last executing test programs: 11.482071457s ago: executing program 0 (id=3335): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8e44}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffb0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff529c}, @TIPC_NLA_NET_ID={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x3fff8}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x57011fc27aab3efc, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x1ff, 0x80000001, {{0xa, 0x4, 0x3, 0x21, 0x28, 0x68, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "ef30a755ec0cf88918a1"}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r8 = socket(0x2, 0x6, 0x6) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) accept$phonet_pipe(r8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10) (async) r10 = accept$phonet_pipe(r8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10) sendmmsg(r10, &(0x7f0000000c00), 0x0, 0x805) (async) sendmmsg(r10, &(0x7f0000000c00), 0x0, 0x805) accept4(r0, &(0x7f0000000c40)=@ax25={{0x3, @netrom}, [@default, @netrom, @rose, @null, @netrom, @remote, @bcast, @rose]}, &(0x7f0000000cc0)=0x80, 0x80800) (async) r11 = accept4(r0, &(0x7f0000000c40)=@ax25={{0x3, @netrom}, [@default, @netrom, @rose, @null, @netrom, @remote, @bcast, @rose]}, &(0x7f0000000cc0)=0x80, 0x80800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r4) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2e0, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_MODES_OURS={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1d#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd202}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f12}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x539}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "84ef4a2764c2ab338d4e272655f387fd1fb3ffd5bbbe6727f59f9314cbeefb132e0d2694eb9d7e6f183102cada1d3f3e8385502ef72dd79bf1cc71df6d763699ea1cc0866e8c610d9be1eeae3580605a634912378448911dffdf1da9fb2f1166b0e4fac033a3bef6a300ca9d0e39cb12bffd2f3d65ac1983b78ff675e2"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d4811b8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\.+%.\\!\xb9\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#<\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff3718}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x2e0}}, 0x40) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2e0, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_MODES_OURS={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1d#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd202}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f12}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x539}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "84ef4a2764c2ab338d4e272655f387fd1fb3ffd5bbbe6727f59f9314cbeefb132e0d2694eb9d7e6f183102cada1d3f3e8385502ef72dd79bf1cc71df6d763699ea1cc0866e8c610d9be1eeae3580605a634912378448911dffdf1da9fb2f1166b0e4fac033a3bef6a300ca9d0e39cb12bffd2f3d65ac1983b78ff675e2"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d4811b8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48f}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\.+%.\\!\xb9\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#<\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff3718}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x2e0}}, 0x40) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1f0, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x9, 0xc, 0x30, 0x30, 0x1, 0x30, 0x72, 0x48, 0x18, 0x2, 0x24, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8e, 0xfde, 0x1, 0x400, 0x5d0, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x7}, {0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x9}, {}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x7}, {0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x3}, {0x3, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe4, 0x7, 0x2, 0x3, 0xd, 0x9, 0xa5c, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x6, 0x1, 0xd8, 0x7, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xfffe, 0x7, 0x1, 0xffff, 0xff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x31, 0x0, 0xc, 0x6c, 0x16, 0x24, 0x1b, 0x1b, 0x48, 0x1b, 0x4fee49996350cee8]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0xa}, {0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x7, 0x2}, {0x6}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x3, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x2, 0x1}, {0x7}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x9, 0x10, 0xc84, 0xbef, 0x4, 