last executing test programs: 5.68278722s ago: executing program 3 (id=6660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1d, 0x2, 0x6) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf254d000000080003003b538584fd040653f406030000002c59c12204150020455da38a75432f9ec6d4679032d0bf9d2b156468feb3ef1eee683003"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000080)=r4}, 0x20) close(r6) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="6400000000914530c3010400f200000000000000000000240001801400018408000100e000000108000200e00000", @ANYRESDEC=r2], 0x64}}, 0x4004080) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000140)=0x3, 0x2) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x3c, &(0x7f0000000340)=""/60, 0x41100, 0x8, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r6], &(0x7f0000000500)=[{0x1, 0x1, 0x6}, {0x0, 0x5, 0xf}, {0x3, 0x4, 0x5, 0xb}], 0x10, 0x7fff}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r6, 0x5, 0x4}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r10, r11, 0x24, 0x0, @void}, 0x10) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001c00010000000000fffff000020014000000fe0100400000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r12, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r14}, 0x10, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="010000009b0500000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000800100000001000100000000000000000000000000a6231182a58ca43f4f0c2912071c67b4fac00533dc62cd565b67cdb778ab2a5fa4aafebb25c2e13aa34f432d6b6200f02d3ba988622f778d223e4abca92afe5177863b046b085f148af21408758288a063ce3d21fa9310d63eefb1bb14958ec29e5090f75a6cb58d3e2f87d6743f1f691f2105a0a31b00000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r15 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) 5.108557763s ago: executing program 1 (id=6665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0x10c, 0x19, 0x729, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x18}, {0x0, 0x7, 0x4, 0x2, 0xffffffffffffff1f, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x3de}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x10c}}, 0x8000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async, rerun: 64) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 4.863981032s ago: executing program 1 (id=6668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r2, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000980)=""/254, 0xfe, 0x2000, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r9 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x5, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5, 0x0, 0x8}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xb0, "6d82c317f342ca612f5384f7fecd90c6c784d79f7f31b4281bde147d845f1f8833ab811a2f4d91b73d8ae634f18602a2e930d1f44b6c05f1ffa4b26bb227d26b072795d04fb5cfe6a5d1abc2c2e6f95ee0d5cc77316d490f3b1590d30923dde179ba0d978328b82b4715a5efacd60241ac58a088f1ce9136f9a568d3f44a4a5fffce1581a7be403b502604947f28a6077fb47a45a170418b3fbcad2b52f2a3f9fca187b1306fd7b04050b8c9170eb83e"}, &(0x7f0000000100)=0xb8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000140)={r11, 0x6}, 0x8) getpeername$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) 4.668008548s ago: executing program 3 (id=6671): r0 = socket$inet(0x2, 0x0, 0x9) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)={'dummy0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) connect$netrom(r2, &(0x7f0000000180)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0xfffffffe, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x97, "c0618fff20a47268b4bda2256f622157a27a2ec85e8590ed904b7ee592643e1c7ebb459643a86a634d0e3fbd9e61eb1c5a4a5555a1b7be8f1987c6ab125bcc5c4541d4ba130b3719b6b50aed200705965f5165248c3e20859b0a2beadffba0c8bcda4461c412105d5f09d2a1abec8e7c7b13cc650e4e456381b142182978aaa58bacd8b38992c76eb13d22e887cfcb77deae0fc6caabdd"}, &(0x7f0000000300)=0xbb) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000340)=0x2, 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="c34c393fba8a4ee82a85dcba2c00dc8f619a01251f644df81ef20d394223b5f1b958654cbc034a9b118db0584e19dc673f696ff650981a1e69eaed42db0229204f637d5285a544d68f42b8b89ec122f7664c506c09e06840e4494373fe7d21f88ceb9f35ec11655e", 0x68) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000480)={0x3, 0x8001, 0xb}, 0xc) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000004c0)) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000500)='ip6gretap0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) write$tun(r3, &(0x7f00000005c0)={@val={0x0, 0x3}, @val={0x3, 0x0, 0xdd43, 0x32, 0x1, 0x101}, @llc={@snap={0x1, 0xaa, "a6", "282619", 0x886c, "4386638a7f5252d37596bd17740f7d389a7f43c01f5e1a88935125248e7d7b1582fd6b66dd850490cf73dbf9695ae0aef3d0bd9c60a74dcac68840f0af437f79dde57c9210b926a84fb2d3fe26e58b1897d3a5745ae360a4bee6b3bf8416d43dfbd2bf8f771af066782868a9441d62d3c7f9bc6a011f6bef3e18b69cc1b11b06516ee12b84323ee121626d9a7c6c88c269ab851dc57113"}}}, 0xad) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x94, &(0x7f0000000700)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x4, @empty}, @in6={0xa, 0x4e23, 0x329, @private2, 0x5}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2f}}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r6, 0xfff}, &(0x7f0000000880)=0x8) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000008c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x3, 0xdf, [0x101, 0x3, 0xffffffffffffff01, 0x24, 0xe4, 0x10000], 0x3, &(0x7f0000000900)=[{}, {}, {}], &(0x7f0000000940)=""/223}, &(0x7f0000000ac0)=0x78) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa4, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xa4}}, 0x4040080) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x1000}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000d00)={r7, 0x1, 0xe1, "1985257c435ee6a8bca190ff4339c4cd29b4d8bc14069f285fe3b68066842a64c56a5801d727eab74f74d3a5117a04a9f284b9006450c82a8f3be388e8d003765f44a5b842ce97fc2238919f89120f45bf1b842ef6650245b6cd4a926137edf5735aabdf672e6f1141ff1ee287e43adb8b3e7ed91bf1bbbff5f8885b57452b989281231c37b094cdc60846b1f064a635be0e5f11929019af33722ebefffba4fe2815b99007c3577f5f2fa66b682a2b09f34a0afcdfadead5495fc0b7d7fbcf611aab81e2a33998dec0d1fa15f22ed85203c62a9fc36fd638313c3825c71aadd362"}, 0xe9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000e00)=[@mss={0x2, 0x4}, @sack_perm, @window={0x3, 0x0, 0xbd}, @timestamp, @window={0x3, 0x427, 0x400}, @timestamp], 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x80010, r0, 0x2fcf3000) 4.555919857s ago: executing program 2 (id=6673): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) connect(r2, &(0x7f00000000c0)=@caif, 0x80) (async) r3 = socket$inet(0x2, 0x3, 0x8d) (async, rerun: 32) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) sendto$inet6(r5, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x7bffffff, 0x4, 0x710001, 0x7, 0x7]}, &(0x7f0000000040)=0x54) (async, rerun: 32) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (rerun: 32) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000280)=0xc) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r7}) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r10, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9) (async, rerun: 32) r11 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r11, 0x0, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r14 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r13, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r14}]}, 0x3c}, 0x1, 0x620b}, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r15, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) 4.332026057s ago: executing program 2 (id=6676): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) 4.111156999s ago: executing program 2 (id=6678): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x6, 0x8, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r3, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @local}, 0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000100)) 4.070779936s ago: executing program 3 (id=6680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000001000000018000180140002006e657464657673696d3000000000000005000b"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0xe, 0xe}) 2.195470155s ago: executing program 4 (id=6683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffff9, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x10001000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) close(0x3) 1.679896944s ago: executing program 2 (id=6684): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000140), &(0x7f0000000200)=@tcp6=r1, 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r4, 0xffffffffffffffff, 0xf, 0x0, 0x0, @void, @value=r5}, 0x20) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r5, 0x7, 0x0, 0xac79, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r3, r7, 0xb, 0x4, 0x0, @void, @value=r5, @void, @void, r8}, 0x20) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)="889a700f8428a0fcd5ffbfa165fba3a1a63017de8e41481240aee7c1e945b9921077809af91dca6e4dfd087adc8ef12bada53d891bb710702f4a1924e4c0cdd87a42d9384c4de212336f5d749798211677c25dd047372f6b1f875f65233019a1493221ae877d1d8b9f") ioctl$SIOCX25SCAUSEDIAG(r6, 0x541b, &(0x7f0000000140)) 1.503557923s ago: executing program 3 (id=6685): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x40b}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r6, 0x0, r9, 0x0, 0x1000, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], 0x0, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r6, r6, 0x4, r7}, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r13, @ANYBLOB="0100d100640d4b00000000000000000c00e7b055992732cee84a7a4ae660c6ce67251ce34bf0a8b7e53f22ce47b7f79eed12868aaf123fa3f227adb6c72cfc9d988470bc6f321d9c6831fe6ccd74ba4a1bf7145ac74c0cc0c74dff77dfbb915f655134664d4dee155aab73b1ab90ddb94990cc35dd6986e8a38b2c49c3b3148ae13535804a0631d7f507483ced3b385354fa149b082b2aea8f0000000000", @ANYRES32=r14, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020064766d72703100000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020068737230000000000000000000000000180001801400020076657468305f746f5f626f6e64000000"], 0x88}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 1.401726118s ago: executing program 4 (id=6686): r0 = socket(0x2b, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xa8, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x84, 0x1, 0x0, 0x1, [@nested={0x80, 0x10, 0x0, 0x1, [@nested={0x7c, 0x8, 0x0, 0x1, [@nested={0x78, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}, @typed={0x66, 0x12a, 0x0, 0x0, @binary="8ff5bb9427ab70a33426e7c093e686a42f8e8f0d6b0f40cfe60be041b3f1f8cddfe753828af570bd1154423c4208ffbabc2d99757b21b0753a1f09ce362ffbad546905dc09b5bbfb11bf58a4f9dd181af172a96d2f7f1d37f8ae06f9b786ff845b6a"}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0xa8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0x24, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000800)) 1.328800526s ago: executing program 0 (id=6687): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, &(0x7f0000000000)=0x380000, r3, &(0x7f0000000040)=0xfbde, 0x2, 0x1) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x20008844) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x109, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x200000d4) sendmsg$NL80211_CMD_SET_COALESCE(r5, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r7, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.327120907s ago: executing program 1 (id=6688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x4}, 0x38) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd4f3249caee6b7a53436a5e7000fbdbdf25590098f900009900260600007e000000", @ANYRES16=r0, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) 1.22382736s ago: executing program 3 (id=6689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="0209000200"/16], 0x10}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x24040040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004890) 1.11422526s ago: executing program 0 (id=6690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000400140012801a00010069706f6962000000040002800a000100bbbbbbbbbbbb0000d00b2f82"], 0x40}}, 0x88890) 1.068837326s ago: executing program 2 (id=6691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) (async) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04001e001a030700", 0x33a) 1.068226405s ago: executing program 4 (id=6692): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, &(0x7f00000005c0)=""/4096, 0x1000, 0x100, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) close(r5) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d618963680000004400028008000240000000002c0003005c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad09000100697076a8c3da5705cc7c130077797a3000000000090002006f797a3200000000140000001100010000000000000000000000000a2b14f72eb07d110ac7b867d4c4f1dc5b70df7f3584874accdb685f546b6b333e2e1a2a655fd9dd14fc0ac6ce5fed9da83be78404d92e72ec8ec9aa170738e0bd370d9983b1c618fae2bf1173db1ade7fde60f9c9fb19d2c39b0b"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.029862897s ago: executing program 3 (id=6693): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x800000000, 0x100000000, 0xff, 0xfffeffffffffffff, 0x4, 0xb, 0x2880040000000009, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x0, 0x6, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x700, 0xb, 0xd0c}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000002000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000000000001dc22000ffffffff18120000000000000000000000000000000b6ee8251c6abeabe0f7854e4eaa1e139996f1be435e3f70", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0xf, 0x2}, {0x4, 0x3, 0x8, 0x6}, {0x0, 0x1, 0x6, 0x3}, {0x0, 0x4, 0xe, 0x4}, {0x5, 0x2, 0x2}], 0x10, 0xfffff800}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 892.282861ms ago: executing program 0 (id=6694): socketpair(0x1e, 0x5, 0x200, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x7c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xffe0}, {0x2}, {0x5, 0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xfffff56f, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x6, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x40, 0x8000}}]}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4004085) 635.761462ms ago: executing program 1 (id=6695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000060a010400000000000000000200006e7365740000180002800900010073797a3000e0ffffa8ff0340000000000000024000799b15fcb9ecd42fc87a30000000000900020073797a3200fe0000140000001100010000000000000000000000000a000000000000000000"], 0x80}}, 0x0) 605.16081ms ago: executing program 0 (id=6696): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) accept4(r1, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80, 0x80000) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x4e22, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xffffffffffffff14}], 0x1}}], 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000280)) 552.382867ms ago: executing program 4 (id=6697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e80)={0x2270, r1, 0x621, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff71, 0x54}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25b}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6a}, @NL80211_ATTR_CSA_IES={0x21f0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x5, 0x5, 0x81, 0xbd, 0x5, 0xfffa, 0xfff3]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x4b5, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@random={0x4, 0xc, "54b09045f496ae0e49b50d8d"}]}, @NL80211_ATTR_BEACON_TAIL={0x33, 0xf, [@supported_rates, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x8, @broadcast, 0x40, @value, 0x9, 0x9, @device_b, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x84, 0x6}}]}, @NL80211_ATTR_BEACON_TAIL={0x9f, 0xf, [@dsss={0x3, 0x1, 0xb2}, @measure_req={0x26, 0x4b, {0x7, 0x74, 0x5, "23358bedab28cb3b68bcc730ff3c9e8034af8e33e5960ebc7d92e81c130b8a54749f090e5bc6e593badb63f2e9eddfdfa4d5d696c101fdd862133a79ab5f660003c123a1f8c38143"}}, @preq={0x82, 0x3b, {{0x1}, 0x39, 0xf, 0x1ff, @broadcast, 0x8bf3, @void, 0xf3c, 0x2, 0x3, [{{0x1}, @device_a, 0x5}, {{0x1}, @device_b, 0x6}, {{}, @broadcast, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x7c, 0x9}}, @gcr_ga={0xbd, 0x6, @broadcast}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xfe, 0x80, [@random_vendor={0xdd, 0x40, "f482d3d1ba0c66701cc73c95f3588a9876f0864ecd0b0aa28682aab92b1004f8755bdde92b1abfabdc6b19ec17bd8210eb1248e3c4e5f05489ae6d0d4fbf5320"}, @fast_bss_trans={0x37, 0x68, {0x9, 0x1, "2d8e14471e84659e2b2cbd76cc40fa8c", "760013887710a524aa54f4fae80fb7c1ad449a442ec383e7ec4dbfa902025977", "80e95f36de9d98b36f14a4c77314fa46bba8caa429026c33748a2eaa0b51b51b", [{0x2, 0x14, "fe52530a072fd505de271568bd67c580247e911e"}]}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x1, 0x0, {0xfff, 0x500, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x800, 0x0, 0x3}}, @perr={0x84, 0x22, {0x6, 0x2, [{{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0xa}, {{}, @device_a, 0x1, @void, 0x11}]}}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x4, [{0x12}, {0xc}, {0x18}, {0x30}]}]}], @beacon_params=[@NL80211_ATTR_IE={0x233, 0x2a, [@measure_req={0x26, 0xc6, {0x7, 0x1, 0x2, "37dde02bd42ccc3cb88d39192463bf150687e20c64ce890b1072b5fe5004bdc731ca60b45275b28937a431826b698b44db3b4f0d843a44f9825a28ff54b73552c98246ab3df46dc82608284b6708643af2dcc2b82eb7fdf01db5e583fcecfe7e68c3588791cc97682f82a6375515c683f6f1da3d4e228c7404a7f76b9d2d0fd4b6912267de8135351ea449f144a239c83ebf645e0e3f641717afa72130822eb357f1093ab5db44a6c91f2969d2a57ae0852c70677298c7d5582ebb3e8ba9790cdf1de4"}}, @measure_req={0x26, 0x6c, {0x3, 0x8, 0x2, "503002f61c3fd4d041dfc43aeb7208ec01f261f3457f2f22448b4903e27a68049db09c96d9367b5b862cdbf602cf7f58310f820f3987b5ab98a55ac08cdc65be5f8be4ff3cd0352de816024f7e7ec0e2f2fcf97c8b0b1bfc84fde114e9ae1cba78cdc1a13506a9e2d0"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x7, 0x9}}, @link_id={0x65, 0x12, {@random="3e07f64037ad"}}, @mesh_chsw={0x76, 0x6, {0x0, 0x6, 0xc, 0x4}}, @mic={0x8c, 0x18, {0x2a4, "d4eec836989b", @long="68481cce4c206d0a60835ee43c2eb894"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0x80, 0x2a}}, @random={0x2, 0xb2, "fcb31b8e5dd8ea768b96c6db545c5f7f7df70de0631d548a2e6b0c27389bbbf3639980539b79ebad60389300d03fbf3e6b4a2078f772ef3af93c5d9d0f7e9982c4d39038a73e6331fb7f7d8a758d30aebebf612eda1147da8a8c67d6f2ed1490a61416af19e125b4d74c808b4fbb92c9c351523da18726064fd55ed54f0afc80e1dae37acb5d2c4bc2e0a4ab31ca9b0a02ec0c227b02dd858af6e54451bff451b6b9796747e3300dbe3e7556ee7ac0847950"}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_FTM_RESPONDER={0x14f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "df89d02d11dc72e11e6e4596394bbc831124ee5f32a472e7a83e889642eba245cda0d8a25c2a06a5907a22265cc2bb3140d550ac5fc00db9f53f6f65068cef0179d4a9886c52b68c030167f0dadae2f333093055e1cfdc50c9e5e968c9600776e8953bef37d3e6ad954a8d5c6dba603c55dd228c64b8aa11be46d264e7576fe68c7ba2a6abcae14333f239e1b647b9ac2da635b288c390a262f216514ae55e69fd4a0aa8e7f064be3c2455060c796c15d17cf3288b4c8f04084f76a78e8f630ba3168c29149012074137521bcf391ec56c24e75c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x80, 0x3, "3a856845f6912ec703254a8235b79979f47ed9759fea5b143af42349ee6c4a227493bfb0ee6c9053212d3392e6d9020774defa995d38d2c09dbadb2e97eaafe0107a9de32d8db02418907aeaad3c4cfde04740db99292c43c1d1d13a3da7cfb2b82a1c9cfa687d35914d0c82c2a13e5bb2c0a6256d28cee91e5430ee"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "082c699b7808f7f98c796a959d1b2e51b0e52f5497559f9b7396b823db4ede2a1076afcd849c02f1bd5bf4bcc9275c419f044d47a315688c9adf4651df8b64e44102446cc7bc030e9dfe4f26683e4672b1ca625677ddae28fd721fd0cb635cf1c2ffdc059524176d1339adc897081fb667cdfaad2b1b0eff184f89"}, @NL80211_FTM_RESP_ATTR_LCI={0xb8, 