last executing test programs: 11.857944024s ago: executing program 1 (id=6094): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000840)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010001fff0000000000000000000600003feb0892fdddcdaa1591d4b3e5c389e15bcb90b0fcc00a3aa12ec33d887360a589d3bca8c9090edfb4eb919e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000d007f000000"], 0x3c}}, 0x0) connect$nfc_raw(r4, &(0x7f0000000880)={0x27, r5, 0x0, 0x7}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/116, 0x74, 0x0, &(0x7f00000005c0)=""/243, 0xf3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x2, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000380)='syzkaller\x00', 0xfffffffb, 0x24, &(0x7f0000000440)=""/36, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x4, 0xffffffff}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1], 0x0, 0x10, 0x1}, 0x94) close(r3) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r8, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0xfe3, 0x596, 0x40, 0x5, 0x0, 0xfffffffffffffffc, 0xffff, 0x4}, &(0x7f0000000180)={0x7fffffffffffffff, 0x3, 0x7a052529, 0x2, 0x3, 0x3, 0x1779618f, 0x1}, &(0x7f00000001c0)={0x9, 0x2, 0x200, 0x6, 0x0, 0x0, 0x4, 0xff}, &(0x7f0000000240)={r9, r10+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000024000180060005004ed0c500060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) 11.750027843s ago: executing program 1 (id=6098): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="bdd452000000000000000000000000010000000000000000000087f8f1261a8cb51e6f28282f923a1533fcdc0d26656bd3107de3deea4fe7dea19dac2a2558711071fd1907fc", 0x46, 0x44840, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffbff, 0x3, 0xef, 0xfffffffffffffffb, 0x6]}, &(0x7f0000000280)=0x78) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24040800, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r1, 0x1) 10.80165649s ago: executing program 1 (id=6118): r0 = epoll_create(0x7) (async) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) (rerun: 64) r6 = epoll_create1(0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f00000001c0)={0x4}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) 3.806432276s ago: executing program 0 (id=6187): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x5, {{0x2, 0x4e20, @empty}}, 0x1, 0x1, [{{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x110) sendto$inet(r0, &(0x7f0000000200)="916b6aee8cac82c52bcd3aba456143510edba59234646808f5b45a6fff34a4b0c8a09e420f72dadb27bccabfdf26fabae5e3183da0e98d170d88ed7779e64f81419eae3b873ba2de93d77a5cd9dece05ba4e07750ac9465406865c25dc987668c54a48b13ec19783db4057e08109b23e5adc2393f8bd7cd8c241e9d3aba0ceba8b890cfa17d8050dfcdf8bbfaa0434a686393b998b09d489880c298e830c1d613eb11c15471fd4b16ba8e4108e54df90cc4aaf75c35ffd9546d1a371eba425942e2ea2875e81316bca5ec352472fe0316b253881b4ae8cb46da4eb859b97dbb9c7a8070a56", 0xe5, 0x40841, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x0, [0x3, 0x9]}, &(0x7f00000003c0)=0x44) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x1d, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000600)=' ]\x00', 0x90001, &(0x7f0000000640)={@_ha_fsid={[0x7ff, 0x3]}, {0x2a3c, 0x82e4, 0x3, 0xe0}}, 0x401, &(0x7f0000000680), &(0x7f00000006c0)=0x3}, {[0x4, 0x4, 0x8]}, 0x7, 0xa4, &(0x7f0000000700)=""/164}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback=r0, 0xffffffffffffffff, 0x2d, 0x4, r1, @void, @value=r4, @void, @void, r3}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000840)={'veth1_virt_wifi\x00', 0x200}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000880)='lp', 0x2) socketpair(0x1e, 0x2, 0x80, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x20, 0x7, 0xf, 0x6, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x67, 0x0, 0x5, 0x2, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4}]}}}}}) setsockopt(r7, 0x1, 0xfffffffd, &(0x7f0000000980)="3b818dd122effbdd2d8c28d01eee108dbb9736563144b8befd83eb8b38a292915967c6c78f0c457372e0da2fdb5c5d14ebbfba6c00e6031369f6f5b8e1c65d385ae40462ab4768fc6743f0a635bf189fa681f78a5c11a937ef463651256e4df319a16c540462d27729002bdb06a3de3b79acecda8e5f3f73a8ee53a923c6338429f1a850c75da589ca968c3ddf6d579be606ff4fb6d41048291ea392a145b51331452708f17e97d31af97cbeba3f568de3cbc898fbd40dc71880982703364a1ffd078c1c8cf3a8f07f8623c207", 0xcd) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000a80)={0x9, 0x60}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x62342, 0x0) write$tun(r8, &(0x7f0000000b00)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x3, 0x1, 0x1c, 0x68, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}}, @info_request={0xf, 0x0, 0x0, 0x0, 0x4}}}, 0x1c) r9 = epoll_create1(0x80000) ioctl$XFS_IOC_SCRUB_METADATA(r9, 0xc040583c, &(0x7f0000000b40)={0x13, 0xc6, 0x7fffffff, 0xf, 0x8}) recvfrom$x25(r4, &(0x7f0000000b80)=""/87, 0x57, 0x40, &(0x7f0000000c00)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x800, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000000c80)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0x0, {0x3, @multicast, 'veth1_to_bridge\x00'}}, 0x1e) connect$phonet_pipe(r0, &(0x7f0000000d00)={0x23, 0x81, 0xe, 0x7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)={@fallback=r5, r2, 0xa, 0x0, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}}, 0x800) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1a4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5c}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0xc055}, 0x10000) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000fc0)={'pimreg0\x00', @remote}) connect$unix(r1, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) 3.673069439s ago: executing program 0 (id=6189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="71e67a15cd7db542377c512979d86bd1", 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x8000) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x3, 0x3, 0x1, 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="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", 0xfd}, {&(0x7f0000000200)="958a70f85484733d9100c20bc933d3c3f0520308d85f5cd852728c410059db1d026ef10e76fd5df97e2c66a882f050cb7e21b93b4a2745c44dc917323b32726635967aa5c3ab0d456775cce282cabc5699eedd8f4d59188f8805e4051668570cb3b181ad0227c53d090cf8f5b619ed3703e5fa30e8b9b13c47e84bb71de4e1849a7c0b0ecd4fed5f20deef0e892825bb7f1b", 0x92}, {&(0x7f00000002c0)="d9e0", 0x2}], 0x3, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}, 0x4) 3.642708169s ago: executing program 2 (id=6190): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.510690682s ago: executing program 0 (id=6193): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x31, 0x0, &(0x7f00000000c0)) 3.422630572s ago: executing program 2 (id=6195): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.395147271s ago: executing program 2 (id=6196): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$nbd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb3) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.741149311s ago: executing program 2 (id=6198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000a0003000000"], 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000a0003000000"], 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r5) (async) close(r5) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32=r8, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.703720675s ago: executing program 4 (id=6199): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendto$l2tp6(r1, &(0x7f0000000000)="fd", 0x4d, 0x8890, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000001affffed180001801400020064756d6d7930"], 0x2c}}, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) 2.485078041s ago: executing program 0 (id=6200): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a600006c0000000000000000000000ffff0a010100fe8000000000000000000000000000aabd9c1807c66c1ee2ff2749e73f4ab7e5d7751f90e0768853fa3fbe9820a523f9382a3eb2e4bf17ae01d8c83f8238fd517cb68665e7eb8521b55ea7e7fe38a82c1ab12c767335bd43c7"], 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000200b50a32f1bffa728f0a0000006eaaa42c66a6aec88abccf6bbd644158416751190456db4ce0f97853ba727427f03c121ad460165f68727755", @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf250b00000008002c000800000008003a00ff0f000008002b000600000005002d000000000008002b0002000000"], 0x3c}}, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x5fff, 0x2}, 0x6) (async) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x5fff, 0x2}, 0x6) socket(0x33, 0x2, 0x1) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r6, &(0x7f0000000340)="0245863a38b5c979f66ef1be3d7c15e7806b2d1a348c1b083d23b3d3a3a167ba0cad2051709600895288f7dcfcd3c267b4a174c66f6eb1450b7ac39ab84cc29a75e43f53b31a9a4615de4532e5fe16af6c8d1b1eab6bc3c9f9cfbe3f026e0d7dc57396fe1984c6d5a6e61a5106fddcf41c87026712d6c1403628fcc472e12747e164535685eda65ebdae5345a6d97aeed917c39e82c8d7fdb3ffdce5932213540d839796ca1ea33dcda088c364bf5b9b942db428b5d2919486b119f24478f494d5b4d2a0df45138e29e2024680", &(0x7f0000000440)=""/17, 0x4}, 0x20) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000083115bfbb69aa7d70000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000002d"], 0x44}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000002d"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48041}, 0x850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48041}, 0x850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000030a010200000000000000000a0000050900edbfe3f507341ef2cbc51468dc030073797a300000000009b53d8a9b15f052e600010073797a3100000000080007006e617400420008800c00014000000000000002000c00014000000000000000090c00024000000000000000090c00024000000000000004010c00014000000000000000051400000011000100000000004304672504000600000000000000830f327e855669f8c4c55f5dce6b1ac879a288a16b0ab54a00a56326bce1cc32839868af88e7687685a0d0eb12bf8452506383c9"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000004c0)=0x8) 1.173148963s ago: executing program 0 (id=6201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff02000000000000b3527771dcc231b6ef00000000000000018f00907800000000fe800000000000000000288d000000aa0e0200"/102], 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x40002000) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff09, 0x0) (async) socket$unix(0x1, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket(0x2, 0x80805, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x10000}}}, &(0x7f0000000400)=0x84) (async) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvmsg$unix(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x0, 0xb, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4004002) 1.165802983s ago: executing program 2 (id=6202): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0xffe}], 0x1, 0x40010142, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="fba8001d000000000a004e22000000fffe8000000000000000000000000000aa010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2100000000fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000cb200000000000000000000ffffac1414aa01000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000ef0000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008eba23f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000003fffe880000000000000000000000000101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000d0000008000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000006fe88000000000000000000000000010180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000a3dfc010000000000018900000000000000030100"/1040], 0x410) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x410}], 0x1, 0x800) 1.160850328s ago: executing program 4 (id=6203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.08699806s ago: executing program 3 (id=6204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls}, 0x94) (async) 1.001022917s ago: executing program 0 (id=6205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4a, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c0002400000000000000214000000020a0101000000000000000000000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 998.9906ms ago: executing program 1 (id=6119): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="930cf46600000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'batadv_slave_1\x00'}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000300000000000008004500004800000000fb019078ac1e0001ac1414aa030190032400004b00000000010000000100077f000001640100fe44102c300000000700000001000000038606000000200000003860effe7c41f51d67fba4d55fde9cfc853915625a7fa1429f4de3a40bedbc36df93a5ba3bb1b499a81cf3f364a0f105ba3e2152c2eb51696f99080098684cf3cce26f362f4f1882444b43cbdfb9f000a37ca7c8980c32b520ad67a7230bfe42e75d78abd770fde2103e3479db34887427b4e8106577eceac1f212353965356ae960f326cc"], 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000280)) 991.569182ms ago: executing program 4 (id=6206): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r5, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x44) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x298, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x12}}}}, [@NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6c, 0xc, 0x9, 0x12, 0x9, 0x60, 0x18, 0x4, 0x1b, 0x12]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x6}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x7}, {0x5, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x2}, {0x3}, {0x1, 0x9}, {0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x5}, {0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x5}, {0x6, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x1, 0x4}, {}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x101, 0x7, 0xb, 0x18, 0x1ff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x2, 0x3, 0x2, 0xfffa, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x7, 0x5}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x5, 0x2}, {0x5, 0x6}, {}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x2}, {0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x6}, {0x6, 0x6}, {0x6, 0x9}, {0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x100, 0x2, 0x3, 0xe, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x7}, {}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x2}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0x9}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9ad, 0x0, 0x8001, 0x7, 0x5, 0xb, 0x0, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x2, 0x40, 0x40, 0x1, 0x101, 0x4]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x0, 0x0, 0x81, 0x8e, 0x4, 0x80]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x37b, 0x3, 0x676, 0xfff, 0x2, 0x6]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xd7, 0x0, 0x6, 0x6, 0x1000, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x30, 0x48, 0x2, 0x18, 0x9, 0xc, 0x18, 0x36, 0x4, 0x5, 0x1b, 0x36, 0x4, 0x4, 0x36, 0xc, 0x30, 0x30, 0x3, 0x12, 0x3]}]}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x298}, 0x1, 0x0, 0x0, 0x4840}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r13, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00', {}, 0x3ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r13, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 965.116828ms ago: executing program 3 (id=6207): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='[]^}&)\'\x00', 0x200000, &(0x7f0000000080)={@align=0x1ff, {0x5, 0x26e6, 0x7, 0x5c86c452}}, 0xffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xf3e}, {[0x4, 0x0, 0xbcc, 0x1]}, 0x0, 0xf, &(0x7f0000000140)=""/15}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) (async) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000300)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 877.157291ms ago: executing program 1 (id=6208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x110c2300fe) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@val={0x88a8, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100, 0x1000000}, {@private}, {@broadcast}, {@loopback}, {@private}, {@empty}, {@private}]}, @timestamp={0x44, 0x8, 0xdb, 0x0, 0xe, [0x0]}]}}}}}}}, 0x0) 832.860558ms ago: executing program 1 (id=6210): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xac, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x38}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xea}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0xb0}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) write$cgroup_pid(r5, &(0x7f00000001c0)=r7, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) listen(r9, 0xf5f) (async) accept(r9, 0x0, 0x0) (async) r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 720.450845ms ago: executing program 3 (id=6211): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xa, 0x4, 0x7fff}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 476.793059ms ago: executing program 4 (id=6212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61157300000000006113770000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf6700000000000035060200c0ff3f006706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 404.141738ms ago: executing program 3 (id=6213): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x1405, 0x200, 0x70bd26, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7, 0x8}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x80}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x3, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x4b, &(0x7f0000000240)=""/75, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1e, r0, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x3, 0x9}, 0x10, r3, r4, 0x0, &(0x7f0000000700)=[r6, r0, r1, r1, r0, r7], 0x0, 0x10, 0x80000001}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r9, 0x408, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000980)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000009c0)=r11, 0x12) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r3, 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000a40)={r12}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000a80)={0x1, 0xff, 0x4, 0xe, 0x8, 0x6, 0x1, 0x4, 0x7, 0xd, 0x8, 0x6, 0x0, 0xff}, 0xe) (async) r13 = socket$rds(0x15, 0x5, 0x0) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000b00)={[{0x2b, 'cpuset'}, {0x2d, 'net_prio'}]}, 0x12) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xe0, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffff00}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2de}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x42}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0xd778b2496b456310) recvmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/29, 