0xfffb]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x30, 0x16, 0x12, 0x6c, 0x11, 0x1, 0x48, 0x6, 0x0, 0x60, 0xc, 0x60, 0x48, 0x5, 0x3, 0x12, 0x9, 0x6, 0x16, 0x6c, 0x30, 0x94bee685c12c20eb, 0x30, 0x1b, 0x16, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0x4, 0x3fc, 0x2, 0x5f62, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x1b30, 0x58e, 0x81, 0x101, 0x9, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008012}, 0x4000001) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r9, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x40, r9, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80, 0x69}}}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="d11562f03bd72f85ae4851f52ec1504735ea"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040851) 11.313231817s ago: executing program 0 (id=3338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x200000000a) accept4$rose(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) 11.065790828s ago: executing program 0 (id=3341): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x10}) (async) socket$nl_route(0x10, 0x3, 0x0) 10.960087093s ago: executing program 0 (id=3342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbdd400fddbdf2503000000080002000200000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) 10.038251112s ago: executing program 0 (id=3350): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) socket$phonet(0x23, 0x2, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect(r1, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x3}}, 0x80) write(r0, &(0x7f00000001c0)="240000001a005f0214f9f407000904001f0000ffffffdd20000000000800040001000000b6c0f5326eb8dea9f2366fafd8a11c479434c44618e61852133bf6b8be61e826c56348a4baba6dc91aa430a642e30f7c604c63799e1fca38254aaecea353fc5926ed3d3e0177d836d59c53257f93cf305c80ce99679a2d38df4e4aac3b284e93e1aa08d8fb7f37c5bea4afc77f081f39c1ce8a401adb5bf4c5f9db2d65316aa813dfe760de18a57ef7c79f63bfe18c63a8c26a62a189cd5b984fe0d21229555e83ec5efbffcd9372849612be580500"/220, 0xdc) 9.815907494s ago: executing program 0 (id=3353): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) socket(0xb, 0x2, 0x2) 2.135638639s ago: executing program 3 (id=3455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000606010400000000000000000a0000090900027f00797a3200000000050001000700000005000100070000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 1.942859721s ago: executing program 3 (id=3459): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) 1.733717799s ago: executing program 4 (id=3461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1400"/12, @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/191, 0x41000, 0x49, '\x00', r6, @sk_msg}, 0xffac) 1.586150226s ago: executing program 3 (id=3463): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x58e48e4c6b288518) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8265}, [@call={0x85, 0x0, 0x0, 0x1b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff1de6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x0, 0x0, 0xb, 0x6, 0x0, 0x10}, @exit]}, &(0x7f0000000700)='syzkaller\x00', 0x890, 0x29, &(0x7f0000000800)=""/41, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x509c852e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000640)='br_fdb_external_learn_add\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r5, 0x29, 0x2b, 0x0, 0xfff3) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000002c0)={0x80}) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xd}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40807}, 0x80) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x10, 0x80, 0x7, 0x8, {{0x16, 0x4, 0x1, 0x34, 0x58, 0x68, 0x0, 0x35, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x0, [{@local, 0x9}, {@local, 0xf}, {@empty, 0x9}, {@multicast1, 0xb6e1960}]}, @generic={0xffa117dc07b503cd, 0xb, "56da6d936a8b4dc20a"}, @rr={0x7, 0x7, 0x4, [@empty]}, @generic={0x88, 0xd, "71f00f6b6bbaf2b911cb33"}]}}}}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x110, r4, 0x35e98000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'ip6gretap0\x00', 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000240)={@multicast1, @rand_addr=0x64010102, r7}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r8) 1.333819271s ago: executing program 4 (id=3465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00'}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.230237124s ago: executing program 2 (id=3467): syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast2, 0x13, 