last executing test programs: 14.079408724s ago: executing program 2 (id=6360): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe0", 0x33f}], 0x2}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x1d, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xa3, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x25, 0x1b, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex=r4, r1, 0x15, 0x2010, 0x0, @value=r5, @void, @void, @void, r3}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000002c0), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 13.867147689s ago: executing program 2 (id=6363): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000001c0), 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x31, 0x4, 0x5, {0x7, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x80000001, 0x2}, {0x0, @remote, 0x4, 0x2, [0x4, 0x7]}, @sctp_ip6_spec={@private2, @loopback, 0x4e24, 0x4e23, 0x3}, {0x0, @remote, 0x8, 0x2, [0x4, 0x4]}, 0x7, 0x6}}}) socket$kcm(0xa, 0x3, 0x87) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xb0}, 0x44) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) 13.273554458s ago: executing program 2 (id=6369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000200)={{r0}, "c2a97976836123768c96e4b1750f02dfbbdeb132556d151b33874028bcf37c54d60743b35441b5e556edb2c3466f835e37a87c9071d8b38329e52019fdf288f931ef01ed45c8f4e70b11acc6d8e69fea69446ab24f92d31ad6e35a4bb5a2223c804261e5211bc737598437be70316bb2be9adf46d23a957fa61af02f54e50df5b06b407323cfe88e1fdd71ce5cfc0832fea968c01a8632c405c606c9d320f8cbc50329659062cb0dad4d8e2fe214af45b966edf9bf785eac8b08a4f2f20ef7c459443e803683b16b4cb10e5a698f6042b39310d7a947e715f9a96065ebbf0f433a15556f1fa1029ec9efc6ef07f6aafb47463de737a8238e27b92dbd3a7b099dfdcbe475239cb1a3ad3574b4cfb05c103c945998ed87285011e8896f573f742f38cc8dfdd2a08ac0223faa931309c2e605a54d6e82b21da548d22ec73033c1f035a15c0365c62c8eae6e380516e19a3d6c919385b7c275fedd4adb8267791755ee6adbb3fbbb3d096f8129942ddf883e2686f117bf63ad5c8cf6bf75f4bd244ed0e57ae6b6adf2575ca07789611b0a87b71faa41b173edcbec41399fb8a9fdb2fa0dac22a41dae1e0769f739a44951f1db19dda55eb9b9964560c83b5ceda2f4123b6a761d314dbdc30335372a82f44bc6be73acd67a443e550e5226689fe663da084c8c36f3942858999184a88562cacd691bd03833b3a82ac11f4ac6ec5fbec8984fe0ffc80c6de89bfe1ceadd1e2736f1dd5829b884fe8a9cd16e79bef4d9ad470718d611a17f5e0ac6a894353a070bf80d5e0573c936c7433fe15304d495308a9f3445f17a1de630825c0cae1d48d54431fcfde55890f3ab706525892f5de7e60716e6db390195c1fb51916959d2349f9d312011d67090afaae688a9345f466a394658744804493fba06e4771c5bf64d75ecbf6a301b3c7db9757bea153b76b80cf00aa55bf8dd99081186579466f765bffcb47738850261b5addbc785d1333dfffec026f1121b7c1f386dc89f618ff2823db1b2b0f3d8b4338a1c3778a5b60632967bbe08641cc7ddae2371d1e50c43c8671369b799ef5f6365a4a05027cdf6cfab32044160f5b9f0015e75311925b6910f585d7498758c8ef02be2a1776c747113dbdb23d0b099f63afdd900a86cbd1eb060be269b29be70b267a479741c60682dff071192268d3346d7fe001cdc6e72d6dc687fa1d614eebcd7164c1b14bab95599ae8906c667603f1682996bf2407ef59e0f2c4ae91e3053900599919ec19c6fd1abd2f8b03b43bdef4b903a0494d8bbf8761a91d67806ea39a66851fd5250dbb2ebf8de8a7483d057162881cc093ec3b37fa43842b91b6f8a9dad82d1d218bbb7f280a7072bf6e28d6406ac572554be626e837e09daf113f691166f460ad838eaa3090d944f3d94a527be2fc46147e40a688af4a5556795572023ccf2b8656c84c288be03e79807aef5922c41ab9b2e65ec9b86c1bef54def006944548f2caf40a51b389babc4b8731f2d6736df20488e201979df02bf5ed9e43cdbb0b94a55a4f4e77f35bb421937ca6e46de3730a060b3af3c5345d7f93237bcc8b42c4e719fe9d5683dd531d89af53e820df212e30e1dad13a297d5d9fd0b5b47b2f9595507408f8a55afc7c588ca0ca489ac20a2e29be19a3cef1d97c2c4e1c1c4a3c81ead729401c159d4139957ef3d962f4f4dc10b7ceb8afadaa85986740f67d420249fec8039f93e0aacd9e370e1226e0439cd8d631157b1117f8cc1c34c16916bad33aa72ccbdc3e1d68b13ed0dbcbcf698a21abf468a4ec5b97fbb6235e8d051518a6561688dae67ededeb871a31b2b41ae3bd478a20b89473ce34c7c66941a95b5556ffb602e0f762168f61f936d6ccde61f199f4ecce35e0efebc4e36e69769c0796853640bcb1e3cfabc9481e78215ebe5b8ed7de9820e7ba88f13c3dade363a5a213a5f54447366e6450e17e463ba7cf13814bf4cbc65cba3b6daaf77f06eebe31ee5dad98d2d3b2feb3c804d1aab9142edbb848c6612f69013e2905f1da20a9f32e08276f36f595c2e1bd2f377aa5862c146b15af16ac2ae67204f75085e9fc4a114253ea3af02af2f16650e6cabf34cb366a582a919ab272750fa3bfddd6e49f86134c9b6f01cb1cfcc7e0ef4c64244d3b4845c3ae1a7df364eb5f0d97a9849bf949bb0e1e1cd0a73c2f3e269404d12e9ea321a91df18b9a6e58ed4a6e6b0c64654eb5179b21d8d4e11febbdff0bcad8d40891f4f4edf42cffa7030e0fb6816bfe2e442a63db08ae1b8944b54d8104918b2b8ba7510904f377bc0184e5a520461a91be769fcfdd4cb533e7d8db484f4028d563ea913636d8a8a471abf57c4deb4b1df6b883397ce7a3a48a18c7940ed7aacd606cf7abb8efda63824f264eadfbad10738bdf99f9d7481d6036923bd35930824dff68682c518a96e97da8198e5c9451404687b0a168697ff60a339307a95eb3da29c338fc8639a460a93bd1ffc3558c1a20ef1964bf17febcc361c071c639c3036a3231c6acddc16ba90df9d6b84efda11ad748716c31fa1baf5a58b40087844495b777a245b7a3045e4b33f1526897e12b55f7d5fc7b90c6f1833bf96f75bc00c79727e39b21f7b0576b33b63ca491cb72ca7f00e23abc63faa7b2d140b1897c09e4e3966ae304599607d7e666f919d9f2953ef48b0da96fb59ec96368d13b4a52ea6e03a4131e749034319e4ef72bb65a4da8c697d1de7b3d89576de6df38ec2c99732540cb110e01b4ce2b940eeb891150c7578238f8dca3ade5aa3cd28ca994729a22eb1385ca439a38dde7fe25c69535d7cd7c3309dc2525782d0fa8891d06a242eb0f1360fefcf8f1c5f5070b4bacfd7637af4e3e750a6350ffdb7c9d527c4f581ba3e81df096e40ab39fce6133395fc7f3a7690cf8e64e9426eb2364acb7c6012ee470294aa09856a3c643da6e7e86e26a93ab0789ce1d7ffe28bcc0c272c6086a4a0b1e4fa4c868db8083c2586fc96243e06302e7fcbb8f80f284ea55798d487365ce99c9fba42b4dcb8a6d989a25b48bd29a222aed9bd80684091bc2f7e420d963e4fbf3dd21ab2dc8b78653e574c342e5c3ffdc749cfe097257881faa4842d4c53fd5ed8af40bc26c1523625007a12240c910c75b82b960b6bf9a93db1a54bacf3e397cc249ce2cc5cd9103486350e7d71efa5ea68be97905bc621058cc6caf7621a4b5d1a27263782d9f42a03f1f2a8fb39e78c69007c970c367784358b5661113d08e9c58114cadecef293215493063c0495483d1b764e4211c619ba28b197e3d538aa1ffdcf1bb3c64aa3467676a976367337e349f0001791d0432b68268a4370bb1c5a01d4353b4d6e0b28c2ac78149c7e2b164392e1544862c8aa08f0e21a2ceabf4f69247cfef26042cc1ffb5a460e9482354592bd44fce034f11c7f942769e8176218c2a6e1ceb4618eeba1c55f3abed76191b1ba385b74eea0c585e64dc735647a7533aae0322fbea2a48250f81a3d0953dc64b74f6912c46339e0c054423a6ce33691f5acf988c281a0fe0c878adef1b8bac36fd0117e4eeb767f4faf5938b92d72a38703072bc5e00920481559de23f290f5942b11acbdb14645ff5a0c1a02d94bb9bd75c4d79c80ab0379e09f0733c81034d1e3995849ccc373444e98b8ceebbae9e620ae8b197736f084c881a79af1a2cec9944596a4d7653777ef862632c6ffa95070cc5ca01a9ed32b6e2ad1615159ff8bff10752300ba7ceb09f395ec6bc18d9fd7777bf8b519437782e9ab5fa891c7d6b339cdeca2df0e326cdaa8ae17af81f6fafbe4d8a317c5ba54aff6d9ef61fb5e72fdf5e0c2058042874434fb5def59c9e65dd27174d5038c166c47011d62746bf98599c88329daef4a84a9f74c08a91d6e28e2c51fbbf71a6286f1141a73aee2975918f7148f373c4c36b8b11c6b974ee8454fc59b1fa4cb8f9d2072891e19c8ff8501c04a1d55743574328d64aeb7c6e66136ad37d36a52905681d22e7f5725a71ef28931dc57f76d786b2bc0aaec81ab03ddee7ecb40f533f473218d734b45bc41a407d0323e629f03eeb1b227da51a3886faaa6ca0e22a1c7028f434396b586f850823b70ffe458771496f26614de4af1a3968793b0b8ff9f3bd2f7e20fcfb1ad81361176a1275ccb83cb4d77ad7bacfded046329787478d0129bf807bf9988db3f1030c9a2093b1fcc50dbc397369be1091ea37e8da4eef56f5b3ee0d0ae0249267c7a75b71da9011b866a41ef636e69d855e87e7410edef16ef4cdec5fe1a4e5dd3e19f401e745a9e632ced1a80b15bba97e2b65486770b0e2a52ce15cfaa6d33f09b1105e292c5019ae7ccc8fa0b2f33a474dc7e4d8e727d8659c966072ff92599e72893ce94dac36518c064f41f2fe1743a3fe8df724c6a13e6841acc932942b954ee0ae05e6cbda0a4210a4e5cd8179410f07a53bc7d27d142b7bc0563404620e0fcc9683ebbd9ebcb0cf10c7a6e84d13d3efad0835faadcb727480867a33b706a0ad7ff51b86e178de1d8306e3cc7086d11fb79b8f456856e1c4131c143a2b469aa9157fa9f12e98b91583065e57b59af13f510340c711daadb5f9647010409c9206997a884e1db1ccc80b8157e41eb95cded39f75450c4283218a2ad2c568b34e6b0d0fb968d2e9ecec5b0e9ff16f0fba749a4ce7b348dc5183b8d8ea73c8cad6308dbcaabf65c19ac97fc2d7cdea8c59ead1c4ed9c62f0d6c28b27f94e7c6de4fbbb8d23879c99f02e6c42002be4555de33064595eeedd8b7a30c4d382705f3716c25163afd768f7dd2f301e2feddd8f9b99a8d7edf36bebdfa09d35ea851a16674bfc7fefa9c800a7e9266a9fd8e045b4f69ceb09df85b2232a82b6cf7c6bd85365848fe7b7b7793b8f30c4581aa3baaf01bf3d4d9fb9ad92784821244973a9b749a8d97b618ad487de4ca30ee498e77dd432f0d1e562d1246ef28b677b6da9f084d8748936383cfa9aa87fa979bad79e95926d457d9bd1c8c3255a6a4635246f53a058b2fae3bc5bdb5a08a20b9b4ad6b29b11e2285364e585e8c290f57ca9da084b48acc00416c4ed76e87b5effb3b17f7d13a07354cea4a9a4543f9592e8cbc462d6a603060fcdf972c57eac03552609997e917b6a854f0f1128de69fe495fcb760d3f90bcaf348545807d009cc57f7d32024654044953d8d5035e389fededc4c5f8f19c6f377a7f52917031d3e1fb3f33245754465f611ae8b9c43e4a6a819e4349225a6c8c01651d81cd121f69664a8a4b312620f92604c1c5efee698469b4e78a1758e1c9527746c99a66597b4ef3107b56908d0694dd1351061df4657e00c0ef8f8e9632e2ec14dad97a4f5c57f9bad32255a9acbc8114db36b019685793b1194fbd5cb955cfa7f1caf11755db0ae3e6c108dca8d077ef9434e9a64560565c8c3f7ae269e8ece340782be7bbfbdd48135a876eba0f295d872918f0054c2c07cb31513f1dda26018873f8f171bc6b3aa8e2e886279af7cb372d31fb6f6336c202517b6757e15eaf0397ed2373e4abb22a561ce240680d70b84948d7cd523c28f26807efcdc915afa2eeeb9289bfb2b1615ae27232c3a279a10ddd16ce9d8863bac0f14475cca41a149e199c2d9be5f8a13700e6e6bcc638a0f12d49362cb8ae3a23991dfd285623f0b3cc7d041d118bd57d8343c16aefad314fb57dc1c64b73ff241f9034efbb48b329e662a95b1becc9cf1440b95c65a2e4574453a2c2dc88a28adacfe43bed456df6da6ac96917d0feb8086bee319df0cc3b"}) 13.123648597s ago: executing program 2 (id=6370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0) 12.74642566s ago: executing program 2 (id=6374): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xfa856f588590ef7, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) r7 = socket(0x2b, 0x80801, 0x1) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(streebog256)\x00'}, 0x58) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r10, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r12, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x700, 0x1, 0x7, 0xd, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @local, {[@noop, @rr={0x7, 0xb, 0xba, [@multicast1, @loopback]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 11.918821257s ago: executing program 2 (id=6382): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @v={0xbe, 0x3, 0x2, 0x6, 0x3, 0x9, 0x7a, {0x3, 0x7, "4ffd0745c9524de2"}, 0x2, 0x81, 0x1, 0x4, 0x6c, "8a3a07a3bbbf4f21af29b437fd4e87440fd9aa3fbe33eab40ec543a5d4b53cc8d414e21690ea09bd70bc7057d6f5ababa0370596a64cf06a2ef1067f8225b9191412d466d4213cbcfee893bd9ce7e3498eb539e6c20b0897daa9aeca439b91f56346e763c94b86286128edb2"}}, 0x85) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 7.5614859s ago: executing program 0 (id=6421): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x0, 0x127, 0x8}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000100)={0x8, 'erspan0\x00', {'veth0\x00'}, 0x8000}) 5.810630157s ago: executing program 0 (id=6428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x2000c810) 5.69823401s ago: executing program 0 (id=6429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000700000000000000000000000000000010000000000000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_val={0x18, 0x11, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1d1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xbe22, 0x69, &(0x7f0000000340)=""/105, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0x5, 0x140000}, 0x10, 0x5a37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x21, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bind$xdp(r4, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r0, r1, 0x7, 0x8, 0x0, @void, @value=r3, @void, @void, r2}, 0x20) getsockopt(r4, 0xfffffffb, 0x4, &(0x7f0000000180)=""/63, &(0x7f00000001c0)=0x3f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r7, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000900)={{r4, &(0x7f0000000040)='[\x00', 0x2, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x7fff]}, {0x2, 0xfffe, 0x4}}, 0x1ff, &(0x7f00000006c0), &(0x7f0000000700)=0xfffffffe}, {[0xfffffffb, 0xd, 0x84, 0x8]}, 0x3, 0xf8, &(0x7f0000000740)=""/248}) socket(0x15, 0x3, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000080000000000000000085000000c600000095e2000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 5.393802539s ago: executing program 0 (id=6432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x75, "ac82cd3b798eabaab8a21f035fadb26ae6d1e0ad731641101cb3fd59fab262e5ecec60db103b2d2fd62ef8b9484c3d6b004a5ba6a96462af95a31c628e2554bba7effd38ee2256fe095b58844789adc99be443d74957ab80e57554a31d297a0b96dd653672c8ca329ea182ebb6d8c6b9514fa224bc"}, &(0x7f0000000080)=0x7d) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x11, 0xd, 0x10, r2}, &(0x7f0000000180)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008010}, 0x8084) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3bf1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48002}, 0x8001) (async) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000480), &(0x7f00000004c0)=0x10) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x384, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xe}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x24, 0x30, 0x1, 0xc, 0x4, 0x12, 0x1b, 0x48, 0x16, 0x6c, 0x24, 0x1b, 0x1, 0x18, 0xb, 0x60, 0x9, 0x1b, 0x1a, 0x18, 0x12, 0xc, 0x4, 0x5, 0x24, 0x3, 0x2, 0xc, 0x48, 0x24, 0x1]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x4, 0x30, 0x1, 0x6c, 0xa4a7629e41b3812f, 0x4, 0x60, 0x30, 0x24, 0x28, 0x0, 0x5, 0xc, 0xc, 0x2, 0x6c, 0x2, 0x7, 0x24, 0x6c, 0x3, 0x48, 0x4, 0x3, 0x36, 0x36, 0x48, 0x18, 0x9]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x30, 0x75, 0xb, 0x1b, 0x12, 0x48, 0x5, 0x6c, 0xb, 0x6c, 0x60, 0x2, 0x3, 0x50, 0x1, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0xc, 0x80, 0x2, 0x0, 0xfffc, 0x860e, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x72, 0x5, 0x12, 0x4, 0x18, 0x9, 0xc, 0x2, 0x0, 0x48, 0x24, 0xb, 0x60, 0x16, 0x60, 0x1b, 0x9, 0x24, 0x24, 0x1b, 0xb, 0x2, 0x9, 0x1, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0x6}, {}, {0x0, 0x9}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x1}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0x9}, {0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x4, 0x16, 0x5, 0x4, 0x16, 0x18, 0x30, 0xc, 0x1, 0x1, 0x2, 0x4, 0xc, 0x36, 0x24, 0x30, 0x48, 0x16, 0x18, 0x2, 0x0, 0x5, 0x1, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x1}, {0x2, 0x8}, {0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x8}, {0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x401, 0x4, 0x94, 0xfffb, 0xffff, 0x6cdb]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x4, 0x4, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x0, 0x0, 0x1000, 0xe000, 0x5, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x0, 0x76, 0x5dc, 0xfff, 0x562, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x5}, {0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x5}, {0x3, 0x5}, {0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x2}, {0x0, 0x1}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {}, {0x4, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x6}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x2, 0x18, 0x3, 0x60, 0x60, 0x12, 0x30, 0x18, 0x5c]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x99d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (rerun: 32) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000dc0)={0x7, &(0x7f0000000980)=[{}, {@none}, {}, {@fixed}, {@none}, {}, {@fixed}]}) (async) setsockopt(r4, 0x0, 0x8, &(0x7f0000000e00)="cc0b3f2923cc9debdf117520c6401222903ee98763f0c6f8d21736d762760801c1ed631bf745ced57107f887ed6e10ed2534a3e3247707b77a89c694139bbe84f47ddfca401640eceef94c0c576db44a02c9a60816f91a6c761c14de73fc73ca21b8db4a4dcfa21aab5a31271e80836496503f56b9a1e018c105d9b35bba27e8f922b4ea0105992c67efba29097f15aa020b2e6c907f5ec3888e2cd93c75875550bd7bc09c97ceea128b0e2d9f494ad2d00a4e70b14bfcf4e40df4e9ef7eab590b55ca0214372f158c7fb56cc69191c3ae6c7faa64577837df1d2ba11c9b2a3cc343ab78e8a71be035", 0xe9) (async) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000f00)={r8}) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x30, 0x61]}}, &(0x7f0000001000)=""/48, 0x82, 0x30, 0x0, 0x2b88, 0x10000}, 0x28) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001080)={r3, 0x80}, 0x8) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000001440)={0x6, &(0x7f00000010c0)=[{@none}, {@none}, {@none}, {@fixed}, {@none}, {}]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r8) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x70, r11, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x18}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x659fe592, @private1, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000001600)={r4, 0x0, 0x4, 0x8000, 0x4, 0x2, [0x4, 0x7, 0xfffffffffffffffb, 0x2, 0x4, 0x15]}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001680)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000016c0)={0x1d, r12, 0x1, {0x1}, 0xfd}, 0x18) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000001700), &(0x7f0000001740)=0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r13, 0x2, r10) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001780)='macvtap0\x00', 0x10) (rerun: 64) 5.044151135s ago: executing program 0 (id=6436): r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x2e90) close(r2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000240), 0x4) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000070000000a000000c9e7abe14beeebf565def8c62fc4bae0dad96db6fd0b10c7107698dd78118b455d80d43d265fa458f0bc43bfc2c005153faad65c18dd4427957ccb94b0d8d8371b4870204afcc480300d0d85fd851743f75d2011eaca6318b4a98719f0793ebfb0000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x20000004) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x30, 0x28, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x0, 0xc}, {0x0, 0x1}}, [@tclass_kind_options=@c_cake={0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xffffff46) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) socket(0x2b, 0x80801, 0x1) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xc}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @loopback}}) 3.864903284s ago: executing program 1 (id=6448): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) socketpair(0xb19d33702e3d89a4, 0x5, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="1c8e44d787baff0dffff33fd7a49aa4f8f8431059498c47b1c3bf09830144c14e7050000000000000005a636447cae28f84b65ddee57dea3604566a78c"], 0x14}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0x88f7}, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @broadcast}, {0x8000, 0x8100, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "5ee84e261129b9890d2aaeb93e0a2f5da59bc8523952c06c", "0d9cbcb702b22fff696faf9cea82f32898bb1d31373c8accdf66feaf64e55477"}}}}}}}, 0x6e) sendto$packet(r1, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4}, 0x14) socket(0x27, 0x80000, 0x2d) 2.955292651s ago: executing program 3 (id=6451): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0xc4, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbbd, {0x0, 0x0, 0x0, r7, {0xc}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xd, 0x6, 0x8, 0x1, 0xfbff, 0x8000, 0x4403, 0x10001, [{0x8, 0x86c, 0x9, 0x3e2e}, {0x7, 0xa, 0x3, 0xfff}, {0x100, 0x2, 0x5, 0xb4dc}, {0x4, 0x5, 0x2, 0x656}, {0x5d83, 0x400, 0x5, 0xfffffff5}, {0x7, 0x4, 0xb1, 0x9}, {0xf9b, 0x1, 0xc5e3, 0x100}, {0x8, 0x2866, 0x0, 0x400}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1}, 0x20004014) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x9, 0x4, 0x6, 0x5, 0x5, 0x3, 0x8, 0xee, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r8}, &(0x7f0000000200)=0x8) 2.771418303s ago: executing program 4 (id=6452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001b80)={@empty, 0x0}, &(0x7f0000001bc0)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x5, [@restrict={0x9}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x4}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x47}, @float={0x1, 0x0, 