has an invalid length. [ 1359.487328][ T6135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1362.017554][ T4997] udevd[4997]: worker [3047] /devices/virtual/block/nbd1 timeout; kill it [ 1362.017653][ T4997] udevd[4997]: seq 28933 '/devices/virtual/block/nbd1' killed [ 1362.477444][ T663] block nbd1: Possible stuck request ffff8880284e7000: control (read@0,1024B). Runtime 180 seconds [ 1362.477496][ T663] block nbd1: Possible stuck request ffff8880284e71c0: control (read@1024,1024B). Runtime 180 seconds [ 1362.477528][ T663] block nbd1: Possible stuck request ffff8880284e7380: control (read@2048,1024B). Runtime 180 seconds [ 1362.477588][ T663] block nbd1: Possible stuck request ffff8880284e7540: control (read@3072,1024B). Runtime 180 seconds [ 1362.636178][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.316478][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5930'. [ 1363.444248][ T5746] veth0_vlan: entered promiscuous mode [ 1363.633617][ T5746] veth1_vlan: entered promiscuous mode [ 1364.009902][ T5746] veth0_macvtap: entered promiscuous mode [ 1364.055263][ T5746] veth1_macvtap: entered promiscuous mode [ 1364.140511][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.256371][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.416343][T30371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.450447][ T6074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.450714][ T6074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.451102][ T6074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.861381][T30371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.861408][T30371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.608613][T30362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.608639][T30362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.755900][ T6233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1367.194008][ T6233] bond13: entered promiscuous mode [ 1367.194042][ T6233] bond13: entered allmulticast mode [ 1367.221335][ T6233] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1367.681929][ T6235] bond14: entered promiscuous mode [ 1367.681965][ T6235] bond14: entered allmulticast mode [ 1367.682425][ T6235] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1367.954290][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1367.954443][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.270426][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.923986][ T6278] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1370.802393][ T8666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1370.829475][ T8666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1370.833003][ T8666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1370.897391][ T8666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1370.912482][ T8666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1371.503150][ T6256] netlink: 'syz.3.5943': attribute type 11 has an invalid length. [ 1371.678739][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'. [ 1371.966730][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1372.177755][ T6305] netlink: 'syz.5.5950': attribute type 2 has an invalid length. [ 1373.087451][T26159] Bluetooth: hci2: command tx timeout [ 1374.315884][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1374.474067][ T6350] ipvlan3: entered allmulticast mode [ 1374.474096][ T6350] virt_wifi0: entered allmulticast mode [ 1374.497612][ T6350] batman_adv: batadv0: Adding interface: ipvlan3 [ 1374.497633][ T6350] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.497668][ T6350] batman_adv: batadv0: Interface activated: ipvlan3 [ 1374.903429][ T6286] wg2 speed is unknown, defaulting to 1000 [ 1374.930969][ T6286] lo speed is unknown, defaulting to 1000 [ 1375.168377][T26159] Bluetooth: hci2: command tx timeout [ 1375.170247][ T6363] sctp: [Deprecated]: syz.3.5960 (pid 6363) Use of int in max_burst socket option. [ 1375.170247][ T6363] Use struct sctp_assoc_value instead [ 1375.204181][ T6362] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 1376.086081][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5962'. [ 1376.464965][ T6396] xt_l2tp: v2 sid > 0xffff: 33554432 [ 1377.247507][T26159] Bluetooth: hci2: command tx timeout [ 1377.804807][ T6425] syzkaller0: left promiscuous mode [ 1377.804835][ T6425] syzkaller0: left allmulticast mode [ 1378.188510][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5973'. [ 1378.215018][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.215142][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.215345][ T6286] bridge_slave_0: entered allmulticast mode [ 1378.253548][ T6286] bridge_slave_0: entered promiscuous mode [ 1378.299579][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.301398][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.301636][ T6286] bridge_slave_1: entered allmulticast mode [ 1378.353172][ T6286] bridge_slave_1: entered promiscuous mode [ 1378.400881][ T6443] block nbd0: reconnected socket [ 1378.486280][T26159] block nbd0: Receive control failed (result -32) [ 1378.756346][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.821811][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.171853][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1379.171884][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1379.171902][ T6453] netlink: 572 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1379.258624][ T6286] team0: Port device team_slave_0 added [ 1379.318576][ T6286] team0: Port device team_slave_1 added [ 1379.331417][T26159] Bluetooth: hci2: command tx timeout [ 1379.411861][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.411883][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.411916][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.414218][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.414235][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.414267][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.611541][ T6457] netlink: 'syz.0.5979': attribute type 1 has an invalid length. [ 1379.732945][ T6286] hsr_slave_0: entered promiscuous mode [ 1379.759914][ T6286] hsr_slave_1: entered promiscuous mode [ 1379.760882][ T6286] debugfs: 'hsr0' already exists in 'hsr' [ 1379.760908][ T6286] Cannot create hsr debugfs directory [ 1380.436304][ T6480] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1381.572261][ T6503] tipc: New replicast peer: 255.255.255.255 [ 1381.573133][ T6503] tipc: Enabled bearer , priority 10 [ 1381.760296][ T6517] netlink: 'syz.3.5990': attribute type 4 has an invalid length. [ 1381.760325][ T6517] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1381.791574][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1382.760437][ T6286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.805562][ T6286] [ 1382.807967][ T6286] ====================================================== [ 1382.815012][ T6286] WARNING: possible circular locking dependency detected [ 1382.822067][ T6286] syzkaller #0 Not tainted [ 1382.826502][ T6286] ------------------------------------------------------ [ 1382.833541][ T6286] syz-executor/6286 is trying to acquire lock: [ 1382.839736][ T6286] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1382.850173][ T6286] [ 1382.850173][ T6286] but task is already holding lock: [ 1382.857571][ T6286] ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1382.868504][ T6286] [ 1382.868504][ T6286] which lock already depends on the new lock. [ 1382.868504][ T6286] [ 1382.879014][ T6286] [ 1382.879014][ T6286] the existing dependency chain (in reverse order) is: [ 1382.888101][ T6286] [ 1382.888101][ T6286] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1382.896959][ T6286] down_read+0x45/0x320 [ 1382.901693][ T6286] kernfs_remove_by_name_ns+0x3f/0x140 [ 1382.907714][ T6286] internal_create_group+0x58e/0x1180 [ 1382.913714][ T6286] sysfs_update_groups+0x60/0x130 [ 1382.919304][ T6286] pmu_dev_alloc+0x29b/0x300 [ 1382.924507][ T6286] perf_event_sysfs_init+0x76/0x100 [ 1382.930348][ T6286] do_one_initcall+0x250/0x870 [ 1382.935673][ T6286] do_initcall_level+0x10a/0x1a0 [ 1382.941281][ T6286] do_initcalls+0x59/0xa0 [ 1382.946193][ T6286] kernel_init_freeable+0x29d/0x3e0 [ 1382.952032][ T6286] kernel_init+0x22/0x1d0 [ 1382.956922][ T6286] ret_from_fork+0x514/0xb70 [ 1382.962099][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1382.967411][ T6286] [ 1382.967411][ T6286] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1382.974627][ T6286] __mutex_lock+0x197/0x15a0 [ 1382.979799][ T6286] perf_event_init_cpu+0x1d1/0x7a0 [ 1382.985469][ T6286] cpuhp_invoke_callback+0x434/0x810 [ 1382.991351][ T6286] cpuhp_thread_fun+0x362/0x780 [ 1382.996785][ T6286] smpboot_thread_fn+0x5f8/0xb30 [ 1383.002286][ T6286] kthread+0x38b/0x480 [ 1383.007077][ T6286] ret_from_fork+0x514/0xb70 [ 1383.012220][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.017529][ T6286] [ 1383.017529][ T6286] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1383.025142][ T6286] cpuhp_thread_fun+0x127/0x780 [ 1383.030559][ T6286] smpboot_thread_fn+0x5f8/0xb30 [ 1383.036062][ T6286] kthread+0x38b/0x480 [ 1383.040687][ T6286] ret_from_fork+0x514/0xb70 [ 1383.045829][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.051139][ T6286] [ 1383.051139][ T6286] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1383.058916][ T6286] cpus_read_lock+0x3d/0x160 [ 1383.064076][ T6286] static_key_slow_inc+0x12/0x30 [ 1383.069568][ T6286] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1383.075946][ T6286] nbd_genl_foreach_sock+0x265/0x450 [ 1383.081834][ T6286] nbd_genl_reconfigure+0xbbb/0x1040 [ 1383.087683][ T6286] genl_family_rcv_msg_doit+0x233/0x340 [ 1383.093821][ T6286] genl_rcv_msg+0x614/0x7a0 [ 1383.098888][ T6286] netlink_rcv_skb+0x226/0x4a0 [ 1383.104208][ T6286] genl_rcv+0x28/0x40 [ 1383.108764][ T6286] netlink_unicast+0x8ef/0xa80 [ 1383.114085][ T6286] netlink_sendmsg+0x7f0/0xb20 [ 1383.119413][ T6286] sock_sendmsg_nosec+0x14e/0x190 [ 1383.125026][ T6286] ____sys_sendmsg+0x54e/0x850 [ 1383.130364][ T6286] ___sys_sendmsg+0x2a5/0x360 [ 1383.135621][ T6286] __x64_sys_sendmsg+0x1b1/0x290 [ 1383.141204][ T6286] do_syscall_64+0x166/0x520 [ 1383.146429][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.152877][ T6286] [ 1383.152877][ T6286] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1383.160578][ T6286] __mutex_lock+0x197/0x15a0 [ 1383.165741][ T6286] nbd_queue_rq+0x373/0xff0 [ 1383.170903][ T6286] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1383.177288][ T6286] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1383.184366][ T6286] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1383.190910][ T6286] blk_mq_run_work_fn+0x167/0x2f0 [ 1383.196493][ T6286] process_scheduled_works+0xc3d/0x1630 [ 1383.202726][ T6286] worker_thread+0xa47/0xfb0 [ 1383.207908][ T6286] kthread+0x38b/0x480 [ 1383.212561][ T6286] ret_from_fork+0x514/0xb70 [ 1383.217711][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.223028][ T6286] [ 1383.223028][ T6286] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1383.230288][ T6286] __mutex_lock+0x197/0x15a0 [ 1383.235429][ T6286] nbd_queue_rq+0xc1/0xff0 [ 1383.240408][ T6286] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1383.246597][ T6286] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1383.253571][ T6286] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1383.260195][ T6286] blk_mq_run_work_fn+0x167/0x2f0 [ 1383.265788][ T6286] process_scheduled_works+0xc3d/0x1630 [ 1383.271911][ T6286] worker_thread+0xa47/0xfb0 [ 1383.277063][ T6286] kthread+0x38b/0x480 [ 1383.281684][ T6286] ret_from_fork+0x514/0xb70 [ 1383.286825][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.292162][ T6286] [ 1383.292162][ T6286] -> #4 (set->srcu){.+.