0x1d}, {&(0x7f0000001dc0)=""/1, 0x1}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c}}], 0x20}, 0x2) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000001ec0)={@dev={0xac, 0x14, 0x14, 0x30}, @local, 0x0, 0x2, [@loopback, @rand_addr=0x64010102]}, 0x18) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f40)=@o_path={&(0x7f0000001f00)='./file0\x00', 0x0, 0x10, r13}, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x40, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000020c0)={&(0x7f0000002080)=""/29, 0x110000, 0x800, 0x1, 0x2}, 0x20) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r14, 0x82307201, &(0x7f0000002100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$XFS_IOC_COMMIT_RANGE(r14, 0x40585883, &(0x7f0000002340)={r13, 0x0, 0x0, 0x1, 0x9, 0x8, [0x8, 0x4, 0x100, 0x1, 0x4, 0x5]}) (async) ioctl$sock_SIOCBRADDBR(r15, 0x89a0, &(0x7f00000023c0)='sit0\x00') 335.158964ms ago: executing program 4 (id=6214): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x88, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34e6}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x20, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf, 0x0, 0x1}]}}, "11f3305280f125e6"}}, 0x2e) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 217.047492ms ago: executing program 2 (id=6215): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x8, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20010000}, 0x48000) r7 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1401, 0x81c, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x24000844) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f00000003c0)=0x83800000, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000400)={0x2b, @empty, 0x4e21, 0x2, 'ovf\x00', 0x2, 0xfffffffa, 0x1}, 0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r10, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b6dce906e0"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "def9f62260"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0b816fb312"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0417bc21ca"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4cc00}, 0x20000000) recvmsg(r9, &(0x7f0000000a00)={&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000900)=""/22, 0x16}], 0x4, &(0x7f0000000980)=""/125, 0x7d}, 0x12020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000f40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)={0x3f8, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7fffffff}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c579443b526e"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x368, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x80}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x91}, 0x4800) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x3, 0x5, 0x5f, @remote, @mcast2, 0x8000, 0x10, 0x1, 0x400}}) sendmsg$nl_route(r13, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv4_deladdr={0x3c, 0x15, 0x800, 0x70bd2b, 0x25dfdbfb, {0x2, 0x8, 0x40, 0xff, r14}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x3c}}, 0x4) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@getchain={0x2c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0xfff2, 0xfff3}, {0x1, 0x4}, {0xa, 0xc}}, [{0x8, 0xb, 0x379}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200400c4) sendmsg$nl_route(r15, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@newnexthop={0x3c, 0x68, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x11}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000014c0)={'sit0\x00', &(0x7f00000013c0)={'gretap0\x00', 0x0, 0x7801, 0x10, 0x80, 0x7, {{0x34, 0x4, 0x2, 0x4, 0xd0, 0x66, 0x0, 0x6, 0x29, 0x0, @empty, @local, {[@timestamp={0x44, 0x18, 0x36, 0x0, 0x6, [0x8, 0x81, 0x4, 0xc46, 0x8000]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x6, [{@private=0xa010102, 0x3}, {@remote, 0x967}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@loopback, 0x4}]}, @ssrr={0x89, 0x27, 0x33, [@local, @empty, @multicast1, @local, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x3c, 0x3, 0xb, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xe}, {@rand_addr=0x64010101, 0x10}, {@empty, 0x1}, {@broadcast}, {@remote, 0x81}, {@local, 0xa535}, {@loopback, 0x6}, {@loopback, 0x1ff}]}]}}}}}) 215.719413ms ago: executing program 3 (id=6216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffffffffffee8, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff01000000"], 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) 27.266931ms ago: executing program 3 (id=6217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000100"/20], 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0xfffffffe, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r7, 0x0, 0x0, 0x10000, &(0x7f0000000040)=@nl=@unspec, 0x80) getsockopt$inet_udp_int(r6, 0x11, 0x65, 0x0, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="1258b7a7499068", 0x7}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0x4044800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x7, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) read(r3, &(0x7f00000001c0)=""/185, 0xb9) 0s ago: executing program 4 (id=6218): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) (async, rerun: 64) socket(0x1, 0x1, 0x7) (rerun: 64) kernel console output (not intermixed with test programs): ree=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.557689][T21653] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 387.560527][T21670] bond4: (slave ip6gre2): making interface the new active one [ 387.567014][T21653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.588351][T21653] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 387.598249][T21653] 43874 total pagecache pages [ 387.603034][T21653] 0 pages in swap cache [ 387.607290][T21653] Free swap = 124996kB [ 387.622417][T21653] Total swap = 124996kB [ 387.629967][T21653] 2097051 pages RAM [ 387.636918][T21670] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 387.651567][T21653] 0 pages HighMem/MovableOnly [ 387.667977][T21653] 427062 pages reserved [ 387.672253][T21653] 0 pages cma reserved [ 387.989086][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.997523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.052615][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.061265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.078216][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.100189][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.126033][T21706] netlink: 'syz.4.4364': attribute type 1 has an invalid length. [ 388.734496][T21700] __nla_validate_parse: 2 callbacks suppressed [ 388.734517][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4364'. [ 388.800466][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4364'. [ 389.101401][ T51] Bluetooth: hci2: link tx timeout [ 389.107360][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.117834][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.314614][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.361528][T21736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4373'. [ 389.438862][T21737] syz_tun: refused to change device tx_queue_len [ 389.814313][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4377'. [ 389.898096][T21747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4376'. [ 389.920830][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4376'. [ 389.936787][T21747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4376'. [ 389.948617][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 389.966231][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 389.975864][T21755] netlink: 'syz.4.4379': attribute type 15 has an invalid length. [ 390.452677][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4384'. [ 390.519270][T21776] IPVS: length: 239 != 24 [ 390.843354][T21786] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.858776][T21786] team0: Port device batadv1 added [ 391.108554][T21815] netlink: 'syz.2.4396': attribute type 1 has an invalid length. [ 391.163058][T21815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 391.198950][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 391.351629][T21832] 8021q: VLANs not supported on ip6gre0 [ 391.426822][T21837] sch_fq: defrate 0 ignored. [ 391.849567][T21857] IPVS: length: 198 != 520133856 [ 392.237783][ T796] net_ratelimit: 22 callbacks suppressed [ 392.237801][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.502341][T21893] xt_hashlimit: size too large, truncated to 1048576 [ 392.563889][T15285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.788066][ T1118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.796483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.823124][ T1118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.831626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.861785][ T1118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.278175][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.412140][T21918] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 393.526528][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.979130][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.050461][T21966] netlink: 'syz.1.4426': attribute type 2 has an invalid length. [ 394.066924][T21966] netlink: 'syz.1.4426': attribute type 2 has an invalid length. [ 394.621147][T21983] __nla_validate_parse: 2 callbacks suppressed [ 394.621166][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 394.961010][T22004] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4431'. [ 394.979998][T22004] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4431'. [ 395.004232][T22004] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4431'. [ 395.009797][T22012] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4433'. [ 395.033177][T21996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4431'. [ 395.105372][T22008] netlink: 3927 bytes leftover after parsing attributes in process `syz.0.4432'. [ 395.231537][T22008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4432'. [ 395.243341][T22020] syzkaller0: entered promiscuous mode [ 395.255012][T22020] syzkaller0: entered allmulticast mode [ 395.312554][T22015] syzkaller1: entered promiscuous mode [ 395.338638][T22015] syzkaller1: entered allmulticast mode [ 395.512694][T22039] Bluetooth: MGMT ver 1.23 [ 395.621040][T22048] netlink: 'syz.4.4440': attribute type 1 has an invalid length. [ 395.724464][T22054] bond5: (slave gretap2): making interface the new active one [ 395.733600][T22054] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 395.781452][T22062] sctp: [Deprecated]: syz.2.4441 (pid 22062) Use of int in maxseg socket option. [ 395.781452][T22062] Use struct sctp_assoc_value instead [ 395.821938][T22062] netlink: 'syz.2.4441': attribute type 2 has an invalid length. [ 395.876386][T22062] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 395.907949][T22062] netlink: 'syz.2.4441': attribute type 2 has an invalid length. [ 395.915712][T22062] netlink: 'syz.2.4441': attribute type 2 has an invalid length. [ 395.940090][T22062] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 395.964538][T22062] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 395.988509][T22062] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 396.006670][T22067] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 396.034812][T22067] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 396.050955][T22074] nbd2: detected capacity change from 0 to 127 [ 396.059461][ T51] block nbd2: Receive control failed (result -32) [ 396.080069][T21860] block nbd2: Dead connection, failed to find a fallback [ 396.087357][T21860] block nbd2: shutting down sockets [ 396.098521][T21860] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.108748][T21860] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.116578][T21860] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.131184][T22083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4448'. [ 396.148041][T21860] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.171587][T21860] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.181456][T21860] Buffer I/O error on dev nbd2, logical block 2, async page read [ 396.191901][T21860] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.203475][T21860] Buffer I/O error on dev nbd2, logical block 3, async page read [ 396.211802][T21860] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.222523][T21860] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.235686][T21860] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.247279][T21860] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.255601][T21860] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.269930][T21860] Buffer I/O error on dev nbd2, logical block 2, async page read [ 396.278391][T21860] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.290197][T21860] Buffer I/O error on dev nbd2, logical block 3, async page read [ 396.303287][T22096] bond0: (slave wlan1): Opening slave failed [ 396.331659][T22094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4452'. [ 396.377720][T21860] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.395906][T21860] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.407161][T22100] lo: MTU too low for tipc bearer [ 396.413949][T22100] tipc: Enabling of bearer rejected, failed to enable media [ 396.427657][T21860] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 396.443218][T21860] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.469747][T21860] ldm_validate_partition_table(): Disk read failed. [ 396.477121][T21860] Dev nbd2: unable to read RDB block 0 [ 396.485488][T21860] nbd2: unable to read partition table [ 396.505268][T21860] ldm_validate_partition_table(): Disk read failed. [ 396.516149][T21860] Dev nbd2: unable to read RDB block 0 [ 396.524700][T21860] nbd2: unable to read partition table [ 396.626315][T22110] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 396.695042][T22117] syzkaller0: entered promiscuous mode [ 396.706515][T22117] syzkaller0: entered allmulticast mode [ 397.309772][ T35] net_ratelimit: 31 callbacks suppressed [ 397.309793][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.324243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.335498][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.343990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.388452][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.437653][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.380626][T22242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.478371][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.497867][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.506282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.726416][T22270] x_tables: duplicate underflow at hook 4 [ 398.912555][T22286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.936337][T22286] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 401.037571][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 402.377264][T22320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.515887][T22378] __nla_validate_parse: 21 callbacks suppressed [ 402.515905][T22378] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4528'. [ 402.549169][T22374] pim6reg: entered allmulticast mode [ 402.623588][ T42] IPVS: starting estimator thread 0... [ 402.638296][ T6269] net_ratelimit: 24 callbacks suppressed [ 402.638312][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.652097][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.710619][T22397] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 402.728182][T22387] IPVS: using max 29 ests per chain, 69600 per kthread [ 402.789696][T22399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 402.863171][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4536'. [ 402.912397][T22408] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4539'. [ 402.984161][T22413] validate_nla: 9 callbacks suppressed [ 402.984179][T22413] netlink: 'syz.4.4541': attribute type 1 has an invalid length. [ 402.998155][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.006585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.019986][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.028662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.053531][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.073160][T22422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4541'. [ 403.105227][T22413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.125491][T22422] bond6: entered allmulticast mode [ 403.183474][T22413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.203569][T22427] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4545'. [ 403.297570][T22429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4546'. [ 403.306864][T22429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4546'. [ 403.374478][T22429] erspan0: entered promiscuous mode [ 403.391055][T22429] gretap0: entered promiscuous mode [ 403.580807][T22444] netlink: 'syz.2.4551': attribute type 10 has an invalid length. [ 403.682824][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.735552][T22455] netlink: 'syz.2.4554': attribute type 6 has an invalid length. [ 403.892573][T22468] netlink: 'syz.2.4558': attribute type 11 has an invalid length. [ 404.093318][T22486] netlink: 'syz.1.4565': attribute type 10 has an invalid length. [ 404.106590][T22487] netlink: 'syz.2.4564': attribute type 1 has an invalid length. [ 404.106869][T22486] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 404.128754][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4562'. [ 404.164428][T22493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4564'. [ 404.225798][T22487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.434476][T22503] Cannot find add_set index 2 as target [ 404.451075][T22508] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 404.568599][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 404.628924][T22516] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 404.636691][T22516] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 404.676559][T22509] bond7: option all_slaves_active: invalid value (222) [ 404.701671][T22516] netlink: 'syz.0.4573': attribute type 2 has an invalid length. [ 404.701885][T22520] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 