0x0, 0x10, 0x2}, @struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x9, [{0xc, 0x3, 0xa0c2}, {0x5, 0x5, 0x5}, {0x3, 0x4, 0x9d}, {0xb, 0x0, 0x5}, {0x7, 0x0, 0x10}, {0x4, 0x5, 0x351ac100}, {0x0, 0x4, 0x423}, {0x6, 0x1, 0x7}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x5}, {0x5, 0x2}, {0xd, 0x2}, {0xe, 0x1}, {0x4, 0x4}, {0xb, 0x2}, {0x10, 0x1}, {0x7}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000001d40)=""/39, 0x139, 0x27, 0x1, 0x3, 0x10000}, 0x28) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000440), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000e5000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r2, &(0x7f0000000480)="38d33999bfed001dee402742b8c86d5f853ba02a6c384b353fdb72c35190a70c8a8b26cc48b68d62f5febf0cb78fb65f4fee7d88c2efd2af9917ab53bb64407bb65698af219210bb4e41682b64f2e24e2a519128f146b4add1caf56bd94fd27c9af6b03c09dde7d6f22cc2f25854ae1ebda576c96c53692a2e0593d6e7433281113e39dd31c878182f15c458eca06c77cb4229af82d3515c52e16bddeaafffedcc898373cfc2d07b37fe0e059565057121d8e37cf8183c555d75df1d52957508b6334bf69fab4888295805538c2e8f80801fa2fcef6eead38dce7335b501246b610b8c949b4c9dd4c2eef143c24e8b3bd4f399e5e1ff", &(0x7f0000000580)=""/13}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001e80)='%ps \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@bloom_filter={0x1e, 0x7, 0x3, 0x7ff, 0x2a0, 0x1, 0x4d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x9}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@o_path={&(0x7f0000002040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x4, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x1000, &(0x7f0000000b80)=""/4096, 0x40f00, 0x0, '\x00', r3, @fallback=0x2e, r4, 0x8, &(0x7f0000001dc0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001e00)={0x4, 0xb, 0x10000, 0x7}, 0x10, r6, r8, 0x9, &(0x7f00000020c0)=[r9, r10, r12, 0x1, r13, r14, r15, 0x1], &(0x7f0000002100)=[{0x4, 0x1, 0x7, 0x4}, {0x1, 0x2, 0x3, 0x8}, {0x0, 0x4, 0xc}, {0x1, 0x5, 0xc, 0x7}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x3, 0xd, 0x3}, {0x5, 0x1, 0x0, 0x4}, {0x1, 0x1, 0x7, 0xa}, {0x3, 0x5, 0x1, 0xa}], 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000015000100c15f00"/20, @ANYRES32=r16, @ANYRES64=r16], 0x64}}, 0x40) 2.625859122s ago: executing program 1 (id=6453): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) r2 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r6, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x1, 0x122, 0x193}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r9, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.395849306s ago: executing program 4 (id=6454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="94", 0x1}], 0x1}}], 0x1, 0x4000800) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000000)) 2.255817514s ago: executing program 4 (id=6455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='/0', 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000280)={0x1000}) close(r7) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="ec58a1b72b2484a3fba139cdf04e5e1052b726937c027c8858d2e2a0a2f84bd5f116364c47c847e2cef97ebb6651e47df0705d52dd9540c29e16111824fd7a20e4b89c4d5b702bee1bbad3d1c85c71832717f675874ff358c3758c9b4dc9e0d163a0add8b3b720ae3a0306c6c17cfe58"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8014) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)='/0', 0x2}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) connect$unix(r6, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000280)={0x1000}) (async) close(r7) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="ec58a1b72b2484a3fba139cdf04e5e1052b726937c027c8858d2e2a0a2f84bd5f116364c47c847e2cef97ebb6651e47df0705d52dd9540c29e16111824fd7a20e4b89c4d5b702bee1bbad3d1c85c71832717f675874ff358c3758c9b4dc9e0d163a0add8b3b720ae3a0306c6c17cfe58"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8014) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) 2.113622698s ago: executing program 3 (id=6456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r3, 0xfffffffe}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x11, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x914905cf340b14a2, 0x2, 0x0, r2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x81}, 0x10, 0x1e7c4, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x3, 0x4, 0x9}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) 2.112926001s ago: executing program 1 (id=6457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0xfffffffffffffd39, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x58, 0x30, 0x200, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x4, 0x0, 0x0, {{0xc}, {0x14}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4e}}}}]}, {0x0, 0x1, [@m_skbmod={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0x0, 0x4, @random="2f9906e5c0ff"}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x211}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x1}]}, {0x0, 0x6, "784886d8b31a8f414f6005b1742d0d6e29d4502e1270c0a6be5fed592237764981"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_simple={0x0, 0x16, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0xed, 0xfff, 0x2, 0x0, 0x7}}, @TCA_DEF_DATA={0x0, 0x3, 'skbedit\x00'}]}, {0x0, 0x6, "43acee2dcf4317cf7216ab269bded9dbfddca7a7cfb6a5a0f40a87e031cca1fafdd9ab8c3d29362f9c5460156871785e6122d9a956d08a4188d3854ca95139"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x5a5013cb3de7c89a}}}}, @m_ctinfo={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x1}, @TCA_CTINFO_ACT={0x0, 0x3, {0xb51, 0x477, 0x20000005, 0x9, 0x4}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x6}, @TCA_CTINFO_ACT={0x0, 0x3, {0xd, 0x8, 0x5, 0xfffffffe, 0x7}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x6}, @TCA_CTINFO_ACT={0x0, 0x3, {0x1, 0x8000, 0x0, 0xfffffff7, 0x8ce0}}, @TCA_CTINFO_ACT={0x0, 0x3, {0x10001, 0x10001, 0xffffffffffffffff, 0x8000, 0x40}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x7}]}, {0x0, 0x6, "1aadcb43ef601bdbe1d7181fc9e49035ec9321d20117fe06ed93ec8f6d19b1460121e69b456d5070ee1a68904c88dafdba0c98346d9b432d8be68b5a3ed31a5e9b5c4d2263e04bbc6621438e3a8b13b7416304c1250e0b981ec02ddd9c96621866c2201a25124b5417468a0ee4a3e31db6a9b23432a08e9bfe68beb1647a807c3d1f1616f200b32763cef5266e0d855d8ac4a12f3f8fcae08e3811c5"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x0, 0x11, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0x80000001, 0xfffffffe, 0x5, 0x6}, 0x9}}, @TCA_SKBMOD_DMAC={0x0, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x6, 0xef7, 0x6, 0x7, 0x101}, 0xb}}, @TCA_SKBMOD_DMAC={0x0, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x400}]}, {0x0, 0x6, "2d8b3a8f0ed03b73b048325b5a2aa329b1e9c684363b27"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_xt={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x51}, @TCA_IPT_TARG={0x0, 0x6, {0xff36, 'filter\x00', 0x81, 0x4, "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"}}, @TCA_IPT_HOOK={0x0, 0x2, 0x3}]}, {}, {0x0, 0x7, {0x1}}}}, @m_ctinfo={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0xfff}]}, {0x0, 0x6, "b1997308e60cbdb0a2bb09607a"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.920800725s ago: executing program 1 (id=6458): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="181300000300000000000000000000008500000097672c985e287b0ac955a20c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) r6 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r6, 0x8) (async) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f00000004c0)=""/137, &(0x7f00000005c0)=0x89) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt(r7, 0x84, 0x1, &(0x7f0000000240)="1a00000002000000", 0x8) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe86) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x7, @remote, 0xd}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e4fffffffffffbff", "ffff5288bc32f80300", "b6730761", "f3ffffffffffffff"}, 0x28) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) 1.793781833s ago: executing program 3 (id=6459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) 1.678973298s ago: executing program 1 (id=6460): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 867.294024ms ago: executing program 0 (id=6461): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071117b000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000004c0)={{r0, &(0x7f0000001a80)='\x9a\xe6\xaa\xa7MB\xfc3\xa6\xaan\x89+0x0, &(0x7f00000008c0)=0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0300000bb102fbe541a4e0480000000000000000801867bf922046d57b89be13973d3663e88eb09f72c864d7aca76b09b401d215f1ab62293c275eec9d536b62401db495a88ff30704c3262939f90c7cac8c240b47db72371f05", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000300"/28], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r8, 0x0, &(0x7f0000000400)=""/154}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pi6 \x00'}, 0x20) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000001680)=0x8000, 0x4) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000300)=0x3, 0x4) write(r12, &(0x7f0000000000)='l', 0x1) sendmmsg$sock(r12, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)="6b9ec9dbf5fda1a3872a4f5f541d92f998dc", 0x12}, {&(0x7f0000000480)="28b801b5b506c713c1f18f5426662c8398352a9141a0edf51a1cf81c940d1d539fb69406b9b95194297b9f5e48bce08ee3249828ad715cabe3fb8fb357d442e0f3147de6856dad2a8c95378ab8cdb71691693ac25074d9fc54ff2d14f9cdb42b29246cde277066f8ffa0ba09f19bfe3b4508abf3d1072e7f001c90dd09dbc29fc6e73e2fbac59b9658d855da76423ce69a816378b9aef916dc695c3f035f2094fd4af8190e24dc6f27fb4e0df644477a8d1777", 0xb3}, {&(0x7f0000000540)="0b46249fad1948307ec3dc895546378ae85ca310d0ed68dd9f3ce1b55854f4d6b29cbf89e39370a4654ca12f4bfa4b505ca3ae022639d7aaf71075972dcdf5229291c919af343ad4bf94b7fb9b1f7e7d79d47c41c829cc96c46716341fd4d38ea4261964623cbf9b07da9e48cfad6a686b847b33c20e6541b2766ced79da523f018eb58d9ca375f5", 0x88}, {&(0x7f0000000900)="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", 0xd73}], 0x4}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001e00)='j', 0x1}], 0x1}}], 0x2, 0x20048401) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="85100000f8ffffffb7080000000000007b8af8ff00000000b7080000630000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000183b0000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000018150000", @ANYRES32=r2, @ANYBLOB="00000000000000001838000002000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000740)='GPL\x00', 0xc0, 0xf2, &(0x7f0000000780)=""/242, 0x40f00, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2b691, r0, 0x6, &(0x7f0000000b00)=[r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, r10, r11, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x1, 0xa}, {0x4, 0x5, 0x1, 0x2}, {0x0, 0x1}, {0x2, 0x5, 0x5, 0x1c997119bf487221}, {0x0, 0x2, 0x8, 0xa}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0x401}, 0x94) socket$inet6(0xa, 0x5, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"]) 711.234357ms ago: executing program 4 (id=6462): r0 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, &(0x7f0000000080)=""/85, 0x55) connect$qrtr(r0, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) close(r0) 622.321587ms ago: executing program 3 (id=6463): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x4}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffeedd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x68}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6, 0x0, 0x200000000000000}, 0x38) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0100000a0a010800000000000000000a00000109000100"], 0x15c}, 0x1, 0x0, 0x0, 0x20090}, 0x20000044) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 613.523181ms ago: executing program 1 (id=6464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xb}, {0xffff, 0xffff}, {0x9, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) 534.506289ms ago: executing program 4 (id=6465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000980), 0xe) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x7809c000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4ea3, 0x40000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400000000900010073797a3000000000080003400000000134000000140a050000000000000000000200ffff0900010073797a300000000008800340000000080c0006400000000000000002140000001400010000000000000000000000000a"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x23}, 0x94) 217.735013ms ago: executing program 3 (id=6466): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r5, 0x0) (async, rerun: 64) r6 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000040)) writev(r8, &(0x7f0000001800)=[{&(0x7f0000000140)="c0947723b08923a20c1e3ca573ca6a2de9b1f577f8e32bb491badf00fe109f25d9ed05e62509c004b83677a3058fc22350e4818d88db2ad9286b6f3c087ecbaa661055f5205a683b46d6b31b674dabe869bbf6b711b164e939905955739b870ccd733ce06adc5366e097a0f9f3291326946b6cc277d7d3227b099d3be758738bc951f0d03b93c016b494fa409c043d281ebfedcd021f82e3e4327be5ba573c8a8ca46a5ee7a50dff60c5", 0xaa}, {&(0x7f00000002c0)="31b88f1b636fc0ab0d07450919ba304a66303a235b61b2e01ab4286ff33859dcb3c89154f9b3a964bd2e0d8326dc9857e6a8bbabc04422dda52178a8875e6233173794067f5a479568883db5604b", 0x4e}, {&(0x7f0000000340)="00d56de95c6b94c909dce3332f538a8d5ff5274dabf620f63541aa187ba6ac8d8c347f4a4961bdd0714fe808534b967c689ece9480c0ff459687e3829ea36db4128a6c967c05f8677ba24ca13241fedadd2f3636ebd929833383eb8704b308", 0x5f}, {&(0x7f00000003c0)="6e72f0435debbfbe247edfd2494bb48af058a05fb30497e111d247eb6c301a7927e315976defe3e9d3f9864466fd10d055ca05fbb305be5c3a2a34e9ee5f4f078dfdf0f5f1b28efa30c19e100d430f897e1a2003a719f3c718fa2c62e006175b3c96c3be5a160558940d8002125915c71e903c7f7a0592ae26b151759692e9f611292eea703bbbbd14d124f72b2e55f936228d957f35a9c36f2649b384a394eaf258e36bef729de2bdbaa47fc1c0aa7f6b43847c3e28899f1e0daaf542824eca3d09af9b8b7f3bfaad190ff0103cb661c5639d4acd00", 0xd6}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="cce538dde8588b12b1081e27b47deb4e0462ecf8b6b53a0921b559edde9e4bde3a2a644ee628b1eba5a07c43d954d4b29f80406f8eed5e577c01bf5366d07e1ea95554c559eb9dcae389aa56ca11f39d2130b3bce5a9fb6556ad7eccbb209b518a7a836f9abf9de1df6d01717370c33bb1718d36cbf4ea4e1e3ef0fc3af94666089c61f79ad93ad690b8424def43438636d1a8fdc33f797bdba94d6d18709bd9e8a545297b669ecd2aee6f3032ee5b2596758c3f442959259595a348fed0fd12", 0xc0}, {&(0x7f0000001700)="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", 0xfe}], 0x7) 206.548542ms ago: executing program 4 (id=6467): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, &(0x7f0000000380)="2b1284ee9be78a30e567f90bb48ac2deb46f4014e7b78eb8ee91de223f3aaabac1df49d3e7ca188b766c8b903bb37409931d81d0f038fcb3f5819ba8e165f4f7cae5d3cbffea5b5461352a18d81866763812d2d01265e8e1aef0dfd4ca0832d08625246146630a112514cad218e7efea6288d569c4f920690cc7f341014d8698fd048a06e5a5fef826ad0c08a154127fc8c173ea8b87eca850b823cd2f64e24c98f2a1274d8fd2b0d6a90b3b04810987a1fb52835306d946bfeef2575a98ffd8f2", 0xc1, 0x800, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x129000, 0x0) close(r10) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x9}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x6, 0x0, 0xfffd, 0x14, 0x9, 0x4, 0x6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040080) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) setsockopt(r6, 0x6, 0x4, &(0x7f00000004c0)="9b8de80fcac9564d0221b1bc35a9ed281d581898051b6b0c1a536b5bae48945b1fc197ca29386aa9ff093ebbc438c593708124f650d8adf409c8af535dc99b04b8dcb736e18591616c4909f99d84366d8f84172200d058d9a1eeb5586ffdb1062d080724f363af7192cb211b4a8d1a4660c867bf9a7ee83e855e99c566d333a617c484b0b683f59d158df31f07ccd13085aba088de60dc732ea9622afc62c9a6b9e88f9131c5c966d30a3e836c22260ed9983f8a02d66666434a36a823716e97f397c3a44ddaf49a539433517d875b6c332f92c38a3389af48a4b7909b437803de0be505cd8129089650046d923b", 0xee) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) 0s ago: executing program 3 (id=6468): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4812161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20008840) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) kernel console output (not intermixed with test programs): .249411][T22655] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 558.582118][T22673] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 558.637703][T22672] macsec0: entered promiscuous mode [ 558.660877][T22672] bridge0: entered promiscuous mode [ 558.673250][T22672] macsec0: entered allmulticast mode [ 558.680303][T22672] bridge0: entered allmulticast mode [ 558.836518][T22686] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 558.855262][T22684] tunl0: Caught tx_queue_len zero misconfig [ 558.890593][ T9143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.898830][ T9143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.055836][T22700] netlink: 'syz.2.4414': attribute type 21 has an invalid length. [ 559.306826][T22711] sctp: [Deprecated]: syz.4.4417 (pid 22711) Use of int in max_burst socket option. [ 559.306826][T22711] Use struct sctp_assoc_value instead [ 559.416295][T22717] netlink: 'syz.1.4419': attribute type 12 has an invalid length. [ 559.952317][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.013441][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 560.250331][T22751] netlink: 'syz.2.4431': attribute type 11 has an invalid length. [ 560.502979][T22763] syz_tun: entered allmulticast mode [ 560.682553][T22776] __nla_validate_parse: 17 callbacks suppressed [ 560.682576][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 560.974656][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.000871][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4446'. [ 561.014636][T22789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4447'. [ 561.215973][T22793] team0: Device ipvlan2 is already an upper device of the team interface [ 561.327535][T22803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4453'. [ 561.416425][T22809] netlink: 'syz.1.4454': attribute type 2 has an invalid length. [ 561.494392][T22813] netlink: 'syz.3.4455': attribute type 1 has an invalid length. [ 561.591997][T22813] bond6: entered promiscuous mode [ 561.597683][T22813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.649964][T22813] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 561.657772][T22813] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 561.929739][ T9143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.011339][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.035605][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4461'. [ 562.177094][T22841] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4463'. [ 562.205470][T22842] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4463'. [ 562.232854][T22843] tipc: Enabled bearer , priority 0 [ 562.253721][T22843] syzkaller0: entered promiscuous mode [ 562.264289][T22843] syzkaller0: entered allmulticast mode [ 562.285514][T22843] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 562.347183][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 562.367661][T22843] tipc: Resetting bearer [ 562.397244][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 562.425164][T22839] tipc: Resetting bearer [ 562.530478][T22839] tipc: Disabling bearer [ 562.617908][T22858] ip6t_srh: unknown srh invflags 4000 [ 563.040218][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 563.075656][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.084847][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.096073][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 563.141084][T22883] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 563.238906][T22883] bond7: entered promiscuous mode [ 563.244552][T22883] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.737571][T22920] netlink: 'syz.0.4483': attribute type 1 has an invalid length. [ 563.812975][T22925] netlink: 'syz.3.4486': attribute type 2 has an invalid length. [ 563.913533][T22920] bond8: entered promiscuous mode [ 563.934369][T22936] netlink: 'syz.4.4485': attribute type 2 has an invalid length. [ 