0x2, "51fef155a4cc25bf77c1b066fcf2c7b51604b6f25da2146c240cc11f706ce2926a1bb4010b2e1b1ad7213becd5722f25897440becdf5a95439e2bc38d8567fda7b7a381b4c8cfbe726f0778e5a12da16a7e5199ad39f1b6dff74a422914ea03b929153a3938ba502dff97b1d26a133eaa0164a3a2dea6351f288d09a914a2f225afa4cb19f163031a3cfdb41a17debc6c5b07ac067672a9efe6112d325b1713c532bfdf570f7fcc6793b489dfe743bedcba7efa2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "eafc398d63ce8e06c71b4c9ed5de506b4953477b3f"}, @NL80211_FTM_RESP_ATTR_LCI={0xfc, 0x2, "11e5de794e190b51a70fd3b9404bebb2cce5fbe320b51b58c0caab223c31e3b8b07b25be4b6c0f6a6d070dd7b38628cec2b9c9fa93bd419dc0fc186efd2c978b5754e9501924a27c4e3cac14800100fd068a05d1e349e57476785bff7fed31f534b968a9dc298a637d01be899417564bf60a3a674024f38af326b8f841e65d02a8d2c1180f63f4c9df7a200c3814e19df8e99da2b60e1e170f2816db7ced68de88aeeff04b449e91b960e3d80da79d5b5b1df637cb8bd80f6f45c88092cc0d4f59f25ec98e7fbc511b1acef453619ed9f7e2144c3aad10b46cf24cd67d5840b641c93604210bfb562891d8e7342525342355e4736d5346ae"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "b039a1cfc39b24c73004c2846b28bf6e806df29d5f480eec3439a357f5020dd7a18b4e407bb306fc03f983d0415af0c1cee5a96ed71a7b15936bab0c0b5b1e569c915a5c98104b7248a68102ff5cdac5e89b9af45239768263e9efff060f6af7deae2503fd24a1aeac4265397837041411486248f315727332aa19e5ceb936c033644a0f59c3b6a5043a5aa877b6ea968a2928684983c87560e690959124c22b7184b2650eaa64d57e8af9a292328f7ef896faa286102c381910c1dfea5718cb759204af57d9f303632f8e49c143b8ae19994b41194e401cd9ce2c31c2b40eed343df564e289f05d3e5e55a884dd2921ebcc5b43a9307f3e319c891231ee316e530f9775486c4407e491de1c8e83896973c769d27293776668adef89491ca280d5e897909cc05be211e6abe0ab21ff0247998714b9b7fca3fa7834709be94a939718465b39ec05774e20ce7a9b11223aa23a6739ad035a9eb9c4e54026f6d550bdfa81786ea15282d40af9c2b8475a56a9ab9421e61ddabc076d0c115cb469e7cdc2c488063e8181dd9fb127bc813f5f8ef61d1409ec80f842c437731675e28222e27e12b863a76bf2ae233daa1125c329780fb836f1f3494af50354a1111fc1732d50624c6239b69b971280687e6f6f176b9d3e1698fde78e57554641022916b0c26b0c5928b234e6b9494c3efbc9f08b2c27920798970f744e866b8301cb9100747a4a34f4741ecfeafc6deb3e95cfcaae2d8dac14f81c1653d6a79c215096b8cdb9c79b001333b884c8be7e9c7d4159cdcaacdcd76e6b967ed8f7b6287940b98963be19dbc2f7fa22090d57d00e6fc7bb6e2acfa6404b26475457b752e6d27344092bd4d1ca8ba37c485168e66555bdaf98e0c17d8d86bc7761efc5c61ffbe1f7ec10d4ed19ddb68a3d4d6c4c7638cc76309ba2825314ec89abbc82dbd8dcf1e852b625555fc99ec4c736cff13acb1dbdd7d04b2fe60a55e1ae2a4c150804724e7b0cdcd8a0a08bb02f7b8ca5253109d5754377bed56c60b57ce0399f3ea3d4627bf602cd3d0121e800cdfd2c99b43fd92ab590229e121b764fda7001263b743e91353d6b6e16996df0199e137fc427fa16015a602d8e2f90c9e6c4040a0a62ce5e8566a0185c4ba59d98ea55cf692f040ed316dc1dec02e4b68a738c8ab17f4e31ac35cd34adcaec275cd5df49650d14cd0cee9819f39383353bfb893e627f5e30b79713ae25dc0463e3db40bb5999dd177cbf4c3733389305926d0b663a3e554034a11d5f9f6d67580c10c5c96694680ca6c8d0901456ebfbd937b6df0e5013d26a88a7f9a135bb0447cea4157b165921ffba7ff3188d8404ed2da541f7c59f3645729eb1ba154ea46671a76bb2b0076f622ab795a80e98c18b30f58cf2f4ce5e7c81f93fb30b12dc396278fecd99f17784e283c67fc6585c1742dfaebc96beece319388e90c13eb3faeb96c54fb383f6c82731b5b80c9cc2912abed4f3f1775d62639417c9254110326534742276ff0d751d6488a6b4a1ebde9a136b802b9b1168fbc91103a64b30f5853c7c15dea6e13945cddca9fb5158ab5da0714ad9875f010163b7e9de90f0217a91590910acecddcb8f30c579b3acff042bd6742753a5b37cd280f0b80151832feb4dc00709011c0b0f89f61e455e0e358a0582f0f72725818ac88b375ff852a94526a6c9bf3da111c9f31fe98a13bb99b47689bf2084f6d1850a9794d6d56dd392fbffa75e80f8c300256d32773e692d90a24caa9c18444f43944b334be62ed7a62d5969256a00fed50e2c3db7ce5e153a55f0b6eba89cd9424d64438d8f2c087caacc796d8f3712ff42e3726f68000ff49b389e2e8fd3a0c8d141693b184e3750f0dec867bad5203900787ea2214ad1a4d74884f2f510425a66aa8fb46ee80a34c7ab595650a18a9adb2c79f625a1f6ac77f15470dc1fa4b4e47617eb6af6bedd659844ef88ba612ef1e67aa877b526859cbbd76e32537ee3ec7c6a164b9655d39506783626bc8f99bf82d46e8bc410b99dcc0e39b637e940bd54e345a134ed7ff01397bd0316be9b7e5b0e6d9af4dce8a8a505fa76d5b5bfeecf244d6deefb540e1067d69c434209b8432a9a6943793acd3955e792211622a092d48a834e2ef6f737b5b742e015e058eb372e251de4b7b47e6c3b8ff3a8f87743e741fe9d022bb56b49d7eb621bcd5adbe9487bbcd14a74706bb0b301d6c3b9583216d5daa77aa64b3f0e91ba8a3570e0d92ac74843c443e4ad26e33cce5fed0c8a5bdc83c3cf717039fb77d89308d92d03ebccb0c8b9f05e69453a69d9182b9c6b2df01138bcfb2a744a3803505a6df113d97d95b593d0560fa252ec4f79f817288bdadce99aa713bbe5e34fb8078aa01e56f5e6aac053c1a1899e2285a19d65cd056310018ccf7b73f073fc04c6e9b8a63bf0ffd55ec9c99af6bf057976845debff8e158535f1b852f1d84265e6856782d04c7219d2c935640d891915c2f970447b1e982ec6fad44357049e319f19bed73398b9d93478e72fdddcc46bdd6b8f4a2f80cf630b5e7e3daadda1bc9c1760cefafc975179b5748ccdcebde72664efb1beb64f4fcc4a1bceeba87602fb31eccf707f036a49c751e85752e0fe1f81a32cbf589eef711dad091727e112dd8c2ac358b9f1be18c0275ce298511ae06d1dbb9217d52d73856accf87d4c691cfb9d0bd32eff06d3f49a59041dd9cb229bd62d2b27b4e5a57299beca77722550f176ba4ad5ab81c0e22c05b1f526a91eb119558c3f001a726cad18f22a28bc61ce175cf3a65abc787d23ec4f0f17b0e93c00a41031afdd3af70eb923b020336b5dfe0663b4b59a22f1c927844556265163f07ece66a245afd9416c8bc919b2d445cedfd0402e51cc93090ef98eeddeeef4fc0479688638c9470fa533f39b5fea3979fce5235db80bb06378b4809260ab6b3cad3be9f8ec608a1c4a281111c6a06a8e8a1b022f891c06a003610cbe99a28e057753bfaef962817d082b3868c0560ab8d151dc3d56a4f08ae8990bd0da8920746bc2f6bc1d738309ff4844b31e75bb5665364fe920a1e3f01a7ffa541023742eb4e1aed57aad1f33a8eabea70e3c027401f4746b78298920c0a10746d2125c7bd196ce987bf3311c287d8a892f834cb405213d07b90ad0d5f3525c0340e7fe39444c05de16b8a3f26d245260721dda4fd921a6e743ad9107b00b0f009a2b82858ae0409d4f4135adaf0bd3fd5db0f2814673b4116299707bca0aad4fba503a12d342e041bb204806f981f593b4c8a79a38f5793de50292e10664386c11e34725788bfba993aac3035550f6e578e613ee0cfaad03cbb596ef29d44127d3c010af0aa8b331f584f149f707ff3e5eb3616639100c98e27249b05ae5efa3462be555e852214049b4222d34c63ac76cf1eaef6f685a4735d2e810d7ce052bda83656d151b869fb56abdb1dcc2f5fc50410f439e34e5181f42fe078bfbcbbcc690df2e345a9363dd96d69338e8831a235e3c20d48b888cb03b1a8efec0cea56a9ca007471cf76a7b3e749cce719ec5203c850a0d724c0bb20a52fdf78bfd1e820df3087a01d58c8cb6474fd2287d35508ba23ccf5f8cc15e316e3b5ea4317d1c0fca470d8673ce83cf47886ef5326ab0886796067a9d9dba394434550999a67cf0c84bab6aa45778dd104c05b7856cd76ee24d882d4095cc8473eb889aa71c37dcd691bc739cf3b2a5f7027af3edf4fc188eef7f4bd604fd888dff4385f4de2c52b065e0a19745612982eee34d814e8d7fa5e23b0cb0da4bf9179be2b4589b72d82d972a586147a8c0ef3238e9dfcccb4412ef88174b10bbbb0bc012e9818f9ede4787965de2de7aa0c00633c3638b13d049b1801197e907cd20bf2c43b85da344d2a8e3ca47a50034451ad64274ec1a26f3063e9705170c5e2f8f1cc8c5afe9946a3aecbb48c7b8d13efbe7b6320c5a8481f5fcef6c4eb516d607f1d96f5048ad0674d39ef807b4904d96b8e82e610168c3cf694b8e2dd954a43bdbcaf97352aec2ace30b59b3555d2bb259a8690bc3573fa26c5151e8040ae4c15715b71f985af46c2ec8cb8fd7013122f65c9805cc295d1d047184ff8d2320c10c2842a744362b62325f8d9225458f86813819a9a7d3ede85b59df7c47f40b89521cba9232d5a41e6d36b643840ffd6cecd89ad18186c73a92d85b2cfc3eaf19077a10b38ddcf31c973c484194ac0502c71227e042ff448197a3f5c451c4511bec2266a9b7f8263104a151e19d2afb5585670b254f8e3341113d127d77e8441de8dc6e4e7080930822c436bb82c9100b5211c415f1f8d8086ed1d46709b7d9c9f6b272f99d3ab3b54f8f524ae48ca90ef075f492af85cddaff5b2aa943cf1e4c57868e98fda1700beb60b5096b4ef172ac7a9019afd7b9cf1e2f160bbea85b233d56c7eb18b75fbaa442dddd9e4c5ab6e9d54b07aa3a97c4ccba8a29c1453d90c728d9b41496706ba3783f08cfd4ac8eb73f92f330abcd31ddcffd47cb6979e4901bdf96996f1f9852ffb0575a57401140d788920114232d4baecb82c8f8fa850793f4d1ad581784ad2fcc0dd1f441290cf46e0ccb1ccc73686e4045c921ac4887bcf15432f26524222ee857eed3b335696d71f4295cdb613db47b9cdab4c6dd0ade037efe7d255e9a7284ba3d671a7d06c7a83a93826f1c1f6dd5f1778d8923f4d3a062f4397f6e6650af4f07cabe0c8d5a3e85c9e6ec33c6e7785a17054cd651a8d297d7812eb0a447002ade89eaf58fcb73a8bef0a8aea2f177c1679add0d3b72297aae1a11a58a67f7cfddfda343d96f6322709aac5ca9109093f374534b90582693b4b1af6a62c5c23eba0fdbf679f589da1dd865dab631a5185c73108759b0b3e5a2f257b03d368353a5f61cd38df927a3edd9128be9a3e8b5613e199826f8f720edf68151f6163ea284fa1af1e19f99c1fa0b751cf5312f5a31f2b54e514f9bb342f77effd2f500668b59a82d81a065982820dac07e01ab2f4bf95c05512300a3c9ce7a4897f3f800abd821b2b6a4b08404c5b7b837f59f81f9ec8021f7167a3617879f065868ae699d7c8f50361bb3e36239ba17115b15011359e5aa2ff403f57ef017f1d518c81585125ad13e5cce21250bc33feeb6c4781323a6d2d1fd1ae32852f9cb73d8adf98b78a62f1fff871a73862280765fce0186b6c69af64b68005c2350fcebfc5a741f9d8344c084ebd518828cafc68d6f060ed95c337d078e877c8de3513a6c3a11674ee6bc01eac962bc5bc176e0544242fc001a592a54e53f5b4d93b6cdc7808601bbf5026e7100a15b84bb4e0c804000e8c18ae21abb54ad586b761994353afe2fdd806c8ee442cc5f10295bced03ccbd0053e38496036fe0847b82cc02f5905878c0a9dddd9b602b8edfbc5f76376c1f8a65d2946aa765edd1b4964e7040371753a168c1666224652e3fa077599ad788a49c5170c2770e6d5c85ddd45fab204d4c68e4e17a0e82d51595155a651b4a3ca4bf065b041dacd9f4b6a5eb1737102df2da1ac9a7a38ae66986f193848ca2487149c9a03c0627c53f3f489d126aed6cb44c354f434d132e6495717e3645772796b73d4ec931cc357463330f6c6b84e8ff8ceebfef0b04c78253b8543b22ea2ac445b222e2a64787dce004cddd8231f3f9f43f3c88d7755da08a93dc75e5a74fb5507865b9405b5520aef1e14cebefa0fc3b804d8a3957286be462c4b3a4e96713f64da1d41c9e4beb6c166925223e2c2ecd8cb32700324d71ad3a1cfa9e5bb44a12431"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3d, 0x3, "3ef1db3506fabb13983fc9e06c706953373f96165e35632b8968dcb21a653ed0e2cdfc76ff39d1337746b872bf9806af88dcdff129fefd31cc"}, @NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "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"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x17f, 0x7f, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x10, 0x39}}, @mesh_chsw={0x76, 0x6, {0xce, 0x4, 0x22, 0xa42b}}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48}, {0x9, 0x1}, {0x4e}, {0x30}]}, @mesh_chsw={0x76, 0x6, {0x1, 0x6b, 0x24, 0x6}}, @ibss={0x6, 0x2, 0x7}, @preq={0x82, 0x46, {{0x1, 0x1, 0x1}, 0x0, 0xa2, 0x80000001, @broadcast, 0x2, @void, 0x8, 0x3, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{}, @device_b, 0x7}, {{0x1}, @broadcast, 0xc}]}}, @fast_bss_trans={0x37, 0x10d, {0xb3, 0x8, "7029ace6e4b9bea52816efca412a96e9", "721ed8e321474c5e9d7fcf44ca31271c434eb8ea1baa92dbcd8989c4ac7f49ab", "71fd3f10d60c10a991b64a338aa32ede49e7a7d5f90e07c41bb256dd8da22797", [{0x2, 0x14, "2124368542116ad9dceb8cf76cbb30439a8f4240"}, {0x4, 0x1c, "444b6dbb9ce0d6015dc1a4b778b75388c9daf95f0f3f1e6ce6b56bb0"}, {0x2, 0x11, "c782a819cd7e20eefdeab1a9a9553481a2"}, {0x2, 0xa, "dfc7dd849dfc9d42bc5d"}, {0x4, 0x21, "e00a86b4b453cafc22d86b75f643ddfaf607f4c7bf295b8904427661525212fcb3"}, {0x2, 0x18, "9f092e46bae79692c102ffc69b42cc31a641dce953d55581"}, {0x4, 0x1e, "ff569b39d58218d9e5ab5ddf194ca3466c6ec40d5ce4f7667d81254bf46a"}, {0x2, 0x9, "4c24383b71e5421c78"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x24, 0xf, [@erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x62}, @ssid={0x0, 0x18, @random="2991cb65f812552321512ada2a567df55c61d6340560a050"}]}, @NL80211_ATTR_BEACON_HEAD={0x21e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x4, 0xffc}}, 0x3, @random=0x6, 0x101a, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @val={0x5, 0x25, {0x5, 0xc8, 0x7, "5e16c8e49fd1ead3c2f8d1beca5c5dd1eebd1d7a1afee99d6451c5b052ecf7722fd0"}}, @val={0x25, 0x3, {0x1, 0xac, 0xf}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x1a, 0x6}}, @val={0x2d, 0x1a, {0x300, 0x1, 0x1, 0x0, {0x9, 0x1ffa, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x4, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x4, 0x8}}, @val={0x76, 0x6, {0x4, 0x5, 0x6, 0x4}}, [{0xdd, 0x56, "023dfe4ec76881d9177c30898bfb9e9301552a451b449994b75957c8d77e26f44c829b6e2c9020d15a51633c5ab3f0d6192ffb086f5218a58fad75c462e72614095c75105c13cb8a5dd0b9428d5cc73dce2145af833b"}, {0xdd, 0xf2, "db9718517ab9e0db1d5f589875a080c5977ccb4ae532561c33dfbf26d6844de6619d015dceecf963643bd03986343c05c39963e74e31291b636d3d61de76086f47f89f7f8ac624aeb048f57700c03a6fe8d2714a2cd6280aa5e02d41f6abc6449fc0da925da43813ac9c788b26cf1c2fbfc7d778fb9b5cbb156b19583d853c9c0162e03f8d6b472caa84fdaa9bdb53973186cb3aa7d1c24017e6b47baaca5c8ed45a9e67b47dc250e0f35a89be192ffdb65843f2f4f749d3f78f517ab4214c23fb6f834c19033d62133d4f1fe6b1806c23c0a33965d81862fa7eb961af198824c2d7d0dc7e65017ead51677a11af65f71d70"}, {0xdd, 0x46, "1e1c7f90a1357868ad27cce97103367808e8e671ad0cb4744ed217f365367668439e7fac07321b90465f4b21f44eb90702ac701a1d7d24779b35a0d35910302efa4e786ccc88"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x7, 0xe8, 0x200, 0x1, 0x1, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x4d2, 0x6, 0x3, 0x6, 0x3, 0x401, 0x8000, 0x5, 0xd, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x7, 0x5, 0xfeff, 0x9d3, 0x9, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x8, 0x9, 0x2, 0x1, 0x101, 0x4, 0x4, 0x8000, 0x5, 0x401]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x29}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2270}}, 0x40000) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 400.134226ms ago: executing program 1 (id=6698): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x30e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x40c4) 372.904282ms ago: executing program 2 (id=6699): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x11) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4008814) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x10, 0x1, 0x3, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x68, 0x0, 0x8e, 0x0, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xa9, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd2b, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x11) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4008814) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x10, 0x1, 0x3, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x68, 0x0, 0x8e, 0x0, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xa9, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local]}]}}}}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd2b, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) (async) 324.168625ms ago: executing program 0 (id=6700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x1000000000003b) shutdown(r6, 0x2) write$tun(r2, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @loopback, @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "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"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, '\x00+\x00'}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000017c0)={'syztnl2\x00', &(0x7f0000001740)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0xff5d, 0xe96, {{0xb, 0x4, 0x1, 0x32, 0x2c, 0x64, 0x0, 0x80, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@ssrr={0x89, 0xb, 0xeb, [@loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @ssrr={0x89, 0xb, 0xd, [@private=0xa010101, @multicast2]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0xfffffffc, '\x00', r7, r2, 0x0, 0x3, 0x1}, 0x50) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r9, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x541b, &(0x7f0000000040)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00', 0x100005}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r12, 0x8b2c, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x248}, 0xc, &(0x7f00000016c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="201e2abd7065ead65f25070000000400018032ee65fd82d5575941b9fd1eee177d8d1279be80b9954c816b737451cc198051d5326bdfba0859d927e8a550af8a49818912915a5175cbdb850926051e11c77d56b7ee2b036b36ad3f80ec9d2a0fd577eff0b71693b2e3457221686e4a806537e76b5d97c327276777d50ebc0b59271a4e3f8ebbf7a4a39583d5233502381c00683bbbadd464c2c00579fd57f3ccf7a7766694730d2f1b271b7249ad75953e35ebe14876222890ad08fd96cce33cf4163d02e48fc351c4836374ba90f59bad36a5aee001"], 0x18}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000015c0)=0xfec) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r13, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r13, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 128.496966ms ago: executing program 4 (id=6701): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x2, 0x6, 0x87cd, 0x81}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) r2 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="5963b6af12083328ce54101e3fd2dd91eba13fe5f8475c3f70952c7dc25f41cea3a4a7f1bde8ecda6ed0a6502ec8320563ea84913673e4d02269a7a56c15cb595324c6755b38af63535efdff64af8e17bda1f57c5eb093fbd22137af9ea599b4761454c42664c3672865", 0x6a}], 0x1, &(0x7f0000000180)=[{0xb8, 0x101, 0x9, "50d36af6c52301015110bec6d0c06f8370add69a2a146b1e085a90b4a42b6e90e58e8169cf625f6b10a41cee8d362d4ee9b33ea3a24927906a4719f71b32a4aa0684b8f90770d274d7e012642774ae88fd35ec629d48f3603efadfbc0e1ae6bb9dda1180138d63b24d0a56658c09f69b201dd0b0343f0d1ee354f77d541482201b670f70d09f5722126dbc6e838cf7788874fc528e3d410d236380769d7225bad033ebafe0b26a"}, {0x30, 0x117, 0x80, "8288bba659bc037a3954ae0fb2f0cda55ea400f5d6f03148fe7b1514"}], 0xe8}, 0x4004000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000300)={0x3, 0x7, 0x6, 0x4}, 0x10) 128.17144ms ago: executing program 0 (id=6702): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x2, 0x7d9, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 71.077464ms ago: executing program 1 (id=6703): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r2, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010003", 0x7) 0s ago: executing program 4 (id=6704): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r1 = socket(0x10, 0x2, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) kernel console output (not intermixed with test programs): ng up backlog [ 629.993085][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.057778][T29738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5304'. [ 630.395441][T29762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5311'. [ 630.930150][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.249990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.903777][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.972531][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.010008][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.050161][ T5904] net_ratelimit: 1 callbacks suppressed [ 634.050183][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.094097][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.106803][ T3585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.115982][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.129689][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.130894][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.169922][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.213470][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.226231][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.252507][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.290121][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.250044][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.330076][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.495804][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.811041][ T5896] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 120 sec [ 