404.719830][T22509] bond7 (unregistering): Released all slaves [ 405.023714][T22528] macvlan2: entered promiscuous mode [ 405.046724][T22528] macvlan2: entered allmulticast mode [ 405.061587][T22528] bond6: (slave macvlan2): Opening slave failed [ 405.094503][T22533] x_tables: duplicate underflow at hook 1 [ 405.239512][T22540] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.264309][T22540] bond7 (unregistering): Released all slaves [ 405.861854][T22593] : entered promiscuous mode [ 405.928820][T22596] bond7: entered promiscuous mode [ 405.934328][T22596] bond7: entered allmulticast mode [ 405.939982][T22596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.158480][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 406.938311][T22684] rdma_op ffff8880365419f0 conn xmit_rdma 0000000000000000 [ 406.947163][T22681] bridge3: port 1(veth3) entered blocking state [ 406.954319][T22681] bridge3: port 1(veth3) entered disabled state [ 406.961770][T22681] veth3: entered allmulticast mode [ 406.970392][T22681] veth3: entered promiscuous mode [ 406.981120][T22682] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 407.010520][T22689] bridge3: port 2(veth5) entered blocking state [ 407.016939][T22689] bridge3: port 2(veth5) entered disabled state [ 407.024019][T22689] veth5: entered allmulticast mode [ 407.032261][T22689] veth5: entered promiscuous mode [ 407.041069][T22682] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 407.133226][T22682] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 407.249732][T22699] bond7: entered promiscuous mode [ 407.264105][T22699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.284138][T22682] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 407.439752][T15181] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.470451][T15181] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.515157][T15181] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.564517][T15181] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 407.615315][T22720] bond7: option all_slaves_active: invalid value (222) [ 407.635644][T22720] bond7 (unregistering): Released all slaves [ 407.738691][T22721] bond7: option all_slaves_active: invalid value (222) [ 407.746948][T22721] bond7 (unregistering): Released all slaves [ 407.848314][ T6269] net_ratelimit: 82 callbacks suppressed [ 407.848335][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.944223][T22739] __nla_validate_parse: 11 callbacks suppressed [ 407.944242][T22739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4629'. [ 408.008906][T22744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4631'. [ 408.036804][T22743] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4631'. [ 408.108538][T22752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4633'. [ 408.208544][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4637'. [ 408.260058][T22759] xt_cgroup: xt_cgroup: no path or classid specified [ 408.292682][T22766] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4639'. [ 408.307324][T22767] validate_nla: 1 callbacks suppressed [ 408.307340][T22767] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 408.338759][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'. [ 408.339793][T22767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4638'. [ 408.361132][T22767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4638'. [ 408.412924][T22766] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 408.431065][T22766] bond0 (unregistering): Released all slaves [ 408.491286][T22767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4638'. [ 408.640094][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.648820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.669528][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.678495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.687279][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.720169][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.878228][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.892252][T22792] bridge0: port 3(syz_tun) entered blocking state [ 408.907780][T22792] bridge0: port 3(syz_tun) entered disabled state [ 408.923283][T22793] netlink: 'syz.3.4647': attribute type 11 has an invalid length. [ 408.925211][T22792] syz_tun: entered promiscuous mode [ 409.394054][T22823] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 409.463564][T22830] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 409.471647][T22830] netlink: 'syz.0.4658': attribute type 2 has an invalid length. [ 409.809367][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.817828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.698356][T22823] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 411.240170][T22868] netlink: 'syz.4.4670': attribute type 1 has an invalid length. [ 411.332853][T22868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 411.382830][T22876] netlink: 'syz.2.4672': attribute type 8 has an invalid length. [ 411.385486][T22871] bond7: (slave geneve3): making interface the new active one [ 411.409474][T22871] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 411.621649][T22892] netlink: 'syz.2.4674': attribute type 12 has an invalid length. [ 412.944741][T22957] netlink: 'syz.4.4695': attribute type 11 has an invalid length. [ 412.967679][T22957] netlink: 'syz.4.4695': attribute type 11 has an invalid length. [ 412.975524][T22957] __nla_validate_parse: 13 callbacks suppressed [ 412.975538][T22957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4695'. [ 413.039500][ T6269] net_ratelimit: 120 callbacks suppressed [ 413.039517][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.167932][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.176350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.185017][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.193521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.229295][T15181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.436521][T22989] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 413.493433][T22994] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 413.565227][T22989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.825678][T23014] pim6reg527: entered allmulticast mode [ 414.077875][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.199056][T23029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4706'. [ 414.322559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.378409][ T1118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.386868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.305862][T22974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.563982][T23057] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4715'. [ 416.586333][T23057] 8021q: VLANs not supported on ip6gre0 [ 416.600106][T23064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4717'. [ 416.943948][T23097] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 417.096083][T23107] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4727'. [ 417.107065][T23106] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4727'. [ 418.238023][ T6273] net_ratelimit: 33 callbacks suppressed [ 418.238041][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.837908][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.846361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.854848][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.863263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.871813][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.277620][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.438519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.448102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.629408][T23069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.639170][T23076] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4720'. [ 419.653805][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4728'. [ 419.793644][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4731'. [ 419.832003][T23126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4734'. [ 419.951198][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4736'. [ 419.962508][T23136] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4737'. [ 419.998873][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.277978][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4740'. [ 420.299725][T23160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4740'. [ 420.395791][T23168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4740'. [ 420.464165][T23168] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 420.652350][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4744'. [ 421.183794][T23212] netlink: 'syz.0.4757': attribute type 1 has an invalid length. [ 421.222297][T23212] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 421.478906][T23211] 8021q: VLANs not supported on ip6_vti0 [ 421.779028][T23245] Cannot find set identified by id 65534 to match [ 421.976112][ T1118] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.009389][ T1118] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.075155][ T1118] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.112555][ T1118] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.193560][T23278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 422.253450][T23286] netlink: 'syz.0.4774': attribute type 5 has an invalid length. [ 422.366130][T23290] netlink: 'syz.2.4779': attribute type 4 has an invalid length. [ 423.348217][ T1167] net_ratelimit: 23 callbacks suppressed [ 423.348237][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.362670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.371719][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.380081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.388456][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.438945][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.929181][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.127037][T23326] netlink: 'syz.0.4785': attribute type 3 has an invalid length. [ 424.159012][T23329] netlink: 'syz.2.4786': attribute type 16 has an invalid length. [ 424.167596][T23328] netlink: 'syz.0.4785': attribute type 3 has an invalid length. [ 424.308772][T23338] netlink: 'syz.4.4790': attribute type 1 has an invalid length. [ 424.414407][T23338] gtp1: entered promiscuous mode [ 424.438316][T23338] gtp1: entered allmulticast mode [ 424.481763][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.498962][ T1118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.507425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.729057][T23363] __nla_validate_parse: 19 callbacks suppressed [ 424.729075][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 424.740286][T23365] netlink: 'syz.4.4798': attribute type 3 has an invalid length. [ 424.958867][T23381] Cannot find del_set index 4 as target [ 424.991956][T23381] netlink: 'syz.1.4804': attribute type 12 has an invalid length. [ 425.123750][T23395] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 425.138027][T23394] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 425.150087][T23398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4809'. [ 425.161897][T23394] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 425.217582][T23395] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418279 [ 425.227260][T23395] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418278 [ 425.240434][T23396] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418279 [ 425.253751][T23401] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 425.269179][T23396] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418278 [ 425.287140][T23396] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418279 [ 425.298146][T23396] tipc: Failed to remove unknown binding: 66,0,0/2886997057:2840418277/2840418278 [ 425.500537][T23419] syzkaller1: entered promiscuous mode [ 425.506057][T23419] syzkaller1: entered allmulticast mode [ 425.531986][T23422] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4816'. [ 425.604740][T23429] syzkaller0: entered promiscuous mode [ 425.617913][T23429] syzkaller0: entered allmulticast mode [ 425.782034][T23432] xfrm0: entered promiscuous mode [ 425.787130][T23432] xfrm0: entered allmulticast mode [ 425.890920][T23442] set match dimension is over the limit! [ 425.996009][T23450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4825'. [ 426.026691][T23453] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4823'. [ 426.136031][T23457] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 426.149558][T23457] bond7 (unregistering): Released all slaves [ 426.184906][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 426.201492][T23472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4830'. [ 426.395142][T23487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4833'. [ 426.543831][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4836'. [ 426.576104][T23494] vlan2: entered promiscuous mode [ 426.622036][T23502] xt_SECMARK: invalid mode: 9 [ 426.641002][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 426.651020][T23502] netlink: 'syz.2.4837': attribute type 16 has an invalid length. [ 426.672343][T23502] netlink: 'syz.2.4837': attribute type 17 has an invalid length. [ 426.766958][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 426.835148][T23507] "syz.4.4839" (23507) uses obsolete ecb(arc4) skcipher [ 427.079206][T23532] syzkaller1: entered allmulticast mode [ 427.686922][T23584] netlink: 'syz.3.4863': attribute type 1 has an invalid length. [ 427.781208][T23584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 428.107011][T23620] netlink: 'syz.4.4876': attribute type 24 has an invalid length. [ 428.427680][T23428] udevd[23428]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 428.460785][T23642] udevd[23642]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 428.532959][T23650] vlan2: entered allmulticast mode [ 428.552111][T23650] gretap0: entered allmulticast mode [ 428.635790][T23664] net_ratelimit: 21 callbacks suppressed [ 428.635808][T23664] netlink: zone id is out of range [ 428.648216][T23664] netlink: del zone limit has 4 unknown bytes [ 428.781599][T23671] netlink: 'syz.3.4896': attribute type 3 has an invalid length. [ 429.161403][T23689] netlink: 'syz.1.4899': attribute type 16 has an invalid length. [ 429.181143][T23689] netlink: 'syz.1.4899': attribute type 17 has an invalid length. [ 429.256459][T23567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.271435][T23567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.291277][T23689] tunl0: left promiscuous mode [ 429.325500][T23689] team0: left promiscuous mode [ 429.332171][T23689] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.340704][T23689] dummy0: left promiscuous mode [ 429.348380][T23689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.366312][T23567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.376150][T23567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.527226][T23705] netlink: 'syz.1.4902': attribute type 32 has an invalid length. [ 429.584710][T23705] bond0: Setting coupled_control to off (0) [ 429.618643][T23711] nbd: nbd64 already in use [ 429.626102][T23715] netlink: 'syz.4.4906': attribute type 1 has an invalid length. [ 429.655164][T23707] bond0: entered promiscuous mode [ 429.667429][T23707] batadv0: entered promiscuous mode [ 429.672802][T23707] bridge_slave_1: entered promiscuous mode [ 429.719498][T23707] bond0: left promiscuous mode [ 429.724340][T23707] batadv0: left promiscuous mode [ 429.739117][T23722] sctp: [Deprecated]: syz.3.4908 (pid 23722) Use of int in maxseg socket option. [ 429.739117][T23722] Use struct sctp_assoc_value instead [ 429.748816][T23707] bridge_slave_1: left promiscuous mode [ 429.806208][T23714] netlink: 'syz.4.4906': attribute type 1 has an invalid length. [ 429.835922][T23714] __nla_validate_parse: 24 callbacks suppressed [ 429.835939][T23714] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4906'. [ 429.889964][T23714] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 429.916943][T23736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.021122][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 430.037826][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 430.088465][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'. [ 430.097957][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 430.306805][T23768] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 431.108963][T23837] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4935'. [ 431.401398][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4939'. [ 431.418690][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4939'. [ 431.459874][T23857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4941'. [ 431.467896][T23854] syzkaller0: entered promiscuous mode [ 431.474306][T23854] syzkaller0: entered allmulticast mode [ 431.483004][T23854] 0: reclassify loop, rule prio 0, protocol 800 [ 431.490025][T23854] netlink: 640 bytes leftover after parsing attributes in process `syz.2.4942'. [ 431.499208][T23854] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 431.558125][T23861] xt_l2tp: v2 doesn't support IP mode [ 432.056741][T23879] xt_hashlimit: size too large, truncated to 1048576 [ 432.387749][T23905] IPVS: length: 112 != 24 [ 433.837689][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 433.943497][T23912] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 434.176000][T23930] syzkaller1: entered promiscuous mode [ 434.192179][T23930] syzkaller1: entered allmulticast mode [ 434.219359][T23929] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 434.336622][T23941] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 434.366981][T23941] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 434.454160][T23950] validate_nla: 2 callbacks suppressed [ 434.454177][T23950] netlink: 'syz.3.4964': attribute type 8 has an invalid length. [ 434.456865][T23947] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.648125][T23963] netlink: 'syz.4.4965': attribute type 2 has an invalid length. [ 434.670465][T23964] netlink: 'syz.4.4965': attribute type 2 has an invalid length. [ 434.714986][T23963] !: entered promiscuous mode [ 435.057894][T23995] netlink: 'syz.4.4976': attribute type 3 has an invalid length. [ 435.091759][T23998] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 