563.951461][T22920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.973599][T22926] bond8: entered allmulticast mode [ 564.092799][ T9133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.155963][T22920] bond8: (slave bridge5): making interface the new active one [ 564.213977][T22920] bridge5: entered promiscuous mode [ 564.256379][T22920] bridge5: entered allmulticast mode [ 564.330142][T22920] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 564.969121][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.128760][T22884] Bluetooth: hci2: command 0x0406 tx timeout [ 565.135000][T22884] Bluetooth: hci5: command 0x0406 tx timeout [ 565.141446][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.444901][T23010] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 565.823498][T23043] __nla_validate_parse: 7 callbacks suppressed [ 565.823519][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4516'. [ 566.179716][ T9131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.214714][T23065] netlink: zone id is out of range [ 566.221595][T23064] netlink: 'syz.3.4523': attribute type 11 has an invalid length. [ 566.234647][T23065] netlink: zone id is out of range [ 566.244480][T23064] netlink: 'syz.3.4523': attribute type 11 has an invalid length. [ 566.264142][T23065] netlink: get zone limit has 4 unknown bytes [ 566.266337][T23064] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4523'. [ 566.780786][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4530'. [ 566.793576][T23091] sctp: [Deprecated]: syz.2.4529 (pid 23091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.793576][T23091] Use struct sctp_sack_info instead [ 566.864267][T23092] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 566.944700][ T24] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 567.070423][T23109] netlink: 'syz.4.4537': attribute type 2 has an invalid length. [ 567.074705][T23099] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 567.108024][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4536'. [ 567.213775][T23119] xt_hashlimit: size too large, truncated to 1048576 [ 567.242899][T23111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.349253][T23111] macvlan3: entered promiscuous mode [ 567.375691][T23111] macvlan3: entered allmulticast mode [ 567.413269][T23111] bond5: entered promiscuous mode [ 567.431895][T23111] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 567.481143][T23111] bond5: left promiscuous mode [ 567.495585][T23132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4542'. [ 567.515756][T23132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4542'. [ 567.527390][T23132] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4542'. [ 567.556378][T23132] netlink: 'syz.4.4542': attribute type 2 has an invalid length. [ 567.576207][T23132] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4542'. [ 567.593493][T23129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4540'. [ 567.656630][T23136] syzkaller0: entered promiscuous mode [ 567.681663][T23136] syzkaller0: entered allmulticast mode [ 567.852722][T23147] IPVS: length: 73 != 8 [ 567.869523][T23151] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4547'. [ 567.940213][T23154] netlink: 'syz.1.4548': attribute type 2 has an invalid length. [ 568.817195][T23203] siw: device registration error -23 [ 568.846742][T23204] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 569.272009][T23231] xt_hashlimit: max too large, truncated to 1048576 [ 570.741221][T23264] netlink: 'syz.1.4574': attribute type 1 has an invalid length. [ 570.905078][T23276] __nla_validate_parse: 4 callbacks suppressed [ 570.905099][T23276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4574'. [ 571.272215][T23288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4580'. [ 571.472992][T23294] xt_ecn: cannot match TCP bits for non-tcp packets [ 571.504234][T23294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 571.533673][T23294] netlink: 'syz.1.4583': attribute type 2 has an invalid length. [ 571.553132][T23296] syzkaller0: entered promiscuous mode [ 571.575533][T23296] syzkaller0: entered allmulticast mode [ 572.002371][T23316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4591'. [ 572.432826][T23350] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 572.576611][T23355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4601'. [ 572.591289][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4602'. [ 572.627250][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 572.665299][T23357] netlink: 'syz.4.4602': attribute type 1 has an invalid length. [ 572.676033][T23364] netlink: 'syz.2.4603': attribute type 27 has an invalid length. [ 572.754041][T23371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4602'. [ 572.864746][T23357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.964106][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4606'. [ 573.126152][T23384] erspan0: entered promiscuous mode [ 573.174734][T23384] vlan2: entered promiscuous mode [ 573.492498][T23404] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 573.534009][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 573.559235][T23404] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 574.112589][T23439] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 574.124204][T23439] bond6 (unregistering): Released all slaves [ 574.171582][T23441] bond6: Invalid ad_actor_system MAC address. [ 574.177799][T23441] bond6: option ad_actor_system: invalid value (1) [ 574.201253][T23441] bond6 (unregistering): Released all slaves [ 574.330077][T23444] netlink: 'syz.1.4619': attribute type 10 has an invalid length. [ 574.361815][T23444] team0: Port device dummy0 added [ 576.396181][T23399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.640006][T23450] __nla_validate_parse: 2 callbacks suppressed [ 576.640028][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4624'. [ 576.680449][T23458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4620'. [ 576.680449][T23460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4620'. [ 577.030933][T23473] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.4626'. [ 577.142929][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4627'. [ 577.175475][T23477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4627'. [ 577.270317][T23484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 577.492892][T23493] sctp: [Deprecated]: syz.3.4634 (pid 23493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.492892][T23493] Use struct sctp_sack_info instead [ 577.997319][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 578.036357][T23532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4643'. [ 578.052619][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.060504][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.317911][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4645'. [ 578.329649][T23542] netlink: 'syz.2.4646': attribute type 1 has an invalid length. [ 578.389762][T23547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'. [ 578.502771][T23538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 578.531471][T23554] tipc: Enabling of bearer rejected, failed to enable media [ 578.824772][T23563] netlink: 'syz.1.4650': attribute type 12 has an invalid length. [ 578.866538][T23563] netlink: 'syz.1.4650': attribute type 29 has an invalid length. [ 578.885294][T23563] netlink: 'syz.1.4650': attribute type 7 has an invalid length. [ 578.914165][T23563] netlink: 'syz.1.4650': attribute type 39 has an invalid length. [ 579.096368][T23575] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.104219][T23556] netlink: 'syz.1.4650': attribute type 12 has an invalid length. [ 579.114027][ T9130] IPVS: starting estimator thread 0... [ 579.114381][T23556] netlink: 'syz.1.4650': attribute type 29 has an invalid length. [ 579.133361][T23556] netlink: 'syz.1.4650': attribute type 7 has an invalid length. [ 579.141796][T23556] netlink: 'syz.1.4650': attribute type 39 has an invalid length. [ 579.219408][T23579] IPVS: using max 25 ests per chain, 60000 per kthread [ 579.447945][T23594] netlink: 'syz.2.4662': attribute type 10 has an invalid length. [ 579.524032][T23594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.566238][T23594] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 579.914586][T23617] tap0: tun_chr_ioctl cmd 1074025672 [ 579.942699][T23617] tap0: ignored: set checksum disabled [ 580.041242][ T9103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.066782][ T9103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.099756][ T9103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.293425][T23633] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 580.345098][T23646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.981921][T23692] openvswitch: netlink: Tunnel attr 355 out of range max 16 [ 581.093491][T23699] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 581.150911][T23702] bond8: Unable to set up delay as MII monitoring is disabled [ 581.163319][T23702] bond8 (unregistering): Released all slaves [ 581.904347][T23736] 8021q: adding VLAN 0 to HW filter on device bond10 [ 581.985823][T23737] bond10: (slave veth5): Enslaving as an active interface with a down link [ 582.930652][T23794] __nla_validate_parse: 9 callbacks suppressed [ 582.930675][T23794] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4715'. [ 583.133624][T23800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4717'. [ 583.635334][T23825] validate_nla: 5 callbacks suppressed [ 583.635365][T23825] netlink: 'syz.3.4722': attribute type 8 has an invalid length. [ 583.676797][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4722'. [ 583.866214][T23849] netlink: 42 bytes leftover after parsing attributes in process `syz.0.4729'. [ 584.047503][T23855] netlink: 'syz.4.4730': attribute type 21 has an invalid length. [ 584.073335][T23858] netlink: 'syz.2.4731': attribute type 1 has an invalid length. [ 584.073631][T23853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4733'. [ 584.108663][T23855] IPv6: NLM_F_CREATE should be specified when creating new route [ 584.153824][T23858] bond7: entered promiscuous mode [ 584.172177][T23858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 584.217890][T23856] syzkaller1: entered promiscuous mode [ 584.247373][T23856] syzkaller1: entered allmulticast mode [ 584.392548][T23881] netlink: 'syz.2.4736': attribute type 10 has an invalid length. [ 584.463089][T23881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.472741][T23881] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 584.565834][T23886] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4738'. [ 584.714684][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4742'. [ 584.727340][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'. [ 585.052624][T23912] bridge6: entered promiscuous mode [ 585.062873][T23912] bridge6: entered allmulticast mode [ 585.095008][T23916] bridge7: entered promiscuous mode [ 585.103191][T23916] bridge7: entered allmulticast mode [ 585.855783][T23962] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 585.872827][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 586.179150][T23978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4769'. [ 586.275981][T23978] syzkaller0: entered promiscuous mode [ 586.282384][T23978] syzkaller0: entered allmulticast mode [ 588.841596][T23992] syzkaller0: entered promiscuous mode [ 588.847217][T23992] syzkaller0: entered allmulticast mode [ 589.073427][T24012] __nla_validate_parse: 1 callbacks suppressed [ 589.073448][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 589.090469][ T9103] lo: left allmulticast mode [ 589.103104][ T9103] pimreg: left allmulticast mode [ 589.123780][ T9103] batman_adv: batadv0: Interface deactivated: gretap1 [ 589.137510][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 589.542993][T24040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4782'. [ 589.942283][ T9103] batman_adv: batadv0: Removing interface: gretap1 [ 589.993723][ T9103] bond7 (unregistering): (slave geneve2): Releasing active interface [ 590.060283][ T9103] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 590.075238][ T9103] bridge6 (unregistering): left promiscuous mode [ 590.101168][ T9103] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.112408][ T9103] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 590.125669][ T9103] .` (unregistering): Released all slaves [ 590.136864][ T9103] bond1 (unregistering): Released all slaves [ 590.156841][ T9103] bond0 (unregistering): Released all slaves [ 590.173421][ T9103] bond2 (unregistering): Released all slaves [ 590.196109][ T9103] bond3 (unregistering): Released all slaves [ 590.214085][ T9103] bond4 (unregistering): Released all slaves [ 590.232612][ T9103] bond5 (unregistering): Released all slaves [ 590.247545][ T9103] bond6 (unregistering): Released all slaves [ 590.284657][ T9103] bond7 (unregistering): Released all slaves [ 590.306752][ T9103] bond8 (unregistering): Released all slaves [ 590.350251][T24020] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 590.603569][T24062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4789'. [ 590.634020][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4790'. [ 590.710723][ T9103] tipc: Disabling bearer [ 590.744912][ T9103] tipc: Left network mode [ 591.017662][ T9103] IPVS: stopping master sync thread 13307 ... [ 591.370292][T24101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4800'. [ 591.386111][T24110] netlink: 'syz.1.4803': attribute type 12 has an invalid length. [ 592.064794][T24134] lo: entered promiscuous mode [ 592.176267][T24134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.199926][T24142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4814'. [ 592.247857][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 592.564791][T24151] tipc: Enabled bearer , priority 0 [ 592.661711][T24157] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4815'. [ 592.805064][T24151] syzkaller0: entered promiscuous mode [ 592.828153][T24151] syzkaller0: entered allmulticast mode [ 592.851803][T24151] tipc: Resetting bearer [ 593.073756][ T9103] hsr_slave_0: left promiscuous mode [ 593.080232][ T9103] hsr_slave_1: left promiscuous mode [ 593.086047][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.094097][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.102595][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.112725][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.136403][ T9103] veth1_macvtap: left allmulticast mode [ 593.142467][ T9103] veth1_macvtap: left promiscuous mode [ 593.147989][ T9103] veth0_macvtap: left promiscuous mode [ 593.154194][ T9103] veth1_vlan: left promiscuous mode [ 593.160922][ T9103] veth0_vlan: left promiscuous mode [ 593.479769][ T9103] team0 (unregistering): Port device team_slave_1 removed [ 593.496467][ T9103] team0 (unregistering): Port device team_slave_0 removed [ 593.624673][T24149] tipc: Resetting bearer [ 595.991330][T24149] tipc: Disabling bearer [ 596.159261][T16420] Bluetooth: hci1: link tx timeout [ 596.166031][T16420] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 596.283642][T24198] syzkaller0: entered promiscuous mode [ 596.289936][T24198] syzkaller0: entered allmulticast mode [ 596.606645][T24216] netlink: 'syz.1.4829': attribute type 1 has an invalid length. [ 596.639136][ T9103] IPVS: stop unused estimator thread 0... [ 596.702037][T24216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.934637][T24231] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4832'. [ 597.180067][T24242] netlink: 'syz.4.4836': attribute type 1 has an invalid length. [ 597.632374][T24264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4840'. [ 597.689588][T24264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4840'. [ 598.253404][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 598.815808][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4849'. [ 598.900734][T24312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4851'. [ 599.010929][T24311] team0: Port device dummy0 removed [ 599.021266][T24311] bridge9: port 1(dummy0) entered blocking state [ 599.051342][T24311] bridge9: port 1(dummy0) entered disabled state [ 599.096845][T24311] dummy0: entered allmulticast mode [ 599.145028][T24311] dummy0: entered promiscuous mode [ 599.252800][T24327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4854'. [ 599.314523][T24327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4854'. [ 599.514151][T24327] gtp0: entered promiscuous mode [ 599.541781][T24327] gtp0: entered allmulticast mode [ 599.625504][T24347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4860'. [ 599.645072][T24350] sctp: [Deprecated]: syz.2.4862 (pid 24350) Use of int in maxseg socket option. [ 599.645072][T24350] Use struct sctp_assoc_value instead [ 599.689402][T24350] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 599.756284][T24357] syz.4.4864 (24357) used obsolete PPPIOCDETACH ioctl [ 600.103643][T24372] tc_dump_action: action bad kind [ 600.181226][T24365] block nbd2: server does not support multiple connections per device. [ 600.216284][T24365] block nbd2: shutting down sockets [ 600.372202][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 600.402877][T24378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4869'. [ 600.525849][T24388] netlink: 'syz.4.4872': attribute type 9 has an invalid length. [ 600.719876][T24398] team0: Caught tx_queue_len zero misconfig [ 601.220343][T24431] bond0: option miimon: invalid value (18446744071829782528) [ 601.247086][T24431] bond0: option miimon: allowed values 0 - 2147483647 [ 601.808774][T24454] veth0: entered promiscuous mode [ 601.924317][T24453] veth0: left promiscuous mode [ 602.301521][T24484] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.346099][T24484] __nla_validate_parse: 2 callbacks suppressed [ 602.346119][T24484] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4894'. [ 602.372992][T24484] nbd: illegal input index -8454144 [ 602.902844][T24510] syzkaller0: entered promiscuous mode [ 602.928020][T24510] syzkaller0: entered allmulticast mode [ 602.941810][T24508] syzkaller0: entered promiscuous mode [ 602.948984][T24508] syzkaller0: entered allmulticast mode [ 602.975000][T24517] lo: entered promiscuous mode [ 603.007736][T24517] netlink: 'syz.3.4903': attribute type 2 has an invalid length. [ 603.044572][T24524] netlink: 'syz.4.4905': attribute type 10 has an invalid length. [ 603.047804][T24517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.096314][T24510] tipc: Enabled bearer , priority 0 [ 603.164103][T24524] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 603.191413][T24527] tipc: Resetting bearer [ 603.513648][T24540] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 603.526044][T24540] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.587911][T24509] tipc: Resetting bearer [ 603.627634][T24509] tipc: Disabling bearer [ 603.847066][T24557] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 604.357703][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4914'. [ 604.372821][T24583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4915'. [ 604.403667][T24574] C speed is unknown, defaulting to 1000 [ 604.425120][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4915'. [ 604.458705][T24589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4915'. [ 604.630138][ T3322] tipc: Subscription rejected, illegal request [ 605.282400][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'. [ 605.309200][T24617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4926'. [ 605.677878][T24638] netlink: 'syz.0.4931': attribute type 1 has an invalid length. [ 605.790349][T24638] bond11: option mode: invalid value (7) [ 605.818905][T24638] bond11 (unregistering): Released all slaves [ 606.143554][T24661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4937'. [ 606.722442][T24692] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 