642.373644][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.409821][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.290171][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.450850][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.490576][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.530091][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.610077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.348800][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.569882][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.613880][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.651505][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.373207][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.692285][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.100221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.732914][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.770360][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.410983][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.810623][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.851953][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.890099][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.450626][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.930525][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.973345][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.011336][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.500642][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.049967][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.703613][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.093237][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.182321][T30970] tipc: Enabling of bearer rejected, failed to enable media [ 661.285473][T30977] ip6tnl0: Caught tx_queue_len zero misconfig [ 661.572910][T30998] netlink: 'syz.2.5319': attribute type 3 has an invalid length. [ 661.862608][T31014] netlink: 'syz.0.5324': attribute type 10 has an invalid length. [ 661.882362][T31014] bridge_slave_1: left allmulticast mode [ 661.925660][T31014] bridge_slave_1: left promiscuous mode [ 661.954642][T31014] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.995684][T31025] netlink: 'syz.1.5326': attribute type 2 has an invalid length. [ 662.013665][T31014] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 662.015860][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'. [ 662.050519][T31019] tipc: Enabled bearer , priority 0 [ 662.143112][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.187864][T31019] tipc: Disabling bearer [ 662.245002][T31033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5329'. [ 662.542789][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.797683][T31069] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 662.838454][T31069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.846730][T31069] IPv6: NLM_F_CREATE should be set when creating new route [ 662.926645][T31075] sctp: [Deprecated]: syz.4.5343 (pid 31075) Use of int in max_burst socket option deprecated. [ 662.926645][T31075] Use struct sctp_assoc_value instead [ 662.981786][T31079] sctp: [Deprecated]: syz.4.5343 (pid 31079) Use of int in max_burst socket option deprecated. [ 662.981786][T31079] Use struct sctp_assoc_value instead [ 663.009419][T31077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.116564][T31090] xt_hashlimit: size too large, truncated to 1048576 [ 663.172017][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.276622][T31096] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5348'. [ 663.972735][T31119] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.213538][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.673443][T31154] netlink: 'syz.4.5362': attribute type 1 has an invalid length. [ 664.709973][T31155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 664.722314][T31154] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 664.909205][T31167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5364'. [ 665.029408][T31179] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 665.089935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.173304][T31186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 665.254470][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.446034][T31191] netlink: 'syz.0.5368': attribute type 1 has an invalid length. [ 665.521531][T31191] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5368'. [ 665.535394][T31193] netlink: 'syz.2.5369': attribute type 1 has an invalid length. [ 665.547959][T31199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.557236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.565453][T31191] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5368'. [ 665.579828][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.666201][T31194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.677683][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.701748][T31194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.780192][T31204] netlink: 'syz.0.5371': attribute type 2 has an invalid length. [ 665.788174][T31204] netlink: 'syz.0.5371': attribute type 11 has an invalid length. [ 665.809818][T31204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5371'. [ 666.048931][T31215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5373'. [ 666.174320][T31215] netlink: 'syz.4.5373': attribute type 1 has an invalid length. [ 666.200244][T31212] bridge_slave_1: entered allmulticast mode [ 666.239104][T31215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5373'. [ 666.315016][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.669723][T31268] validate_nla: 1 callbacks suppressed [ 666.669745][T31268] netlink: 'syz.4.5383': attribute type 10 has an invalid length. [ 666.722817][T31269] netlink: ct family unspecified [ 667.183503][T31306] lo: entered allmulticast mode [ 667.218797][T31307] __nla_validate_parse: 2 callbacks suppressed [ 667.218819][T31307] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5393'. [ 667.796391][T31331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5397'. [ 667.926975][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5400'. [ 668.162795][T31360] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5405'. [ 668.448310][T31374] syz.0.5411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 668.481196][T31374] CPU: 0 UID: 0 PID: 31374 Comm: syz.0.5411 Not tainted syzkaller #0 PREEMPT(full) [ 668.481227][T31374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.481239][T31374] Call Trace: [ 668.481248][T31374] [ 668.481256][T31374] dump_stack_lvl+0xe8/0x150 [ 668.481291][T31374] warn_alloc+0x249/0x340 [ 668.481316][T31374] ? stack_trace_save+0xa9/0x100 [ 668.481343][T31374] ? __pfx_warn_alloc+0x10/0x10 [ 668.481372][T31374] ? kasan_save_track+0x4f/0x80 [ 668.481389][T31374] ? kasan_save_track+0x3e/0x80 [ 668.481406][T31374] ? __kasan_kmalloc+0x93/0xb0 [ 668.481423][T31374] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 668.481442][T31374] ? xskq_create+0x56/0x170 [ 668.481458][T31374] ? xsk_setsockopt+0x54c/0x990 [ 668.481479][T31374] ? do_sock_setsockopt+0x17c/0x1b0 [ 668.481501][T31374] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 668.481525][T31374] ? do_syscall_64+0xe2/0xf80 [ 668.481550][T31374] __vmalloc_node_range_noprof+0x132/0x1730 [ 668.481607][T31374] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 668.481636][T31374] ? __kasan_kmalloc+0x93/0xb0 [ 668.481662][T31374] vmalloc_user_noprof+0xad/0xe0 [ 668.481682][T31374] ? xskq_create+0xbf/0x170 [ 668.481702][T31374] xskq_create+0xbf/0x170 [ 668.481737][T31374] xsk_init_queue+0xad/0x110 [ 668.481771][T31374] xsk_setsockopt+0x54c/0x990 [ 668.481804][T31374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 668.481835][T31374] ? __pfx_aa_sk_perm+0x10/0x10 [ 668.481865][T31374] ? aa_sock_opt_perm+0xff/0x1a0 [ 668.481893][T31374] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 668.481915][T31374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 668.481947][T31374] do_sock_setsockopt+0x17c/0x1b0 [ 668.481980][T31374] __x64_sys_setsockopt+0x13d/0x1b0 [ 668.482012][T31374] do_syscall_64+0xe2/0xf80 [ 668.482033][T31374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.482052][T31374] ? trace_irq_disable+0x37/0x100 [ 668.482072][T31374] ? clear_bhb_loop+0x60/0xb0 [ 668.482114][T31374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.482135][T31374] RIP: 0033:0x7f77a179aeb9 [ 668.482157][T31374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.482174][T31374] RSP: 002b:00007f77a26c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 668.482198][T31374] RAX: ffffffffffffffda RBX: 00007f77a1a15fa0 RCX: 00007f77a179aeb9 [ 668.482213][T31374] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 668.482226][T31374] RBP: 00007f77a1808c1f R08: 0000000000000004 R09: 0000000000000000 [ 668.482240][T31374] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.482252][T31374] R13: 00007f77a1a16038 R14: 00007f77a1a15fa0 R15: 00007ffd12060818 [ 668.482284][T31374] [ 668.482292][T31374] Mem-Info: [ 668.797221][T31374] active_anon:7400 inactive_anon:7 isolated_anon:0 [ 668.797221][T31374] active_file:2758 inactive_file:40419 isolated_file:0 [ 668.797221][T31374] unevictable:768 dirty:54 writeback:0 [ 668.797221][T31374] slab_reclaimable:11208 slab_unreclaimable:120050 [ 668.797221][T31374] mapped:29322 shmem:1359 pagetables:1262 [ 668.797221][T31374] sec_pagetables:0 bounce:0 [ 668.797221][T31374] kernel_misc_reclaimable:0 [ 668.797221][T31374] free:1293674 free_pcp:13236 free_cma:0 [ 668.890417][T31374] Node 0 active_anon:29500kB inactive_anon:28kB active_file:11032kB inactive_file:161472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117188kB dirty:216kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12748kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 668.957872][T31374] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 669.064912][T31374] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.162557][T31374] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 669.168432][T31374] Node 0 DMA32 free:1267816kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29400kB inactive_anon:28kB active_file:11032kB inactive_file:161472kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:32736kB local_pcp:21296kB free_cma:0kB [ 669.224953][T31401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'. [ 669.262540][T31374] lowmem_reserve[]: 0 0 1 1 1 [ 669.270891][T31374] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.336015][T31406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5419'. [ 669.347639][T31374] lowmem_reserve[]: 0 0 0 0 0 [ 669.359070][T31374] Node 1 Normal free:3891164kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21544kB local_pcp:13272kB free_cma:0kB [ 669.407922][T31374] lowmem_reserve[]: 0 0 0 0 0 [ 669.416099][T31374] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 669.441398][T31374] Node 0 DMA32: 11138*4kB (UM) 6046*8kB (UME) 3426*16kB (UM) 143*32kB (UME) 217*64kB (UME) 393*128kB (UME) 329*256kB (UM) 235*512kB (UM) 152*1024kB (U) 67*2048kB (UME) 135*4096kB (UM) = 1266872kB [ 669.462716][T31374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 669.481250][T31374] Node 1 Normal: 193*4kB (UE) 41*8kB (UME) 31*16kB (UME) 77*32kB (UME) 30*64kB (UME) 11*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891164kB [ 669.503970][T31374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.528384][T31374] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.538653][T31374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.554278][T31374] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.564296][T31374] 44532 total pagecache pages [ 669.570162][T31374] 0 pages in swap cache [ 669.574616][T31374] Free swap = 124996kB [ 669.578859][T31374] Total swap = 124996kB [ 669.583742][T31374] 2097051 pages RAM [ 669.587746][T31374] 0 pages HighMem/MovableOnly [ 669.610376][T31374] 426622 pages reserved [ 669.621421][T31374] 0 pages cma reserved [ 669.850217][T31426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5425'. [ 670.000498][T31430] bond6: Unable to set up delay as MII monitoring is disabled [ 670.067850][T31430] bond6 (unregistering): Released all slaves [ 670.141742][T31445] sctp: [Deprecated]: syz.4.5427 (pid 31445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.141742][T31445] Use struct sctp_sack_info instead [ 670.234032][T31450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5430'. [ 670.290329][ T5922] net_ratelimit: 8 callbacks suppressed [ 670.290349][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.451574][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.728553][T31478] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5436'. [ 670.805436][T31478] 8021q: VLANs not supported on gre0 [ 671.075880][T31494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5441'. [ 671.100199][T31492] netlink: 'syz.4.5442': attribute type 23 has an invalid length. [ 671.297733][T31511] netlink: 'syz.0.5444': attribute type 27 has an invalid length. [ 671.490184][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.810109][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.936339][T31551] netlink: 'syz.0.5456': attribute type 10 has an invalid length. [ 672.141529][T31551] team0 (unregistering): Port device team_slave_0 removed [ 672.175156][T31551] team0 (unregistering): Port device team_slave_1 removed [ 672.535371][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.746869][T31589] openvswitch: netlink: IP tunnel TTL not specified. [ 672.795476][T31591] __nla_validate_parse: 2 callbacks suppressed [ 672.795498][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5465'. [ 672.957692][T31591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5465'. [ 672.984228][T31602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5467'. [ 673.083033][T31602] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 673.159824][T31606] netlink: 'syz.3.5467': attribute type 5 has an invalid length. [ 673.417356][T31615] xt_ecn: cannot match TCP bits for non-tcp packets [ 673.457652][T31615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.580316][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.654968][T31626] netlink: 'syz.0.5475': attribute type 13 has an invalid length. [ 673.680940][T31626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5475'. [ 673.705285][T31631] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 673.741147][ T1340] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 673.750317][T31626] netlink: 'syz.0.5475': attribute type 13 has an invalid length. [ 673.760961][ T1340] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 673.790154][T31626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5475'. [ 673.816791][ T1340] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 673.842688][ T1340] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 673.943620][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5481'. [ 673.977893][T31651] Cannot find add_set index 65532 as target [ 674.251586][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 674.292572][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 674.410785][T31674] x_tables: duplicate underflow at hook 2 [ 674.417893][T31672] x_tables: duplicate underflow at hook 2 [ 674.535307][T31682] tipc: Enabling of bearer rejected, failed to enable media [ 674.614591][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.754311][T31692] macsec1: entered promiscuous mode [ 674.859863][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.003831][T31711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5494'. [ 675.221918][T31720] tipc: Enabled bearer , priority 0 [ 675.238561][T31720] syzkaller0: entered promiscuous mode [ 675.251498][T31720] syzkaller0: entered allmulticast mode [ 675.277216][T31721] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 675.352655][T31725] tipc: Resetting bearer [ 675.390004][T31718] tipc: Resetting bearer [ 675.442813][T31718] tipc: Disabling bearer [ 675.472850][T31724] tipc: Enabling of bearer rejected, failed to enable media [ 675.664373][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.856677][T31745] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 676.000338][T31751] syzkaller1: entered promiscuous mode [ 676.016456][T31751] syzkaller1: entered allmulticast mode [ 676.041816][T31758] xt_TCPMSS: Only works on TCP SYN packets [ 676.050142][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.103125][T31753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5503'. [ 676.709737][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.888381][T31800] openvswitch: netlink: Flow key attr not present in new flow. [ 677.730304][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.901481][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.011071][T31845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.049957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.230586][T31867] syzkaller1: entered promiscuous mode [ 678.236130][T31867] syzkaller1: entered allmulticast mode [ 678.295909][T31867] syzkaller1: left promiscuous mode [ 678.316903][T31867] syzkaller1: left allmulticast mode [ 678.553767][T31854] dummy0: Caught tx_queue_len zero misconfig [ 678.610421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.663883][T31890] netlink: 'syz.2.5540': attribute type 8 has an invalid length. [ 678.696846][T31852] lec:lec_atm_close: lec0: Shut down! [ 678.770048][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.152693][T31910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.295064][T31917] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 679.308514][T31917] bond5 (unregistering): Released all slaves [ 679.406962][T31917] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 679.424190][T31917] bond5 (unregistering): Released all slaves [ 679.629810][T31917] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 679.654170][T31917] bond5 (unregistering): Released all slaves [ 679.892421][T31917] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 679.927278][T31944] __nla_validate_parse: 7 callbacks suppressed [ 679.927300][T31944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5551'. [ 679.955342][T31917] bond5 (unregistering): Released all slaves [ 679.980115][T31944] netlink: 'syz.4.5551': attribute type 5 has an invalid length. [ 680.006711][T31944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5551'. [ 680.048797][T31944] geneve3: entered promiscuous mode [ 680.054225][T31944] geneve3: entered allmulticast mode [ 680.062485][ T50] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 680.093812][ T50] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 680.120459][ T50] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 680.204667][ T50] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 680.298847][T31964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5557'. [ 680.406987][T31964] geneve2: entered promiscuous mode [ 680.437106][T31974] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 680.485000][T31974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5561'. [ 680.520974][T31977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5562'. [ 680.555335][T31980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5562'. [ 680.686407][T31990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5563'. [ 680.713148][T31989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5566'. [ 680.771933][T31990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5563'. [ 680.827989][T31995] netlink: 'syz.3.5565': attribute type 1 has an invalid length. [ 680.850412][ T5897] net_ratelimit: 1 callbacks suppressed [ 680.850434][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.866119][T31996] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 680.904660][T31996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5567'. [ 680.921511][T31996] x_tables: duplicate underflow at hook 1 [ 680.940628][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.354362][T32016] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 681.660980][T32025] veth0: entered promiscuous mode [ 681.683471][T32024] netlink: 