435.136381][T23995] __nla_validate_parse: 5 callbacks suppressed [ 435.136397][T23995] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4976'. [ 435.158891][T23999] netlink: 'syz.1.4977': attribute type 9 has an invalid length. [ 435.166643][T23999] netlink: 'syz.1.4977': attribute type 11 has an invalid length. [ 435.175349][T23999] netlink: 'syz.1.4977': attribute type 12 has an invalid length. [ 435.199790][T23999] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.4977'. [ 435.225231][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 435.268375][T24010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.302829][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'. [ 435.327232][T24017] bond0: Error: Cannot enslave bond to itself. [ 435.356521][T24017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4982'. [ 435.675874][T24043] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4990'. [ 435.704099][T24043] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4990'. [ 435.747152][T24051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.770208][T24051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.804184][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4992'. [ 435.898642][T24065] netlink: 'syz.1.4992': attribute type 16 has an invalid length. [ 435.906497][T24065] netlink: 'syz.1.4992': attribute type 17 has an invalid length. [ 435.931518][T24060] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 435.939323][T24060] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 435.965094][T24065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.021632][T24068] syzkaller0: entered promiscuous mode [ 436.027213][T24068] syzkaller0: entered allmulticast mode [ 436.159196][T24073] syzkaller1: entered promiscuous mode [ 436.164820][T24073] syzkaller1: entered allmulticast mode [ 436.432026][T24092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5000'. [ 436.606528][T24108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.646834][T24108] team0: No ports can be present during mode change [ 436.766646][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5009'. [ 436.807264][T24123] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 436.817933][T24123] bond3: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 436.829965][T24123] bond3: (slave vxcan5): making interface the new active one [ 436.839780][T24123] bond3: (slave vxcan5): Enslaving as an active interface with an up link [ 436.874797][T24122] bond9: option coupled_control: invalid value (192) [ 436.886057][T24122] bond9 (unregistering): Released all slaves [ 437.086255][T24147] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 437.129074][T24138] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 437.171844][T24151] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 437.396551][T24161] tipc: Enabling of bearer rejected, failed to enable media [ 437.421030][T24170] syzkaller0: entered promiscuous mode [ 437.439683][T24170] syzkaller0: entered allmulticast mode [ 437.565839][T24180] sctp: [Deprecated]: syz.3.5026 (pid 24180) Use of int in max_burst socket option. [ 437.565839][T24180] Use struct sctp_assoc_value instead [ 437.771493][T24196] team0: Device vxcan1 is of different type [ 437.785305][T24197] team0: Device vxcan1 is of different type [ 437.871422][T24202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 437.940486][T24202] bond10: (slave bridge6): making interface the new active one [ 437.948965][T24202] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 437.973663][T24205] bond10: (slave bridge7): Enslaving as an active interface with a down link [ 438.259970][T24219] syzkaller0: entered promiscuous mode [ 438.283260][T24219] syzkaller0: entered allmulticast mode [ 438.564426][T24248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.585946][T24248] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 438.680382][T24259] tipc: Enabling of bearer rejected, failed to enable media [ 438.695180][T24262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.990800][ T13] smc: removing ib device syz1 [ 439.016147][T24274] ip6tnl0: Caught tx_queue_len zero misconfig [ 439.035159][T24274] lo: Caught tx_queue_len zero misconfig [ 439.931746][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.047123][T24321] x_tables: duplicate entry at hook 2 [ 440.096359][T24337] Cannot find set identified by id 65534 to match [ 440.175738][T24351] sctp: [Deprecated]: syz.0.5082 (pid 24351) Use of int in max_burst socket option. [ 440.175738][T24351] Use struct sctp_assoc_value instead [ 440.289255][T24355] __nla_validate_parse: 20 callbacks suppressed [ 440.289274][T24355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5084'. [ 440.440885][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5087'. [ 440.456750][T24367] block nbd3: Unsupported socket: should be TCP or UNIX. [ 440.525065][T24367] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5087'. [ 440.541744][T24367] 8021q: VLANs not supported on gre0 [ 440.653098][T24373] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5089'. [ 440.696548][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5090'. [ 440.709296][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5090'. [ 440.810575][T24381] vlan3: entered promiscuous mode [ 440.822220][T24381] vlan3: entered allmulticast mode [ 440.830475][T24381] hsr_slave_1: entered allmulticast mode [ 440.922064][T24387] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 441.275310][T24403] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 441.528434][T24412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5099'. [ 441.971292][T24436] validate_nla: 15 callbacks suppressed [ 441.971310][T24436] netlink: 'syz.1.5102': attribute type 7 has an invalid length. [ 442.015391][T24437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5104'. [ 442.050035][T24439] netlink: 'syz.1.5102': attribute type 58 has an invalid length. [ 442.070050][T24436] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5102'. [ 442.109862][T24443] netlink: 'syz.3.5106': attribute type 1 has an invalid length. [ 442.123476][T24437] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5104'. [ 442.258540][T24443] bond9: entered promiscuous mode [ 442.263630][T24443] bond9: entered allmulticast mode [ 442.274726][T24443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 442.289864][T24443] netlink: 'syz.3.5106': attribute type 15 has an invalid length. [ 442.353690][T24443] macvlan0: entered promiscuous mode [ 442.359370][T24443] macvlan0: entered allmulticast mode [ 442.367260][T24443] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 442.389984][T24461] xt_hashlimit: size too large, truncated to 1048576 [ 442.513674][T24467] vlan2: entered promiscuous mode [ 442.533924][T24467] bridge0: entered promiscuous mode [ 442.559521][T24467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.613716][T24471] syzkaller0: entered promiscuous mode [ 442.626446][T24471] syzkaller0: entered allmulticast mode [ 442.834647][T24488] openvswitch: netlink: Missing valid actions attribute. [ 442.842431][T24488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.872507][T24489] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 442.923181][T24489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 442.932210][T24492] netlink: 'syz.4.5121': attribute type 5 has an invalid length. [ 443.025832][T24489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.058720][T24489] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 443.070478][T24489] bond7: (slave vcan1): Error -95 calling set_mac_address [ 443.099157][T24497] netlink: 'syz.3.5124': attribute type 75 has an invalid length. [ 443.240798][T24507] sctp: [Deprecated]: syz.0.5127 (pid 24507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.240798][T24507] Use struct sctp_sack_info instead [ 443.341522][T24518] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 443.406381][T24523] netlink: 'syz.3.5133': attribute type 1 has an invalid length. [ 443.484184][T24527] netlink: 'syz.1.5135': attribute type 1 has an invalid length. [ 443.520860][T24527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.539327][T24527] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 443.572495][T24527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.579976][T24533] netlink: 'syz.0.5137': attribute type 1 has an invalid length. [ 443.583941][T24527] bond4: (slave bond5): Enslaving as an active interface with a down link [ 444.466786][T24601] syzkaller0: entered promiscuous mode [ 444.472674][T24601] syzkaller0: entered allmulticast mode [ 444.544740][T24602] x_tables: unsorted underflow at hook 1 [ 444.820778][T24623] bond0: (slave wlan1): Opening slave failed [ 444.859990][T24614] bond0: left promiscuous mode [ 444.865647][T24614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.940134][T24614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.182347][T24649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.200870][T24649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.318794][T24672] __nla_validate_parse: 13 callbacks suppressed [ 445.318811][T24672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5176'. [ 445.344174][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5176'. [ 445.385511][T24672] xfrm0: entered promiscuous mode [ 445.391360][T24672] xfrm0: entered allmulticast mode [ 445.434400][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5178'. [ 445.490033][T24666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5178'. [ 445.651872][T24695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5184'. [ 445.894309][T24707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5189'. [ 445.904307][T24716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5192'. [ 445.919490][T24710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5193'. [ 445.921778][T24712] xt_addrtype: ipv6 does not support BROADCAST matching [ 446.077248][T24724] 8021q: VLANs not supported on gre0 [ 446.125428][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5195'. [ 446.202117][T24730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 446.211104][T24730] syzkaller1: linktype set to 823 [ 446.220326][T24728] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5197'. [ 446.253460][T24728] syzkaller1: tun_chr_ioctl cmd 35108 [ 470.777815][T24744] __nla_validate_parse: 1 callbacks suppressed [ 470.777832][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 470.805731][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5201'. [ 470.830736][T24748] syzkaller0: entered promiscuous mode [ 470.836320][T24748] syzkaller0: entered allmulticast mode [ 470.952676][T24764] validate_nla: 9 callbacks suppressed [ 470.952695][T24764] netlink: 'syz.0.5207': attribute type 1 has an invalid length. [ 471.020408][T24764] bond8: entered promiscuous mode [ 471.025507][T24764] bond8: entered allmulticast mode [ 471.031638][T24764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 471.282492][T24778] x_tables: duplicate underflow at hook 2 [ 471.523184][T24789] syzkaller0: entered promiscuous mode [ 471.528966][T24789] syzkaller0: entered allmulticast mode [ 471.644554][T24800] openvswitch: netlink: Message has 253 unknown bytes. [ 471.898534][T24816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5225'. [ 471.989697][T24832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.048793][T24840] netlink: 'syz.1.5231': attribute type 2 has an invalid length. [ 472.074007][T24832] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 472.084410][T24842] xt_TCPMSS: Only works on TCP SYN packets [ 472.217293][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5239'. [ 472.264895][T24858] vlan3: entered allmulticast mode [ 472.270317][T24858] bridge0: entered allmulticast mode [ 472.275943][T24858] bridge0: port 1(vlan3) entered blocking state [ 472.290915][T24858] bridge0: port 1(vlan3) entered disabled state [ 472.437240][T24873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5244'. [ 472.458357][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5244'. [ 472.462049][T24875] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 472.467776][T24871] netlink: 'syz.1.5243': attribute type 9 has an invalid length. [ 472.484909][T24875] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 472.496935][T24873] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 472.690884][T24887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5250'. [ 472.701580][T24887] netlink: 'syz.3.5250': attribute type 7 has an invalid length. [ 472.712642][T24887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5250'. [ 472.780391][T24894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5252'. [ 472.839149][T24900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5254'. [ 473.236840][T24925] netlink: 'syz.0.5260': attribute type 26 has an invalid length. [ 473.487207][T24940] netlink: 'syz.2.5266': attribute type 58 has an invalid length. [ 473.560702][T24946] syzkaller0: entered promiscuous mode [ 473.566976][T24946] syzkaller0: entered allmulticast mode [ 474.116423][T24978] bond9: entered promiscuous mode [ 474.182980][T24980] bond10: entered promiscuous mode [ 474.284901][T24998] syzkaller1: entered promiscuous mode [ 474.290643][T24998] syzkaller1: entered allmulticast mode [ 474.626363][T25020] macvtap1: entered promiscuous mode [ 474.632393][T25020] macvtap1: entered allmulticast mode [ 474.643612][T25020] veth1_vlan: entered allmulticast mode [ 474.719748][T25026] macvtap2: entered promiscuous mode [ 474.734489][T25026] macvtap2: entered allmulticast mode [ 474.751217][T25034] netlink: 'syz.3.5292': attribute type 4 has an invalid length. [ 475.242859][T25060] netlink: 'syz.1.5302': attribute type 2 has an invalid length. [ 475.263216][T25063] netlink: 'syz.1.5302': attribute type 5 has an invalid length. [ 475.279940][T25060] netlink: 'syz.1.5302': attribute type 5 has an invalid length. [ 475.291070][T25065] sit0: Caught tx_queue_len zero misconfig [ 475.859897][T25096] syzkaller0: entered promiscuous mode [ 475.865420][T25096] syzkaller0: entered allmulticast mode [ 475.886413][T25096] __nla_validate_parse: 18 callbacks suppressed [ 475.886430][T25096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5312'. [ 475.938981][T25107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5316'. [ 476.037163][T25105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5314'. [ 476.414435][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5330'. [ 476.471730][T25157] netlink: 'syz.2.5331': attribute type 32 has an invalid length. [ 476.479914][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5331'. [ 476.528460][T25159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5329'. [ 476.620315][T25157] bond11: Setting coupled_control to off (0) [ 476.695986][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5333'. [ 476.768667][T25182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5336'. [ 476.800839][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 476.810387][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'. [ 477.045943][T25204] bond0: Caught tx_queue_len zero misconfig [ 477.055198][T25204] mac80211_hwsim hwsim46 wlan1: Caught tx_queue_len zero misconfig [ 477.063933][T25205] tipc: Enabled bearer , priority 0 [ 477.080972][T25205] syzkaller1: entered promiscuous mode [ 477.086605][T25205] syzkaller1: entered allmulticast mode [ 477.170185][T25209] netlink: 'syz.0.5347': attribute type 3 has an invalid length. [ 477.299028][T25216] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.323702][T25221] netlink: 'syz.4.5352': attribute type 11 has an invalid length. [ 477.341769][T25216] bond7: (slave lo): Enslaving as an active interface with an up link [ 477.369670][T25216] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 477.512383][T25222] syzkaller1: entered promiscuous mode [ 477.522053][T25222] syzkaller1: entered allmulticast mode [ 477.641096][T25235] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 477.695255][T25237] Cannot find del_set index 4 as target [ 477.730348][T25242] netlink: 'syz.0.5358': attribute type 1 has an invalid length. [ 477.909958][T25257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.022150][T25264] netlink: 'syz.3.5364': attribute type 1 has an invalid length. [ 478.193272][T25277] vcan1: entered promiscuous mode [ 478.199026][T25277] vcan1: entered allmulticast mode [ 478.306769][T25280] batadv_slave_0: entered promiscuous mode [ 478.320045][T25280] batadv_slave_0: entered allmulticast mode [ 478.506068][T25295] netlink: 'syz.0.5372': attribute type 11 has an invalid length. [ 478.791781][T25309] delete_channel: no stack [ 478.989840][T25325] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 479.010409][T25332] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 479.045128][T25322] netlink: 'syz.2.5385': attribute type 2 has an invalid length. [ 479.062712][T25322] netlink: 'syz.2.5385': attribute type 8 has an invalid length. [ 479.342194][T25350] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 479.366428][T25350] bond8 (unregistering): Released all slaves [ 480.098723][T25399] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 480.862546][T25463] netlink: 'syz.4.5427': attribute type 2 has an invalid length. [ 480.882400][T25463] netlink: 'syz.4.5427': attribute type 2 has an invalid length. [ 480.890618][T25463] !: left promiscuous mode [ 481.027061][T25474] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 481.109158][T25483] __nla_validate_parse: 26 callbacks suppressed [ 481.109176][T25483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5435'. [ 481.264113][T25489] syzkaller0: entered promiscuous mode [ 481.272645][T25489] syzkaller0: entered allmulticast mode [ 481.297179][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'. [ 481.546863][T25513] dvmrp0: entered allmulticast mode [ 481.595538][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5446'. [ 481.776004][T25530] netlink: 'syz.2.5451': attribute type 1 has an invalid length. [ 481.801879][T25530] bond12: entered promiscuous mode [ 481.807327][T25530] 8021q: adding VLAN 0 to HW filter on device bond12 [ 481.862277][T25538] netlink: 'syz.3.5453': attribute type 1 has an invalid length. [ 481.889828][T25538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5453'. [ 481.902698][T25538] netlink: 'syz.3.5453': attribute type 83 