606.757657][T24692] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 606.906891][T24699] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4948'. [ 606.973038][T24699] ±ÿª¨úrBº“€: Caught tx_queue_len zero misconfig [ 607.647033][T24734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4956'. [ 607.682269][T24734] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 607.733290][T24734] netlink: 'syz.1.4956': attribute type 4 has an invalid length. [ 607.769995][T24734] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4956'. [ 607.860011][T24741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4959'. [ 608.045352][ T1018] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 608.607578][T24785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4969'. [ 608.903395][T24799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4973'. [ 608.942669][T24799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4973'. [ 609.142651][T24815] netlink: 'syz.1.4975': attribute type 17 has an invalid length. [ 609.161150][T24806] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.177153][T24806] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.195128][T24817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4978'. [ 609.423199][T24815] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 609.457182][T24804] C speed is unknown, defaulting to 1000 [ 609.992950][T24854] vcan0: tx address claim with dlc 0 [ 610.299964][T24872] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 611.114041][T24912] netlink: 'syz.2.4998': attribute type 1 has an invalid length. [ 611.363321][T24922] netlink: 'syz.0.5003': attribute type 5 has an invalid length. [ 611.572148][T24933] tipc: Started in network mode [ 611.594324][T24933] tipc: Node identity 76efda6f0724, cluster identity 4711 [ 611.626955][T24933] tipc: Enabled bearer , priority 0 [ 611.655320][T24943] syzkaller0: entered promiscuous mode [ 611.680987][T24943] syzkaller0: entered allmulticast mode [ 611.682614][T24948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5009'. [ 611.712581][T24933] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 611.716230][T24948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5009'. [ 611.815373][T24933] tipc: Resetting bearer [ 611.870285][T24954] C: renamed from 26±ÿª¨úrBº“€ (while UP) [ 611.877622][T24933] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5005'. [ 611.932485][T24954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 611.964280][T24955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.987084][T24957] x_tables: unsorted underflow at hook 1 [ 612.037580][T24932] tipc: Resetting bearer [ 612.197562][T24932] tipc: Disabling bearer [ 612.401709][T24982] SET target dimension over the limit! [ 613.103885][T25022] __nla_validate_parse: 4 callbacks suppressed [ 613.103907][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 613.169626][T25026] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 613.356259][T25032] netlink: 'syz.0.5028': attribute type 3 has an invalid length. [ 613.393596][T25032] netlink: get zone limit has 8 unknown bytes [ 613.455090][T25041] netlink: 'syz.0.5028': attribute type 3 has an invalid length. [ 614.694090][T25061] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 615.331805][T25111] netlink: 'syz.0.5047': attribute type 1 has an invalid length. [ 615.419471][T25115] syzkaller0: entered promiscuous mode [ 615.426923][T25115] syzkaller0: entered allmulticast mode [ 615.527523][T25118] IPVS: set_ctl: invalid protocol: 2 0.0.1.1:20004 [ 615.761521][T25111] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.926539][T25116] bond11: (slave veth7): Enslaving as an active interface with a down link [ 616.053881][T25131] bond11: (slave veth9): Enslaving as an active interface with a down link [ 616.099670][T25143] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 616.280660][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5055'. [ 616.348723][T25151] netlink: 'syz.3.5054': attribute type 32 has an invalid length. [ 616.365831][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 619.313364][T25151] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 619.422454][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5062'. [ 619.495279][T25193] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5063'. [ 619.540251][T25197] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5063'. [ 619.699478][T25205] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5066'. [ 619.747189][T25205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5066'. [ 619.826511][T25205] bond8: entered promiscuous mode [ 619.843058][T25205] bond8: entered allmulticast mode [ 619.878934][T25212] ip6tnl0: Caught tx_queue_len zero misconfig [ 619.912779][T25212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5068'. [ 620.031799][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5068'. [ 620.037548][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 620.127087][T25226] 8021q: adding VLAN 0 to HW filter on device bond9 [ 620.201428][T25228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5072'. [ 620.225664][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5072'. [ 621.172457][T25273] syzkaller0: entered promiscuous mode [ 621.198495][T25273] syzkaller0: entered allmulticast mode [ 621.286900][T25280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.999494][T25307] sctp: [Deprecated]: syz.1.5095 (pid 25307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 621.999494][T25307] Use struct sctp_sack_info instead [ 622.355117][T25321] netlink: 'syz.4.5099': attribute type 21 has an invalid length. [ 622.391143][T25321] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 623.205418][T25379] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 623.217583][T25379] openvswitch: netlink: Message has 512 unknown bytes. [ 624.504260][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.511870][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.583280][T25398] __nla_validate_parse: 16 callbacks suppressed [ 624.583303][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5121'. [ 624.619800][T25398] netlink: 'syz.1.5121': attribute type 1 has an invalid length. [ 624.850366][T25402] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 625.759797][T25355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.061646][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5125'. [ 626.227905][T25407] syzkaller0: entered promiscuous mode [ 626.242318][T25407] syzkaller0: entered allmulticast mode [ 626.251191][T25414] 8021q: VLANs not supported on ip_vti0 [ 626.329917][T25435] syzkaller0: entered promiscuous mode [ 626.347433][T25435] syzkaller0: entered allmulticast mode [ 626.360992][T25426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5129'. [ 628.884401][T25446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 629.052555][T25458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5136'. [ 629.451648][T25483] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5144'. [ 629.480732][T25483] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5144'. [ 629.498872][T25483] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5144'. [ 629.745691][T25498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5146'. [ 629.810526][T25499] veth0: entered promiscuous mode [ 629.864274][T25497] veth0: left promiscuous mode [ 630.011595][T25506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5150'. [ 630.054791][T25506] netlink: 'syz.2.5150': attribute type 5 has an invalid length. [ 630.316026][T25522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5153'. [ 630.369922][T25528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5158'. [ 630.404886][T25524] 8021q: adding VLAN 0 to HW filter on device bond8 [ 630.426092][T25524] bond0: (slave bond8): Enslaving as an active interface with an up link [ 630.556669][T25538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5159'. [ 630.694431][T25543] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5161'. [ 631.173184][T25571] netlink: 'syz.1.5167': attribute type 1 has an invalid length. [ 631.225712][T25571] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5167'. [ 631.364870][T25571] syzkaller1: entered promiscuous mode [ 631.392317][T25571] syzkaller1: entered allmulticast mode [ 632.285288][T25628] netlink: 'syz.1.5184': attribute type 10 has an invalid length. [ 632.305205][T25628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.314028][T25628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.325416][T25628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.348754][T25628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.565243][T25655] netlink: 'syz.4.5190': attribute type 16 has an invalid length. [ 632.578018][T25628] bond0: (slave batadv0): Releasing backup interface [ 632.587008][T25655] netlink: 'syz.4.5190': attribute type 17 has an invalid length. [ 632.624244][T25657] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 632.661369][T25655] 1ªX¹¦Dö»: left allmulticast mode [ 632.846040][T25655] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 633.131490][T25682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5198'. [ 633.257278][T25686] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5199'. [ 633.271108][T25686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5199'. [ 633.556753][T25705] netlink: 'syz.4.5203': attribute type 10 has an invalid length. [ 633.822750][T25717] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 633.852036][T25720] netlink: 'syz.3.5208': attribute type 3 has an invalid length. [ 634.935922][T25764] __nla_validate_parse: 3 callbacks suppressed [ 634.935936][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5218'. [ 635.167005][T25627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.397668][T25783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.534512][T25783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.635677][T25789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.892441][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 636.296571][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5234'. [ 636.599492][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5236'. [ 638.933821][T25828] veth0_macvtap: left promiscuous mode [ 639.297439][T25847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5241'. [ 639.324384][T25847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5241'. [ 639.404997][T25849] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 639.418579][T25849] syzkaller1: Refused to change device type [ 639.442178][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5244'. [ 639.533643][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5243'. [ 639.546884][T25858] netlink: 'syz.4.5243': attribute type 7 has an invalid length. [ 639.631945][ T3368] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.655701][ T3368] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.669768][T25864] netlink: 'syz.1.5246': attribute type 1 has an invalid length. [ 639.697285][ T3368] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.741175][T25871] netlink: 'syz.2.5247': attribute type 1 has an invalid length. [ 639.809873][T25874] 8021q: adding VLAN 0 to HW filter on device bond10 [ 639.824287][T25874] bond9: (slave bond10): making interface the new active one [ 639.836410][T25874] bond9: (slave bond10): Enslaving as an active interface with an up link [ 639.845219][ T3368] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.907270][T25871] 8021q: adding VLAN 0 to HW filter on device bond9 [ 639.939379][T25878] bond9: (slave gretap4): Enslaving as a backup interface with an up link [ 639.965507][T25868] netlink: 'syz.3.5248': attribute type 5 has an invalid length. [ 640.095317][T25883] bond9: (slave geneve3): making interface the new active one [ 640.096376][T25887] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 640.125999][T25883] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 640.277911][T25887] bond10: entered promiscuous mode [ 640.310136][T25887] 8021q: adding VLAN 0 to HW filter on device bond10 [ 642.400839][T25858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.755448][T25915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5260'. [ 642.785582][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'. [ 642.822246][T25913] netlink: 'syz.1.5258': attribute type 6 has an invalid length. [ 642.846184][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'. [ 642.875935][T25920] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 642.885262][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'. [ 642.905505][T25913] netlink: 'syz.1.5258': attribute type 6 has an invalid length. [ 642.928233][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'. [ 642.973522][T25927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5263'. [ 642.991732][T25927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5263'. [ 643.005951][T25927] vlan0: entered promiscuous mode [ 643.842611][T25960] ip6tnl0: Caught tx_queue_len zero misconfig [ 644.357688][T25993] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 644.676898][T26013] netlink: 'syz.1.5287': attribute type 12 has an invalid length. [ 644.834879][T26025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5289'. [ 644.891129][T26024] netlink: 'syz.2.5290': attribute type 3 has an invalid length. [ 644.894808][T26029] netlink: 'syz.2.5290': attribute type 32 has an invalid length. [ 644.899734][T26024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5290'. [ 644.977190][T26029] bond10: option coupled_control: invalid value (4) [ 644.992049][T26029] bond10 (unregistering): Released all slaves [ 645.104797][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 645.376849][T26055] team0: entered promiscuous mode [ 645.391563][T26055] team_slave_0: entered promiscuous mode [ 645.397789][T26055] team_slave_1: entered promiscuous mode [ 645.407290][T26055] dummy0: entered promiscuous mode [ 645.510063][T26060] gretap0: entered promiscuous mode [ 645.517567][T26060] vlan3: entered promiscuous mode [ 645.993029][T26086] netlink: 'syz.4.5303': attribute type 4 has an invalid length. [ 646.196533][T26096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.245860][T26094] netlink: 'syz.2.5307': attribute type 2 has an invalid length. [ 646.309925][T26096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 646.322278][T26096] bond0: (slave bond7): Enslaving as an active interface with an up link [ 646.845564][T26127] netlink: 'syz.0.5315': attribute type 1 has an invalid length. [ 646.866562][T26127] netlink: 'syz.0.5315': attribute type 4 has an invalid length. [ 646.943995][T26136] netlink: 'syz.4.5316': attribute type 10 has an invalid length. [ 647.075745][T26144] netlink: 'syz.2.5319': attribute type 12 has an invalid length. [ 647.088871][T26144] netlink: 'syz.2.5319': attribute type 29 has an invalid length. [ 647.665626][ T57] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.695214][ T57] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.703598][ T9131] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.048729][T26198] IPVS: ip_vs_add_dest(): server weight less than zero [ 648.119618][T26184] syzkaller0: entered promiscuous mode [ 648.125168][T26184] syzkaller0: entered allmulticast mode [ 648.145514][T26201] __nla_validate_parse: 11 callbacks suppressed [ 648.145536][T26201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5334'. [ 648.227350][T26202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5334'. [ 648.246410][T26204] sock: sock_set_timeout: `syz.3.5335' (pid 26204) tries to set negative timeout [ 648.418961][ T9130] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.652580][ T9130] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 651.697323][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.776152][T26271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.866859][T26253] syzkaller0: entered promiscuous mode [ 651.873650][T26253] syzkaller0: entered allmulticast mode [ 651.928680][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 652.270019][T26286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5355'. [ 652.300078][T26286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5355'. [ 652.585579][T26301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5359'. [ 652.628523][T26294] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 652.657413][T26294] bond10 (unregistering): Released all slaves [ 652.890681][T26309] lo: entered promiscuous mode [ 652.907436][T26309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.204510][T26329] netlink: 632 bytes leftover after parsing attributes in process `syz.1.5365'. [ 653.303738][T26332] openvswitch: netlink: IP tunnel dst address not specified [ 653.530288][T26343] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.855381][T26362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5373'. [ 654.786793][T26388] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5383'. [ 657.103446][T26388] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 657.122826][T26388] 0ªî{X¹¦: entered allmulticast mode [ 657.131999][T26388] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 657.457878][T26410] validate_nla: 1 callbacks suppressed [ 657.457897][T26410] netlink: 'syz.3.5390': attribute type 39 has an invalid length. [ 657.505750][T26410] hsr_slave_0: left promiscuous mode [ 657.523674][T26410] hsr_slave_1: left promiscuous mode [ 657.610826][T26415] 8021q: VLANs not supported on wg0 [ 657.986784][T26443] bond0: Caught tx_queue_len zero misconfig [ 658.035257][T26448] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5399'. [ 658.063576][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5398'. [ 658.127258][T26448] syzkaller0: entered promiscuous mode [ 658.160847][T26448] syzkaller0: entered allmulticast mode [ 658.176921][T26453] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.5400'. [ 658.193728][T26452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5396'. [ 658.204735][T26452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5396'. [ 658.223151][T26453] 0ªX¹¦Dö»: renamed from gretap0 [ 658.232767][T26453] 0ªX¹¦Dö»: entered allmulticast mode [ 658.373332][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5403'. [ 658.440194][T26461] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 658.476687][T26461] bond11 (unregistering): Released all slaves [ 659.343672][T26512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5418'. [ 659.422724][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5418'. [ 659.540896][T26523] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20000 [ 659.631650][T26528] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5424'. [ 660.180448][T26554] syzkaller1: entered promiscuous mode [ 660.192660][T26554] syzkaller1: entered allmulticast mode [ 660.201523][T26555] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 660.458816][T26555] 8021q: adding VLAN 0 to HW filter on device bond11 [ 660.621216][T26567] sctp: [Deprecated]: syz.2.5432 (pid 26567) Use of int in maxseg socket option. [ 660.621216][T26567] Use struct sctp_assoc_value instead [ 660.928839][T26566] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5432'. [ 660.978329][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.294238][T26586] netlink: 'syz.1.5438': attribute type 2 has an invalid length. [ 661.328527][T26586] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5438'. [ 661.407149][T26593] netlink: 'syz.0.5440': attribute type 1 has an invalid length. [ 661.494567][T26596] syzkaller1: entered promiscuous mode [ 661.510135][T26596] syzkaller1: entered allmulticast mode [ 661.528946][T26600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.605568][T26607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 661.657403][T26607] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 661.670026][T26607] bond12 (unregistering): Released all slaves [ 661.711726][T26609] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 