+}-{0:0}: [ 1383.299339][ T6286] __synchronize_srcu+0xca/0x2f0 [ 1383.304862][ T6286] elevator_switch+0x1e8/0x7b0 [ 1383.310251][ T6286] elevator_change+0x2fa/0x480 [ 1383.315576][ T6286] elevator_set_default+0x375/0x440 [ 1383.321333][ T6286] blk_register_queue+0x404/0x4f0 [ 1383.326964][ T6286] __add_disk+0x6b8/0xdb0 [ 1383.331857][ T6286] add_disk_fwnode+0x100/0x3a0 [ 1383.337176][ T6286] nbd_dev_add+0x733/0xb60 [ 1383.342169][ T6286] nbd_init+0x168/0x1f0 [ 1383.346945][ T6286] do_one_initcall+0x250/0x870 [ 1383.352289][ T6286] do_initcall_level+0x10a/0x1a0 [ 1383.357820][ T6286] do_initcalls+0x59/0xa0 [ 1383.362704][ T6286] kernel_init_freeable+0x29d/0x3e0 [ 1383.368458][ T6286] kernel_init+0x22/0x1d0 [ 1383.373343][ T6286] ret_from_fork+0x514/0xb70 [ 1383.378481][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.383804][ T6286] [ 1383.383804][ T6286] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1383.391712][ T6286] __mutex_lock+0x197/0x15a0 [ 1383.396884][ T6286] elevator_change+0x1af/0x480 [ 1383.402417][ T6286] elevator_set_none+0xb5/0x140 [ 1383.407840][ T6286] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1383.414229][ T6286] nbd_start_device+0x189/0xb30 [ 1383.419654][ T6286] nbd_genl_connect+0x167d/0x1cd0 [ 1383.425266][ T6286] genl_family_rcv_msg_doit+0x233/0x340 [ 1383.431377][ T6286] genl_rcv_msg+0x614/0x7a0 [ 1383.436445][ T6286] netlink_rcv_skb+0x226/0x4a0 [ 1383.441782][ T6286] genl_rcv+0x28/0x40 [ 1383.446329][ T6286] netlink_unicast+0x8ef/0xa80 [ 1383.451665][ T6286] netlink_sendmsg+0x7f0/0xb20 [ 1383.457007][ T6286] sock_sendmsg_nosec+0x14e/0x190 [ 1383.462688][ T6286] ____sys_sendmsg+0x54e/0x850 [ 1383.468032][ T6286] ___sys_sendmsg+0x2a5/0x360 [ 1383.473285][ T6286] __x64_sys_sendmsg+0x1b1/0x290 [ 1383.478773][ T6286] do_syscall_64+0x166/0x520 [ 1383.483919][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.490363][ T6286] [ 1383.490363][ T6286] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1383.499012][ T6286] blk_alloc_queue+0x544/0x690 [ 1383.504516][ T6286] __blk_mq_alloc_disk+0x194/0x390 [ 1383.510203][ T6286] nbd_dev_add+0x494/0xb60 [ 1383.515200][ T6286] nbd_init+0x168/0x1f0 [ 1383.519923][ T6286] do_one_initcall+0x250/0x870 [ 1383.525359][ T6286] do_initcall_level+0x10a/0x1a0 [ 1383.530852][ T6286] do_initcalls+0x59/0xa0 [ 1383.535740][ T6286] kernel_init_freeable+0x29d/0x3e0 [ 1383.541518][ T6286] kernel_init+0x22/0x1d0 [ 1383.546403][ T6286] ret_from_fork+0x514/0xb70 [ 1383.551544][ T6286] ret_from_fork_asm+0x1a/0x30 [ 1383.556857][ T6286] [ 1383.556857][ T6286] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1383.564167][ T6286] fs_reclaim_acquire+0x71/0x100 [ 1383.569669][ T6286] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1383.575952][ T6286] alloc_inode+0xb8/0x1b0 [ 1383.580830][ T6286] iget_locked+0x12c/0x690 [ 1383.585789][ T6286] kernfs_get_inode+0x4f/0x770 [ 1383.591194][ T6286] kernfs_get_tree+0x5cd/0x980 [ 1383.596514][ T6286] vfs_get_tree+0x92/0x2a0 [ 1383.601485][ T6286] do_new_mount+0x325/0xb00 [ 1383.606536][ T6286] __se_sys_mount+0x31d/0x420 [ 1383.611773][ T6286] do_syscall_64+0x166/0x520 [ 1383.616918][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.623367][ T6286] [ 1383.623367][ T6286] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1383.631400][ T6286] __lock_acquire+0x164c/0x2de0 [ 1383.636809][ T6286] lock_acquire+0x115/0x350 [ 1383.641867][ T6286] down_write+0x91/0x200 [ 1383.646717][ T6286] kernfs_remove_by_name_ns+0x4e/0x140 [ 1383.652770][ T6286] sysfs_remove_group+0x101/0x2e0 [ 1383.658354][ T6286] sysfs_remove_groups+0x54/0xb0 [ 1383.663857][ T6286] net_rx_queue_update_kobjects+0x6bd/0x780 [ 1383.670411][ T6286] netdev_unregister_kobject+0xff/0x450 [ 1383.676571][ T6286] unregister_netdevice_many_notify+0x181a/0x1d80 [ 1383.683607][ T6286] unregister_netdevice_queue+0x2f5/0x340 [ 1383.689882][ T6286] nsim_destroy+0x275/0x800 [ 1383.695024][ T6286] __nsim_dev_port_del+0x14e/0x200 [ 1383.700700][ T6286] nsim_dev_reload_destroy+0x288/0x490 [ 1383.706721][ T6286] nsim_drv_remove+0x58/0x170 [ 1383.712038][ T6286] device_release_driver_internal+0x48b/0x880 [ 1383.718837][ T6286] bus_remove_device+0x444/0x560 [ 1383.724356][ T6286] device_del+0x524/0x8f0 [ 1383.729309][ T6286] device_unregister+0x21/0xf0 [ 1383.734640][ T6286] del_device_store+0x2b5/0x370 [ 1383.740105][ T6286] kernfs_fop_write_iter+0x3a4/0x540 [ 1383.745959][ T6286] vfs_write+0x612/0xba0 [ 1383.750756][ T6286] ksys_write+0x150/0x270 [ 1383.755654][ T6286] do_syscall_64+0x166/0x520 [ 1383.760849][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.767352][ T6286] [ 1383.767352][ T6286] other info that might help us debug this: [ 1383.767352][ T6286] [ 1383.777631][ T6286] Chain exists of: [ 1383.777631][ T6286] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1383.777631][ T6286] [ 1383.791602][ T6286] Possible unsafe locking scenario: [ 1383.791602][ T6286] [ 1383.799090][ T6286] CPU0 CPU1 [ 1383.804489][ T6286] ---- ---- [ 1383.810435][ T6286] rlock(&root->kernfs_supers_rwsem); [ 1383.815947][ T6286] lock(pmus_lock); [ 1383.822406][ T6286] lock(&root->kernfs_supers_rwsem); [ 1383.830423][ T6286] lock(&root->kernfs_rwsem); [ 1383.835222][ T6286] [ 1383.835222][ T6286] *** DEADLOCK *** [ 1383.835222][ T6286] [ 1383.843391][ T6286] locks held by syz-executor/6286: 8, last CPU#1: [ 1383.849831][ T6286] #0: ffff88807fe8a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1383.858777][ T6286] #1: ffff88803266b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1383.868574][ T6286] #2: ffff88802a5d43c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1383.878641][ T6286] #3: ffffffff90ad4960 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1383.888976][ T6286] #4: ffff88802c11d128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1383.899555][ T6286] #5: ffff88804be28258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1383.909633][ T6286] #6: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1383.918844][ T6286] #7: ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1383.930202][ T6286] [ 1383.930202][ T6286] stack backtrace: [ 1383.936121][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1383.945608][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1383.955780][ T6286] Call Trace: [ 1383.959108][ T6286] [ 1383.962069][ T6286] dump_stack_lvl+0xe8/0x150 [ 1383.966706][ T6286] print_circular_bug+0x2e2/0x300 [ 1383.971776][ T6286] check_noncircular+0x12f/0x150 [ 1383.976780][ T6286] __lock_acquire+0x164c/0x2de0 [ 1383.981681][ T6286] ? lockdep_unlock+0x5c/0xd0 [ 1383.986418][ T6286] lock_acquire+0x115/0x350 [ 1383.990954][ T6286] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1383.996642][ T6286] down_write+0x91/0x200 [ 1384.000935][ T6286] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1384.006610][ T6286] ? __pfx_down_write+0x10/0x10 [ 1384.011505][ T6286] ? down_read+0x2b9/0x320 [ 1384.015967][ T6286] kernfs_remove_by_name_ns+0x4e/0x140 [ 1384.021558][ T6286] sysfs_remove_group+0x101/0x2e0 [ 1384.026685][ T6286] sysfs_remove_groups+0x54/0xb0 [ 1384.031668][ T6286] net_rx_queue_update_kobjects+0x6bd/0x780 [ 1384.037607][ T6286] netdev_unregister_kobject+0xff/0x450 [ 1384.043211][ T6286] unregister_netdevice_many_notify+0x181a/0x1d80 [ 1384.049711][ T6286] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1384.056526][ T6286] ? __mutex_lock+0x305/0x15a0 [ 1384.061338][ T6286] unregister_netdevice_queue+0x2f5/0x340 [ 1384.067108][ T6286] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1384.073391][ T6286] nsim_destroy+0x275/0x800 [ 1384.077951][ T6286] __nsim_dev_port_del+0x14e/0x200 [ 1384.083112][ T6286] nsim_dev_reload_destroy+0x288/0x490 [ 1384.088629][ T6286] nsim_drv_remove+0x58/0x170 [ 1384.093362][ T6286] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1384.098683][ T6286] device_release_driver_internal+0x48b/0x880 [ 1384.104800][ T6286] bus_remove_device+0x444/0x560 [ 1384.109798][ T6286] ? __pfx_bus_remove_device+0x10/0x10 [ 1384.115324][ T6286] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1384.121082][ T6286] device_del+0x524/0x8f0 [ 1384.125459][ T6286] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1384.131405][ T6286] ? __pfx_device_del+0x10/0x10 [ 1384.136298][ T6286] ? lock_acquire+0x115/0x350 [ 1384.141011][ T6286] device_unregister+0x21/0xf0 [ 1384.145986][ T6286] del_device_store+0x2b5/0x370 [ 1384.150875][ T6286] ? __pfx_del_device_store+0x10/0x10 [ 1384.156289][ T6286] ? sysfs_file_kobj+0x1e4/0x230 [ 1384.161450][ T6286] ? sysfs_kf_write+0x166/0x260 [ 1384.166338][ T6286] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1384.171597][ T6286] kernfs_fop_write_iter+0x3a4/0x540 [ 1384.176924][ T6286] vfs_write+0x612/0xba0 [ 1384.181228][ T6286] ? __pfx_vfs_write+0x10/0x10 [ 1384.186040][ T6286] ? do_sys_openat2+0x18d/0x200 [ 1384.190936][ T6286] ? kmem_cache_free+0x182/0x650 [ 1384.195914][ T6286] ? fdget+0x16b/0x250 [ 1384.200040][ T6286] ksys_write+0x150/0x270 [ 1384.204412][ T6286] ? __pfx_ksys_write+0x10/0x10 [ 1384.209306][ T6286] do_syscall_64+0x166/0x520 [ 1384.213929][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.220056][ T6286] ? clear_bhb_loop+0x70/0xc0 [ 1384.224769][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.230695][ T6286] RIP: 0033:0x7f8d72b5fd8e [ 1384.235146][ T6286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1384.254963][ T6286] RSP: 002b:00007ffde8c718d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1384.263431][ T6286] RAX: ffffffffffffffda RBX: 00005555730c5500 RCX: 00007f8d72b5fd8e [ 1384.271474][ T6286] RDX: 0000000000000001 RSI: 00007ffde8c71960 RDI: 0000000000000005 [ 1384.279589][ T6286] RBP: 00007f8d72c373e4 R08: 0000000000000000 R09: 0000000000000000 [ 1384.287602][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.295606][ T6286] R13: 00007ffde8c71960 R14: 00007ffde8c721a0 R15: 0000000000000003 [ 1384.303620][ T6286] [ 1384.460229][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1384.552712][T13674] tipc: Node number set to 697429154 [ 1384.604606][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1384.784281][ T6286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.966412][ T6286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.046079][ T6286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.275765][ T6286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.341112][ T6286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1385.343520][ T6286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.346249][ T6286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1385.384353][ T6286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.399782][ T6286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1385.401181][ T6286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.456291][ T6286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1385.685124][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.732239][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.754752][T30369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.754834][T30369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.800427][T30369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.800516][T30369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.761716][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.839574][ T6286] veth0_vlan: entered promiscuous mode [ 1386.845829][ T6286] veth1_vlan: entered promiscuous mode [ 1386.884504][ T6286] veth0_macvtap: entered promiscuous mode [ 1386.906299][ T6286] veth1_macvtap: entered promiscuous mode [ 1386.935127][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.953335][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.999708][T30375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.090502][ T6286] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 1387.137604][ T6286] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 1387.218846][T30368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.238445][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.238471][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.238494][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.238510][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.311066][T30368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.339398][T30368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0