has an invalid length. [ 482.395535][T25557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5459'. [ 483.540172][T25567] delete_channel: no stack [ 483.590956][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'. [ 483.621824][T25575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'. [ 483.633935][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.644303][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.668343][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.680357][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.726715][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.755495][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5467'. [ 483.767833][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 483.780411][T25573] netlink: 'syz.2.5465': attribute type 23 has an invalid length. [ 484.177358][T25602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5472'. [ 484.413005][T25604] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 484.749438][T25625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5478'. [ 484.832902][T25630] bond8: entered promiscuous mode [ 484.861837][T25630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 484.952747][T25633] macvtap1: entered allmulticast mode [ 485.001307][T25638] syzkaller0: entered promiscuous mode [ 485.006875][T25638] syzkaller0: entered allmulticast mode [ 485.387282][T25664] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 485.545290][T25672] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 485.562764][T25672] bond9 (unregistering): Released all slaves [ 486.273020][T25718] __nla_validate_parse: 6 callbacks suppressed [ 486.273037][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5505'. [ 486.328948][T25717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5505'. [ 486.348306][T25717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5505'. [ 486.420811][T25728] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5509'. [ 486.673809][T25740] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 486.767903][T25739] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5513'. [ 486.935120][T25748] ip6erspan1: entered allmulticast mode [ 487.026084][T25751] validate_nla: 63 callbacks suppressed [ 487.026103][T25751] netlink: 'syz.0.5515': attribute type 11 has an invalid length. [ 487.068496][T25738] TCP: TCP_TX_DELAY enabled [ 487.254115][T25761] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.5518'. [ 487.414883][T25775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5524'. [ 487.456428][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5524'. [ 487.519085][T25775] hsr_slave_0 (unregistering): left promiscuous mode [ 487.604520][T25774] delete_channel: no stack [ 487.654606][T25787] ip6gre2: entered promiscuous mode [ 487.682136][T25787] ip6gre2: entered allmulticast mode [ 487.961332][T25805] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5532'. [ 488.052637][T25816] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5532'. [ 488.237011][T25824] netlink: 'syz.3.5538': attribute type 30 has an invalid length. [ 488.351426][T25828] netlink: 'syz.3.5540': attribute type 32 has an invalid length. [ 488.400627][T25828] bond10: option coupled_control: invalid value (192) [ 488.420886][T25828] bond10 (unregistering): Released all slaves [ 488.638823][T25850] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 488.646126][T25850] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 488.737545][T25855] netlink: 'syz.3.5549': attribute type 30 has an invalid length. [ 488.765637][T25853] xt_cgroup: invalid path, errno=-2 [ 488.794895][T25853] xt_cgroup: invalid path, errno=-2 [ 488.801318][T25853] xt_cgroup: invalid path, errno=-2 [ 488.811131][T25853] xt_cgroup: invalid path, errno=-2 [ 488.842353][T25853] xt_cgroup: invalid path, errno=-2 [ 488.855721][T25853] xt_cgroup: invalid path, errno=-2 [ 488.880034][T25853] xt_cgroup: invalid path, errno=-2 [ 488.890266][T25853] xt_cgroup: invalid path, errno=-2 [ 488.907938][T25853] xt_cgroup: invalid path, errno=-2 [ 488.913357][T25853] xt_cgroup: invalid path, errno=-2 [ 490.428052][T25925] dvmrp1: left allmulticast mode [ 490.554840][T25934] bridge_slave_0: entered allmulticast mode [ 490.717175][T25944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.803109][T25948] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 490.849070][T25948] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 491.101693][T25954] syzkaller0: entered promiscuous mode [ 491.107331][T25954] syzkaller0: entered allmulticast mode [ 491.117364][T25954] TC_ACT_REPEAT abuse ? [ 491.449862][T25970] __nla_validate_parse: 17 callbacks suppressed [ 491.449877][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 491.619063][T25980] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5585'. [ 491.698363][T25982] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5585'. [ 491.808415][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5586'. [ 491.835814][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5588'. [ 491.859394][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5588'. [ 491.914991][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5588'. [ 491.946304][T25995] IPv6: NLM_F_REPLACE set, but no existing node found! [ 491.955587][T25996] IPv6: NLM_F_REPLACE set, but no existing node found! [ 492.158280][T26007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.191960][T26011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.283575][T26015] netlink: 'syz.2.5596': attribute type 21 has an invalid length. [ 492.309256][T26017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5597'. [ 492.337675][T26022] netlink: 'syz.4.5599': attribute type 3 has an invalid length. [ 492.343892][T26015] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 492.361916][T26015] bond13 (unregistering): Released all slaves [ 492.363402][T26023] netlink: 'syz.4.5599': attribute type 10 has an invalid length. [ 492.396034][T26023] veth0_macvtap: left promiscuous mode [ 492.412420][T26028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5600'. [ 492.504871][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5601'. [ 492.507716][T26032] netlink: 'syz.4.5602': attribute type 1 has an invalid length. [ 492.585555][T26032] 8021q: adding VLAN 0 to HW filter on device bond9 [ 492.606292][T26041] bond9: (slave veth0_to_bond): making interface the new active one [ 492.616031][T26038] can: request_module (can-proto-0) failed. [ 492.629528][T26041] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 492.729854][T26032] bond9: entered promiscuous mode [ 492.743357][T26032] veth0_to_bond: entered promiscuous mode [ 492.753036][T26032] bond9: entered allmulticast mode [ 492.759487][T26032] veth0_to_bond: entered allmulticast mode [ 492.840906][T26041] nft_compat: unsupported protocol 0 [ 492.871804][T26059] bond10: (slave gre0): Device is not bonding slave [ 492.902276][T26059] bond10: option active_slave: invalid value (gre0) [ 492.932892][T26059] bond10 (unregistering): Released all slaves [ 493.191761][T26084] bridge8: entered promiscuous mode [ 493.197101][T26084] bridge8: entered allmulticast mode [ 493.236921][T26084] bridge9: entered promiscuous mode [ 493.242360][T26084] bridge9: entered allmulticast mode [ 493.365325][T26099] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 493.394724][T26099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 493.431831][T26104] nbd: nbd2 already in use [ 493.436776][T26104] block nbd2: NBD_DISCONNECT [ 493.449008][T26104] block nbd2: Send disconnect failed -32 [ 493.532100][T26111] netlink: 'syz.3.5624': attribute type 14 has an invalid length. [ 493.540351][T26111] netlink: 'syz.3.5624': attribute type 13 has an invalid length. [ 493.592680][T26109] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 493.607662][T26109] netlink: 'syz.0.5623': attribute type 1 has an invalid length. [ 493.615415][T26109] netlink: 'syz.0.5623': attribute type 2 has an invalid length. [ 493.759073][T26123] veth0_to_bridge: entered promiscuous mode [ 493.797364][T26122] veth0_to_bridge: left promiscuous mode [ 494.588472][T26192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.627144][T26194] netlink: 'syz.4.5646': attribute type 9 has an invalid length. [ 494.646550][T26197] tipc: Failed to remove unknown binding: 66,0,0/3758096385:787432843/787432845 [ 494.656393][T26197] tipc: Failed to remove unknown binding: 66,0,0/3758096385:787432843/787432844 [ 494.666138][T26197] tipc: Failed to remove unknown binding: 66,0,0/3758096385:787432843/787432845 [ 494.677196][T26197] tipc: Failed to remove unknown binding: 66,0,0/3758096385:787432843/787432844 [ 494.914982][T26217] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 495.084173][T26234] tipc: Enabled bearer , priority 0 [ 495.099148][T26232] tipc: Disabling bearer [ 495.119199][T26241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.272091][T26246] bond13: Removing last ns target with arp_interval on [ 495.519267][T26272] x_tables: unsorted entry at hook 2 [ 496.380578][ T796] IPVS: starting estimator thread 0... [ 496.467621][T26345] IPVS: using max 30 ests per chain, 72000 per kthread [ 496.537305][T26357] SET target dimension over the limit! [ 496.637625][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 496.827259][T26378] bridge_slave_0: entered promiscuous mode [ 496.843071][T26378] bridge_slave_0: left allmulticast mode [ 496.931779][T26390] __nla_validate_parse: 35 callbacks suppressed [ 496.931799][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5710'. [ 496.952089][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5710'. [ 496.962931][T26384] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 497.082131][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5714'. [ 497.121208][T26401] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5715'. [ 497.332445][T26417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 497.511786][T26425] validate_nla: 18 callbacks suppressed [ 497.511806][T26425] netlink: 'syz.4.5722': attribute type 64 has an invalid length. [ 497.546008][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5722'. [ 497.582040][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5720'. [ 497.776913][T26433] lo: entered allmulticast mode [ 497.790745][T26437] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5726'. [ 497.802457][T26437] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5726'. [ 497.814929][T26433] lo: left allmulticast mode [ 497.946305][T26450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5731'. [ 498.081265][T26450] xt_hashlimit: size too large, truncated to 1048576 [ 498.198355][T26469] syzkaller0: entered promiscuous mode [ 498.204793][T26469] syzkaller0: entered allmulticast mode [ 498.262984][T26476] pimreg3: entered allmulticast mode [ 501.363642][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.928056][T26551] netlink: 'syz.0.5755': attribute type 29 has an invalid length. [ 501.969105][T26559] netlink: 'syz.0.5755': attribute type 29 has an invalid length. [ 502.055202][T26569] netlink: 'syz.3.5758': attribute type 1 has an invalid length. [ 502.285597][T26588] __nla_validate_parse: 6 callbacks suppressed [ 502.285617][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5769'. [ 502.310867][T26591] netlink: 'syz.2.5767': attribute type 5 has an invalid length. [ 502.431239][T26596] veth0_to_team: entered allmulticast mode [ 502.601073][T26610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5776'. [ 502.601072][T26611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5776'. [ 502.661159][T26619] netlink: 'syz.2.5780': attribute type 29 has an invalid length. [ 502.685072][T26620] netlink: 'syz.2.5780': attribute type 29 has an invalid length. [ 502.733779][T26619] netlink: 548 bytes leftover after parsing attributes in process `syz.2.5780'. [ 502.825211][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 506.151284][T26651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.074852][T26750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5812'. [ 507.113500][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5814'. [ 507.222782][T26757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.233443][T26757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.241693][T26757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.253131][T26757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.261877][T26757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.354430][T26767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5818'. [ 507.648613][T26787] openvswitch: netlink: Missing key (keys=40, expected=80) [ 507.675544][T26782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5823'. [ 507.745033][T26791] x_tables: unsorted underflow at hook 1 [ 507.844796][T15179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.892582][T15179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.911223][T15179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.056388][T15179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.071088][T15179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.116378][T15179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.255712][T15179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.278702][T15179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.298209][T15179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.378992][T26838] syzkaller1: entered promiscuous mode [ 508.384501][T26838] syzkaller1: entered allmulticast mode [ 508.395233][T26845] netlink: 'syz.2.5841': attribute type 2 has an invalid length. [ 508.416891][T26845] netlink: 'syz.2.5841': attribute type 11 has an invalid length. [ 508.439307][T26845] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5841'. [ 508.474936][T26849] sctp: [Deprecated]: syz.2.5841 (pid 26849) Use of int in maxseg socket option. [ 508.474936][T26849] Use struct sctp_assoc_value instead [ 508.506417][T15179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.517121][T15179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.535660][T15179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 508.590941][T26854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5843'. [ 508.854236][T26869] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 508.962702][T26876] nftables ruleset with unbound set [ 509.024644][T26755] chnl_net:caif_netlink_parms(): no params data found [ 509.099043][T15179] bridge_slave_1: left allmulticast mode [ 509.104720][T15179] bridge_slave_1: left promiscuous mode [ 509.128352][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.188984][T26888] xt_CT: No such helper "snmp_trap" [ 509.189668][T26895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 509.201526][T26895] IPv6: NLM_F_CREATE should be set when creating new route [ 509.208808][T26895] IPv6: NLM_F_CREATE should be set when creating new route [ 509.216032][T26895] IPv6: NLM_F_CREATE should be set when creating new route [ 509.241484][T26887] xt_CT: No such helper "snmp_trap" [ 509.360275][ T51] Bluetooth: hci4: command tx timeout [ 509.554762][T15179] bond1 (unregistering): (slave vti0): Releasing backup interface [ 509.563459][T15179] vti0 (unregistering): left promiscuous mode [ 509.570253][T15179] vti0 (unregistering): left allmulticast mode [ 509.629869][T15179] batman_adv: batadv0: Removing interface: gretap1 [ 509.668249][T15179] bond5 (unregistering): (slave gretap2): Releasing active interface [ 509.733620][T15179] bond7 (unregistering): (slave geneve3): Releasing active interface [ 509.831035][T15179] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 509.839653][T15179] bridge2 (unregistering): left promiscuous mode [ 509.845982][T15179] bridge2 (unregistering): left allmulticast mode [ 510.192095][T15179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.202879][T15179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.215519][T15179] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 510.227165][T15179] bond0 (unregistering): Released all slaves [ 510.240369][T15179] bond1 (unregistering): left allmulticast mode [ 510.247830][T15179] bond1 (unregistering): Released all slaves [ 510.263664][T15179] bond2 (unregistering): Released all slaves [ 510.276121][T15179] team0: Port device bond3 removed [ 510.282626][T15179] bond3 (unregistering): Released all slaves [ 510.299977][T15179] bond4 (unregistering): Released all slaves [ 510.312276][T15179] bond5 (unregistering): Released all slaves [ 510.329041][T15179] bond6 (unregistering): Released all slaves [ 510.341504][T15179] bond7 (unregistering): Released all slaves [ 510.362792][T15179] bond8 (unregistering): Released all slaves [ 510.382567][T15179] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 510.392538][T15179] veth0_to_bond: left promiscuous mode [ 510.398311][T15179] veth0_to_bond: left allmulticast mode [ 510.405450][T15179] bond9 (unregistering): Released all slaves [ 510.418481][T15179] bond10 (unregistering): Released all slaves [ 510.466583][T26893] pim6reg: entered allmulticast mode [ 510.618723][T15179] tipc: Disabling bearer [ 510.626479][T15179] tipc: Disabling bearer [ 510.673907][T15179] tipc: Left network mode [ 510.822129][T23569] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 510.843084][T26755] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.860438][T26755] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.875228][T26755] bridge_slave_0: entered allmulticast mode [ 510.902332][T26755] bridge_slave_0: entered promiscuous mode [ 510.932573][T26755] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.947075][T26755] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.961767][T26755] bridge_slave_1: entered allmulticast mode [ 510.972644][T26755] bridge_slave_1: entered promiscuous mode [ 510.975897][T26944] netlink: 'syz.3.5862': attribute type 1 has an invalid length. [ 511.028964][T26944] bond10: entered promiscuous mode [ 511.034273][T26944] bond10: entered allmulticast mode [ 511.040453][T26944] 8021q: adding VLAN 0 to HW filter on device bond10 [ 511.045492][T26946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5862'. [ 511.089803][T26755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.103016][T26755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.163394][T26755] team0: Port device team_slave_0 added [ 511.171590][T26755] team0: Port device team_slave_1 added [ 