661.724760][T26609] bond12 (unregistering): Released all slaves [ 664.316839][T26588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.552436][T26622] netlink: 'syz.2.5447': attribute type 21 has an invalid length. [ 664.584625][T26622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5447'. [ 664.623900][T26629] veth0_macvtap: Caught tx_queue_len zero misconfig [ 664.634655][T26622] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5447'. [ 664.727377][T26626] bridge9: entered promiscuous mode [ 664.754166][T26626] bridge9: entered allmulticast mode [ 665.019974][T26646] tunl0: entered promiscuous mode [ 665.037273][T26646] netlink: 'syz.3.5453': attribute type 3 has an invalid length. [ 665.068717][T26646] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5453'. [ 665.085182][T26654] IPv6: NLM_F_REPLACE set, but no existing node found! [ 665.095382][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5457'. [ 665.120169][T26653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5457'. [ 665.607028][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5467'. [ 665.872880][T26694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5470'. [ 666.013539][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'. [ 666.147871][T26710] geneve3: entered promiscuous mode [ 666.161610][T26710] geneve3: entered allmulticast mode [ 666.300713][T26713] bond0: (slave veth0_to_batadv): Error: Device can not be enslaved while up [ 666.357117][T26713] gre1: entered promiscuous mode [ 666.417015][T26724] netlink: 'syz.3.5478': attribute type 1 has an invalid length. [ 666.431905][T26724] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5478'. [ 666.937835][T26746] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5482'. [ 667.277886][T26770] netlink: 'syz.3.5490': attribute type 3 has an invalid length. [ 667.462963][T26778] netlink: 'syz.3.5493': attribute type 83 has an invalid length. [ 667.707137][T26793] sit0: Caught tx_queue_len zero misconfig [ 667.744152][T26796] netlink: 'syz.0.5499': attribute type 142 has an invalid length. [ 667.840202][T26799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.122567][T26872] netlink: 'syz.2.5518': attribute type 1 has an invalid length. [ 669.657706][T26903] __nla_validate_parse: 11 callbacks suppressed [ 669.657729][T26903] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5527'. [ 669.844662][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 669.890282][T26910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5529'. [ 669.951039][T26915] policy can only be matched on NF_INET_PRE_ROUTING [ 669.951065][T26915] unable to load match [ 669.990339][T26919] policy can only be matched on NF_INET_PRE_ROUTING [ 669.990362][T26919] unable to load match [ 670.445448][T26946] ip6gre2: entered promiscuous mode [ 670.460325][T26946] ip6gre2: entered allmulticast mode [ 670.485977][T26946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.493286][T26946] IPv6: NLM_F_CREATE should be set when creating new route [ 670.500614][T26946] IPv6: NLM_F_CREATE should be set when creating new route [ 670.734195][T26962] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 670.938926][T26969] netlink: 'syz.0.5549': attribute type 10 has an invalid length. [ 670.965338][T26969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 671.112795][T26979] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5552'. [ 671.352701][T26990] IPVS: length: 12 != 8 [ 671.604044][ T783] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.655625][ T783] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.665576][ T783] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.840585][T27006] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 671.859299][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5562'. [ 672.142976][T27023] IPVS: Scheduler module ip_vs_sip not found [ 672.906538][T27068] netlink: 'syz.1.5580': attribute type 1 has an invalid length. [ 672.944318][T27068] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5580'. [ 672.969012][T27068] netlink: 'syz.1.5580': attribute type 1 has an invalid length. [ 672.983259][T27067] netlink: 'syz.3.5581': attribute type 25 has an invalid length. [ 673.003738][T27079] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 673.020466][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5581'. [ 673.037984][T27080] xt_policy: too many policy elements [ 673.056251][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5581'. [ 673.093289][T27079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5584'. [ 673.324630][T27092] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5587'. [ 673.471477][T27106] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 673.512112][T27096] IPVS: length: 239 != 24 [ 673.967462][T27133] netlink: 'syz.2.5596': attribute type 83 has an invalid length. [ 674.352308][T27157] openvswitch: netlink: Key type 31 is not supported [ 674.560465][T27163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.794717][T27181] __nla_validate_parse: 5 callbacks suppressed [ 674.794740][T27181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5611'. [ 674.892087][T27178] netlink: 'syz.4.5609': attribute type 11 has an invalid length. [ 674.892870][T27170] syzkaller1: entered promiscuous mode [ 674.945632][T27189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5609'. [ 674.966611][T27170] syzkaller1: entered allmulticast mode [ 675.140512][T27195] veth0_to_team: entered promiscuous mode [ 675.166930][T27195] macvtap1: entered promiscuous mode [ 675.180950][T27195] macvtap1: entered allmulticast mode [ 675.219816][T27195] veth0_to_team: entered allmulticast mode [ 675.320255][T27205] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5619'. [ 675.921834][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5623'. [ 676.039728][T27236] netlink: 'syz.4.5625': attribute type 2 has an invalid length. [ 676.149789][T27232] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5624'. [ 676.738789][ T14] bond0: (slave dummy0): interface is now down [ 676.747126][ T14] bond0: now running without any active interface! [ 678.248476][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.339994][T27207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.965609][T27282] tipc: Failed to remove unknown binding: 66,1,1/0:2391537693/2391537695 [ 679.252148][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 679.265126][T27298] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5641'. [ 679.274910][T27299] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5642'. [ 679.401985][T27307] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 679.638775][T27320] geneve0: entered allmulticast mode [ 680.042686][T27345] netlink: 'syz.4.5656': attribute type 13 has an invalid length. [ 680.086883][T27345] veth1_macvtap: left promiscuous mode [ 680.123074][T27345] macsec0: entered allmulticast mode [ 680.167662][T27352] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5657'. [ 680.214566][T27353] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5657'. [ 680.265191][T27352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5657'. [ 680.308983][T27359] netlink: 'syz.3.5660': attribute type 1 has an invalid length. [ 680.377179][T27359] syzkaller1: entered promiscuous mode [ 680.398425][T27359] syzkaller1: entered allmulticast mode [ 680.501933][T27368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5662'. [ 680.692204][T27373] netlink: 'syz.1.5665': attribute type 3 has an invalid length. [ 680.725412][T27373] netlink: 'syz.1.5665': attribute type 1 has an invalid length. [ 680.748833][T27373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5665'. [ 680.767234][T27378] netlink: 'syz.1.5665': attribute type 1 has an invalid length. [ 680.777629][T27378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5665'. [ 680.787912][T27378] NCSI netlink: No device for ifindex 0 [ 680.999709][T27374] C speed is unknown, defaulting to 1000 [ 681.267212][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 681.304489][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 681.347038][T27401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.436874][T27374] netlink: 'syz.0.5666': attribute type 1 has an invalid length. [ 681.457774][T27374] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5666'. [ 681.755708][T27427] netlink: 'syz.1.5678': attribute type 83 has an invalid length. [ 681.893712][T27438] veth0_vlan: Caught tx_queue_len zero misconfig [ 681.992713][T27443] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5683'. [ 682.054096][T27446] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5681'. [ 682.857588][T27464] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 682.869090][T27464] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 682.980879][T27500] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5702'. [ 683.076295][T27505] ip6t_srh: unknown srh match flags 4000 [ 683.744344][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880469f9800: rx timeout, send abort [ 683.753868][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880469f9800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 683.891092][T27531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.256436][T27542] vlan2: entered promiscuous mode [ 684.275329][T27542] bridge0: entered promiscuous mode [ 684.471435][T27555] netlink: 'syz.3.5717': attribute type 4 has an invalid length. [ 685.330716][T27578] x_tables: duplicate underflow at hook 3 [ 685.731017][T27592] __nla_validate_parse: 3 callbacks suppressed [ 685.731039][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5727'. [ 685.927241][T27600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5730'. [ 685.946366][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 686.003092][T27592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5727'. [ 686.375548][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5732'. [ 686.661167][T27624] syzkaller0: entered promiscuous mode [ 686.667255][T27624] syzkaller0: entered allmulticast mode [ 686.680405][T27623] tipc: Enabled bearer , priority 0 [ 686.763616][T27623] tipc: Resetting bearer [ 686.930108][T27623] tipc: Disabling bearer [ 687.218757][T27644] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5740'. [ 687.229121][T27645] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5740'. [ 687.370114][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5742'. [ 687.388570][T27651] netlink: 'syz.1.5742': attribute type 5 has an invalid length. [ 687.396549][T27651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5742'. [ 688.080184][T27507] Set syz1 is full, maxelem 65536 reached [ 688.222164][T27673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5750'. [ 688.254059][T27681] netlink: 'syz.1.5753': attribute type 1 has an invalid length. [ 688.656152][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'. [ 688.714952][T27711] geneve4: entered promiscuous mode [ 688.949414][T27727] netlink: 'syz.2.5763': attribute type 4 has an invalid length. [ 689.214245][T27744] team0: Device xfrm0 is of different type [ 689.379166][T27754] netlink: 'syz.1.5771': attribute type 7 has an invalid length. [ 689.407908][T27754] netlink: 'syz.1.5771': attribute type 8 has an invalid length. [ 689.821990][T27779] veth1_macvtap: mtu less than device minimum [ 689.858716][T27785] veth1_macvtap: mtu less than device minimum [ 690.090737][T27796] netlink: 'syz.4.5781': attribute type 1 has an invalid length. [ 690.499151][T27817] tipc: Enabling of bearer rejected, failed to enable media [ 690.845176][T27835] __nla_validate_parse: 7 callbacks suppressed [ 690.845197][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5792'. [ 690.911092][T27838] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5793'. [ 690.938574][T27838] netlink: 'syz.0.5793': attribute type 2 has an invalid length. [ 690.950957][T27838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5793'. [ 691.208489][T27860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5798'. [ 691.777175][T27889] netlink: 316 bytes leftover after parsing attributes in process `syz.1.5807'. [ 691.836371][T27891] netlink: 'syz.3.5808': attribute type 9 has an invalid length. [ 691.964348][T27896] xt_TCPMSS: Only works on TCP SYN packets [ 692.164611][T27906] netlink: 'syz.1.5812': attribute type 2 has an invalid length. [ 692.439609][T27913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5813'. [ 693.019795][T27940] ipt_ECN: cannot use operation on non-tcp rule [ 693.050217][T27940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5822'. [ 693.081645][T27942] ipvlan3: entered promiscuous mode [ 693.106633][T27942] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 693.193342][T27942] ipvlan4: entered promiscuous mode [ 693.216951][T27945] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 693.323105][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.335470][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.345844][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.356953][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.364631][T27950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5825'. [ 693.383543][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.293100][T27993] netlink: 'syz.2.5836': attribute type 1 has an invalid length. [ 694.339591][T27993] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 694.404735][T28005] xt_hashlimit: size too large, truncated to 1048576 [ 694.527912][T28009] sctp: [Deprecated]: syz.2.5839 (pid 28009) Use of int in max_burst socket option deprecated. [ 694.527912][T28009] Use struct sctp_assoc_value instead [ 694.633068][T27947] C speed is unknown, defaulting to 1000 [ 694.789688][T28017] bond12: entered promiscuous mode [ 694.794990][T28017] bond12: entered allmulticast mode [ 694.801415][T28017] 8021q: adding VLAN 0 to HW filter on device bond12 [ 694.947344][T28027] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 694.964509][T28032] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 694.980235][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5846'. [ 694.982571][T28028] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 695.064133][T28028] bond13: option mode: invalid value (8) [ 695.084876][T28028] bond13 (unregistering): Released all slaves [ 695.128899][T28027] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 695.134869][T28033] team0: Port device dummy0 removed [ 695.449133][ T5630] Bluetooth: hci0: command tx timeout [ 695.471928][T28052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5851'. [ 695.592242][T28059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.705136][T27947] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.713056][T27947] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.721826][T27947] bridge_slave_0: entered allmulticast mode [ 695.731309][T27947] bridge_slave_0: entered promiscuous mode [ 695.741471][T27947] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.750080][T27947] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.759679][T27947] bridge_slave_1: entered allmulticast mode [ 695.768831][T27947] bridge_slave_1: entered promiscuous mode [ 695.847603][T27947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.900532][T27947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.989743][T28076] __nla_validate_parse: 1 callbacks suppressed [ 695.989763][T28076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5860'. [ 696.035480][T27947] team0: Port device team_slave_0 added [ 696.052079][T27947] team0: Port device team_slave_1 added [ 696.191326][T28084] openvswitch: netlink: Missing key (keys=40, expected=100) [ 696.235308][T27947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.252305][T27947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.317575][T27947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.383004][T28095] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 696.393605][T27947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.405461][T27947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.434845][T27947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.564374][T28100] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5868'. [ 696.565922][T28094] syzkaller0: entered promiscuous mode [ 696.580401][T28094] syzkaller0: entered allmulticast mode [ 696.676910][T28097] gtp1: entered promiscuous mode [ 696.682113][T28097] gtp1: entered allmulticast mode [ 696.706317][T27947] hsr_slave_0: entered promiscuous mode [ 696.713483][T27947] hsr_slave_1: entered promiscuous mode [ 696.720770][T27947] debugfs: 'hsr0' already exists in 'hsr' [ 696.740917][T27947] Cannot create hsr debugfs directory [ 696.864003][T28108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5870'. [ 697.543301][T16420] Bluetooth: hci0: command tx timeout [ 699.613279][T16420] Bluetooth: hci0: command 0x040f tx timeout [ 699.822359][T27947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.835484][T27947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 699.965749][T28140] netlink: 'syz.3.5880': attribute type 39 has an invalid length. [ 699.975878][T27947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.987361][T27947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 700.041072][T28119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.231755][T27947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.265899][T27947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 700.363909][T28147] netlink: 'syz.4.5882': attribute type 12 has an invalid length. [ 700.426553][T28147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5882'. [ 700.552044][T27947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.564460][T27947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 700.831092][T27947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.841379][T27947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.851627][T27947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.861533][T27947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.870402][T27947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.880971][T27947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.889596][T27947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 700.899218][T27947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.969781][T27947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.990087][T27947] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.004297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.011454][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.025727][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.032876][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.443604][T27947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.514576][T27947] veth0_vlan: entered promiscuous mode [ 701.537365][T27947] veth1_vlan: entered promiscuous mode [ 701.584658][T27947] veth0_macvtap: entered promiscuous mode [ 701.597094][T27947] veth1_macvtap: entered promiscuous mode [ 701.624354][T27947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.641840][T27947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.663623][ T3368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.673643][ T3368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.690939][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.699432][T16420] Bluetooth: hci0: command 0x040f tx timeout [ 701.700979][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.880507][T12322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.892723][T12322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.926748][T12322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.936541][T12322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.768501][T16420] Bluetooth: hci0: command 0x040f tx timeout [ 712.818960][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 723.269571][T28222] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 723.279841][T28222] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 