'syz.4.5573': attribute type 1 has an invalid length. [ 681.684691][T32023] veth0: left promiscuous mode [ 681.738916][T32030] netlink: 'syz.2.5575': attribute type 15 has an invalid length. [ 681.743022][T32032] netlink: 'syz.3.5576': attribute type 39 has an invalid length. [ 681.758560][T32030] netlink: 'syz.2.5575': attribute type 15 has an invalid length. [ 681.760003][ T1340] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 681.798505][ T1340] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 681.937746][ T5492] lec:lec_start_xmit: lec0:No lecd attached [ 681.948133][ T1340] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 681.957999][ T1340] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 682.416337][T32062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 682.640674][T32068] Bluetooth: MGMT ver 1.23 [ 682.667701][T32073] tap0: tun_chr_ioctl cmd 1074025672 [ 682.685608][T32073] tap0: ignored: set checksum disabled [ 682.747551][T32073] tap0: tun_chr_ioctl cmd 1074025678 [ 682.760134][T32073] tap0: group set to 0 [ 683.031592][T32092] nbd: must specify at least one socket [ 683.234803][T32102] can: request_module (can-proto-5) failed. [ 683.267565][T32108] pim6reg: entered allmulticast mode [ 683.286617][T32108] pim6reg: left allmulticast mode [ 684.236221][T32165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.720905][T32197] netlink: 'syz.0.5624': attribute type 1 has an invalid length. [ 684.995920][T32214] __nla_validate_parse: 15 callbacks suppressed [ 684.995943][T32214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5626'. [ 685.087827][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5627'. [ 685.237442][T32222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5628'. [ 685.249411][T32222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5628'. [ 685.377898][T32230] x_tables: duplicate entry at hook 3 [ 685.383987][T32230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5630'. [ 685.408530][T32230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.446119][T32230] bond0: (slave rose0): Enslaving as an active interface with an up link [ 685.772764][T32255] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5636'. [ 685.975064][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5638'. [ 686.094368][T32269] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 686.114872][T32265] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 686.158014][T32265] bond0 (unregistering): Released all slaves [ 686.302421][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.681502][T32309] openvswitch: netlink: IP tunnel dst address not specified [ 686.804691][T32316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5647'. [ 687.008326][T32328] netlink: 'syz.4.5650': attribute type 12 has an invalid length. [ 687.056682][T32328] netlink: 'syz.4.5650': attribute type 29 has an invalid length. [ 687.109811][T32328] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5650'. [ 687.222028][T32331] syzkaller1: entered promiscuous mode [ 687.259759][T32331] syzkaller1: entered allmulticast mode [ 687.409818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 687.418644][ C0] lec:lec_tx_timeout: lec0 [ 687.424268][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.458087][T32361] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.5657'. [ 687.915812][T32397] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 688.556894][T32432] x_tables: duplicate underflow at hook 2 [ 689.050569][T32453] netem: invalid attributes len -24 [ 689.069576][T32453] netem: change failed [ 689.573280][T32488] x_tables: duplicate underflow at hook 2 [ 689.796514][T32502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.861836][T32496] xt_cluster: node mask cannot exceed total number of nodes [ 689.877561][T32502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.913729][T32502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.036126][T32502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.170716][T32526] __nla_validate_parse: 5 callbacks suppressed [ 690.170739][T32526] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.5692'. [ 690.231597][T32533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5694'. [ 690.258336][T32529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5692'. [ 690.617588][T32498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.697361][T32557] netlink: 'syz.0.5699': attribute type 10 has an invalid length. [ 690.747449][T32557] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5699'. [ 691.000861][T32579] geneve1: Caught tx_queue_len zero misconfig [ 691.011694][T32579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5701'. [ 691.123496][T32583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5704'. [ 691.600558][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 691.875323][T32602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.036280][T32602] macvlan0: left promiscuous mode [ 692.173328][T32629] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5715'. [ 692.338993][T32602] bond1: left promiscuous mode [ 692.383195][T32602] ip6gre2: left promiscuous mode [ 692.439552][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 692.448095][ C0] lec:lec_tx_timeout: lec0 [ 692.453076][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.486724][T32602] vlan2: left promiscuous mode [ 692.498129][T32602] bond4: left promiscuous mode [ 692.506469][T32602] bridge7: left promiscuous mode [ 692.551694][T32609] syzkaller0: left allmulticast mode [ 692.594509][ T3553] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 692.626278][ T3553] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 692.659985][ T3553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.683610][ T3553] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 692.722871][ T3553] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 692.753175][ T3553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.797899][T32651] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5719'. [ 692.815162][T32631] tipc: Enabled bearer , priority 0 [ 692.825464][T32651] netlink: 'syz.2.5719': attribute type 30 has an invalid length. [ 692.937676][T32652] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 692.951288][T32652] bond0 (unregistering): Released all slaves [ 692.965984][T32659] openvswitch: netlink: IPv4 tunnel dst address is zero [ 692.974764][ T3553] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 692.984165][ T3553] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 692.994679][ T3553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.004824][T32637] syzkaller0: entered promiscuous mode [ 693.029673][T32637] syzkaller0: entered allmulticast mode [ 693.037350][ T3553] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 693.056779][ T3553] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 693.075336][ T3553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.147520][T32651] bond10: option arp_missed_max: invalid value (0) [ 693.154688][T32651] bond10: option arp_missed_max: allowed values 1 - 255 [ 693.165811][T32651] bond10 (unregistering): Released all slaves [ 693.209412][T32630] tipc: Resetting bearer [ 693.300995][T32630] tipc: Disabling bearer [ 693.383072][T32666] tipc: Enabled bearer , priority 11 [ 693.885528][T32718] netlink: 'syz.0.5733': attribute type 1 has an invalid length. [ 694.082155][T32720] bond6: (slave bridge8): making interface the new active one [ 694.111197][T32720] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 694.584938][T32752] netlink: 'syz.1.5744': attribute type 9 has an invalid length. [ 694.664255][T32752] netlink: 'syz.1.5744': attribute type 9 has an invalid length. [ 694.832582][ T301] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5746'. [ 695.209082][ T324] syzkaller1: entered promiscuous mode [ 695.256316][ T324] syzkaller1: entered allmulticast mode [ 695.281004][ T324] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 695.441501][ T348] __nla_validate_parse: 2 callbacks suppressed [ 695.441522][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5758'. [ 695.458925][ T347] xt_l2tp: wrong L2TP version: 0 [ 695.465346][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5758'. [ 695.492006][ T349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5757'. [ 695.768901][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5762'. [ 696.158089][ T381] netlink: 'syz.4.5767': attribute type 11 has an invalid length. [ 696.166274][ T381] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5767'. [ 696.351913][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'. [ 696.366460][ T396] netlink: 'syz.2.5771': attribute type 1 has an invalid length. [ 696.656982][ T418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5772'. [ 696.730492][ T425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5772'. [ 697.018716][ T434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5776'. [ 697.414944][ T456] netlink: 147592 bytes leftover after parsing attributes in process `syz.2.5781'. [ 697.469539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 697.477912][ C0] lec:lec_tx_timeout: lec0 [ 697.489691][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 698.526793][ T514] tipc: New replicast peer: 255.255.255.255 [ 698.590324][ T514] tipc: Enabled bearer , priority 10 [ 698.861257][ T535] netlink: 'syz.4.5798': attribute type 33 has an invalid length. [ 699.194388][ T551] syzkaller0: entered allmulticast mode [ 699.566619][ T577] sctp: [Deprecated]: syz.3.5808 (pid 577) Use of int in max_burst socket option deprecated. [ 699.566619][ T577] Use struct sctp_assoc_value instead [ 699.614573][ T5922] tipc: Node number set to 3621920213 [ 699.650799][ T576] sctp: [Deprecated]: syz.3.5808 (pid 576) Use of int in max_burst socket option deprecated. [ 699.650799][ T576] Use struct sctp_assoc_value instead [ 699.787196][ T580] tipc: Enabling of bearer rejected, failed to enable media [ 699.804395][ T580] syzkaller0: entered promiscuous mode [ 699.816174][ T580] syzkaller0: entered allmulticast mode [ 699.972831][ T590] pimreg3: entered allmulticast mode [ 699.980750][ T591] syzkaller0: entered promiscuous mode [ 700.050310][ T591] syzkaller0: entered allmulticast mode [ 700.274914][ T606] SET target dimension over the limit! [ 702.129885][ T5904] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 181 sec [ 702.499570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 702.507907][ C0] lec:lec_tx_timeout: lec0 [ 702.513053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 707.519785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 707.528015][ C0] lec:lec_tx_timeout: lec0 [ 707.533244][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 712.539641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 712.547859][ C0] lec:lec_tx_timeout: lec0 [ 712.552554][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 717.559557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 717.567628][ C0] lec:lec_tx_timeout: lec0 [ 717.572422][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 722.579563][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 722.587611][ C0] lec:lec_tx_timeout: lec0 [ 722.592516][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 727.132143][ T1716] nbd: must specify a device to reconfigure [ 727.501209][ T1735] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 727.521011][ T1735] __nla_validate_parse: 8 callbacks suppressed [ 727.521032][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5829'. [ 727.676900][ T1748] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 727.689273][ T1748] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 727.698568][ T1748] gretap1: entered promiscuous mode [ 727.704319][ T1748] gretap1: entered allmulticast mode [ 727.732851][ T1750] syzkaller1: entered promiscuous mode [ 727.751018][ T1750] syzkaller1: entered allmulticast mode [ 727.766656][ T1750] openvswitch: netlink: Flow key attribute not present in set flow. [ 727.797649][ T1750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5832'. [ 727.913485][ T1759] smc: net device veth0_to_batadv applied user defined pnetid SYZ2 [ 728.322024][ T1788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5841'. [ 728.358902][ T1788] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 728.550528][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5960 ms [ 728.558688][ C0] lec:lec_tx_timeout: lec0 [ 728.564814][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 728.728725][ T1801] tipc: Enabled bearer , priority 0 [ 728.874787][ T1813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5846'. [ 728.911246][ T1797] syzkaller0: entered promiscuous mode [ 728.916951][ T1797] syzkaller0: entered allmulticast mode [ 728.926472][ T1797] tipc: Resetting bearer [ 728.945560][ T1809] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 729.310477][ T1793] tipc: Resetting bearer [ 729.368424][ T1833] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 729.378007][ T1833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5852'. [ 731.478612][ T1793] tipc: Disabling bearer [ 732.096256][ T1878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5861'. [ 732.196499][ T1877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5860'. [ 732.220671][ T1877] syzkaller0: entered promiscuous mode [ 732.226310][ T1877] syzkaller0: entered allmulticast mode [ 732.660180][ T1911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5869'. [ 732.691908][ T1912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5870'. [ 733.586603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 733.595274][ C0] lec:lec_tx_timeout: lec0 [ 733.599913][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 735.485363][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5882'. [ 735.494844][ T1974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5882'. [ 735.545937][ T1977] syzkaller0: entered promiscuous mode [ 735.551908][ T1977] syzkaller0: entered allmulticast mode [ 735.661648][ T1986] netlink: 'syz.0.5887': attribute type 10 has an invalid length. [ 736.075569][ T1999] ip6_vti0 speed is unknown, defaulting to 1000 [ 736.127523][ T5833] block nbd0: Receive control failed (result -32) [ 737.294259][ T2057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'. [ 737.477761][ T2065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5908'. [ 737.587329][ T2073] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 737.625487][ T2073] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 737.742799][ T2078] tipc: Enabled bearer , priority 0 [ 737.842285][ T2084] netlink: 'syz.4.5915': attribute type 21 has an invalid length. [ 737.861305][ T2084] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5915'. [ 738.009011][ T2092] tipc: Enabling of bearer rejected, failed to enable media [ 738.398859][ T2115] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 738.756382][ T2136] netlink: 'syz.2.5924': attribute type 3 has an invalid length. [ 738.764775][ T2136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5924'. [ 739.409568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 739.417962][ C0] lec:lec_tx_timeout: lec0 [ 739.422946][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 739.892812][ T2187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 740.364383][ T2215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5942'. [ 740.396916][ T2214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5943'. [ 740.733372][ T2232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5948'. [ 740.816764][ T2238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5949'. [ 740.969885][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 741.013162][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 741.026417][ T2253] netlink: 'syz.2.5955': attribute type 1 has an invalid length. [ 741.042632][ T2246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 741.052212][ T2253] nbd: must specify at least one socket [ 741.667985][ T2289] openvswitch: netlink: Duplicate or invalid key (type 0). [ 741.709608][ T2289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.722490][ T2291] syzkaller0: entered promiscuous mode [ 741.728025][ T2291] syzkaller0: entered allmulticast mode [ 741.835773][ T2296] veth0: Caught tx_queue_len zero misconfig [ 741.916947][ T2299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.141721][ T2305] bond0: Caught tx_queue_len zero misconfig [ 742.242761][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.253471][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.262601][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.284194][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.297071][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 742.325471][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.333098][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.346544][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.356974][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.367327][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 742.556716][ T2321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.667032][ T2312] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.874278][T18575] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.906953][T18575] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.941489][T18575] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 743.255744][T18575] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.271574][T18575] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.308295][T18575] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 743.476350][ T2367] netlink: 'syz.4.5977': attribute type 33 has an invalid length. [ 743.504651][ T2367] __nla_validate_parse: 63 callbacks suppressed [ 743.504672][ T2367] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5977'. [ 743.556064][T18575] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.587665][T18575] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.614995][T18575] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 743.779293][T18575] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.785031][ T2383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5979'. [ 743.845089][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5981'. [ 743.850582][T18575] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.890980][T18575] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 743.956340][ T2383] netlink: 'syz.0.5979': attribute type 1 has an invalid length. [ 743.970806][ T2383] netlink: 'syz.0.5979': attribute type 2 has an invalid length. [ 743.997603][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5979'. [ 744.429556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 744.437667][ C0] lec:lec_tx_timeout: lec0 [ 744.442395][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 744.450852][ T5828] Bluetooth: hci4: command tx timeout [ 744.524822][ T2417] netlink: 'syz.0.5986': attribute type 1 has an invalid length. [ 744.612892][ T2417] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 744.706116][T18575] tipc: Resetting bearer [ 744.797756][ T2436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 744.847037][ T2439] netlink: 'syz.2.5991': attribute type 10 has an invalid length. [ 744.911594][ T2441] sctp: [Deprecated]: syz.2.5991 (pid 2441) Use of int in maxseg socket option. [ 744.911594][ T2441] Use struct sctp_assoc_value instead [ 745.033735][T18575] bond3 (unregistering): (slave gretap1): Releasing active interface [ 745.078579][T18575] tipc: Disabling bearer [ 745.382254][T18575] bond2 (unregistering): (slave bridge4): Releasing active interface [ 745.433563][T18575] bond4 (unregistering): (slave bridge0): Releasing active interface [ 