511.195796][T26755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.202806][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.229691][T26755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.242209][T26755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.250045][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.276656][T26755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.371378][T26755] hsr_slave_0: entered promiscuous mode [ 511.378320][T26755] hsr_slave_1: entered promiscuous mode [ 511.384767][T26755] debugfs: 'hsr0' already exists in 'hsr' [ 511.390657][T26755] Cannot create hsr debugfs directory [ 511.447966][ T51] Bluetooth: hci4: command tx timeout [ 512.056075][T15179] 0: left promiscuous mode [ 512.063108][T15179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.070911][T15179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.079534][T15179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.086947][T15179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.111223][T15179] veth1_macvtap: left promiscuous mode [ 512.116872][T15179] veth1_vlan: left promiscuous mode [ 512.122746][T15179] veth0_vlan: left promiscuous mode [ 512.186886][T15179] pimreg3 (unregistering): left allmulticast mode [ 512.204465][T15179] pim6reg (unregistering): left allmulticast mode [ 512.356400][T15179] team0 (unregistering): Port device team_slave_1 removed [ 512.374966][T15179] team0 (unregistering): Port device team_slave_0 removed [ 512.809026][T15179] IPVS: stop unused estimator thread 0... [ 513.518695][ T51] Bluetooth: hci4: command tx timeout [ 513.615278][T26931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.630778][T26755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.676964][T26755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.795591][T26755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.814560][T26955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5866'. [ 513.868215][T26755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.998830][T26969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5869'. [ 514.202135][T26755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.315004][T26755] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.362661][T23569] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.369846][T23569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.426709][T23567] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.433900][T23567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.462998][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5873'. [ 514.617200][T27014] mac80211_hwsim hwsim46 syzkaller0: Caught tx_queue_len zero misconfig [ 515.029077][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'. [ 515.123045][T27049] C: entered promiscuous mode [ 515.149341][T27049] tunl0: entered promiscuous mode [ 515.164831][T27049] gre0: entered promiscuous mode [ 515.178116][T27049] ip_vti0: entered promiscuous mode [ 515.183459][T27049] ip6_vti0: entered promiscuous mode [ 515.227963][T27049] sit0: entered promiscuous mode [ 515.238165][T27049] ip6tnl0: entered promiscuous mode [ 515.244076][T27049] ip6gre0: entered promiscuous mode [ 515.258368][T27049] syz_tun: entered promiscuous mode [ 515.274340][T27049] bridge0: entered promiscuous mode [ 515.295704][T27049] bond0: entered promiscuous mode [ 515.305698][T27049] batadv0: entered promiscuous mode [ 515.315401][T27049] bridge_slave_1: entered promiscuous mode [ 515.326575][T27049] team0: entered promiscuous mode [ 515.342822][T27049] nlmon0: entered promiscuous mode [ 515.353362][T27049] caif0: entered promiscuous mode [ 515.363262][T27049] vxcan0: entered promiscuous mode [ 515.378034][T27049] vxcan1: entered promiscuous mode [ 515.390485][T27049] veth0: entered promiscuous mode [ 515.398522][T27049] veth1: entered promiscuous mode [ 515.403903][T27049] wg0: entered promiscuous mode [ 515.410074][T27049] wg1: entered promiscuous mode [ 515.415238][T27049] wg2: entered promiscuous mode [ 515.422657][T27049] veth0_to_bridge: entered promiscuous mode [ 515.431386][T27049] x9: entered promiscuous mode [ 515.436584][T27049] veth1_to_bridge: entered promiscuous mode [ 515.468649][T27049] veth0_to_bond: entered promiscuous mode [ 515.474857][T27049] bond_slave_0: entered promiscuous mode [ 515.481359][T27049] veth1_to_bond: entered promiscuous mode [ 515.487355][T27049] bond_slave_1: entered promiscuous mode [ 515.493699][T27049] veth0_to_team: entered promiscuous mode [ 515.502155][T27049] team_slave_0: entered promiscuous mode [ 515.508137][T27049] veth1_to_team: entered promiscuous mode [ 515.514136][T27049] team_slave_1: entered promiscuous mode [ 515.521825][T27049] veth0_to_batadv: entered promiscuous mode [ 515.560111][T27049] batadv_slave_0: entered promiscuous mode [ 515.566160][T27049] veth1_to_batadv: entered promiscuous mode [ 515.573350][T27049] batadv_slave_1: entered promiscuous mode [ 515.579424][T27049] xfrm0: entered promiscuous mode [ 515.584588][T27049] veth1_to_hsr: entered promiscuous mode [ 515.591017][T27049] hsr0: entered promiscuous mode [ 515.596085][T27049] veth1_virt_wifi: entered promiscuous mode [ 515.602568][T26757] Bluetooth: hci4: command tx timeout [ 515.607881][T27049] veth0_virt_wifi: entered promiscuous mode [ 515.614114][T27049] virt_wifi0: entered promiscuous mode [ 515.620719][T27049] macvtap0: entered promiscuous mode [ 515.626304][T27049] macsec0: entered promiscuous mode [ 515.632126][T27049] geneve0: entered promiscuous mode [ 515.637609][T27049] geneve1: entered promiscuous mode [ 515.642909][T27049] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 515.651031][T27049] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 515.658863][T27049] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 515.666258][T27049] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 515.674332][T27049] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 515.681683][T27049] bridge1: entered promiscuous mode [ 515.687091][T27049] vlan2: entered promiscuous mode [ 515.692819][T27049] erspan1: entered promiscuous mode [ 515.698206][T27049] bond1: entered promiscuous mode [ 515.703312][T27049] bridge2: entered promiscuous mode [ 515.708779][T27049] sit1: entered promiscuous mode [ 515.713846][T27049] bond2: entered promiscuous mode [ 515.719474][T27049] gtp0: entered promiscuous mode [ 515.724500][T27049] vxlan0: entered promiscuous mode [ 515.729856][T27049] ip6gretap1: entered promiscuous mode [ 515.735413][T27049] gre1: entered promiscuous mode [ 515.740692][T27049] batadv0.5: entered promiscuous mode [ 515.746232][T27049] sit2: entered promiscuous mode [ 515.751841][T27049] bond3: entered promiscuous mode [ 515.756868][T27049] gretap1: entered promiscuous mode [ 515.762764][T27049] gretap2: entered promiscuous mode [ 515.768252][T27049] syztnl2: entered promiscuous mode [ 515.773523][T27049] erspan2: entered promiscuous mode [ 515.779258][T27049] bond4: entered promiscuous mode [ 515.784409][T27049] bond5: entered promiscuous mode [ 515.789726][T27049] vxcan2: entered promiscuous mode [ 515.794928][T27049] vxcan3: entered promiscuous mode [ 515.800290][T27049] ;: entered promiscuous mode [ 515.805070][T27049] hsr1: entered promiscuous mode [ 515.810614][T27049] bond6: entered promiscuous mode [ 515.815735][T27049] bridge3: entered promiscuous mode [ 515.821107][T27049] veth2: entered promiscuous mode [ 515.826340][T27049] veth4: entered promiscuous mode [ 515.831727][T27049] syztnl0: entered promiscuous mode [ 515.837042][T27049] bridge4: entered promiscuous mode [ 515.843022][T27049] bond8: entered promiscuous mode [ 515.848557][T27049] veth6: entered promiscuous mode [ 515.853741][T27049] veth7: entered promiscuous mode [ 515.858977][T27049] bridge5: entered promiscuous mode [ 515.864338][T27049] mac80211_hwsim hwsim62 wlan2: entered promiscuous mode [ 515.872220][T27049] bond9: entered promiscuous mode [ 515.878013][T27049] bond10: entered promiscuous mode [ 515.883135][T27049] bridge6: entered promiscuous mode [ 515.893787][T27049] bridge7: entered promiscuous mode [ 515.920686][T27049] macsec1: entered promiscuous mode [ 515.939767][T27049] mac80211_hwsim hwsim64 wlan3: entered promiscuous mode [ 515.946977][T27049] bond11: entered promiscuous mode [ 515.953571][T27059] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.962190][T27049] bridge8: entered promiscuous mode [ 515.975552][T27049] ipip0: entered promiscuous mode [ 515.982179][T27049] veth8: entered promiscuous mode [ 515.987367][T27049] veth9: entered promiscuous mode [ 515.993415][T27049] ip6tnl1: entered promiscuous mode [ 516.000276][T27049] bond13: entered promiscuous mode [ 516.005704][T27049] ip6gre1: entered promiscuous mode [ 516.011472][T27049] mac80211_hwsim hwsim134 wlan4: entered promiscuous mode [ 516.019632][T27049] pim6reg: entered promiscuous mode [ 516.206137][T26755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.522068][T27102] netlink: 'syz.0.5889': attribute type 1 has an invalid length. [ 516.545048][T27107] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 516.548582][T27102] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5889'. [ 516.566232][T27102] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5889'. [ 516.600140][T27102] netlink: 'syz.0.5889': attribute type 1 has an invalid length. [ 516.610322][T27100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5890'. [ 516.617632][T27102] netlink: 'syz.0.5889': attribute type 8 has an invalid length. [ 516.626988][T27102] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5889'. [ 516.680989][T27107] bond11: (slave lo): Enslaving as an active interface with an up link [ 516.699474][T27107] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 516.728897][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5892'. [ 516.983065][T26755] veth0_vlan: entered promiscuous mode [ 517.021222][T26755] veth1_vlan: entered promiscuous mode [ 517.179700][T26755] veth0_macvtap: entered promiscuous mode [ 517.264810][T26755] veth1_macvtap: entered promiscuous mode [ 517.343260][T26755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.393763][T26755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.434119][T23569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.460168][T23569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.483772][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5901'. [ 517.509248][T23569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.532000][T23569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.683406][T27165] netlink: 'syz.2.5904': attribute type 39 has an invalid length. [ 517.958568][T27184] bond11: entered allmulticast mode [ 518.093026][T23567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.109836][T27191] bridge10: entered promiscuous mode [ 518.119339][T23567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.136433][T27191] bridge10: entered allmulticast mode [ 518.260350][T23567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.269324][T23567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.341259][T27207] x_tables: duplicate underflow at hook 1 [ 518.363149][T27207] x_tables: duplicate underflow at hook 1 [ 518.431762][T27209] netlink: 'syz.4.5810': attribute type 9 has an invalid length. [ 518.634774][T27217] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.656575][T27217] bond1: (slave lo): Enslaving as an active interface with an up link [ 518.672169][T27217] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 519.069281][T27234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5915'. [ 519.099506][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.109464][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.117200][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.142104][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.157717][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.225754][T27242] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5917'. [ 519.236530][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5917'. [ 519.516529][T27248] netlink: 'syz.4.5919': attribute type 58 has an invalid length. [ 519.547822][T27248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5919'. [ 519.813687][T27256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.901889][T23567] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 519.993981][T23567] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 520.108150][T23567] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 520.273672][T23567] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 520.323058][T27233] chnl_net:caif_netlink_parms(): no params data found [ 520.499396][T27233] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.508747][T27233] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.516477][T27233] bridge_slave_0: entered allmulticast mode [ 520.524792][T27233] bridge_slave_0: entered promiscuous mode [ 520.536680][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 520.602304][T27305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.629564][T27233] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.636841][T27233] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.654070][T27233] bridge_slave_1: entered allmulticast mode [ 520.663846][T27233] bridge_slave_1: entered promiscuous mode [ 520.732327][T27318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5941'. [ 520.746720][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5941'. [ 520.771006][T27305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.811100][T27233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.834270][T27322] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5942'. [ 520.846335][T27233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.900912][T27327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5944'. [ 520.922085][T27305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.939451][T27322] xfrm0: left promiscuous mode [ 521.035934][T27332] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5946'. [ 521.049462][T27305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.071391][T27233] team0: Port device team_slave_0 added [ 521.086651][T27233] team0: Port device team_slave_1 added [ 521.202686][T26757] Bluetooth: hci1: command tx timeout [ 521.405509][T23567] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 521.413978][T23567] ip6gre1 (unregistering): left promiscuous mode [ 521.570975][T23567] dvmrp0 (unregistering): left allmulticast mode [ 521.910025][T23567] bond0 (unregistering): Released all slaves [ 521.921293][T23567] bond1 (unregistering): Released all slaves [ 521.934414][T23567] bond2 (unregistering): Released all slaves [ 521.946934][T23567] bond3 (unregistering): Released all slaves [ 521.966729][T23567] bond4 (unregistering): Released all slaves [ 521.984345][T23567] bond5 (unregistering): Released all slaves [ 522.012102][T23567] bond6 (unregistering): Released all slaves [ 522.029752][T23567] bond7 (unregistering): Released all slaves [ 522.053664][T23567] bond8 (unregistering): Released all slaves [ 522.066426][T23567] bond9 (unregistering): Released all slaves [ 522.079916][T23567] bond10 (unregistering): Released all slaves [ 522.093860][T23567] bond11 (unregistering): (slave lo): Releasing backup interface [ 522.102077][T23567] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 522.122979][T23567] bond11 (unregistering): Released all slaves [ 522.196460][T27372] tap0: tun_chr_ioctl cmd 1074025676 [ 522.204829][T27372] tap0: owner set to 0 [ 522.323356][T27233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.337025][T27233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.368552][T27233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.404486][T27233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.420490][T27233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.447253][T27233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.480838][T23567] 9: left promiscuous mode [ 522.755511][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.780859][T27233] hsr_slave_0: entered promiscuous mode [ 522.790712][T27233] hsr_slave_1: entered promiscuous mode [ 522.798597][T27233] debugfs: 'hsr0' already exists in 'hsr' [ 522.804388][T27233] Cannot create hsr debugfs directory [ 522.843044][T27398] bond0: Caught tx_queue_len zero misconfig [ 522.915499][T23569] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.925340][T27401] syzkaller0: entered promiscuous mode [ 522.942475][T27401] syzkaller0: entered allmulticast mode [ 522.996007][T23569] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.150628][ T1142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.274994][T27425] netlink: ct family unspecified [ 523.281469][T26757] Bluetooth: hci1: command tx timeout [ 523.319511][T27425] netlink: 'syz.4.5962': attribute type 2 has an invalid length. [ 523.551173][T27431] bond4: (slave veth0_to_bond): Releasing active interface [ 523.570512][T27431] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 523.596231][T27435] bridge0: port 1(ipvlan0) entered blocking state [ 523.612957][T27444] netlink: 'syz.4.5965': attribute type 21 has an invalid length. [ 523.628047][T27435] bridge0: port 1(ipvlan0) entered disabled state [ 523.641438][ T6269] hid (null): invalid report_size -959400825 [ 523.660945][T27435] ipvlan0: entered allmulticast mode [ 523.666371][T27435] bridge0: entered allmulticast mode [ 523.669217][ T6269] hid (null): invalid report_count -2042013973 [ 523.674159][T27435] ipvlan0: left allmulticast mode [ 523.684174][T27435] bridge0: left allmulticast mode [ 523.693518][ T6269] hid (null): unknown global tag 0xd [ 523.709201][ T6269] hid (null): invalid report_size 51877 [ 523.749894][ T6269] hid (null): unknown global tag 0xd [ 523.782494][ T6269] hid (null): unknown global tag 0x32 [ 523.835218][ T6269] hid-generic 0005:04F3:0006.0001: invalid report_size -959400825 [ 523.864958][ T6269] hid-generic 0005:04F3:0006.0001: item 0 4 1 7 parsing failed [ 523.881270][ T6269] hid-generic 0005:04F3:0006.0001: probe with driver hid-generic failed with error -22 [ 524.118959][T27463] bond14 (unregistering): Released all slaves [ 524.241420][T27477] __nla_validate_parse: 10 callbacks suppressed [ 524.241436][T27477] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5974'. [ 524.262261][T27478] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.5976'. [ 524.264546][T27472] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5974'. [ 