723.434733][T28230] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5898'. [ 724.009976][T28259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 724.025565][T28259] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 724.056350][T28259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 724.090419][T28259] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 724.189243][T28259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 724.212397][T28259] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 724.290074][T28259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 724.310244][T28259] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 724.340407][T28284] Bluetooth: MGMT ver 1.23 [ 724.360876][T28259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 724.379819][T28284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5912'. [ 724.390435][T28259] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 724.414680][T28289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5913'. [ 724.564475][T28294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5916'. [ 724.897795][T28308] C speed is unknown, defaulting to 1000 [ 724.976564][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5921'. [ 725.013353][T28311] "syz.3.5920" (28311) uses obsolete ecb(arc4) skcipher [ 725.109781][T28326] netlink: 'syz.3.5923': attribute type 1 has an invalid length. [ 725.994549][T28372] syzkaller1: entered promiscuous mode [ 726.007852][T28372] syzkaller1: entered allmulticast mode [ 726.061802][T28378] netlink: 'syz.2.5935': attribute type 27 has an invalid length. [ 726.083480][T28386] netlink: 'syz.3.5933': attribute type 39 has an invalid length. [ 726.119676][T28378] netlink: 'syz.2.5935': attribute type 4 has an invalid length. [ 726.182845][T28378] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5935'. [ 726.700599][T28404] netlink: 'syz.4.5943': attribute type 15 has an invalid length. [ 726.711280][T28404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5943'. [ 726.949423][T28416] syzkaller0: entered promiscuous mode [ 726.967752][T28416] syzkaller0: entered allmulticast mode [ 729.880641][T28445] syzkaller1: entered promiscuous mode [ 730.082359][T28458] xt_hashlimit: size too large, truncated to 1048576 [ 730.094718][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'. [ 730.097405][T28452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5953'. [ 730.105013][T28454] tipc: Invalid UDP bearer configuration [ 730.122586][T28454] tipc: Enabling of bearer rejected, failed to enable media [ 730.442029][T28479] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5958'. [ 730.596442][T28481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5959'. [ 730.643220][ T77] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 730.690579][ T77] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 730.695080][T28488] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 730.701854][ T9131] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 730.702437][T28489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 730.751071][T28481] bond0: (slave bond_slave_1): Releasing backup interface [ 730.817339][T28498] tipc: Enabled bearer , priority 19 [ 730.902445][T28496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.997311][T28507] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5966'. [ 731.017465][T28507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5966'. [ 731.029716][T28507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5966'. [ 731.122339][T28519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'. [ 731.256292][T28522] Cannot find add_set index 0 as target [ 731.267975][T28523] netlink: 'syz.2.5971': attribute type 1 has an invalid length. [ 731.348880][ T9130] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 731.492915][T28540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5976'. [ 731.690290][ T9130] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 731.918197][T28562] gretap0: entered promiscuous mode [ 731.935484][T28562] batman_adv: batadv0: Adding interface: gretap0 [ 731.955225][T28562] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 732.001499][T28562] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 732.062199][ T9138] tipc: Node number set to 2785303143 [ 732.284858][T28577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5988'. [ 732.444745][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.468878][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.481124][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.500156][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.509478][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.585661][T16420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.594887][T16420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.603823][T16420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.615742][T16420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.628824][T16420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 733.684896][T16916] syz_tun (unregistering): left allmulticast mode [ 733.849696][T28583] C speed is unknown, defaulting to 1000 [ 734.097336][T28641] dummy0: left promiscuous mode [ 734.104196][T28641] team0: Port device dummy0 removed [ 734.136773][T28639] : renamed from dummy0 [ 734.282081][T28648] team0: Device xfrm0 is of different type [ 734.640645][T28583] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.648346][T28583] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.650117][T28672] sctp: [Deprecated]: syz.2.6009 (pid 28672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.650117][T28672] Use struct sctp_sack_info instead [ 734.656022][T28583] bridge_slave_0: entered allmulticast mode [ 734.682104][T28583] bridge_slave_0: entered promiscuous mode [ 734.691855][T28583] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.699308][T28583] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.706569][T28583] bridge_slave_1: entered allmulticast mode [ 734.714553][T28583] bridge_slave_1: entered promiscuous mode [ 734.728723][ T5630] Bluetooth: hci5: command tx timeout [ 734.770780][T28583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.785473][T28583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.910496][T28583] team0: Port device team_slave_0 added [ 734.933334][T28583] team0: Port device team_slave_1 added [ 734.968437][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 735.021493][T28583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.028937][T28583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.058692][T28583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.075617][T28583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.083677][T28583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.110948][T28583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.126681][T28684] __nla_validate_parse: 5 callbacks suppressed [ 735.126701][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6013'. [ 735.243668][T28692] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6016'. [ 735.259178][T28691] bond0: entered promiscuous mode [ 735.264531][T28691] bond_slave_0: entered promiscuous mode [ 735.273028][T28692] openvswitch: netlink: Message has 4 unknown bytes. [ 735.286157][T28691] bond_slave_1: entered promiscuous mode [ 735.325238][T28688] bond8: entered promiscuous mode [ 735.346713][T28688] bond8: entered allmulticast mode [ 735.429709][T28683] bridge0: entered promiscuous mode [ 735.439737][T28683] bridge0: entered allmulticast mode [ 735.626998][T28583] hsr_slave_0: entered promiscuous mode [ 735.635107][T28583] hsr_slave_1: entered promiscuous mode [ 735.647291][T28583] debugfs: 'hsr0' already exists in 'hsr' [ 735.666366][T28583] Cannot create hsr debugfs directory [ 735.825254][T28708] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 735.890896][T28703] can: request_module (can-proto-0) failed. [ 735.973444][T28710] netlink: 'syz.3.6021': attribute type 21 has an invalid length. [ 736.019698][T28710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6021'. [ 736.322123][T28583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.334874][T28583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.449151][T28726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.636819][T28583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.659942][T28583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.682154][T28740] netlink: 'syz.3.6026': attribute type 1 has an invalid length. [ 736.720588][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'. [ 736.750152][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'. [ 736.818477][ T5630] Bluetooth: hci5: command 0x041b tx timeout [ 736.950582][T28583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.963035][T28583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.287649][T28761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6034'. [ 737.481564][T28773] netlink: 'syz.3.6037': attribute type 33 has an invalid length. [ 737.511826][T28773] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6037'. [ 738.210184][T28583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.241610][T28583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.354396][T28583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.382854][T28583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.443128][T28583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.475151][T28583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.540323][T28821] bond1: entered promiscuous mode [ 738.576947][T28821] netlink: 'syz.0.6050': attribute type 1 has an invalid length. [ 738.585608][T28821] netlink: 'syz.0.6050': attribute type 2 has an invalid length. [ 738.610926][T28583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.627916][T28822] netlink: 'syz.0.6050': attribute type 1 has an invalid length. [ 738.639528][T28583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.649031][ T5289] veth0_vlan: left promiscuous mode [ 738.650963][T28833] sctp: [Deprecated]: syz.2.6052 (pid 28833) Use of int in max_burst socket option. [ 738.650963][T28833] Use struct sctp_assoc_value instead [ 738.670051][T28822] netlink: 'syz.0.6050': attribute type 2 has an invalid length. [ 738.710643][ T9136] veth0_vlan: entered promiscuous mode [ 738.776319][T28833] vlan1: Caught tx_queue_len zero misconfig [ 738.888153][T16420] Bluetooth: hci5: command 0x041b tx timeout [ 738.984884][T28583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.012607][T28850] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6056'. [ 739.071315][T28583] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.116963][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.124241][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.215754][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.223037][ T9103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.237220][T28858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6059'. [ 739.337225][T28867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6059'. [ 739.754397][T28889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.315064][T28912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 740.374720][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 740.507261][T28930] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6074'. [ 740.635376][T28916] tipc: Enabling of bearer rejected, failed to enable media [ 740.682709][T28938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6076'. [ 740.897101][T28583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.969052][T16420] Bluetooth: hci5: command 0x041b tx timeout [ 741.110990][T28583] veth0_vlan: entered promiscuous mode [ 741.151258][T28583] veth1_vlan: entered promiscuous mode [ 741.314351][T28583] veth0_macvtap: entered promiscuous mode [ 741.367845][T28583] veth1_macvtap: entered promiscuous mode [ 741.398974][T28964] macsec0: entered promiscuous mode [ 741.410689][T28964] macsec0: left allmulticast mode [ 741.481155][T28583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.490485][T28968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.516914][T28583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.525758][T28968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.573511][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.596061][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.660307][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.690996][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.721914][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6085'. [ 742.071243][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.110651][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.166713][T29003] ipt_ECN: cannot use operation on non-tcp rule [ 742.240734][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.278685][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.517671][T29017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6096'. [ 742.588711][T29023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5986'. [ 742.600575][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6095'. [ 742.609624][T29023] openvswitch: netlink: Missing key (keys=40, expected=100) [ 742.626342][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6097'. [ 742.666283][T29026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6097'. [ 742.773405][T29034] netlink: 'syz.0.6099': attribute type 7 has an invalid length. [ 743.048778][T16420] Bluetooth: hci5: command 0x041b tx timeout [ 743.059174][T29043] netlink: 'syz.2.6102': attribute type 4 has an invalid length. [ 743.395447][T29057] openvswitch: netlink: Missing key (keys=40, expected=100) [ 743.420088][T29063] netlink: 'syz.4.6109': attribute type 1 has an invalid length. [ 743.435424][T29061] netlink: 'syz.3.6110': attribute type 1 has an invalid length. [ 743.528247][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 743.547951][T29063] bond9: entered promiscuous mode [ 743.577777][T29063] 8021q: adding VLAN 0 to HW filter on device bond9 [ 743.616652][T29076] bridge0: Device is already in use. [ 743.907929][T29096] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 743.942145][T29096] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 744.425541][T29124] netlink: 'syz.0.6124': attribute type 1 has an invalid length. [ 744.452512][T29124] netlink: 'syz.0.6124': attribute type 4 has an invalid length. [ 744.957295][T29144] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.964625][T29144] bridge0: port 2(bridge_slave_1) entered listening state [ 744.972165][T29144] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.979492][T29144] bridge0: port 1(bridge_slave_0) entered listening state [ 745.022617][T29144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.160402][T29159] netlink: 'syz.2.6135': attribute type 11 has an invalid length. [ 745.194108][T29144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.280999][T29144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.312050][T29144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.333274][T29165] __nla_validate_parse: 7 callbacks suppressed [ 745.333296][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'. [ 745.366135][T29144] batadv0: entered promiscuous mode [ 745.375005][T29144] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 745.385118][T29144] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.392456][ T77] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 745.426977][T29144] batman_adv: batadv0: Interface activated: gretap0 [ 745.441942][T29144] 8021q: adding VLAN 0 to HW filter on device bond13 [ 745.480733][ T9138] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 745.517620][T29160] gtp1: entered promiscuous mode [ 745.530669][T29160] gtp1: entered allmulticast mode [ 745.559983][ T9143] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 745.595694][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6138'. [ 745.631098][ T12] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 745.687443][ T12] bond1: active interface up! [ 745.770029][T29179] netlink: 'syz.2.6139': attribute type 2 has an invalid length. [ 745.789021][T29179] netlink: 'syz.2.6139': attribute type 2 has an invalid length. [ 745.802279][T29179] netlink: 'syz.2.6139': attribute type 1 has an invalid length. [ 745.856014][T29179] bond10: entered promiscuous mode [ 745.865975][T29179] 8021q: adding VLAN 0 to HW filter on device bond10 [ 745.910866][T29176] IPVS: Scheduler module ip_vs_sip not found [ 745.957420][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 746.017561][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 746.028879][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6139'. [ 746.156651][T29197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6144'. [ 746.171926][T29197] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6144'. [ 746.493348][ T14] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 746.735082][ T9103] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 746.750668][T29229] ipt_REJECT: TCP_RESET invalid for non-tcp [ 746.762454][T29229] xt_socket: unknown flags 0x50 [ 746.836499][T29237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6155'. [ 746.847966][T29239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6155'. [ 746.868920][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 746.877134][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 746.899593][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 746.911342][T29240] lo: entered allmulticast mode [ 747.222633][T29211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.239217][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.257044][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.276051][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.293818][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 747.303678][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.374976][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 747.530348][ T783] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.549268][ T9133] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 747.583717][ T783] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.624998][T29255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6159'. [ 748.107562][T29235] lo: left allmulticast mode [ 748.134275][T29279] openvswitch: netlink: Flow actions attr not present in new flow. [ 748.701661][T29249] C speed is unknown, defaulting to 1000 [ 748.992230][T29314] bond10: option fail_over_mac: invalid value (16) [ 749.002433][T29314] bond10 (unregistering): Released all slaves [ 749.133113][T29317] team_slave_0: left promiscuous mode [ 749.167412][T29317] team0 (unregistering): Port device team_slave_0 removed [ 749.190491][T29317] team_slave_1: left promiscuous mode [ 749.231213][T29317] team0 (unregistering): Port device team_slave_1 removed [ 749.371701][ T5630] Bluetooth: hci4: command tx timeout [ 749.711512][T29353] validate_nla: 5 callbacks suppressed [ 749.711533][T29353] netlink: 'syz.1.6184': attribute type 3 has an invalid length. [ 749.738704][T29353] netlink: 'syz.1.6184': attribute type 1 has an invalid length. [ 749.994247][T29249] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.003550][T29249] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.013018][T29249] bridge_slave_0: entered allmulticast mode [ 750.022032][T29249] bridge_slave_0: entered promiscuous mode [ 750.032328][T29249] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.040299][T29249] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.047899][T29249] bridge_slave_1: entered allmulticast mode [ 750.056924][T29249] bridge_slave_1: entered promiscuous mode [ 750.180711][T29249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.202552][T29249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.295320][T29249] team0: Port device team_slave_0 added [ 750.328876][T29249] team0: Port device team_slave_1 added [ 