745.683951][T18575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.694979][T18575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.705829][T18575] bond0 (unregistering): Released all slaves [ 745.843914][T18575] bond1 (unregistering): (slave veth3): Releasing active interface [ 745.854505][T18575] bond1 (unregistering): (slave veth5): Releasing active interface [ 745.864717][T18575] bond1 (unregistering): Released all slaves [ 745.877679][T18575] bond2 (unregistering): Released all slaves [ 745.892950][T18575] bond3 (unregistering): Released all slaves [ 745.908072][T18575] bond4 (unregistering): Released all slaves [ 745.923824][T18575] bond5 (unregistering): Released all slaves [ 745.938582][T18575] bond6 (unregistering): Released all slaves [ 745.953654][T18575] bond7 (unregistering): Released all slaves [ 745.968287][T18575] bond8 (unregistering): Released all slaves [ 746.014822][ T2439] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 746.149630][T18575] tipc: Disabling bearer [ 746.160281][T18575] tipc: Disabling bearer [ 746.235804][T18575] tipc: Left network mode [ 746.288729][ T2312] chnl_net:caif_netlink_parms(): no params data found [ 746.532808][ T5828] Bluetooth: hci4: command tx timeout [ 746.861126][ T2498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5999'. [ 746.885707][ T2517] syzkaller0: entered promiscuous mode [ 746.891686][ T2517] syzkaller0: entered allmulticast mode [ 746.908977][ T2312] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.933819][ T2312] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.953368][ T2312] bridge_slave_0: entered allmulticast mode [ 746.971762][ T2312] bridge_slave_0: entered promiscuous mode [ 746.991044][ T2312] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.008693][ T2312] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.027027][ T2312] bridge_slave_1: entered allmulticast mode [ 747.041716][ T2312] bridge_slave_1: entered promiscuous mode [ 747.110764][ T2524] netlink: 'syz.0.6003': attribute type 1 has an invalid length. [ 747.117123][ T2522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6001'. [ 747.192323][ T2519] 8021q: adding VLAN 0 to HW filter on device bond10 [ 747.340403][ T2312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.383905][ T2312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.643324][ T2555] sctp: [Deprecated]: syz.0.6009 (pid 2555) Use of int in maxseg socket option. [ 747.643324][ T2555] Use struct sctp_assoc_value instead [ 747.663051][ T2312] team0: Port device team_slave_0 added [ 747.702808][ T2312] team0: Port device team_slave_1 added [ 747.713104][ T2548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6008'. [ 747.735441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.948424][ T2567] xt_policy: output policy not valid in PREROUTING and INPUT [ 747.989733][ T2312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.997269][ T2312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.035635][ T2312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.073730][ T2312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.089516][ T2312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.203579][ T2312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.240064][ T2588] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 748.372282][ T2499] wlan1: Trigger new scan to find an IBSS to join [ 748.610251][ T5828] Bluetooth: hci4: command tx timeout [ 748.893277][ T2643] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 748.902979][ T2312] hsr_slave_0: entered promiscuous mode [ 748.920986][ T2312] hsr_slave_1: entered promiscuous mode [ 748.927855][ T2312] debugfs: 'hsr0' already exists in 'hsr' [ 748.940996][ T2312] Cannot create hsr debugfs directory [ 748.978763][ T2646] syzkaller0: entered promiscuous mode [ 748.985161][ T2646] syzkaller0: entered allmulticast mode [ 749.192856][ T2657] netlink: 'syz.4.6026': attribute type 1 has an invalid length. [ 749.211184][ T2657] netlink: 'syz.4.6026': attribute type 1 has an invalid length. [ 749.420556][ T2661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6028'. [ 749.459497][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 749.467697][ C0] lec:lec_tx_timeout: lec0 [ 749.473213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 749.806319][T18575] hsr_slave_0: left promiscuous mode [ 749.825857][T18575] hsr_slave_1: left promiscuous mode [ 749.842650][T18575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.856501][ T2678] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 749.869653][T18575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.898001][T18575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.912837][T18575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.967831][T18575] batman_adv: batadv0: Interface deactivated: dummy0 [ 749.979654][T18575] batman_adv: batadv0: Removing interface: dummy0 [ 750.041876][T18575] vlan0: left allmulticast mode [ 750.053782][T18575] veth0_vlan: left allmulticast mode [ 750.072917][T18575] vlan0: left promiscuous mode [ 750.083509][T18575] veth1_macvtap: left promiscuous mode [ 750.096172][T18575] veth0_macvtap: left promiscuous mode [ 750.117575][T18575] veth1_vlan: left promiscuous mode [ 750.689636][ T5828] Bluetooth: hci4: command tx timeout [ 751.201720][ T2745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6042'. [ 751.212337][ T2745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6042'. [ 751.366046][T18575] pimreg3 (unregistering): left allmulticast mode [ 751.873969][T18575] team0 (unregistering): Port device team_slave_1 removed [ 752.331655][ T2679] veth0_to_team: Caught tx_queue_len zero misconfig [ 752.600058][ T2754] netlink: 'syz.1.6045': attribute type 13 has an invalid length. [ 752.609023][ T2748] netlink: 'syz.4.6043': attribute type 4 has an invalid length. [ 752.621333][ T2748] netlink: 'syz.4.6043': attribute type 4 has an invalid length. [ 752.647597][ T2754] netlink: 'syz.1.6045': attribute type 17 has an invalid length. [ 752.696177][ T2758] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.894588][ T2754] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.908192][ T2754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.020474][ T2761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6047'. [ 753.031305][ T2761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6047'. [ 753.329767][ T2499] wlan1: Trigger new scan to find an IBSS to join [ 753.510251][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6053'. [ 753.530648][ T2796] netlink: 'syz.1.6053': attribute type 1 has an invalid length. [ 753.538445][ T2796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6053'. [ 753.886004][T18575] IPVS: stop unused estimator thread 0... [ 754.023331][ T2312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 754.061989][ T2312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 754.085832][ T2312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 754.114730][ T2312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 754.253095][T18575] wlan1: Creating new IBSS network, BSSID 96:16:6d:37:75:96 [ 754.277143][ T2830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6058'. [ 754.300091][ T2830] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 754.412829][ T2312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.445933][ T2849] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6060'. [ 754.486672][ T2312] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.489501][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 754.501709][ C0] lec:lec_tx_timeout: lec0 [ 754.506690][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 754.533926][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.541292][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.642550][T18575] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.649900][T18575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.685476][ T2868] netlink: 'syz.1.6066': attribute type 11 has an invalid length. [ 754.697941][ T2874] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6063'. [ 754.997504][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 755.332478][ T2905] netlink: 'syz.4.6070': attribute type 2 has an invalid length. [ 755.369638][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6070'. [ 755.413003][ T2905] netlink: 'syz.4.6070': attribute type 2 has an invalid length. [ 755.440442][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6070'. [ 755.591573][ T2312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.677755][ T2915] syzkaller1: entered promiscuous mode [ 755.679747][ T2918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.692596][ T2915] syzkaller1: entered allmulticast mode [ 755.804895][ T2312] veth0_vlan: entered promiscuous mode [ 755.918396][ T2312] veth1_vlan: entered promiscuous mode [ 756.057377][ T2312] veth0_macvtap: entered promiscuous mode [ 756.111354][ T2312] veth1_macvtap: entered promiscuous mode [ 756.206112][ T2312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.265815][ T2312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.319650][ T2512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.354046][ T2512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.384917][ T2512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.486546][ T2512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.661970][ T2954] netlink: 'syz.1.6080': attribute type 1 has an invalid length. [ 757.205066][ T2982] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 757.607489][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 757.629283][ T3006] netlink: 'syz.0.6085': attribute type 30 has an invalid length. [ 757.656158][ T3006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6085'. [ 757.685103][ T2996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6085'. [ 758.116798][ T3022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6088'. [ 758.130434][ T3023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6088'. [ 758.491587][ T3040] xt_policy: neither incoming nor outgoing policy selected [ 758.513524][ T3040] sctp: [Deprecated]: syz.4.6091 (pid 3040) Use of int in max_burst socket option deprecated. [ 758.513524][ T3040] Use struct sctp_assoc_value instead [ 759.263900][ T2938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.362771][ T2500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.413242][ T2500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.470350][ T3053] netlink: 'syz.4.6094': attribute type 1 has an invalid length. [ 759.495595][ T3058] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 759.529491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 759.537771][ C0] lec:lec_tx_timeout: lec0 [ 759.543039][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 759.563959][ T3053] 8021q: adding VLAN 0 to HW filter on device bond10 [ 759.605709][ T3065] netlink: 'syz.0.6095': attribute type 21 has an invalid length. [ 759.644410][ T3056] bond10: (slave ip6gretap1): making interface the new active one [ 759.659189][ T3056] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 759.680717][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.688800][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.712049][ T3065] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 759.760522][ T3068] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 759.879195][ T3053] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 760.066394][ T3082] netlink: 'syz.0.6099': attribute type 1 has an invalid length. [ 760.150233][ T3089] __nla_validate_parse: 1 callbacks suppressed [ 760.150253][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6100'. [ 760.207575][ T3090] bond7: (slave geneve2): making interface the new active one [ 760.277048][ T3090] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 760.288492][ T3085] IPVS: persistence engine module ip_vs_pe_ not found [ 760.343895][ T3099] netlink: 'syz.3.5965': attribute type 1 has an invalid length. [ 760.352078][ T2505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.399142][ T2505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.469689][ T2505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.516545][ T2505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.538011][ T3111] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 760.645999][ T3116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6102'. [ 760.923217][ T3125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.952955][ T3125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.972449][ T3125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 761.060494][ T3128] netlink: 'syz.2.6105': attribute type 1 has an invalid length. [ 761.079142][ T3125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 761.087768][ T3130] netlink: 'syz.2.6105': attribute type 1 has an invalid length. [ 761.110118][ T3125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 761.195936][ T3124] ip6_vti0 speed is unknown, defaulting to 1000 [ 761.772450][ T3146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6108'. [ 762.281988][ T3170] openvswitch: netlink: IP tunnel dst address not specified [ 762.364072][ T3172] x_tables: duplicate underflow at hook 1 [ 762.450480][ T5896] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 241 sec [ 762.701442][ T3124] chnl_net:caif_netlink_parms(): no params data found [ 762.836538][ T3193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 763.018953][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6121'. [ 763.043744][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.057469][ T3124] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.065433][ T3124] bridge_slave_0: entered allmulticast mode [ 763.073948][ T3124] bridge_slave_0: entered promiscuous mode [ 763.074492][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6121'. [ 763.082940][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.097777][ T3124] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.105498][ T3124] bridge_slave_1: entered allmulticast mode [ 763.121976][ T3124] bridge_slave_1: entered promiscuous mode [ 763.172558][ T5828] Bluetooth: hci5: command tx timeout [ 763.276359][ T3124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.293928][ T3220] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 763.295786][ T3124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.343245][ T3218] tap0: tun_chr_ioctl cmd 1074025676 [ 763.348794][ T3218] tap0: owner set to 0 [ 763.394737][ T3124] team0: Port device team_slave_0 added [ 763.433581][ T3124] team0: Port device team_slave_1 added [ 763.573552][ T3124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.588465][ T3124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.629777][ T3234] netlink: 'syz.1.6128': attribute type 21 has an invalid length. [ 763.655895][ T3124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.684905][ T3124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.700632][ T3124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.735332][ T3124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.874764][ T3124] hsr_slave_0: entered promiscuous mode [ 763.882155][ T3124] hsr_slave_1: entered promiscuous mode [ 763.893234][ T3124] debugfs: 'hsr0' already exists in 'hsr' [ 763.919681][ T3124] Cannot create hsr debugfs directory [ 764.091770][ T3251] netlink: 'syz.4.6132': attribute type 5 has an invalid length. [ 764.138768][ T3258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.252558][ T3255] netlink: 'syz.2.6133': attribute type 33 has an invalid length. [ 764.549532][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 764.557964][ C0] lec:lec_tx_timeout: lec0 [ 764.563545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 764.688989][ T3124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 764.773396][ T3284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6142'. [ 764.835542][ T3289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6143'. [ 764.903758][ T3289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6143'. [ 764.991779][ T3124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 765.152170][ T3124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 765.171949][ T3307] IPv6: Can't replace route, no match found [ 765.257700][ T5828] Bluetooth: hci5: command tx timeout [ 765.335523][ T3124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 765.363665][ T3317] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6151'. [ 765.736910][ T3124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 765.785955][ T3124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 765.836361][ T3124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 765.865204][ T3124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 766.011427][ T3358] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 766.292971][ T3124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.387590][ T3124] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.415788][ T3379] syzkaller0: entered allmulticast mode [ 766.442151][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.449651][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.465203][ T3388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6168'. [ 766.526999][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.534462][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.718254][ T3394] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.287864][ T3124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.329849][ T5828] Bluetooth: hci5: command tx timeout [ 767.354922][ T3439] netlink: 'syz.3.6179': attribute type 21 has an invalid length. [ 767.398502][ T3124] veth0_vlan: entered promiscuous mode [ 767.422805][ T3439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6179'. [ 767.424797][ T3443] netlink: 'syz.4.6180': attribute type 5 has an invalid length. [ 767.460262][ T3124] veth1_vlan: entered promiscuous mode [ 767.479886][ T3439] dvmrp6: entered allmulticast mode [ 767.696332][ T3124] veth0_macvtap: entered promiscuous mode [ 767.765121][ T3124] veth1_macvtap: entered promiscuous mode [ 767.962295][ T3124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.006729][ T3124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.109639][ T3585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.159816][ T3585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.182405][ T3585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.191414][ T3585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.633098][ T3493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6192'. [ 768.720211][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.759507][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.915384][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.945187][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.167433][ T3516] sctp: [Deprecated]: syz.4.6196 (pid 3516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.167433][ T3516] Use struct sctp_sack_info instead [ 769.410079][ T5828] Bluetooth: hci5: command tx timeout [ 769.421649][ T3527] netlink: 'syz.0.6200': attribute type 64 has an invalid length. [ 769.466865][ T3527] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6200'. [ 769.589543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 769.597783][ C0] lec:lec_tx_timeout: lec0 [ 769.602771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 769.750620][ T3554] netlink: 'syz.1.6207': attribute type 5 has an invalid length. [ 769.764620][ T3554] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6207'. [ 769.810994][ T3549] xt_CT: No such helper "snmp_trap" [ 770.102526][ T3569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.127235][ T3571] netlink: 