524.622046][T27233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.357644][T26757] Bluetooth: hci1: command tx timeout [ 525.446042][T23567] hsr_slave_0: left promiscuous mode [ 525.473861][T23567] hsr_slave_1: left promiscuous mode [ 525.530868][T23567] pim6reg527 (unregistering): left allmulticast mode [ 525.568770][T27524] netlink: 'syz.4.5983': attribute type 1 has an invalid length. [ 525.602428][T23567] team0 (unregistering): Port device batadv1 removed [ 525.802288][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5985'. [ 525.905912][T27538] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5986'. [ 526.049040][T27233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.072979][T27233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.175043][T27540] bond14: option fail_over_mac: invalid value (16) [ 526.185440][T27540] bond14 (unregistering): Released all slaves [ 526.213181][T27233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.455769][T27562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5990'. [ 526.471288][T27233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.500796][T27233] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.522426][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.529593][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.543582][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 526.554855][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.562031][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.589848][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5990'. [ 526.852407][T23567] IPVS: stop unused estimator thread 0... [ 526.976233][T27233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.989779][T27589] netlink: 'syz.2.5997': attribute type 1 has an invalid length. [ 527.000808][T27589] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5997'. [ 527.009677][T27590] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.010719][T27589] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5997'. [ 527.062248][T27590] netlink: 'syz.4.5999': attribute type 16 has an invalid length. [ 527.073829][T27590] netlink: 'syz.4.5999': attribute type 17 has an invalid length. [ 527.145220][T27590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.201855][T27233] veth0_vlan: entered promiscuous mode [ 527.233678][T27597] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 527.242798][T27233] veth1_vlan: entered promiscuous mode [ 527.336816][T27607] netlink: Unknown conntrack attr (type=2304, max=9) [ 527.385503][T27233] veth0_macvtap: entered promiscuous mode [ 527.421708][T27233] veth1_macvtap: entered promiscuous mode [ 527.437788][ T51] Bluetooth: hci1: command tx timeout [ 527.552509][T27233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.605913][T27233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.646317][T27622] netlink: 'syz.4.6009': attribute type 3 has an invalid length. [ 527.660774][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.690370][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.819413][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.838618][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.004139][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.023951][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.093551][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.104760][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.126383][T27652] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 528.164271][T27652] openvswitch: netlink: Flow key attr not present in new flow. [ 528.181581][T27652] x_tables: duplicate underflow at hook 1 [ 528.221735][T27657] sctp: [Deprecated]: syz.3.5912 (pid 27657) Use of int in maxseg socket option. [ 528.221735][T27657] Use struct sctp_assoc_value instead [ 528.536847][T27685] netlink: 'syz.2.6026': attribute type 9 has an invalid length. [ 529.518071][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 552.216616][T27694] __nla_validate_parse: 13 callbacks suppressed [ 552.216635][T27694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6031'. [ 552.223856][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6032'. [ 552.238758][T27694] xfrm1: entered promiscuous mode [ 552.247539][T27694] xfrm1: entered allmulticast mode [ 552.267756][T27700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6029'. [ 552.571858][T27707] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6033'. [ 552.603742][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 552.632877][T27721] Cannot find set identified by id 1 to match [ 562.802060][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.845937][T15179] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 562.923854][T15179] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 562.959630][T15179] bond5 (unregistering): (slave geneve3): Releasing active interface [ 562.985964][T15179] bond1 (unregistering): (slave vxlan0): Releasing active interface [ 563.371040][T15179] bond0 (unregistering): Released all slaves [ 563.380892][T15179] bond1 (unregistering): Released all slaves [ 563.393490][T15179] bond2 (unregistering): Released all slaves [ 563.406976][T15179] bond3 (unregistering): Released all slaves [ 563.421930][T15179] bond4 (unregistering): Released all slaves [ 563.434219][T15179] bond5 (unregistering): Released all slaves [ 563.450026][T15179] bond6 (unregistering): (slave bond7): Releasing backup interface [ 563.462634][T15179] bond6 (unregistering): Released all slaves [ 563.474916][T15179] bond7 (unregistering): Released all slaves [ 563.486876][T15179] bond8 (unregistering): Released all slaves [ 563.499912][T15179] bond9 (unregistering): Released all slaves [ 563.514801][T15179] bond10 (unregistering): Released all slaves [ 563.535691][T15179] bond11 (unregistering): Released all slaves [ 563.664642][T15179] 9: left promiscuous mode [ 563.698767][T15179] !: left promiscuous mode [ 564.204259][T15179] hsr_slave_0: left promiscuous mode [ 564.212328][T15179] hsr_slave_1: left promiscuous mode [ 564.635992][T15179] veth0_to_team (unregistering): left allmulticast mode [ 565.096504][T15179] IPVS: stop unused estimator thread 0... [ 580.071290][T27738] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x3 [ 580.091620][T27735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 580.118390][T27737] lo: Caught tx_queue_len zero misconfig [ 580.201449][T27735] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6041'. [ 580.345583][T27756] x_tables: duplicate underflow at hook 1 [ 580.392674][T27753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.433956][T27753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.495961][T27767] netlink: 'syz.1.6052': attribute type 21 has an invalid length. [ 580.527051][T27767] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6052'. [ 580.530361][T27771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6054'. [ 580.547194][T27767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6052'. [ 580.825998][T27801] 8021q: VLANs not supported on lo [ 581.038497][T27809] netlink: 'syz.0.6065': attribute type 64 has an invalid length. [ 581.046501][T27809] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6065'. [ 581.439599][T27813] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 581.832149][T27824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6069'. [ 583.714131][T27790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.767609][T27811] netlink: 'syz.0.6066': attribute type 1 has an invalid length. [ 583.790909][T27811] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6066'. [ 583.951452][T27837] x_tables: unsorted entry at hook 3 [ 584.056219][T27849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.092358][T27850] ieee802154 phy1 wpan1: encryption failed: -90 [ 584.195627][T27856] openvswitch: netlink: IP tunnel dst address not specified [ 584.215669][T27860] xt_socket: unknown flags 0x50 [ 584.229774][T27860] xt_socket: unknown flags 0x50 [ 584.235568][T27856] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 584.266632][T27856] netlink: 'syz.2.6082': attribute type 2 has an invalid length. [ 584.276006][T27860] xt_socket: unknown flags 0x50 [ 584.281442][T27860] xt_socket: unknown flags 0x50 [ 584.286416][T27856] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 584.296245][T27856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6082'. [ 584.340729][T27872] netlink: 'syz.3.6087': attribute type 1 has an invalid length. [ 584.373398][T27872] netlink: 'syz.3.6087': attribute type 1 has an invalid length. [ 584.438537][T27872] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.6087'. [ 584.682772][T27905] IPVS: length: 24 != 2808 [ 584.789710][T27918] netlink: 'syz.4.6101': attribute type 16 has an invalid length. [ 584.800112][T27918] netlink: 'syz.4.6101': attribute type 17 has an invalid length. [ 584.851506][T27918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.969825][T27933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.136385][T27937] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 585.192724][T27946] __nla_validate_parse: 3 callbacks suppressed [ 585.192744][T27946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6112'. [ 585.311398][T27955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6115'. [ 585.400650][T27960] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6115'. [ 585.657536][T27965] nbd3: detected capacity change from 0 to 63 [ 585.666740][T26757] block nbd3: Receive control failed (result -32) [ 585.669686][T27796] block nbd3: Send control failed (result -32) [ 585.674386][ T51] block nbd3: Receive control failed (result -32) [ 585.680605][T27969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6117'. [ 585.724449][T27796] block nbd3: Request send failed, requeueing [ 585.763168][T27796] block nbd3: Dead connection, failed to find a fallback [ 585.794235][ T11] block nbd3: Dead connection, failed to find a fallback [ 585.805327][ T11] block nbd3: shutting down sockets [ 585.812415][ T11] blk_print_req_error: 138 callbacks suppressed [ 585.812430][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.830573][ T11] buffer_io_error: 138 callbacks suppressed [ 585.830586][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 585.853232][T27796] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.877789][T27796] Buffer I/O error on dev nbd3, logical block 1, async page read [ 585.885620][T27796] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.920852][T27796] Buffer I/O error on dev nbd3, logical block 2, async page read [ 585.938087][T27796] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.958443][T27796] Buffer I/O error on dev nbd3, logical block 3, async page read [ 585.969360][T27796] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 585.987493][T27796] Buffer I/O error on dev nbd3, logical block 0, async page read [ 585.995300][T27796] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.038046][T27796] Buffer I/O error on dev nbd3, logical block 1, async page read [ 586.045887][T27796] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.088399][T27796] Buffer I/O error on dev nbd3, logical block 2, async page read [ 586.096328][T27796] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.147802][T27796] Buffer I/O error on dev nbd3, logical block 3, async page read [ 586.155642][T27796] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.217521][T27796] Buffer I/O error on dev nbd3, logical block 0, async page read [ 586.225349][T27796] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 586.285303][T27796] Buffer I/O error on dev nbd3, logical block 1, async page read [ 586.285719][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.337795][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.346229][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.346805][T27796] ldm_validate_partition_table(): Disk read failed. [ 586.368009][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.383295][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.430951][T27796] Dev nbd3: unable to read RDB block 0 [ 586.468137][T27796] nbd3: unable to read partition table [ 586.482825][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6124'. [ 586.583839][T27796] ldm_validate_partition_table(): Disk read failed. [ 586.628720][T27796] Dev nbd3: unable to read RDB block 0 [ 586.634758][T27796] nbd3: unable to read partition table [ 586.728384][T28005] netlink: 'syz.2.6126': attribute type 1 has an invalid length. [ 586.852560][T28005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6126'. [ 586.895988][T28010] bond14: (slave geneve3): making interface the new active one [ 586.925617][T28010] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 586.967865][T28005] 8021q: adding VLAN 0 to HW filter on device bond14 [ 586.988284][T23569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.009189][T23569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.087872][T23569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.101971][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6128'. [ 587.160064][T23569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.245177][T28019] netlink: zone id is out of range [ 587.252633][T28020] netlink: zone id is out of range [ 587.258210][T28019] netlink: zone id is out of range [ 587.263408][T28020] netlink: zone id is out of range [ 587.270117][T28019] netlink: zone id is out of range [ 587.275666][T28020] netlink: zone id is out of range [ 587.281834][T28019] netlink: zone id is out of range [ 587.287082][T28020] netlink: zone id is out of range [ 587.288069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.443642][T28027] netlink: 'syz.2.6132': attribute type 9 has an invalid length. [ 587.452105][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6132'. [ 587.480798][T28027] netlink: 'syz.2.6132': attribute type 9 has an invalid length. [ 587.489376][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6132'. [ 587.646308][T27986] chnl_net:caif_netlink_parms(): no params data found [ 587.679412][T28033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6134'. [ 587.708886][T28037] Cannot find del_set index 4 as target [ 587.779133][T28039] netlink: 'syz.4.6136': attribute type 21 has an invalid length. [ 587.870222][T28045] x_tables: duplicate underflow at hook 2 [ 587.965002][T27986] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.996637][T27986] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.005536][T27986] bridge_slave_0: entered allmulticast mode [ 588.013609][T27986] bridge_slave_0: entered promiscuous mode [ 588.026992][T27986] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.034401][T27986] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.042168][T27986] bridge_slave_1: entered allmulticast mode [ 588.051011][T27986] bridge_slave_1: entered promiscuous mode [ 588.061805][T28056] netlink: 'syz.0.6140': attribute type 12 has an invalid length. [ 588.188403][T28051] syzkaller0: entered promiscuous mode [ 588.193989][T28051] syzkaller0: entered allmulticast mode [ 588.260708][T28061] netlink: 'syz.3.6142': attribute type 4 has an invalid length. [ 588.271660][T27986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.480271][T26757] Bluetooth: hci5: command tx timeout [ 589.689788][T27986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.767082][T27986] team0: Port device team_slave_0 added [ 589.790804][T27986] team0: Port device team_slave_1 added [ 589.815027][T28078] netlink: 'syz.0.6147': attribute type 9 has an invalid length. [ 589.852975][T28082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.853434][T28081] netlink: 'syz.3.6146': attribute type 11 has an invalid length. [ 589.876185][T27986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.884442][T27986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.913869][T27986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.926820][T27986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.936942][T27986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.976214][T27986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.028076][T28093] netlink: 'syz.3.6151': attribute type 1 has an invalid length. [ 590.036163][T28093] netlink: 'syz.3.6151': attribute type 2 has an invalid length. [ 590.052276][T28093] netlink: 'syz.3.6151': attribute type 2 has an invalid length. [ 590.172553][T27986] hsr_slave_0: entered promiscuous mode [ 590.190309][T27986] hsr_slave_1: entered promiscuous mode [ 590.196843][T27986] debugfs: 'hsr0' already exists in 'hsr' [ 590.219506][T27986] Cannot create hsr debugfs directory [ 590.334346][T28106] __nla_validate_parse: 10 callbacks suppressed [ 590.334362][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6154'. [ 590.351060][T28110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6154'. [ 590.376182][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6154'. [ 590.477803][ C1] net_ratelimit: 285 callbacks suppressed [ 590.477820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.491935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.500269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.508624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.517025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.678586][T26757] Bluetooth: hci5: command tx timeout [ 590.695613][T27986] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.831879][T28123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6157'. [ 590.893011][T27986] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.983506][T27986] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 591.077227][T27986] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 591.110513][T28131] pim6reg1: entered promiscuous mode [ 591.115853][T28131] pim6reg1: entered allmulticast mode [ 591.156347][T28137] tipc: Enabling of bearer rejected, already enabled [ 591.395581][T28154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.405015][T28147] bond1: entered promiscuous mode [ 591.405179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.410853][T28147] bond1: entered allmulticast mode [ 591.424430][T28147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.457525][T27986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 591.496138][T27986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.518676][T27986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.534683][T27986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 