750.426135][T29249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.445611][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.477564][T29249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.527914][T29249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.542715][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.572394][T29249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.656840][T29389] __nla_validate_parse: 6 callbacks suppressed [ 750.656861][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6194'. [ 750.753148][T29387] netlink: 576 bytes leftover after parsing attributes in process `syz.4.6194'. [ 750.934766][T29399] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 750.946711][T29249] hsr_slave_0: entered promiscuous mode [ 750.983216][T29249] hsr_slave_1: entered promiscuous mode [ 751.019340][T29249] debugfs: 'hsr0' already exists in 'hsr' [ 751.029311][T29249] Cannot create hsr debugfs directory [ 751.288319][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 751.288340][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 751.289041][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 751.405286][T29419] netlink: 'syz.2.6206': attribute type 1 has an invalid length. [ 751.449094][ T5630] Bluetooth: hci4: command tx timeout [ 751.475136][T29425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6204'. [ 751.477288][T29419] bond11: entered promiscuous mode [ 751.490475][T29419] 8021q: adding VLAN 0 to HW filter on device bond11 [ 751.583064][T29419] macvtap1: entered allmulticast mode [ 751.599908][T29419] macvtap2: entered allmulticast mode [ 751.671254][T29249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.713543][T29419] bond11: (slave bridge5): making interface the new active one [ 751.721918][T29419] bridge5: entered promiscuous mode [ 751.730176][T29419] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 751.829324][T29249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.005561][T29249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.134507][T29249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.146352][T29414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.120437][T29492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'. [ 753.209208][T29249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 753.236042][T29249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.257435][T29249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 753.291923][T29249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.314972][T29249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 753.320679][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 753.352166][T29249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.380955][T29501] netlink: 'syz.2.6224': attribute type 1 has an invalid length. [ 753.409567][T29249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 753.440587][T29249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.530484][ T5630] Bluetooth: hci4: command tx timeout [ 753.579964][T29492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6220'. [ 753.631709][T29515] veth0: Caught tx_queue_len zero misconfig [ 754.031243][T29546] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6230'. [ 754.072029][T29548] netlink: 'syz.0.6231': attribute type 10 has an invalid length. [ 754.161070][T29548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.194904][T29548] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 754.223368][T29551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6230'. [ 754.344403][T29553] veth0: entered promiscuous mode [ 754.441960][T29556] veth0: left promiscuous mode [ 754.506873][T29249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.583583][T29249] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.627265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.634537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.704528][T12322] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.711852][T12322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.829251][T29575] syzkaller0: entered promiscuous mode [ 754.835826][T29575] syzkaller0: entered allmulticast mode [ 755.034721][T29589] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 755.067092][T29589] netlink: 'syz.0.6240': attribute type 1 has an invalid length. [ 755.083796][T29589] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6240'. [ 755.095829][T29590] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 755.591725][T29622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6247'. [ 755.609338][ T5630] Bluetooth: hci4: command tx timeout [ 756.096278][T29646] pim6reg: entered allmulticast mode [ 756.131733][T29647] pim6reg: left allmulticast mode [ 756.365490][T29249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.614204][T29249] veth0_vlan: entered promiscuous mode [ 756.680537][T29249] veth1_vlan: entered promiscuous mode [ 756.709456][T29674] xt_l2tp: v2 doesn't support IP mode [ 756.876422][T29249] veth0_macvtap: entered promiscuous mode [ 756.897907][T29249] veth1_macvtap: entered promiscuous mode [ 756.948094][T29680] __nla_validate_parse: 2 callbacks suppressed [ 756.948115][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 756.964070][T29683] netlink: 'syz.1.6260': attribute type 2 has an invalid length. [ 756.965254][T29249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.999618][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6258'. [ 757.016837][T29249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.051470][ T9103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.085121][ T9103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.135171][ T9103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.188917][ T9103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.206995][T29658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6253'. [ 757.262265][T29697] netlink: 'syz.4.6263': attribute type 83 has an invalid length. [ 757.316969][T29691] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.325057][T29691] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.386180][T29691] bridge_slave_0: left allmulticast mode [ 757.392785][T29691] bridge_slave_0: left promiscuous mode [ 757.400526][T29691] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.417930][T29691] bridge_slave_1: left allmulticast mode [ 757.427478][T29691] bridge_slave_1: left promiscuous mode [ 757.434108][T29691] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.452490][T29691] bond0: (slave bond_slave_0): Releasing backup interface [ 757.468899][T29691] bond0: (slave bond_slave_1): Releasing backup interface [ 757.485020][T29691] team0: Port device team_slave_0 removed [ 757.500926][T29691] team0: Port device team_slave_1 removed [ 757.510063][T29691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.521218][T29691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.533175][T29691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.543943][T29691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.562729][T29691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.599087][T29695] geneve0: entered promiscuous mode [ 757.604378][T29695] geneve0: entered allmulticast mode [ 757.652439][ T3368] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 757.688822][ T3368] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 757.764602][ T3368] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 757.827944][ T3368] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 757.932283][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6265'. [ 758.042427][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.066325][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.206521][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.224771][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.470106][T29736] tipc: Cannot configure node identity twice [ 758.554363][T29748] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6158'. [ 758.624573][T29751] syzkaller0: entered promiscuous mode [ 758.643442][T29751] syzkaller0: entered allmulticast mode [ 758.847966][T29755] syzkaller0: entered promiscuous mode [ 758.876396][T29755] syzkaller0: entered allmulticast mode [ 758.888750][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.018949][T16420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.036048][T16420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.047306][T16420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.062882][T16420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.074149][T16420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.529983][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 759.799053][T29796] netlink: 'syz.0.6289': attribute type 2 has an invalid length. [ 759.799218][T29786] syzkaller1: entered promiscuous mode [ 759.854658][T29786] syzkaller1: entered allmulticast mode [ 760.075054][T29810] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6292'. [ 760.169085][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 760.179011][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 760.188600][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 760.342514][T29772] C speed is unknown, defaulting to 1000 [ 760.354068][T29833] IPv6: addrconf: prefix option has invalid lifetime [ 760.475371][T29835] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 760.495209][T29835] netlink: 'syz.3.6297': attribute type 2 has an invalid length. [ 760.621055][T29844] netlink: 'syz.0.6299': attribute type 21 has an invalid length. [ 760.634251][T29835] : entered promiscuous mode [ 760.642700][T29844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6299'. [ 760.783439][T29854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6303'. [ 760.793181][T29851] syzkaller0: entered promiscuous mode [ 760.793209][T29851] syzkaller0: entered allmulticast mode [ 760.846006][T29854] team0 (unregistering): Port device team_slave_0 removed [ 760.862215][T29854] team0 (unregistering): Port device team_slave_1 removed [ 761.196548][T29772] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.205047][T29772] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.213101][T29772] bridge_slave_0: entered allmulticast mode [ 761.219902][ T5630] Bluetooth: hci1: command tx timeout [ 761.222565][T29772] bridge_slave_0: entered promiscuous mode [ 761.235422][T29772] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.243924][T29772] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.252502][T29772] bridge_slave_1: entered allmulticast mode [ 761.263454][T29772] bridge_slave_1: entered promiscuous mode [ 761.343529][T29772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.357072][T29878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6309'. [ 761.357475][T29772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.425912][T29772] team0: Port device team_slave_0 added [ 761.436248][T29772] team0: Port device team_slave_1 added [ 761.485203][T29772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.493294][T29772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.532217][T29772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.549519][T29772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.556633][T29772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.584674][T29772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.686059][T29772] hsr_slave_0: entered promiscuous mode [ 761.694485][T29772] hsr_slave_1: entered promiscuous mode [ 761.703935][T29772] debugfs: 'hsr0' already exists in 'hsr' [ 761.716433][T29772] Cannot create hsr debugfs directory [ 761.802446][T29896] openvswitch: netlink: Key type 5123 is out of range max 32 [ 761.982747][T29901] netlink: 'syz.3.6315': attribute type 5 has an invalid length. [ 762.000711][T29772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.013094][T29772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.024937][T29772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.139601][T29772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.152842][T29772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.163968][T29772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.258958][T29772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.271282][T29772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.282146][T29772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.370733][T29772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.383382][T29772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.394088][T29772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 762.956361][T29809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.137509][T29772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 763.190991][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.229689][T29772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 763.242773][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.245037][T29908] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.6318'. [ 763.252783][T29772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 763.292651][ T5630] Bluetooth: hci1: command tx timeout [ 763.305173][T29908] netlink: 'syz.1.6318': attribute type 2 has an invalid length. [ 763.324022][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.347491][T29772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 763.403535][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 763.410148][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.865476][T29772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.942743][T29772] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.987706][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.994963][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.112736][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.120036][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.219016][T29950] C speed is unknown, defaulting to 1000 [ 764.501413][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6334'. [ 764.768565][T29985] netlink: 'syz.2.6337': attribute type 1 has an invalid length. [ 764.873699][T29996] netlink: 'syz.2.6337': attribute type 9 has an invalid length. [ 764.927541][T29995] netlink: 'syz.1.6339': attribute type 1 has an invalid length. [ 764.938122][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'. [ 765.010067][T29985] bond13: option mode: invalid value (12) [ 765.032347][T29985] bond13 (unregistering): Released all slaves [ 765.368361][ T5630] Bluetooth: hci1: command tx timeout [ 765.550766][T30018] openvswitch: netlink: Flow key attr not present in new flow. [ 765.555258][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 766.819030][T29772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.838910][T30074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6356'. [ 766.865167][T30074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6356'. [ 766.900292][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 767.124094][T30089] syzkaller0: entered promiscuous mode [ 767.153796][T30089] syzkaller0: entered allmulticast mode [ 767.358588][T30101] batadv_slave_1: entered promiscuous mode [ 767.423538][T30104] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 767.448721][ T5630] Bluetooth: hci1: command tx timeout [ 767.460687][T30098] batadv_slave_1: left promiscuous mode [ 767.830362][T29772] veth0_vlan: entered promiscuous mode [ 767.865660][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.885745][T29772] veth1_vlan: entered promiscuous mode [ 767.911524][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6368'. [ 767.991710][T29772] veth0_macvtap: entered promiscuous mode [ 768.014732][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 768.027320][T29772] veth1_macvtap: entered promiscuous mode [ 768.200304][T30129] netlink: 'syz.0.6371': attribute type 10 has an invalid length. [ 768.214274][T29772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.322956][T30132] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6373'. [ 768.426511][T30132] bond1: option resend_igmp: invalid value (32767) [ 768.433862][T30132] bond1: option resend_igmp: allowed values 0 - 255 [ 768.452910][T30132] bond1 (unregistering): Released all slaves [ 768.486275][T29772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.548899][ T1018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.575778][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.599321][ T1018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.631781][T30149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6377'. [ 768.690122][ T1018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.692036][T30149] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6377'. [ 768.719372][T30149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6377'. [ 768.761081][T30149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6377'. [ 768.906827][T30161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 769.112941][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.137149][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.243921][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.261954][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.322555][ T57] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 769.656029][T30195] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 769.713339][T30205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6279'. [ 769.746187][T30195] bond1 (unregistering): Released all slaves [ 769.957583][T30213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6389'. [ 769.997087][T30199] bond1: entered promiscuous mode [ 770.199582][T30217] netlink: 'syz.3.6391': attribute type 1 has an invalid length. [ 770.241344][T16420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 770.265743][T16420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 770.275965][T16420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 770.292029][T16420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 770.305512][T16420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.416625][T30226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6392'. [ 770.461426][T30228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6394'. [ 771.092503][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.105573][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.117063][T30257] netlink: 'syz.1.6399': attribute type 9 has an invalid length. [ 771.443094][ T14] bond0: (slave netdevsim1): Releasing backup interface [ 771.491559][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.569454][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.917524][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.977884][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.247946][T30218] C speed is unknown, defaulting to 1000 [ 772.411773][ T5630] Bluetooth: hci2: command tx timeout [ 772.521254][T30325] xt_hashlimit: size too large, truncated to 1048576 [ 772.812113][T30331] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 772.837913][T30331] 0ªX¹¦Dö»: entered allmulticast mode [ 772.895496][T30334] 8021q: VLANs not supported on ip6tnl0 [ 773.472130][ T14] bridge_slave_1: left allmulticast mode [ 773.496880][ T14] bridge_slave_1: left promiscuous mode [ 773.507141][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.545179][ T14] bridge_slave_0: left allmulticast mode [ 773.575119][ T14] bridge_slave_0: left promiscuous mode [ 773.592382][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.725072][ T14] dvmrp0: left allmulticast mode [ 773.741824][ T14] vlan1: left allmulticast mode [ 773.757551][ T14] veth0_vlan: left allmulticast mode [ 773.781532][T30372] nft_compat: unsupported protocol 5 [ 773.883354][T30382] netlink: 'syz.1.6424': attribute type 13 has an invalid length. [ 774.248777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 774.440010][T30384] nbd3: detected capacity change from 0 to 63 [ 774.489201][T23002] Bluetooth: hci2: command tx timeout [ 774.593055][ T14] bond9 (unregistering): (slave geneve3): Releasing active interface [ 774.612901][T16420] block