'syz.3.6210': attribute type 21 has an invalid length. [ 770.143805][ T3571] netlink: 'syz.3.6210': attribute type 1 has an invalid length. [ 770.438285][ T3593] netlink: 'syz.4.6217': attribute type 1 has an invalid length. [ 770.475281][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 770.476219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a1a1400: rx timeout, send abort [ 770.528720][ T3593] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 770.690761][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 770.716812][ T3612] netlink: 69 bytes leftover after parsing attributes in process `syz.4.6219'. [ 770.888331][ T3624] tipc: Started in network mode [ 770.896451][ T3624] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 770.920084][ T3624] tipc: Enabled bearer , priority 20 [ 770.976433][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072480000: rx timeout, send abort [ 770.993116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a1a1400: abort rx timeout. Force session deactivation [ 771.150623][ T3125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 771.164498][ T3125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 771.189807][ T3125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 771.237485][ T3125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 771.257684][ T3125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 771.389970][ T3634] ip6_vti0 speed is unknown, defaulting to 1000 [ 771.491033][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072480000: abort rx timeout. Force session deactivation [ 772.109186][ T5904] tipc: Node number set to 10922666 [ 772.640769][ T3674] netlink: 'syz.4.6231': attribute type 1 has an invalid length. [ 772.678595][ T3674] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.6231'. [ 772.837792][ T3683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6233'. [ 772.871754][ T3663] syzkaller0: entered promiscuous mode [ 772.877704][ T3663] syzkaller0: entered allmulticast mode [ 772.886312][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6232'. [ 772.896296][ T3673] bridge_slave_0: default FDB implementation only supports local addresses [ 772.992742][ T3689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.007562][ T3663] ip_vti0: entered promiscuous mode [ 773.036671][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6229'. [ 773.065803][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6235'. [ 773.118406][ T3696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6235'. [ 773.124488][ T3634] chnl_net:caif_netlink_parms(): no params data found [ 773.243944][ T2500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.260968][ T2500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.270447][ T3699] netlink: 'syz.3.6237': attribute type 1 has an invalid length. [ 773.271734][ T2500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 773.290482][ T2500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 773.335661][ T3125] Bluetooth: hci2: command tx timeout [ 773.855713][ T3713] delete_channel: no stack [ 775.415242][ T3125] Bluetooth: hci2: command tx timeout [ 775.519023][ T3699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 775.573442][ T3703] veth3: entered promiscuous mode [ 775.726717][ T2500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.772334][ T2500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.799244][ T2500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 775.817269][ T3733] openvswitch: netlink: IP tunnel dst address not specified [ 775.829741][ T2500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 775.889521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6290 ms [ 775.897615][ C0] lec:lec_tx_timeout: lec0 [ 775.902626][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 775.926001][ T3740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 775.995807][ T3740] netlink: 'syz.4.6248': attribute type 58 has an invalid length. [ 776.019866][ T3740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6248'. [ 776.059395][ T2500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.091652][ T2500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.116145][ T2500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 776.146922][ T2500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 776.186654][ T3759] netlink: 'syz.0.6247': attribute type 10 has an invalid length. [ 776.224862][ T3746] tipc: Enabling of bearer rejected, already enabled [ 776.233292][ T3749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6250'. [ 776.325346][ T3759] team0: Port device dummy0 added [ 776.526346][ T2500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.539135][ T2500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.550164][ T2500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 776.562139][ T2500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 776.625029][ T3778] 8021q: VLANs not supported on ip_vti0 [ 776.639963][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.656834][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.699868][ T3634] bridge_slave_0: entered allmulticast mode [ 776.733119][ T3634] bridge_slave_0: entered promiscuous mode [ 776.766641][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.779633][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.787030][ T3634] bridge_slave_1: entered allmulticast mode [ 776.819283][ T3634] bridge_slave_1: entered promiscuous mode [ 776.837167][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'. [ 776.842321][ T3786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 776.955841][ T3634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.975372][ T3634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.056471][ T3797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6260'. [ 777.145163][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6260'. [ 777.163289][ T3634] team0: Port device team_slave_0 added [ 777.188851][ T3634] team0: Port device team_slave_1 added [ 777.220284][ T3803] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6262'. [ 777.490252][ T3125] Bluetooth: hci2: command tx timeout [ 777.527136][ T3824] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6266'. [ 777.714267][ T2499] smc: removing ib device syz2 [ 777.867880][ T2500] erspan0 (unregistering): left promiscuous mode [ 777.917350][ T2500] gretap0 (unregistering): left promiscuous mode [ 778.008771][ T3830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 778.201758][ T2500] bond3 (unregistering): (slave geneve3): Releasing active interface [ 778.586625][ T2500] team0: Port device bridge2 removed [ 778.662909][ T2500] bond2 (unregistering): (slave bridge3): Releasing active interface [ 779.280076][ T2500] bond1 (unregistering): Released all slaves [ 779.467950][ T2500] bond2 (unregistering): Released all slaves [ 779.494029][ T2500] bond3 (unregistering): Released all slaves [ 779.524692][ T2500] bond4 (unregistering): Released all slaves [ 779.542212][ T3634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.551530][ T3634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.580411][ T3125] Bluetooth: hci2: command tx timeout [ 779.582580][ T3634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.599385][ T3634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.606693][ T3634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.640730][ T3634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.665521][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 779.672268][ T9] syz2: Port: 1 Link DOWN [ 779.817527][ T3837] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 779.819031][ T3838] syzkaller0: entered promiscuous mode [ 779.825293][ T3852] block nbd0: reconnected socket [ 779.832720][ T3838] syzkaller0: entered allmulticast mode [ 779.931365][ T2500] tipc: Disabling bearer [ 779.954576][ T2500] tipc: Left network mode [ 779.962426][ T3125] block nbd0: Receive control failed (result -32) [ 779.991522][ T3634] hsr_slave_0: entered promiscuous mode [ 779.998618][ T3634] hsr_slave_1: entered promiscuous mode [ 780.008145][ T3634] debugfs: 'hsr0' already exists in 'hsr' [ 780.028689][ T3634] Cannot create hsr debugfs directory [ 780.139086][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6274'. [ 780.158614][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6274'. [ 780.182587][ T3866] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 780.606700][ T3880] bond1: Removing last arp target with arp_interval on [ 780.836525][ T3902] openvswitch: netlink: Invalid VLAN frame [ 780.944193][ T30] audit: type=1804 audit(1770248249.482:8): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6285" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=237 res=1 errno=0 [ 780.953634][ T3902] 8021q: VLANs not supported on sit0 [ 781.005688][ T30] audit: type=1800 audit(1770248249.482:9): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6285" name="cgroup.controllers" dev="tmpfs" ino=237 res=0 errno=0 [ 781.165767][ T3919] __nla_validate_parse: 2 callbacks suppressed [ 781.165788][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6289'. [ 781.307778][ T3919] bridge_slave_1: left allmulticast mode [ 781.331723][ T3919] bridge_slave_1: left promiscuous mode [ 781.337686][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.385283][ T3919] bridge_slave_0: left allmulticast mode [ 781.393340][ T3919] bridge_slave_0: left promiscuous mode [ 781.409189][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.648591][ T2500] hsr_slave_0: left promiscuous mode [ 781.654373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 781.654407][ C0] lec:lec_tx_timeout: lec0 [ 781.667733][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 781.683338][ T2500] hsr_slave_1: left promiscuous mode [ 781.713290][ T2500] veth1_macvtap: left promiscuous mode [ 781.719042][ T2500] veth0_macvtap: left promiscuous mode [ 781.728332][ T2500] veth1_vlan: left promiscuous mode [ 781.736386][ T2500] veth0_vlan: left promiscuous mode [ 781.813319][ T3948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6292'. [ 781.891266][ T2500] pimreg3 (unregistering): left allmulticast mode [ 781.984601][ T3954] openvswitch: netlink: Key type 100 is out of range max 32 [ 782.416375][ T2500] smc: removing net device veth0_to_batadv with user defined pnetid SYZ2 [ 782.886036][ T2500] team0 (unregistering): Port device dummy0 removed [ 782.923452][ T2500] lo (unregistering): left allmulticast mode [ 782.952690][ T3937] syzkaller0: entered promiscuous mode [ 782.958373][ T3937] syzkaller0: entered allmulticast mode [ 783.124132][ T3959] netlink: 'syz.0.6296': attribute type 1 has an invalid length. [ 783.266838][ T3959] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 783.457499][ T3978] sctp: [Deprecated]: syz.4.6301 (pid 3978) Use of int in max_burst socket option deprecated. [ 783.457499][ T3978] Use struct sctp_assoc_value instead [ 783.665634][ T2500] IPVS: stop unused estimator thread 0... [ 784.126056][ T3634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 784.191182][ T3634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.340437][ T3634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.390817][ T3634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.510989][ T4043] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6316'. [ 784.557647][ T4043] netlink: 'syz.3.6316': attribute type 1 has an invalid length. [ 784.575011][ T4043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6316'. [ 784.579909][ T4051] netlink: 'syz.2.6317': attribute type 9 has an invalid length. [ 784.670762][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6316'. [ 784.685544][ T4055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.696279][ T4043] hsr_slave_0: left promiscuous mode [ 784.709943][ T4043] hsr_slave_1: left promiscuous mode [ 784.716905][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 784.766577][ T4055] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.6319'. [ 784.785146][ T4065] netlink: get zone limit has 4 unknown bytes [ 784.978923][ T3634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.084563][ T3634] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.131953][ T4078] tipc: New replicast peer: 255.255.255.255 [ 785.138591][ T4078] tipc: Enabled bearer , priority 10 [ 785.210436][ T4078] tipc: Enabling of bearer rejected, failed to enable media [ 785.222901][T18575] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.230326][T18575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.294434][T18575] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.301851][T18575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.315243][ T4089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6326'. [ 785.465097][ T3634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.003261][ T3634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.178634][ T4126] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6333'. [ 786.239028][ T3634] veth0_vlan: entered promiscuous mode [ 786.260980][ T5896] tipc: Node number set to 4023414439 [ 786.293449][ T3634] veth1_vlan: entered promiscuous mode [ 786.417822][ T3634] veth0_macvtap: entered promiscuous mode [ 786.458876][ T3634] veth1_macvtap: entered promiscuous mode [ 786.533186][ T4142] netlink: 'syz.2.6338': attribute type 5 has an invalid length. [ 786.570161][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.586733][ T4142] netlink: 'syz.2.6338': attribute type 7 has an invalid length. [ 786.618826][ T4142] netlink: 'syz.2.6338': attribute type 5 has an invalid length. [ 786.632267][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.724271][ T2512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.764622][ T2512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.774484][ T2499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 786.885203][ T2512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.914841][ T2512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.201777][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.226475][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6343'. [ 787.257746][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.336381][ T4176] netlink: 'syz.3.6342': attribute type 1 has an invalid length. [ 787.348272][ T4182] netlink: 'syz.4.6345': attribute type 10 has an invalid length. [ 787.364400][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 787.367546][ T2512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.390918][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6342'. [ 787.409582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 787.417648][ C0] lec:lec_tx_timeout: lec0 [ 787.423879][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 787.430216][ T4176] netlink: 'syz.3.6342': attribute type 2 has an invalid length. [ 787.448673][ T4176] netlink: 'syz.3.6342': attribute type 2 has an invalid length. [ 787.450189][ T2512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.561447][ T4189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6347'. [ 787.694105][ T4201] syzkaller0: left promiscuous mode [ 787.710075][ T4201] syzkaller0: left allmulticast mode [ 787.890931][ T4212] openvswitch: netlink: Missing key (keys=40, expected=100) [ 787.908337][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6351'. [ 787.919896][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6351'. [ 788.202307][ T4222] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6356'. [ 788.249601][ T4222] gretap0: entered promiscuous mode [ 788.306196][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.318328][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.328352][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.335115][ T4227] gretap0: left promiscuous mode [ 788.347937][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.359417][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 788.452294][ T4227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.016406][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6360'. [ 789.107873][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6360'. [ 789.406286][ T3585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.449609][ T3585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 789.471441][ T3585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.872801][ T3585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.929508][ T3585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 789.955250][ T3585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.042610][ T4285] bridge_slave_0: entered promiscuous mode [ 790.085632][ T4284] bridge_slave_0: left promiscuous mode [ 790.261577][ T3585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.299864][ T3585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 790.319584][ T3585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.423129][ T4318] 8021q: adding VLAN 0 to HW filter on device bond12 [ 790.449865][ T3125] Bluetooth: hci3: command tx timeout [ 790.556826][ T3585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.579788][ T3585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 790.591768][ T3585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.614320][ T4226] chnl_net:caif_netlink_parms(): no params data found [ 791.029017][ T4340] veth3: entered allmulticast mode [ 791.222915][ T4366] __nla_validate_parse: 9 callbacks suppressed [ 791.222937][ T4366] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6385'. [ 791.359978][ T4379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.370766][ T4371] bond13: Unable to set up delay as MII monitoring is disabled [ 791.397425][ T4371] bond13 (unregistering): Released all slaves [ 791.399357][ T4382] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 791.486761][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.506298][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.559736][ T4226] bridge_slave_0: entered allmulticast mode [ 791.575273][ T4226] bridge_slave_0: entered promiscuous mode [ 791.628103][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.641680][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.649339][ T4226] bridge_slave_1: entered allmulticast mode [ 791.700657][ T4226] bridge_slave_1: entered promiscuous mode [ 791.733233][ T3585] bridge_slave_1: left allmulticast mode [ 791.739201][ T3585] bridge_slave_1: left promiscuous mode [ 791.745805][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.768295][ T4404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.784085][ T3585] bridge_slave_0: left allmulticast mode [ 791.811754][ T3585] bridge_slave_0: left promiscuous mode [ 791.817796][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.903944][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6396'. [ 792.088408][ T3585] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 792.373543][ T4428] sctp: [Deprecated]: syz.3.6403 (pid 4428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.373543][ T4428] Use struct sctp_sack_info instead [ 792.439487][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 792.447580][ C0] lec:lec_tx_timeout: lec0 [ 792.452544][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 792.547926][ T3125] Bluetooth: hci3: command tx timeout [ 792.982948][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.995382][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.007890][ T3585] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 793.023626][ T3585] bond0 (unregistering): Released all slaves [ 793.034113][ T3585] bond1 (unregistering): Released all slaves [ 793.169915][ T3585] bond2 (unregistering): Released all slaves [ 793.310466][ T3585] bond3 (unregistering): Released all slaves [ 793.439238][ T3585] bond4 (unregistering): Released