591.588792][T28169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6170'. [ 591.609744][T28171] vcan0: tx address claim with different name [ 591.632654][T28170] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6171'. [ 591.645532][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6170'. [ 591.687184][T28175] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6172'. [ 591.688120][T27986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.749930][T27986] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.802624][T23567] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.809835][T23567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.845123][T23567] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.852282][T23567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.882600][T28181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6173'. [ 591.923625][T28184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6174'. [ 592.023279][T28190] tipc: Enabling of bearer rejected, failed to enable media [ 592.302526][T28207] x_tables: duplicate underflow at hook 2 [ 592.406880][T28210] x_tables: duplicate underflow at hook 1 [ 592.430233][T27986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.576359][T27986] veth0_vlan: entered promiscuous mode [ 592.586276][T28224] syzkaller0: entered promiscuous mode [ 592.594666][T28224] syzkaller0: entered allmulticast mode [ 592.626618][T27986] veth1_vlan: entered promiscuous mode [ 592.719992][T26757] Bluetooth: hci5: command tx timeout [ 592.729971][T27986] veth0_macvtap: entered promiscuous mode [ 592.774879][T27986] veth1_macvtap: entered promiscuous mode [ 592.831268][T27986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.845074][T27986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.883270][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.929241][T28246] bond1: (slave lo): Releasing backup interface [ 592.946645][T28246] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 593.021628][T28246] bridge_slave_0: left allmulticast mode [ 593.027320][T28246] bridge_slave_0: left promiscuous mode [ 593.048245][T28246] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.069234][T28246] bridge_slave_1: left allmulticast mode [ 593.082069][T28246] bridge_slave_1: left promiscuous mode [ 593.108107][T28246] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.133416][T28246] bond0: (slave bond_slave_0): Releasing backup interface [ 593.180598][T28246] bond0: (slave bond_slave_1): Releasing backup interface [ 593.194950][T28246] team0: Port device team_slave_0 removed [ 593.208962][T28246] team0: Port device team_slave_1 removed [ 593.215648][T28246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.257555][T28246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.267224][T28246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.298513][T28246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.312622][T28246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.360098][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.373663][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.383272][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.812259][T26757] Bluetooth: hci5: command tx timeout [ 595.172262][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.196842][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.274022][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.308523][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.312064][T28299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.345640][T28301] gretap1: entered promiscuous mode [ 595.356928][T28301] gretap1: entered allmulticast mode [ 595.483748][T28308] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 595.496561][T28308] syzkaller0: entered promiscuous mode [ 595.503674][T28308] syzkaller0: entered allmulticast mode [ 595.510566][T28311] validate_nla: 2 callbacks suppressed [ 595.510580][T28311] netlink: 'syz.3.6207': attribute type 2 has an invalid length. [ 595.585467][T28311] 9: entered promiscuous mode [ 595.594850][T28315] netlink: 'syz.4.6206': attribute type 30 has an invalid length. [ 595.771076][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.785025][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.793528][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.805701][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.822998][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.954993][T28327] Bluetooth: MGMT ver 1.23 [ 596.182894][T17719] bridge0: port 3(syz_tun) entered disabled state [ 596.190440][T28335] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 596.214474][T17719] syz_tun (unregistering): left allmulticast mode [ 596.221299][T17719] bridge0: port 3(syz_tun) entered disabled state [ 596.240701][T28337] __nla_validate_parse: 10 callbacks suppressed [ 596.240712][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6216'. [ 596.276747][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6216'. [ 596.310640][T28340] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 596.429889][T28350] [ 596.432250][T28350] ====================================================== [ 596.439264][T28350] WARNING: possible circular locking dependency detected [ 596.446302][T28350] syzkaller #0 Not tainted [ 596.450716][T28350] ------------------------------------------------------ [ 596.457730][T28350] syz.4.6218/28350 is trying to acquire lock: [ 596.463809][T28350] ffffffff8fd4d098 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 596.473136][T28350] [ 596.473136][T28350] but task is already holding lock: [ 596.480480][T28350] ffff8880a8c04a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 596.489888][T28350] [ 596.489888][T28350] which lock already depends on the new lock. [ 596.489888][T28350] [ 596.500273][T28350] [ 596.500273][T28350] the existing dependency chain (in reverse order) is: [ 596.509283][T28350] [ 596.509283][T28350] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 596.517255][T28350] _raw_spin_lock_bh+0x36/0x50 [ 596.522965][T28350] nr_rt_device_down+0x153/0x860 [ 596.528409][T28350] nr_device_event+0x137/0x150 [ 596.533674][T28350] notifier_call_chain+0x1be/0x400 [ 596.539288][T28350] netif_close_many+0x2ae/0x420 [ 596.544663][T28350] netif_close+0x160/0x220 [ 596.549582][T28350] dev_close+0x10a/0x220 [ 596.554330][T28350] bpq_device_event+0x377/0x6a0 [ 596.559693][T28350] notifier_call_chain+0x1be/0x400 [ 596.565312][T28350] __dev_notify_flags+0x16d/0x310 [ 596.570838][T28350] netif_change_flags+0xe8/0x1a0 [ 596.576310][T28350] dev_change_flags+0x130/0x260 [ 596.581664][T28350] dev_ioctl+0x7b4/0x1150 [ 596.586500][T28350] sock_do_ioctl+0x23e/0x320 [ 596.591618][T28350] sock_ioctl+0x5c6/0x7f0 [ 596.596447][T28350] __se_sys_ioctl+0xfc/0x170 [ 596.601547][T28350] do_syscall_64+0x14d/0xf80 [ 596.606655][T28350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.613045][T28350] [ 596.613045][T28350] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 596.620842][T28350] _raw_spin_lock_bh+0x36/0x50 [ 596.626136][T28350] nr_rt_device_down+0xbe/0x860 [ 596.631484][T28350] nr_device_event+0x137/0x150 [ 596.636751][T28350] notifier_call_chain+0x1be/0x400 [ 596.642366][T28350] netif_close_many+0x2ae/0x420 [ 596.647720][T28350] netif_close+0x160/0x220 [ 596.652730][T28350] dev_close+0x10a/0x220 [ 596.657476][T28350] bpq_device_event+0x377/0x6a0 [ 596.662845][T28350] notifier_call_chain+0x1be/0x400 [ 596.668482][T28350] __dev_notify_flags+0x16d/0x310 [ 596.674013][T28350] netif_change_flags+0xe8/0x1a0 [ 596.679451][T28350] dev_change_flags+0x130/0x260 [ 596.685246][T28350] dev_ioctl+0x7b4/0x1150 [ 596.690096][T28350] sock_do_ioctl+0x23e/0x320 [ 596.695219][T28350] sock_ioctl+0x5c6/0x7f0 [ 596.700054][T28350] __se_sys_ioctl+0xfc/0x170 [ 596.705158][T28350] do_syscall_64+0x14d/0xf80 [ 596.710249][T28350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.716658][T28350] [ 596.716658][T28350] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 596.724557][T28350] __lock_acquire+0x15a5/0x2cf0 [ 596.729912][T28350] lock_acquire+0xf0/0x2e0 [ 596.734844][T28350] _raw_spin_lock_bh+0x36/0x50 [ 596.740109][T28350] nr_remove_neigh+0x25/0xe0 [ 596.745202][T28350] nr_add_node+0x1e41/0x2630 [ 596.750307][T28350] nr_rt_ioctl+0xe59/0xf90 [ 596.755223][T28350] sock_do_ioctl+0x101/0x320 [ 596.760317][T28350] sock_ioctl+0x5c6/0x7f0 [ 596.765154][T28350] __se_sys_ioctl+0xfc/0x170 [ 596.770239][T28350] do_syscall_64+0x14d/0xf80 [ 596.775343][T28350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.781733][T28350] [ 596.781733][T28350] other info that might help us debug this: [ 596.781733][T28350] [ 596.791937][T28350] Chain exists of: [ 596.791937][T28350] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 596.791937][T28350] [ 596.805724][T28350] Possible unsafe locking scenario: [ 596.805724][T28350] [ 596.813150][T28350] CPU0 CPU1 [ 596.818492][T28350] ---- ---- [ 596.823831][T28350] lock(&nr_node->node_lock); [ 596.828574][T28350] lock(nr_node_list_lock); [ 596.835654][T28350] lock(&nr_node->node_lock); [ 596.842910][T28350] lock(nr_neigh_list_lock); [ 596.847562][T28350] [ 596.847562][T28350] *** DEADLOCK *** [ 596.847562][T28350] [ 596.855682][T28350] 1 lock held by syz.4.6218/28350: [ 596.860764][T28350] #0: ffff8880a8c04a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 596.870564][T28350] [ 596.870564][T28350] stack backtrace: [ 596.876432][T28350] CPU: 0 UID: 0 PID: 28350 Comm: syz.4.6218 Not tainted syzkaller #0 PREEMPT(full) [ 596.876444][T28350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 596.876450][T28350] Call Trace: [ 596.876457][T28350] [ 596.876463][T28350] dump_stack_lvl+0xe8/0x150 [ 596.876478][T28350] print_circular_bug+0x2e1/0x300 [ 596.876494][T28350] check_noncircular+0x12e/0x150 [ 596.876509][T28350] __lock_acquire+0x15a5/0x2cf0 [ 596.876526][T28350] lock_acquire+0xf0/0x2e0 [ 596.876537][T28350] ? nr_remove_neigh+0x25/0xe0 [ 596.876550][T28350] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 596.876560][T28350] ? nr_remove_neigh+0x25/0xe0 [ 596.876571][T28350] _raw_spin_lock_bh+0x36/0x50 [ 596.876582][T28350] ? nr_remove_neigh+0x25/0xe0 [ 596.876594][T28350] nr_remove_neigh+0x25/0xe0 [ 596.876606][T28350] nr_add_node+0x1e41/0x2630 [ 596.876619][T28350] ? nr_call_to_digi+0x126/0x1b0 [ 596.876631][T28350] nr_rt_ioctl+0xe59/0xf90 [ 596.876644][T28350] ? kasan_quarantine_put+0xbb/0x1f0 [ 596.876655][T28350] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 596.876669][T28350] ? apparmor_capable+0x126/0x170 [ 596.876683][T28350] ? capable+0x88/0xe0 [ 596.876696][T28350] ? nr_ioctl+0x1b1/0x3b0 [ 596.876706][T28350] sock_do_ioctl+0x101/0x320 [ 596.876721][T28350] ? __pfx_sock_do_ioctl+0x10/0x10 [ 596.876738][T28350] ? do_futex+0x333/0x420 [ 596.876753][T28350] sock_ioctl+0x5c6/0x7f0 [ 596.876767][T28350] ? __pfx_sock_ioctl+0x10/0x10 [ 596.876779][T28350] ? __fget_files+0x2a/0x420 [ 596.876788][T28350] ? __fget_files+0x3a0/0x420 [ 596.876795][T28350] ? __fget_files+0x2a/0x420 [ 596.876804][T28350] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.876817][T28350] ? __pfx_sock_ioctl+0x10/0x10 [ 596.876829][T28350] __se_sys_ioctl+0xfc/0x170 [ 596.876842][T28350] do_syscall_64+0x14d/0xf80 [ 596.876854][T28350] ? trace_irq_disable+0x3b/0x150 [ 596.876863][T28350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.876873][T28350] ? clear_bhb_loop+0x40/0x90 [ 596.876884][T28350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.876893][T28350] RIP: 0033:0x7f81a4d9c819 [ 596.876905][T28350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.876914][T28350] RSP: 002b:00007f81a5ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.876925][T28350] RAX: ffffffffffffffda RBX: 00007f81a5016180 RCX: 00007f81a4d9c819 [ 596.876932][T28350] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 596.876939][T28350] RBP: 00007f81a4e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 596.876945][T28350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.876951][T28350] R13: 00007f81a5016218 R14: 00007f81a5016180 R15: 00007ffd20450a28 [ 596.876962][T28350] [ 597.159786][T28322] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.684501][T23569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 597.769354][T23569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 597.886096][T23569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 597.949810][T23569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 598.032926][T23569] veth5: left allmulticast mode [ 598.039332][T23569] bridge3: port 2(veth5) entered disabled state [ 598.046993][T23569] veth3: left allmulticast mode [ 598.052193][T23569] bridge3: port 1(veth3) entered disabled state [ 598.125546][T23569] bond3 (unregistering): (slave gretap1): Releasing active interface [ 598.133681][T23569] bond3 (unregistering): (slave gretap1): the permanent HWaddr of slave - a6:90:c5:c3:d2:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 598.152186][T23569] bond3 (unregistering): (slave gretap2): making interface the new active one [ 598.172623][T23569] bond3 (unregistering): (slave gretap2): Releasing active interface [ 598.189550][T23569] bond14 (unregistering): (slave geneve3): Releasing active interface [ 598.469724][T23569] bond10 (unregistering): (slave bridge6): Releasing active interface [ 598.478002][T23569] bond10 (unregistering): (slave bridge6): the permanent HWaddr of slave - ca:7c:04:31:40:d9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 598.509363][T23569] bond10 (unregistering): (slave bridge7): Releasing active interface [ 598.649845][T23569] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 598.659007][T23569] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 598.668469][T23569] bond0 (unregistering): Released all slaves [ 598.676212][T23569] bond1 (unregistering): Released all slaves [ 598.684825][T23569] bond2 (unregistering): Released all slaves [ 598.695080][T23569] bond3 (unregistering): Released all slaves [ 598.704010][T23569] bond4 (unregistering): Released all slaves [ 598.714684][T23569] bond5 (unregistering): Released all slaves [ 598.725915][T23569] bond6 (unregistering): Released all slaves [ 598.734753][T23569] bond7 (unregistering): Released all slaves [ 598.743474][T23569] bond8 (unregistering): Released all slaves [ 598.751999][T23569] bond9 (unregistering): Released all slaves [ 598.761743][T23569] bond10 (unregistering): Released all slaves [ 598.774694][T23569] bond11 (unregistering): Released all slaves [ 598.783471][T23569] bond12 (unregistering): Released all slaves [ 598.792396][T23569] bond13 (unregistering): Released all slaves [ 598.804337][T23569] bond14 (unregistering): Released all slaves [ 598.884577][T23569] tipc: Disabling bearer [ 598.904966][T23569] tipc: Left network mode [ 599.286219][T23569] pim6reg (unregistering): left allmulticast mode [ 599.621220][T23569] IPVS: stop unused estimator thread 0... [ 599.753297][T23569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.783864][T23569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.826292][T23569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.884292][T23569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.994074][T23569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.030547][T23569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.075524][T23569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.135991][T23569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.253109][T23569] bridge_slave_1: left allmulticast mode [ 600.259179][T23569] bridge_slave_1: left promiscuous mode [ 600.265080][T23569] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.289117][T23569] bridge_slave_0: left allmulticast mode [ 600.294790][T23569] bridge_slave_0: left promiscuous mode [ 600.300851][T23569] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.310065][T23569] bridge_slave_1: left allmulticast mode [ 600.315725][T23569] bridge_slave_1: left promiscuous mode [ 600.321817][T23569] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.331209][T23569] bridge_slave_0: left allmulticast mode [ 600.336842][T23569] bridge_slave_0: left promiscuous mode [ 600.343003][T23569] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.429484][T23569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.441853][T23569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.451406][T23569] bond0 (unregistering): Released all slaves [ 600.459457][T23569] bond1 (unregistering): Released all slaves [ 600.508155][T23569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.518761][T23569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.528579][T23569] bond0 (unregistering): Released all slaves [ 600.582824][T23569] bond0 (unregistering): Released all slaves [ 600.662780][T23569] 9: left promiscuous mode [ 600.725656][T23569] IPVS: stopping backup sync thread 28340 ... [ 601.161169][T23569] hsr_slave_0: left promiscuous mode [ 601.166885][T23569] hsr_slave_1: left promiscuous mode [ 601.172978][T23569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.185909][T23569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.193892][T23569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.201403][T23569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.211017][T23569] hsr_slave_0: left promiscuous mode [ 601.217279][T23569] hsr_slave_1: left promiscuous mode [ 601.223607][T23569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.231732][T23569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.240998][T23569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.249769][T23569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.262425][T23569] veth1_macvtap: left promiscuous mode [ 601.268009][T23569] veth0_macvtap: left promiscuous mode [ 601.273498][T23569] veth1_vlan: left promiscuous mode [ 601.279602][T23569] veth0_vlan: left promiscuous mode [ 601.285347][T23569] veth1_macvtap: left promiscuous mode [ 601.290859][T23569] veth0_macvtap: left promiscuous mode [ 601.296379][T23569] veth1_vlan: left promiscuous mode [ 601.301651][T23569] veth0_vlan: left promiscuous mode [ 601.412444][T23569] team0 (unregistering): Port device team_slave_1 removed [ 601.425520][T23569] team0 (unregistering): Port device team_slave_0 removed [ 601.523555][T23569] team0 (unregistering): Port device team_slave_1 removed [ 601.533553][T23569] team0 (unregistering): Port device team_slave_0 removed