nbd3: Receive control failed (result -104) [ 774.614340][ T5630] block nbd3: Receive control failed (result -32) [ 774.653280][ T14] bond2 (unregistering): (slave geneve2): Releasing active interface [ 774.786256][ T14] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 774.794803][ T14] bridge5 (unregistering): left promiscuous mode [ 774.813792][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.829929][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.842395][ T14] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 774.854981][ T14] bond0 (unregistering): (slave bond8): Releasing backup interface [ 774.864356][ T14] bond0 (unregistering): Released all slaves [ 774.875611][ T14] bond1 (unregistering): Released all slaves [ 774.892593][ T14] bond2 (unregistering): Released all slaves [ 774.913137][ T14] bond3 (unregistering): Released all slaves [ 774.932945][ T14] bond4 (unregistering): Released all slaves [ 774.947735][ T14] bond5 (unregistering): Released all slaves [ 774.965848][ T14] bond6 (unregistering): Released all slaves [ 774.983779][ T14] bond7 (unregistering): Released all slaves [ 775.002220][ T14] bond8 (unregistering): Released all slaves [ 775.026060][ T14] bond9 (unregistering): Released all slaves [ 775.044651][ T14] bond10 (unregistering): Released all slaves [ 775.076858][ T14] bond11 (unregistering): Released all slaves [ 775.095039][ T14] bond12 (unregistering): Released all slaves [ 775.405566][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 775.449893][ T14] tipc: Disabling bearer [ 775.489450][ T14] tipc: Left network mode [ 775.532700][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.540020][ C0] bridge0: topology change detected, propagating [ 775.547864][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.555142][ C0] bridge0: topology change detected, propagating [ 775.770814][T30417] sctp: [Deprecated]: syz.0.6432 (pid 30417) Use of int in maxseg socket option. [ 775.770814][T30417] Use struct sctp_assoc_value instead [ 776.037046][T30426] : renamed from bond0 [ 776.412934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.425565][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 776.568217][T16420] Bluetooth: hci2: command tx timeout [ 776.652242][T30458] netlink: 'syz.4.6441': attribute type 1 has an invalid length. [ 776.669405][T30458] netlink: 'syz.4.6441': attribute type 2 has an invalid length. [ 776.883089][T30467] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 776.896412][T30468] __nla_validate_parse: 4 callbacks suppressed [ 776.896434][T30468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6443'. [ 776.908445][T30467] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 777.119393][T30474] netlink: 'syz.1.6446': attribute type 11 has an invalid length. [ 777.247412][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 777.292842][T30218] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.315018][T30218] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.349118][T30218] bridge_slave_0: entered allmulticast mode [ 777.375474][T30218] bridge_slave_0: entered promiscuous mode [ 777.432065][T30487] netlink: 'syz.4.6449': attribute type 1 has an invalid length. [ 777.449951][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 778.011877][T30218] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.033452][T30218] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.052882][T30218] bridge_slave_1: entered allmulticast mode [ 778.065992][T30218] bridge_slave_1: entered promiscuous mode [ 778.366200][T30218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.426937][T30218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.491768][T30498] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6452'. [ 778.504813][T30498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6452'. [ 778.533453][T30495] syzkaller0: entered promiscuous mode [ 778.545044][T30502] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6453'. [ 778.551369][T30495] syzkaller0: entered allmulticast mode [ 778.599302][T30502] openvswitch: netlink: Message has 512 unknown bytes. [ 778.652408][T16420] Bluetooth: hci2: command tx timeout [ 778.664954][T30218] team0: Port device team_slave_0 added [ 778.758823][T30501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6453'. [ 778.865565][ T14] hsr_slave_0: left promiscuous mode [ 778.925691][ T14] hsr_slave_1: left promiscuous mode [ 778.939562][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.971158][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.019574][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.055811][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.124162][ T14] veth1_macvtap: left promiscuous mode [ 779.160305][ T14] veth0_macvtap: left promiscuous mode [ 779.196086][ T14] veth1_vlan: left promiscuous mode [ 780.252375][T30218] team0: Port device team_slave_1 added [ 780.337377][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.416424][T30218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.444058][T30218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.522793][T30218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.580001][T30218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.605546][T30218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.636089][T30218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.642159][T30561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6465'. [ 781.016085][ T3368] [ 781.018641][ T3368] ====================================================== [ 781.025793][ T3368] WARNING: possible circular locking dependency detected [ 781.032955][ T3368] syzkaller #0 Not tainted [ 781.037420][ T3368] ------------------------------------------------------ [ 781.044480][ T3368] kworker/u8:11/3368 is trying to acquire lock: [ 781.050742][ T3368] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.060786][ T3368] [ 781.060786][ T3368] but task is already holding lock: [ 781.068158][ T3368] ffff888053561d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 781.077954][ T3368] [ 781.077954][ T3368] which lock already depends on the new lock. [ 781.077954][ T3368] [ 781.088370][ T3368] [ 781.088370][ T3368] the existing dependency chain (in reverse order) is: [ 781.097387][ T3368] [ 781.097387][ T3368] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 781.105396][ T3368] lock_sock_nested+0x41/0x100 [ 781.110771][ T3368] mptcp_connect+0x439/0x7a0 [ 781.115990][ T3368] __inet_stream_connect+0x258/0xe00 [ 781.121803][ T3368] inet_stream_connect+0x66/0xa0 [ 781.127268][ T3368] __sys_connect+0x323/0x460 [ 781.132414][ T3368] __x64_sys_connect+0x7a/0x90 [ 781.137710][ T3368] do_syscall_64+0x174/0x580 [ 781.142864][ T3368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.149313][ T3368] [ 781.149313][ T3368] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 781.157048][ T3368] lock_sock_nested+0x41/0x100 [ 781.162336][ T3368] inet_shutdown+0x6a/0x390 [ 781.167370][ T3368] nbd_mark_nsock_dead+0x2cb/0x550 [ 781.173085][ T3368] recv_work+0x1cee/0x1e10 [ 781.178031][ T3368] process_scheduled_works+0xa8e/0x14e0 [ 781.184151][ T3368] worker_thread+0xa47/0xfb0 [ 781.189288][ T3368] kthread+0x388/0x470 [ 781.193877][ T3368] ret_from_fork+0x514/0xb70 [ 781.199022][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.204324][ T3368] [ 781.204324][ T3368] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 781.211976][ T3368] __mutex_lock+0x19d/0x1550 [ 781.217126][ T3368] nbd_queue_rq+0x373/0x1150 [ 781.222250][ T3368] blk_mq_dispatch_rq_list+0x499/0x1990 [ 781.228429][ T3368] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 781.235320][ T3368] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 781.241820][ T3368] blk_mq_run_work_fn+0x16c/0x300 [ 781.247369][ T3368] process_scheduled_works+0xa8e/0x14e0 [ 781.253439][ T3368] worker_thread+0xa47/0xfb0 [ 781.258563][ T3368] kthread+0x388/0x470 [ 781.263345][ T3368] ret_from_fork+0x514/0xb70 [ 781.268501][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.273786][ T3368] [ 781.273786][ T3368] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 781.281006][ T3368] __mutex_lock+0x19d/0x1550 [ 781.286119][ T3368] nbd_queue_rq+0xc1/0x1150 [ 781.291146][ T3368] blk_mq_dispatch_rq_list+0x499/0x1990 [ 781.297222][ T3368] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 781.304069][ T3368] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 781.310574][ T3368] blk_mq_run_work_fn+0x16c/0x300 [ 781.316133][ T3368] process_scheduled_works+0xa8e/0x14e0 [ 781.322205][ T3368] worker_thread+0xa47/0xfb0 [ 781.327324][ T3368] kthread+0x388/0x470 [ 781.331913][ T3368] ret_from_fork+0x514/0xb70 [ 781.337046][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.342360][ T3368] [ 781.342360][ T3368] -> #3 (set->srcu){.+.+}-{0:0}: [ 781.349487][ T3368] __synchronize_srcu+0xc9/0x2f0 [ 781.354982][ T3368] elevator_switch+0x1e8/0x7b0 [ 781.360337][ T3368] elevator_change+0x2fa/0x480 [ 781.365646][ T3368] elevator_set_default+0x375/0x440 [ 781.371392][ T3368] blk_register_queue+0x3f3/0x4e0 [ 781.377006][ T3368] __add_disk+0x6cb/0xe30 [ 781.381900][ T3368] add_disk_fwnode+0xfb/0x4b0 [ 781.387112][ T3368] nbd_dev_add+0x733/0xb60 [ 781.392067][ T3368] nbd_init+0x15f/0x1e0 [ 781.396851][ T3368] do_one_initcall+0x250/0x870 [ 781.402511][ T3368] do_initcall_level+0x10a/0x1a0 [ 781.408037][ T3368] do_initcalls+0x59/0xa0 [ 781.412898][ T3368] kernel_init_freeable+0x29d/0x3e0 [ 781.418632][ T3368] kernel_init+0x1d/0x1d0 [ 781.423527][ T3368] ret_from_fork+0x514/0xb70 [ 781.428635][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.433926][ T3368] [ 781.433926][ T3368] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 781.441753][ T3368] __mutex_lock+0x19d/0x1550 [ 781.446866][ T3368] elevator_change+0x1af/0x480 [ 781.452163][ T3368] elevator_set_none+0xb5/0x140 [ 781.457549][ T3368] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 781.463880][ T3368] nbd_start_device+0x189/0xb30 [ 781.469267][ T3368] nbd_genl_connect+0x1597/0x1c10 [ 781.474812][ T3368] genl_family_rcv_msg_doit+0x233/0x340 [ 781.480959][ T3368] genl_rcv_msg+0x614/0x7a0 [ 781.485993][ T3368] netlink_rcv_skb+0x226/0x4a0 [ 781.491278][ T3368] genl_rcv+0x28/0x40 [ 781.495785][ T3368] netlink_unicast+0x7bb/0x940 [ 781.501178][ T3368] netlink_sendmsg+0x813/0xb40 [ 781.506464][ T3368] sock_sendmsg_nosec+0x13a/0x180 [ 781.512102][ T3368] ____sys_sendmsg+0x54e/0x850 [ 781.517398][ T3368] ___sys_sendmsg+0x2a5/0x360 [ 781.522601][ T3368] __x64_sys_sendmsg+0x1b1/0x290 [ 781.528080][ T3368] do_syscall_64+0x174/0x580 [ 781.533200][ T3368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.539617][ T3368] [ 781.539617][ T3368] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 781.548254][ T3368] blk_alloc_queue+0x544/0x690 [ 781.553555][ T3368] __blk_mq_alloc_disk+0x194/0x390 [ 781.559185][ T3368] nbd_dev_add+0x494/0xb60 [ 781.564128][ T3368] nbd_init+0x15f/0x1e0 [ 781.568809][ T3368] do_one_initcall+0x250/0x870 [ 781.574118][ T3368] do_initcall_level+0x10a/0x1a0 [ 781.579580][ T3368] do_initcalls+0x59/0xa0 [ 781.584433][ T3368] kernel_init_freeable+0x29d/0x3e0 [ 781.590154][ T3368] kernel_init+0x1d/0x1d0 [ 781.595004][ T3368] ret_from_fork+0x514/0xb70 [ 781.600139][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.605428][ T3368] [ 781.605428][ T3368] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 781.612639][ T3368] __lock_acquire+0x1520/0x2cf0 [ 781.618032][ T3368] lock_acquire+0x106/0x350 [ 781.623061][ T3368] fs_reclaim_acquire+0x71/0x100 [ 781.628518][ T3368] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.634849][ T3368] __alloc_skb+0x1d7/0x7a0 [ 781.639810][ T3368] tcp_stream_alloc_skb+0x3f/0x580 [ 781.645498][ T3368] tcp_connect+0x1582/0x53e0 [ 781.650677][ T3368] tcp_v6_connect+0x14ed/0x1cf0 [ 781.656102][ T3368] __inet_stream_connect+0x258/0xe00 [ 781.662003][ T3368] inet_stream_connect+0x66/0xa0 [ 781.667471][ T3368] kernel_connect+0x141/0x1c0 [ 781.672671][ T3368] rds_tcp_conn_path_connect+0x6e9/0x920 [ 781.678926][ T3368] rds_connect_worker+0x1d8/0x290 [ 781.684545][ T3368] process_scheduled_works+0xa8e/0x14e0 [ 781.690618][ T3368] worker_thread+0xa47/0xfb0 [ 781.695735][ T3368] kthread+0x388/0x470 [ 781.700330][ T3368] ret_from_fork+0x514/0xb70 [ 781.705529][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.710819][ T3368] [ 781.710819][ T3368] other info that might help us debug this: [ 781.710819][ T3368] [ 781.721133][ T3368] Chain exists of: [ 781.721133][ T3368] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 781.721133][ T3368] [ 781.734090][ T3368] Possible unsafe locking scenario: [ 781.734090][ T3368] [ 781.741558][ T3368] CPU0 CPU1 [ 781.746960][ T3368] ---- ---- [ 781.752333][ T3368] lock(k-sk_lock-AF_INET6); [ 781.757100][ T3368] lock(sk_lock-AF_INET6); [ 781.764126][ T3368] lock(k-sk_lock-AF_INET6); [ 781.771327][ T3368] lock(fs_reclaim); [ 781.775340][ T3368] [ 781.775340][ T3368] *** DEADLOCK *** [ 781.775340][ T3368] [ 781.783516][ T3368] 4 locks held by kworker/u8:11/3368: [ 781.788922][ T3368] #0: ffff88802b374140 ((wq_completion)krds_cp_wq#15/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 781.800710][ T3368] #1: ffffc9000d24fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 781.813511][ T3368] #2: ffff8880550e3980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 781.824568][ T3368] #3: ffff888053561d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 781.834672][ T3368] [ 781.834672][ T3368] stack backtrace: [ 781.840575][ T3368] CPU: 0 UID: 0 PID: 3368 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 781.840594][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.840605][ T3368] Workqueue: krds_cp_wq#15/0 rds_connect_worker [ 781.840624][ T3368] Call Trace: [ 781.840682][ T3368] [ 781.840711][ T3368] dump_stack_lvl+0xe8/0x150 [ 781.840766][ T3368] print_circular_bug+0x2e1/0x300 [ 781.840787][ T3368] check_noncircular+0x12e/0x150 [ 781.840809][ T3368] __lock_acquire+0x1520/0x2cf0 [ 781.840827][ T3368] ? __lock_acquire+0x683/0x2cf0 [ 781.840863][ T3368] ? __pfx_clockevents_program_event+0x10/0x10 [ 781.840887][ T3368] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.840914][ T3368] lock_acquire+0x106/0x350 [ 781.840929][ T3368] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.840953][ T3368] ? ip6_dst_check+0xe2/0x7e0 [ 781.841014][ T3368] fs_reclaim_acquire+0x71/0x100 [ 781.841027][ T3368] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.841049][ T3368] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 781.841071][ T3368] ? ip6_default_advmss+0x80/0x3b0 [ 781.841084][ T3368] ? __alloc_skb+0x1d7/0x7a0 [ 781.841097][ T3368] ? __alloc_skb+0x1d7/0x7a0 [ 781.841112][ T3368] __alloc_skb+0x1d7/0x7a0 [ 781.841127][ T3368] tcp_stream_alloc_skb+0x3f/0x580 [ 781.841143][ T3368] ? __asan_memset+0x22/0x50 [ 781.841172][ T3368] tcp_connect+0x1582/0x53e0 [ 781.841204][ T3368] ? ktime_get_with_offset+0x93/0x2d0 [ 781.841220][ T3368] ? __pfx_tcp_connect+0x10/0x10 [ 781.841240][ T3368] ? seqcount_lockdep_reader_access+0xea/0x100 [ 781.841265][ T3368] ? seqcount_lockdep_reader_access+0xec/0x100 [ 781.841292][ T3368] ? __asan_memset+0x22/0x50 [ 781.841314][ T3368] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 781.841354][ T3368] ? inet6_hash_connect+0xeb/0x170 [ 781.841394][ T3368] tcp_v6_connect+0x14ed/0x1cf0 [ 781.841416][ T3368] ? __pfx_tcp_v6_connect+0x10/0x10 [ 781.841431][ T3368] ? preempt_schedule_common+0x82/0xd0 [ 781.841451][ T3368] ? inet_csk_get_port+0x11bc/0x1740 [ 781.841491][ T3368] ? preempt_schedule_thunk+0x16/0x40 [ 781.841513][ T3368] ? __bfs+0x153/0x290 [ 781.841527][ T3368] ? __bfs+0x153/0x290 [ 781.841543][ T3368] __inet_stream_connect+0x258/0xe00 [ 781.841568][ T3368] ? do_raw_spin_lock+0x12b/0x2f0 [ 781.841587][ T3368] ? lock_sock_nested+0x6a/0x100 [ 781.841607][ T3368] ? __pfx___inet_stream_connect+0x10/0x10 [ 781.841630][ T3368] ? inet_stream_connect+0x51/0xa0 [ 781.841652][ T3368] ? __local_bh_enable_ip+0xd0/0x130 [ 781.841684][ T3368] inet_stream_connect+0x66/0xa0 [ 781.841706][ T3368] kernel_connect+0x141/0x1c0 [ 781.841725][ T3368] ? __pfx_kernel_connect+0x10/0x10 [ 781.841748][ T3368] ? __local_bh_enable_ip+0xd0/0x130 [ 781.841771][ T3368] rds_tcp_conn_path_connect+0x6e9/0x920 [ 781.841795][ T3368] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 781.841816][ T3368] ? process_scheduled_works+0xa20/0x14e0 [ 781.841841][ T3368] rds_connect_worker+0x1d8/0x290 [ 781.841856][ T3368] ? process_scheduled_works+0xa20/0x14e0 [ 781.841876][ T3368] process_scheduled_works+0xa8e/0x14e0 [ 781.841907][ T3368] ? __pfx_process_scheduled_works+0x10/0x10 [ 781.841937][ T3368] ? assign_work+0x3cf/0x5d0 [ 781.841958][ T3368] worker_thread+0xa47/0xfb0 [ 781.841989][ T3368] kthread+0x388/0x470 [ 781.842004][ T3368] ? __pfx_worker_thread+0x10/0x10 [ 781.842024][ T3368] ? __pfx_kthread+0x10/0x10 [ 781.842040][ T3368] ret_from_fork+0x514/0xb70 [ 781.842057][ T3368] ? __pfx_ret_from_fork+0x10/0x10 [ 781.842073][ T3368] ? __switch_to+0xc89/0x1420 [ 781.842096][ T3368] ? __pfx_kthread+0x10/0x10 [ 781.842111][ T3368] ret_from_fork_asm+0x1a/0x30 [ 781.842136][ T3368] [ 782.199907][T30218] hsr_slave_0: entered promiscuous mode [ 782.206226][T30218] hsr_slave_1: entered promiscuous mode [ 782.212380][T30218] debugfs: 'hsr0' already exists in 'hsr' [ 782.218260][T30218] Cannot create hsr debugfs directory [ 782.439637][T30575] syzkaller0: entered promiscuous mode [ 782.463155][T30575] syzkaller0: entered allmulticast mode [ 782.500881][T30570] tipc: Enabling of bearer rejected, media not registered [ 782.526898][ T14] IPVS: stop unused estimator thread 0... [ 782.694000][T30580] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6468'. [ 782.800205][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 783.179917][T30218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 783.194966][T30218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.205775][T30218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 783.218151][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 783.220395][T30218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.235207][T30218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 783.249216][T30218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.257673][T30218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 783.268937][T30218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.361291][T30218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.384369][T30218] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.397449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.404574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.423532][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.430712][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.824834][T30218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.879034][T30218] veth0_vlan: entered promiscuous mode [ 783.892099][T30218] veth1_vlan: entered promiscuous mode [ 783.922304][T30218] veth0_macvtap: entered promiscuous mode [ 783.933878][T30218] veth1_macvtap: entered promiscuous mode [ 783.953565][T30218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.966310][T30218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.990298][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.011206][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.022222][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.035774][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.067526][T30218] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 784.104616][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.117262][T30218] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 784.127943][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.165236][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.176388][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.328182][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 790.889420][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!