all slaves [ 793.564217][ T3585] bond5 (unregistering): Released all slaves [ 793.577081][ T3585] bond6 (unregistering): Released all slaves [ 793.590940][ T3585] bond7 (unregistering): Released all slaves [ 793.605682][ T3585] bond8 (unregistering): Released all slaves [ 793.758436][ T3585] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 793.773056][ T3585] bond9 (unregistering): (slave veth11): Releasing active interface [ 793.784408][ T3585] bond9 (unregistering): (slave veth13): Releasing active interface [ 793.794850][ T3585] bond9 (unregistering): Released all slaves [ 793.934991][ T3585] bond10 (unregistering): Released all slaves [ 793.953175][ T4397] macsec1: entered promiscuous mode [ 794.052804][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.110449][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.252003][ T3585] tipc: Disabling bearer [ 794.274664][ T3585] tipc: Left network mode [ 794.311561][ T4442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.360536][ T4226] team0: Port device team_slave_0 added [ 794.371290][ T3585] IPVS: stopping master sync thread 27502 ... [ 794.408176][ T4226] team0: Port device team_slave_1 added [ 794.452578][ T4452] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6409'. [ 794.619691][ T3125] Bluetooth: hci3: command tx timeout [ 794.696292][ T4464] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 794.701389][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.729712][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.792046][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.842770][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.879589][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.933963][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.046473][ T4476] veth0: entered promiscuous mode [ 795.073737][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6417'. [ 795.112079][ T4472] syzkaller0: entered promiscuous mode [ 795.117935][ T4472] syzkaller0: entered allmulticast mode [ 795.205003][ T4476] veth0 (unregistering): left promiscuous mode [ 795.253798][ T4474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6415'. [ 795.349332][ T4472] tipc: Enabled bearer , priority 0 [ 795.401251][ T4494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6421'. [ 795.422895][ T4470] tipc: Resetting bearer [ 795.470142][ T4470] tipc: Disabling bearer [ 795.645605][ T4226] hsr_slave_0: entered promiscuous mode [ 795.673964][ T4226] hsr_slave_1: entered promiscuous mode [ 795.725215][ T4502] Cannot find del_set index 1 as target [ 795.850276][ T3585] hsr_slave_0: left promiscuous mode [ 795.868838][ T3585] hsr_slave_1: left promiscuous mode [ 795.889128][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.903124][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.926409][ T3585] veth0_macvtap: left promiscuous mode [ 795.937988][ T3585] veth1_vlan: left promiscuous mode [ 795.945505][ T3585] veth0_vlan: left promiscuous mode [ 796.695481][ T3125] Bluetooth: hci3: command tx timeout [ 796.977830][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 797.027030][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 797.328002][ T3585] team0 (unregistering): Port device dummy0 removed [ 797.469496][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 797.477563][ C0] lec:lec_tx_timeout: lec0 [ 797.482687][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 798.050249][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6437'. [ 798.394747][ T3585] IPVS: stop unused estimator thread 0... [ 798.523016][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 798.622310][ T2499] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.662526][ T2499] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.675653][ T2499] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.719704][ T2499] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.877925][ T4607] validate_nla: 2 callbacks suppressed [ 798.877957][ T4607] netlink: 'syz.0.6446': attribute type 1 has an invalid length. [ 798.929585][ T4607] netlink: 'syz.0.6446': attribute type 2 has an invalid length. [ 798.965628][ T4607] netlink: 'syz.0.6446': attribute type 1 has an invalid length. [ 798.985972][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6446'. [ 799.438331][ T4226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 799.478464][ T4226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 799.541548][ T4226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 799.557356][ T4226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 800.006471][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.029369][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6458'. [ 800.064595][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6458'. [ 800.095687][ T4665] netlink: 'syz.4.6458': attribute type 11 has an invalid length. [ 800.101090][ T4226] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.147696][T18575] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.155269][T18575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.239304][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.246850][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.373007][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6462'. [ 800.503744][ T4693] sctp: [Deprecated]: syz.4.6462 (pid 4693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.503744][ T4693] Use struct sctp_sack_info instead [ 800.575943][ T4693] netlink: 'syz.4.6462': attribute type 1 has an invalid length. [ 800.658669][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6464'. [ 800.668781][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6464'. [ 800.895606][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.046938][ T4226] veth0_vlan: entered promiscuous mode [ 801.090893][ T4226] veth1_vlan: entered promiscuous mode [ 801.207941][ T4226] veth0_macvtap: entered promiscuous mode [ 801.262827][ T4226] veth1_macvtap: entered promiscuous mode [ 801.327419][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.367318][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.401294][ T4723] netlink: 'syz.0.6469': attribute type 21 has an invalid length. [ 801.469285][ T4723] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.487248][ T3585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.524146][ T3585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.567149][ T3585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.583917][ T4727] nbd: must specify a size in bytes for the device [ 801.614586][ T3585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.965256][ T2512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.003265][ T2512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.122162][ T2512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.140830][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6478'. [ 802.150048][ T2512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.254017][ T4765] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 802.285929][ T4765] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 802.332733][ T4765] team0: Failed to send options change via netlink (err -105) [ 802.352591][ T4765] team0: Port device batadv1 added [ 802.447966][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6482'. [ 802.499508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 802.507663][ C0] lec:lec_tx_timeout: lec0 [ 802.512416][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 802.901484][ T4803] team1: entered promiscuous mode [ 802.927030][ T4803] team1: entered allmulticast mode [ 803.056179][ T4809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 803.103354][ T4815] netlink: 'syz.2.6489': attribute type 11 has an invalid length. [ 803.120904][ T4809] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 803.143992][ T4809] gretap1: entered promiscuous mode [ 803.150888][ T4809] gretap1: entered allmulticast mode [ 803.194569][ T4817] __nla_validate_parse: 2 callbacks suppressed [ 803.194590][ T4817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6492'. [ 803.364475][ T4826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6492'. [ 803.404179][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6491'. [ 803.438611][ T4829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6493'. [ 803.557550][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.568977][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 803.587481][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 803.607429][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 803.633022][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.684319][ T4841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6495'. [ 803.872064][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6496'. [ 803.906993][ T4843] veth0: entered promiscuous mode [ 804.232613][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6500'. [ 804.651271][T18575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.688064][T18575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 804.716414][T18575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 804.936277][T18575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.988851][T18575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.020884][T18575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 805.087010][ T4887] vlan2: entered promiscuous mode [ 805.092422][ T4887] hsr_slave_1: entered promiscuous mode [ 805.098398][ T4887] vlan2: entered allmulticast mode [ 805.106885][ T4887] hsr_slave_1: entered allmulticast mode [ 805.142920][T18575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.185489][T18575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.192409][ T4892] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6507'. [ 805.220154][T18575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 805.431574][T18575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.465173][T18575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.509649][T18575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 805.733281][ T3125] Bluetooth: hci1: command tx timeout [ 805.812101][ T4879] lec:lec_atm_close: lec0: Shut down! [ 805.979144][ T4922] macvlan0: entered promiscuous mode [ 805.991748][ T4923] veth0_vlan: mtu less than device minimum [ 806.002848][ T4834] chnl_net:caif_netlink_parms(): no params data found [ 806.063035][T18575] bridge_slave_0: left promiscuous mode [ 806.076590][T18575] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.340586][ T4940] netlink: 'syz.0.6516': attribute type 4 has an invalid length. [ 806.397975][ T4947] netlink: 'syz.0.6516': attribute type 4 has an invalid length. [ 807.620115][T18575] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 807.808334][T18575] bond7 (unregistering): (slave geneve2): Releasing active interface [ 807.816887][ T3125] Bluetooth: hci1: command tx timeout [ 808.365245][T18575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.375975][T18575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.388039][T18575] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 808.398551][T18575] bond0 (unregistering): Released all slaves [ 808.525220][T18575] bond1 (unregistering): Released all slaves [ 808.665237][T18575] bond2 (unregistering): Released all slaves [ 808.806521][T18575] bond3 (unregistering): Released all slaves [ 808.821627][T18575] bond4 (unregistering): Released all slaves [ 808.991355][T18575] bond5 (unregistering): Released all slaves [ 809.140410][T18575] bond6 (unregistering): (slave veth5): Releasing active interface [ 809.150466][T18575] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 809.160964][T18575] bond6 (unregistering): Released all slaves [ 809.174119][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.182350][T18575] bond7 (unregistering): Released all slaves [ 809.197088][T18575] bond8 (unregistering): Released all slaves [ 809.212074][T18575] bond9 (unregistering): Released all slaves [ 809.367339][T18575] bond10 (unregistering): Released all slaves [ 809.381824][T18575] bond11 (unregistering): Released all slaves [ 809.529004][T18575] bond12 (unregistering): Released all slaves [ 809.696614][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6519'. [ 809.842996][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6522'. [ 809.883366][T18575] : left promiscuous mode [ 809.892346][ T3125] Bluetooth: hci1: command tx timeout [ 810.010030][ T4969] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6523'. [ 810.010726][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.061174][ T4834] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.072671][ T4834] bridge_slave_0: entered allmulticast mode [ 810.099249][ T4975] netlink: 'syz.1.6525': attribute type 1 has an invalid length. [ 810.113601][ T4834] bridge_slave_0: entered promiscuous mode [ 810.132737][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6522'. [ 810.149298][T18575] tipc: Disabling bearer [ 810.169736][T18575] tipc: Left network mode [ 810.175390][ T4980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.232413][ T4975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.240237][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.247838][ T4834] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.255961][ T4834] bridge_slave_1: entered allmulticast mode [ 810.264411][ T4834] bridge_slave_1: entered promiscuous mode [ 810.287916][T18575] IPVS: stopping backup sync thread 31631 ... [ 810.335217][ T4975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 810.404504][ T4984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.414319][ T4984] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 810.426163][ T4989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6526'. [ 810.426564][ T4984] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 810.503539][ T4988] veth5: entered promiscuous mode [ 810.512242][ T4988] bond1: (slave veth5): Enslaving as an active interface with a down link [ 810.565372][ T4975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.591968][ T4834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.681190][ T5002] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.682347][ T5003] netlink: 'syz.0.6530': attribute type 16 has an invalid length. [ 810.696385][ T5904] IPVS: starting estimator thread 0... [ 810.718490][ T5003] netlink: 'syz.0.6530': attribute type 3 has an invalid length. [ 810.727910][ T5003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6530'. [ 810.767610][ T4834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.813549][ T5006] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 810.829835][ T5004] IPVS: using max 26 ests per chain, 62400 per kthread [ 810.887904][ T4834] team0: Port device team_slave_0 added [ 810.978647][ T4834] team0: Port device team_slave_1 added [ 811.127245][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.144466][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.173158][ T4834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.275254][ T4834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.285231][ T4834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.313069][ T4834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.383819][T18575] hsr_slave_0: left promiscuous mode [ 811.402833][T18575] hsr_slave_1: left promiscuous mode [ 811.409201][T18575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.419554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 811.427881][ C0] lec:lec_tx_timeout: lec0 [ 811.433216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 811.532420][T18575] team0 (unregistering): Port device batadv1 removed [ 811.730704][T18575] pimreg3 (unregistering): left allmulticast mode [ 811.766076][ T5048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.914092][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6539'. [ 811.976377][ T3125] Bluetooth: hci1: command tx timeout [ 812.180842][T18575] team0 (unregistering): Port device team_slave_1 removed [ 812.234347][T18575] team0 (unregistering): Port device team_slave_0 removed [ 812.601087][T18575] team0 (unregistering): Port device 0! removed [ 812.627648][T18575] smc: removing net device team0 with user defined pnetid SYZ2 [ 812.790704][ T4834] hsr_slave_0: entered promiscuous mode [ 812.813270][ T4834] hsr_slave_1: entered promiscuous mode [ 812.831646][ T4834] debugfs: 'hsr0' already exists in 'hsr' [ 812.837551][ T4834] Cannot create hsr debugfs directory [ 813.130319][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'. [ 813.270236][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.291420][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.488398][ T5090] openvswitch: netlink: Tunnel attr 308 out of range max 16 [ 813.528633][ T5074] netlink: 'syz.1.6545': attribute type 16 has an invalid length. [ 813.550780][ T5074] netlink: 'syz.1.6545': attribute type 17 has an invalid length. [ 813.635546][ T5074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.807557][T18575] IPVS: stop unused estimator thread 0... [ 814.062321][ T5122] netlink: 'syz.3.6554': attribute type 11 has an invalid length. [ 814.104817][ T5122] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6554'. [ 814.634328][ T5162] netlink: 'syz.2.6562': attribute type 3 has an invalid length. [ 814.653826][ T5162] netlink: 'syz.2.6562': attribute type 3 has an invalid length. [ 814.935642][ T5177] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 816.439527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 816.447810][ C0] lec:lec_tx_timeout: lec0 [ 816.452667][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 816.995603][ T5117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.014759][ T4834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 817.057837][ T4834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 817.107217][ T4834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 817.143523][ T4834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.286439][ T5241] netlink: 'syz.3.6568': attribute type 1 has an invalid length. [ 817.446645][ T5251] __nla_validate_parse: 4 callbacks suppressed [ 817.446666][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6568'. [ 817.447901][ T4834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.560979][ T4834] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.580109][ T5258] vcan0: entered allmulticast mode [ 817.596211][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.603631][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.682097][ T2499] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.689371][ T2499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.803598][ T5262] syzkaller0: entered promiscuous mode [ 817.816441][ T5262] syzkaller0: entered allmulticast mode [ 817.925499][ T5269] tipc: Enabled bearer , priority 0 [ 817.963563][ T5261] tipc: Resetting bearer [ 818.038104][ T5278] netlink: 'syz.1.6576': attribute type 9 has an invalid length. [ 818.048163][ T5261] tipc: Disabling bearer [ 818.473289][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.825278][ T4834] veth0_vlan: entered promiscuous mode [ 818.843874][ T4834] veth1_vlan: entered promiscuous mode [ 818.895497][ T4834] veth0_macvtap: entered promiscuous mode [ 818.910231][ T4834] veth1_macvtap: entered promiscuous mode [ 818.937576][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.963248][ T4834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.982162][T18575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.007408][T18575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.027010][T18575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.062229][T18575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.135119][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.143230][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.190848][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.198900][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.459467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 821.467884][ C0] lec:lec_tx_timeout: lec0 [ 821.473053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 822.852960][ T5897] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 301 sec [ 826.479512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 826.487586][ C0] lec:lec_tx_timeout: lec0 [ 826.492654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.499569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 831.507901][ C0] lec:lec_tx_timeout: lec0 [ 831.512808][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 836.519503][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 836.527987][ C0] lec:lec_tx_timeout: lec0 [ 836.532874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 839.106539][ T6098] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 839.305901][ T6118] Illegal XDP return value 4294967274 on prog (id 1295) dev N/A, expect packet loss! [ 839.491647][ T6131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6587'. [ 839.615075][ T6140] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6591'. [ 839.626982][ T6142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6592'. [ 839.749390][ T6140] bond2 (unregistering): Released all slaves [ 840.463488][ T6184] syzkaller0: entered promiscuous mode [ 840.473481][ T6184] syzkaller0: entered allmulticast mode [ 840.490159][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6601'. [ 840.675702][ T6184] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 840.700338][ T6184] netlink: 'syz.0.6601': attribute type 3 has an invalid length. [ 840.731930][ T6184] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6601'. [ 840.763250][ T6184] NCSI netlink: No device for ifindex 813332851 [ 840.870671][ T6196] x9: renamed from bridge_slave_0 (while UP) [ 840.885986][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6604'. [ 840.963801][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6604'. [ 841.032828][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6606'. [ 841.314265][ T6231] ipt_REJECT: TCP_RESET invalid for non-tcp [ 841.488888][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6611'. [ 841.494621][ T6240] bridge0: entered promiscuous mode [ 841.499890][ T6241] xt_limit: Overflow, try lower: 604147548/4200216962 [ 841.534027][ T6240] bridge0: entered allmulticast mode [ 841.545646][ T6250] xt_limit: Overflow, try lower: 604147548/4200216962 [ 841.552646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 841.552683][ C0] lec:lec_tx_timeout: lec0 [ 841.561329][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 841.635814][ T6253] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6615'. [ 841.817185][ T6263] netlink: 'syz.3.6617': attribute type 6 has an invalid length. [ 842.398059][ T6301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 842.710083][ T6314] netlink: 'syz.0.6630': attribute type 12 has an invalid length. [ 842.802061][ T6326] netlink: 'syz.3.6632': attribute type 1 has an invalid length. [ 842.817859][ T6322] syzkaller0: entered promiscuous mode [ 842.823682][ T6322] syzkaller0: entered allmulticast mode [ 842.887182][ T6328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 842.947261][ T6330] sctp: [Deprecated]: syz.2.6636 (pid 6330) Use of int in max_burst socket option deprecated. [ 842.947261][ T6330] Use struct sctp_assoc_value instead [ 843.179864][ T6328] bond3 (unregistering): Released all slaves [ 843.256136][ T6344] can: request_module (can-proto-0) failed. [ 843.289272][ T6336] bond2: (slave gretap1): making interface the new active one [ 843.301699][ T6336] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 843.318362][ T6326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 843.533204][ T6367] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 843.538867][ T6362] syzkaller0: entered promiscuous mode [ 843.581765][ T6362] syzkaller0: entered allmulticast mode [ 843.787058][ T6379] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20004 [ 844.581880][ T6385] netlink: 'syz.2.6646': attribute type 8 has an invalid length. [ 845.930771][ T6389] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 846.011453][ T6398] __nla_validate_parse: 6 callbacks suppressed [ 846.011475][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6650'. [ 846.062250][ T6398] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6650'. [ 846.085006][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6650'. [ 846.226518][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6653'. [ 846.569455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 846.577636][ C0] lec:lec_tx_timeout: lec0 [ 846.589534][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 846.729842][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6660'. [ 847.298561][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6667'. [ 847.320363][ T6468] dvmrp6: entered allmulticast mode [ 847.666662][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6670'. [ 849.221368][ T6517] tipc: Enabling of bearer rejected, failed to enable media [ 850.923274][ T6561] openvswitch: netlink: IP tunnel dst address not specified [ 850.926130][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6685'. [ 851.199518][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6690'. [ 851.221650][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6688'. [ 851.230991][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6688'. [ 851.825682][ T6613] netlink: 'syz.4.6697': attribute type 1 has an invalid length. [ 851.855632][ T6613] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6697'. [ 851.897801][ T6613] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6697'. [ 851.959502][ T6613] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6697'. [ 852.088362][ T6620] bond_slave_1: entered allmulticast mode [ 852.283755][ T6619] [ 852.286157][ T6619] ====================================================== [ 852.293295][ T6619] WARNING: possible circular locking dependency detected [ 852.300425][ T6619] syzkaller #0 Not tainted [ 852.304865][ T6619] ------------------------------------------------------ [ 852.312141][ T6619] syz.2.6699/6619 is trying to acquire lock: [ 852.318134][ T6619] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 852.327816][ T6619] [ 852.327816][ T6619] but task is already holding lock: [ 852.335358][ T6619] ffff888142334ca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 852.346024][ T6619] [ 852.346024][ T6619] which lock already depends on the new lock. [ 852.346024][ T6619] [ 852.356619][ T6619] [ 852.356619][ T6619] the existing dependency chain (in reverse order) is: [ 852.365821][ T6619] [ 852.365821][ T6619] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 852.374786][ T6619] blk_alloc_queue+0x52f/0x610 [ 852.380083][ T6619] __blk_mq_alloc_disk+0x197/0x390 [ 852.385822][ T6619] nbd_dev_add+0x499/0xb50 [ 852.390850][ T6619] nbd_init+0x168/0x1f0 [ 852.395536][ T6619] do_one_initcall+0x250/0x840 [ 852.401084][ T6619] do_initcall_level+0x104/0x190 [ 852.406547][ T6619] do_initcalls+0x59/0xa0 [ 852.411406][ T6619] kernel_init_freeable+0x2a6/0x3d0 [ 852.417135][ T6619] kernel_init+0x1d/0x1d0 [ 852.421998][ T6619] ret_from_fork+0x51b/0xa40 [ 852.427121][ T6619] ret_from_fork_asm+0x1a/0x30 [ 852.432413][ T6619] [ 852.432413][ T6619] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 852.439629][ T6619] fs_reclaim_acquire+0x71/0x100 [ 852.445096][ T6619] prepare_alloc_pages+0x152/0x650 [ 852.451423][ T6619] __alloc_frozen_pages_noprof+0x12f/0x380 [ 852.458557][ T6619] __alloc_pages_noprof+0xa/0x30 [ 852.464016][ T6619] pcpu_populate_chunk+0x182/0xb30 [ 852.469917][ T6619] pcpu_alloc_noprof+0xc4a/0x18d0 [ 852.475473][ T6619] xt_percpu_counter_alloc+0x161/0x220 [ 852.481569][ T6619] translate_table+0x134a/0x2110 [ 852.487132][ T6619] ipt_register_table+0x11b/0x7f0 [ 852.492701][ T6619] iptable_raw_table_init+0x54/0x80 [ 852.498619][ T6619] xt_find_table_lock+0x30c/0x3e0 [ 852.504260][ T6619] xt_request_find_table_lock+0x26/0x100 [ 852.510507][ T6619] do_ipt_get_ctl+0x716/0x1240 [ 852.515988][ T6619] nf_getsockopt+0x26e/0x290 [ 852.521484][ T6619] ip_getsockopt+0x19e/0x230 [ 852.526617][ T6619] do_sock_getsockopt+0x2d3/0x3f0 [ 852.532259][ T6619] __x64_sys_getsockopt+0x1a4/0x240 [ 852.538245][ T6619] do_syscall_64+0xe2/0xf80 [ 852.543362][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.549819][ T6619] [ 852.549819][ T6619] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 852.557737][ T6619] __lock_acquire+0x15a5/0x2cf0 [ 852.563115][ T6619] lock_acquire+0x106/0x330 [ 852.568147][ T6619] __mutex_lock+0x19f/0x1300 [ 852.573277][ T6619] pcpu_alloc_noprof+0x272/0x18d0 [ 852.578849][ T6619] sbitmap_init_node+0x1e1/0x640 [ 852.584513][ T6619] sbitmap_queue_init_node+0x3e/0x4d0 [ 852.590422][ T6619] blk_mq_init_tags+0x15c/0x2d0 [ 852.595807][ T6619] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 852.601873][ T6619] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 852.608212][ T6619] nbd_start_device+0x17f/0xb10 [ 852.613595][ T6619] nbd_genl_connect+0x165b/0x1cf0 [ 852.619174][ T6619] genl_family_rcv_msg_doit+0x22a/0x330 [ 852.625352][ T6619] genl_rcv_msg+0x61c/0x7a0 [ 852.630380][ T6619] netlink_rcv_skb+0x232/0x4b0 [ 852.635695][ T6619] genl_rcv+0x28/0x40 [ 852.640227][ T6619] netlink_unicast+0x80f/0x9b0 [ 852.645613][ T6619] netlink_sendmsg+0x813/0xb40 [ 852.650929][ T6619] ____sys_sendmsg+0xa68/0xad0 [ 852.656322][ T6619] ___sys_sendmsg+0x2a5/0x360 [ 852.661644][ T6619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.667331][ T6619] do_syscall_64+0xe2/0xf80 [ 852.672462][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.679237][ T6619] [ 852.679237][ T6619] other info that might help us debug this: [ 852.679237][ T6619] [ 852.689554][ T6619] Chain exists of: [ 852.689554][ T6619] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 852.689554][ T6619] [ 852.703428][ T6619] Possible unsafe locking scenario: [ 852.703428][ T6619] [ 852.710987][ T6619] CPU0 CPU1 [ 852.716378][ T6619] ---- ---- [ 852.721744][ T6619] lock(&q->q_usage_counter(io)#50); [ 852.727307][ T6619] lock(fs_reclaim); [ 852.734083][ T6619] lock(&q->q_usage_counter(io)#50); [ 852.742163][ T6619] lock(pcpu_alloc_mutex); [ 852.746672][ T6619] [ 852.746672][ T6619] *** DEADLOCK *** [ 852.746672][ T6619] [ 852.754905][ T6619] 6 locks held by syz.2.6699/6619: [ 852.760126][ T6619] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 852.768501][ T6619] #1: ffffffff8fa19f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 852.777605][ T6619] #2: ffff8880254829d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 852.789118][ T6619] #3: ffff8880254828d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 852.800270][ T6619] #4: ffff888142334ca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 852.811016][ T6619] #5: ffff888142334cd8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 852.822173][ T6619] [ 852.822173][ T6619] stack backtrace: [ 852.828351][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.2.6699 Not tainted syzkaller #0 PREEMPT(full) [ 852.828377][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.828387][ T6619] Call Trace: [ 852.828397][ T6619] [ 852.828405][ T6619] dump_stack_lvl+0xe8/0x150 [ 852.828431][ T6619] print_circular_bug+0x2e1/0x300 [ 852.828449][ T6619] check_noncircular+0x12e/0x150 [ 852.828466][ T6619] __lock_acquire+0x15a5/0x2cf0 [ 852.828507][ T6619] ? kernel_text_address+0xa5/0xe0 [ 852.828526][ T6619] ? pcpu_alloc_noprof+0x272/0x18d0 [ 852.828540][ T6619] lock_acquire+0x106/0x330 [ 852.828559][ T6619] ? pcpu_alloc_noprof+0x272/0x18d0 [ 852.828577][ T6619] __mutex_lock+0x19f/0x1300 [ 852.828593][ T6619] ? pcpu_alloc_noprof+0x272/0x18d0 [ 852.828606][ T6619] ? stack_depot_save_flags+0x3f3/0x810 [ 852.828626][ T6619] ? kasan_save_track+0x4f/0x80 [ 852.828639][ T6619] ? kasan_save_track+0x3e/0x80 [ 852.828651][ T6619] ? pcpu_alloc_noprof+0x272/0x18d0 [ 852.828665][ T6619] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 852.828679][ T6619] ? blk_mq_init_tags+0x83/0x2d0 [ 852.828698][ T6619] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 852.828713][ T6619] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 852.828731][ T6619] ? __pfx___mutex_lock+0x10/0x10 [ 852.828746][ T6619] ? genl_rcv+0x28/0x40 [ 852.828763][ T6619] ? ____sys_sendmsg+0xa68/0xad0 [ 852.828781][ T6619] ? ___sys_sendmsg+0x2a5/0x360 [ 852.828804][ T6619] pcpu_alloc_noprof+0x272/0x18d0 [ 852.828824][ T6619] sbitmap_init_node+0x1e1/0x640 [ 852.828847][ T6619] sbitmap_queue_init_node+0x3e/0x4d0 [ 852.828869][ T6619] blk_mq_init_tags+0x15c/0x2d0 [ 852.828895][ T6619] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 852.828911][ T6619] ? lockdep_hardirqs_on+0x7a/0x110 [ 852.828927][ T6619] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 852.828943][ T6619] ? kfree+0x1be/0x650 [ 852.828962][ T6619] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 852.828980][ T6619] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 852.829003][ T6619] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 852.829023][ T6619] ? sysfs_add_file_mode_ns+0x259/0x300 [ 852.829044][ T6619] nbd_start_device+0x17f/0xb10 [ 852.829066][ T6619] ? device_create_file+0xf4/0x1b0 [ 852.829088][ T6619] nbd_genl_connect+0x165b/0x1cf0 [ 852.829111][ T6619] ? __pfx_nbd_genl_connect+0x10/0x10 [ 852.829134][ T6619] ? rcu_is_watching+0x15/0xb0 [ 852.829149][ T6619] ? __nla_parse+0x40/0x60 [ 852.829169][ T6619] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 852.829191][ T6619] genl_family_rcv_msg_doit+0x22a/0x330 [ 852.829213][ T6619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 852.829234][ T6619] ? __lock_acquire+0x6b5/0x2cf0 [ 852.829256][ T6619] genl_rcv_msg+0x61c/0x7a0 [ 852.829276][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.829294][ T6619] ? __pfx_nbd_genl_connect+0x10/0x10 [ 852.829316][ T6619] netlink_rcv_skb+0x232/0x4b0 [ 852.829331][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.829349][ T6619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 852.829374][ T6619] ? genl_rcv+0x19/0x40 [ 852.829397][ T6619] ? down_read+0x272/0x2e0 [ 852.829412][ T6619] ? genl_rcv+0xd/0x40 [ 852.829433][ T6619] genl_rcv+0x28/0x40 [ 852.829451][ T6619] netlink_unicast+0x80f/0x9b0 [ 852.829478][ T6619] ? __pfx_netlink_unicast+0x10/0x10 [ 852.829500][ T6619] ? __alloc_skb+0x193/0x390 [ 852.829516][ T6619] ? netlink_sendmsg+0x650/0xb40 [ 852.829530][ T6619] ? skb_put+0x11b/0x210 [ 852.829548][ T6619] netlink_sendmsg+0x813/0xb40 [ 852.829566][ T6619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.829582][ T6619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 852.829600][ T6619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 852.829617][ T6619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.829632][ T6619] ____sys_sendmsg+0xa68/0xad0 [ 852.829651][ T6619] ? __might_fault+0xaf/0x130 [ 852.829674][ T6619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.829695][ T6619] ? import_iovec+0x73/0xa0 [ 852.829716][ T6619] ___sys_sendmsg+0x2a5/0x360 [ 852.829734][ T6619] ? __lock_acquire+0x6b5/0x2cf0 [ 852.829754][ T6619] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.829775][ T6619] ? futex_wake+0x4ac/0x580 [ 852.829797][ T6619] ? __fget_files+0x2a/0x420 [ 852.829812][ T6619] ? __fget_files+0x3a0/0x420 [ 852.829831][ T6619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.829850][ T6619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.829871][ T6619] ? rcu_is_watching+0x15/0xb0 [ 852.829896][ T6619] do_syscall_64+0xe2/0xf80 [ 852.829912][ T6619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.829926][ T6619] ? trace_irq_disable+0x37/0x100 [ 852.829941][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 852.829957][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.829973][ T6619] RIP: 0033:0x7f413599aeb9 [ 852.829988][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.830002][ T6619] RSP: 002b:00007f41368b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.830020][ T6619] RAX: ffffffffffffffda RBX: 00007f4135c15fa0 RCX: 00007f413599aeb9 [ 852.830032][ T6619] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 852.830042][ T6619] RBP: 00007f4135a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 852.830052][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.830061][ T6619] R13: 00007f4135c16038 R14: 00007f4135c15fa0 R15: 00007fffb1785658 [ 852.830078][ T6619] [ 853.350520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6760 ms [ 853.358540][ C0] lec:lec_tx_timeout: lec0 [ 853.364927][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 853.388039][ T6641] Bluetooth: MGMT ver 1.23 [ 853.397736][ T6644] netlink: 'syz.0.6706': attribute type 1 has an invalid length. [ 853.406437][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6706'. [ 853.455990][ T6619] nbd1: detected capacity change from 0 to 127 [ 853.476271][ T5828] block nbd1: Receive control failed (result -32) [ 853.478329][ T6586] block nbd1: Send control failed (result -32) [ 853.488999][ T6586] block nbd1: Request send failed, requeueing [ 853.498103][ T5828] block nbd1: Receive control failed (result -32) [ 853.498145][ T6586] block nbd1: Send control failed (result -32) [ 853.512141][ T6586] block nbd1: Request send failed, requeueing [ 853.518414][ T6586] block nbd1: Dead connection, failed to find a fallback [ 853.525537][ T6586] block nbd1: shutting down sockets [ 853.534691][ T6586] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.544364][ T6586] Buffer I/O error on dev nbd1, logical block 2, async page read [ 853.552294][ T6586] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.561950][ T6586] Buffer I/O error on dev nbd1, logical block 3, async page read [ 853.570559][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.580382][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.588626][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.598211][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 853.606185][ T6586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.616859][ T6586] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.624936][ T6586] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.634495][ T6586] Buffer I/O error on dev nbd1, logical block 1, async page read [ 853.642337][ T6586] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.652173][ T6586] Buffer I/O error on dev nbd1, logical block 2, async page read [ 853.660219][ T6586] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.669765][ T6586] Buffer I/O error on dev nbd1, logical block 3, async page read [ 853.677646][ T6586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.687470][ T6586] Buffer I/O error on dev nbd1, logical block 0, async page read [ 853.695579][ T6586] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.705574][ T6586] Buffer I/O error on dev nbd1, logical block 1, async page read [ 853.715257][ T6586] ldm_validate_partition_table(): Disk read failed. [ 853.722442][ T6586] Dev nbd1: unable to read RDB block 0 [ 853.728540][ T6586] nbd1: unable to read partition table [ 853.737255][ T6586] ldm_validate_partition_table(): Disk read failed. [ 853.744351][ T6586] Dev nbd1: unable to read RDB block 0 [ 853.750468][ T6586] nbd1: unable to read partition table [ 854.369689][ T6647] Bluetooth: hci1: command 0x0405 tx timeout [ 858.449460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 858.457859][ C0] lec:lec_tx_timeout: lec0 [ 858.462679][ C0] lec:lec_start_xmit: lec0:No lecd attached