0xb}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, r6, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.082014128s ago: executing program 4 (id=3469): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x7}, &(0x7f00000003c0)=0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000240)=""/3, 0x3, 0x4141, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x81, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000200610000000000000000004d36a7ee016400000000000000000000dc87a3db8fe0f3da1520f2c96b51f31a7e99151b82eb04a4e18ad99f4b703992"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.024649472s ago: executing program 2 (id=3470): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x8, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6}, 0xff}], 0x1, 0x40010000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x6, 0x9]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 959.670463ms ago: executing program 1 (id=3471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40}, 0x1c) listen(r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x5c}}, 0x40840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newrule={0xb8, 0x20, 0x809, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'wg1\x00'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x2}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @remote}]}, 0xb8}}, 0x0) 902.562166ms ago: executing program 4 (id=3472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ffffffff8500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 859.498762ms ago: executing program 2 (id=3473): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x9}, 0xc) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x258, 0x3c, 0x200, 0x70bd28, 0x25dfdbfb, {0x1f}, [@nested={0x1d, 0x136, 0x0, 0x1, [@generic="c19c9e6b1b3190713576f68fe340a33cf0680c40cc", @nested={0x4, 0x13a}]}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=r5}, @nested={0xd4, 0x73, 0x0, 0x1, [@nested={0x4, 0x16}, @generic="1315889431996ab8ce88f8b6b6d8ebf556ad448266a84c3d365ded9e023ad144c1bda1c53ae28c5f9260d1ff1151b9e8e3919a7754bfe614a777fd92832bf853e994c7aa588efc3a4bae8a57101d3fef8d0dec6599c1ee1ef8bf4febd65fa7b155d0f54844899be81ccc1c8ba3973a462d63a167a8862ac6d92ce417481b087d4acbd95b304fcb9270ed31cb1aa93fc3f3714072cb787f6e3e965163c6382eaeddfffa94468f658f3725b9ba2caf96e1ecc55a76ad04ba530cd5a43679d13f2cce46e612", @typed={0x8, 0x11c, 0x0, 0x0, @pid=r6}]}, @generic="3dd241fa867181bd88a71ae6a3abdf27074d18c28e182a4e4b81121f1642b1f9e3a875b1b763297b8b0dca9d252de3c8792d84d562", @typed={0x4, 0xeb}, @nested={0x109, 0x2d, 0x0, 0x1, [@nested={0x4, 0x90}, @generic="140e8161c823628c9f39050cc440e7e57ccd5bbcf5ebe32a9cc277012ca4752532918aed98101d2936b8b7850193343c600e938627f559de46b57275c97ade7a8540732a49c2882b2c4ed304129e713faabb642314616bed5a3f9e485917728d06e2e162894a14a44c4af33e7c8a29d266f20127990e2828ad7ba2dbcdbd3f218bd04eb93de37116c1ee2bd28d2b65b0281a8a83fe5aba08bcf9bf51588a8a2bff6e78190ca2462c3404dc329ac395f49408e3fdca0d544ac7d767c4d57b9613b790e4150a7616e41b002eebebeaed2e51a6b4e770", @nested={0x4, 0x103}, @typed={0x8, 0x13b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="129008652c79e7b098243865f351ee41c8bc337c6d1d7d20639d00b600279055"]}]}, 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), 0x8) (async, rerun: 32) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 773.244134ms ago: executing program 1 (id=3474): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x6, 0x9, 0x4, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="0cb24e2c253e314886bc8673d4e8cd3a47467d57dbaebecf3f8a1efb543b5d26", 0x20}], 0x1) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4095, 0x1014}, {&(0x7f00000003c0)=""/254, 0xf0}], 0x4, 0x0, 0x353}}], 0xebadb096fd1881, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) 722.219317ms ago: executing program 4 (id=3475): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x5, &(0x7f0000000480)=@raw=[@ringbuf_query, @generic={0x2, 0xf, 0x3, 0xfffb, 0xffffffff}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x7c, &(0x7f0000000500)=""/124, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x0, 0x400, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0x1, r2], &(0x7f0000000c00)=[{0x2, 0x4, 0x0, 0xc}, {0x5, 0x2, 0xa, 0x7}, {0x0, 0x4, 0xf}, {0x2, 0x5, 0xf, 0x5}, {0x5, 0x3, 0x10, 0x7}, {0x1, 0x3, 0x4, 0xc}, {0x5, 0x4, 0x10, 0x7}, {0x0, 0x1, 0xe, 0x9}, {0x3, 0x3, 0x6}, {0x4, 0x1, 0x4, 0x1}], 0x10, 0x3fe}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r16, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r17], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20000000) 703.561059ms ago: executing program 2 (id=3476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x0, @dev}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}]}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) shutdown(r0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) 630.099448ms ago: executing program 1 (id=3477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async, rerun: 64) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="fbaec112e65dc390da7e", 0xa}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b186dca8a2566859bd9d703269b72961338b8770982f94f867fb9cbdfbad33279788d610dc62ac87a843b674dcd97fd1ac6cb09047da172d781dd0a889441efaceaea", 0xb9}, {&(0x7f0000000f40)="0f4978175cca4e919808f7d279f162081ce626e5069cd12b7d9b2362619683410b2e102ca5a93f3d4c38d62f24c31bdef3f0fce20e56473de27b17b9bf09969cc1f587639eab524cd451930fe5ce7adff5dd9443b830227d7c5498c9b370376b9df1e0b13fc08c0858d5e8f25619a5edc22606b96cba46a3c36be89ea689c04c80ca2062d7154f439b868a4faa682d6a9e0705e6cfdd32dc1724263f29fa4ac640c4f35440b41235d3b146bc65cc74ffc6881f606d40559ba0664fb0bfc112e274e9a302878d6661679222b2abcbb7f841a64262d26f98ea2db15d1e19ef8b1b83be184d2559466f71aee9c1e25cbf0a6e6f365c8d8b070254e98fe9b74859c074a2ef24f97c2619b43ff4deca477f1d0fda469eb99ebdaa7264ed00d0ee6fd147960906843cc60363799d6c3909c3a5b3798e3c3da1d3158160d1cbba8f80c638abd152447afb26b96c8adb9c6622c838e77daaea60a6054fc70e36f97fce2608b185830520e7ad7554cb3bc6b2ac570c6f2d6942e33738ef17d0c27dc8d3d3bc62879d86929203f0f5f8b6a11fba96d5b918b10be11036a15f1664ce8ce2d2ffbec002afe2a32df1de34bc4fb750664bafa0357818f5dc0876c694f7122c3c4c55da9177866a30a4434963783ca386c3c96d32c523a4eb4b9aa539231a181b550155e633b3db0a3f87c696661e91dd5a9f7f343888c07f9dc34ff731038f5f8459d09e3b44a331c7b406f81c570cf96b78a17b2680776aadcf5761a9546de5a2aab31ea1df393041869da677d9706920ce16c2d263f79a35ddf12bce46d0ed6e2efecaa38a6e6b139b279cd5be0d21380f2dae5dcc0f3d1666567593b23b3112b1ffd97538f23f0d479a88285b87eb0d2f968c1fd74b654998b72dd14af4b7861c9cd31382208471c647f58599a7c7c3b84595f4cdcf747f08afb7bf38bb7b8c5c1db75d5e2ee587346ffc33486bd7af93027933d2601f828aa8e82c8623ee572b60e0f604214eb1f1681cad9cffef62520e464bbd292d9b8de1efec38892451e32b444815663f71d5ea4fa15185b6235be724c46590f22f66c6ef90b0e5d2a14df4c0e94abd9430e380b5c4a60356e7a3b93ddf91df43971665c5ba2f3980e20e7a28088de1dffdd082032d604cae8ce50d868e39ca67e19ea4b69503f4f428391b3c1c18d369481f9ed3888e513e5da58a8b55ab8cc354a285dee52e7e81c32834262b83e6c37c0a4421bc12d04a0c584fb87732e264a4fb486a76982dcf8217351bc9e6dbafdee705f03695f0a8301458d974e797a2e542920184065fdf73950a8910f0f488e10ae34c1de200f3620907071703647eac956b687c016f74883417089a1a7fd5744dc66e9bd9dd2f5d8595a2c42e3c106582b4e6e58170bb51e9ef95d8dec11a239443830ea6cf5edd6a943726594b089f883ab8dc83238575e45d9607679382d1642216a7e017308141836cd8df27c60af67877c7f0e24fabc23530c349c28486e179dd015db6fd494f41404cad782d7aa209a51e467ba2afe1cc403a", 0x445}], 0x3}, 0x10884) socket$nl_netfilter(0x10, 0x3, 0xc) 502.679237ms ago: executing program 3 (id=3478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) 501.509727ms ago: executing program 1 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff56b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x8044) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d99", 0x3}], 0x1}}], 0x2, 0x0) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 318.119486ms ago: executing program 2 (id=3480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001680)='cpu.stat\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0x94, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c810}, 0x400c005) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000200)="e743b677c728f3cbe2cd6e86232da420eae8ee03a65b0e2d5c74ad5f45f362cf085e95a7fb1a5aac2ab47f640bd0424116e82feb95f01b8c352c6c902ce5eac02dd982197151aabe2938e690ee06c62b25a005dd481c6e84e3f18d158caf9335e90b726587d07b18e575edb130c1474d0adae7b94a1a368b8288db7324c33c9ed0c77c7a3a86474815c5329ac65762cf92d37d420c39719bb4a9b15dd1f134a40d4ebf972cb0d1812ca1a0ec4f21e133fa6a410eb57aec32bd20903f878c6f47d1d845", 0xc3}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="30a296acd13b2b273c41c15ecf7e69747df1537767c610471f375dc23bc11e11240af1e5c22e114fee5e7ccc6ca695cb782829848014978b152c310b96c6b555fac74cdbbc4ee96e14b424825642b56e7604a4d88f5dcef1d19dd9182f301c81c3954326256ecb46740b25d75d62f88221eedbc55be8b23b4c346ff3e4a219626216393773c5de874313c03c7d3b5838f67c215697c62756e72725dc18e07cfbda0c1c641055f7abe2e12d3ff995b63a9135e4b3def8a8b04bdf55d0e0e3a0d2362d33f2942be68794b03dafea5abd4264c43afd30121a25d1a8c5148156bfdd3330d7b654d4ab61f53925b35b0609a7bb3bc13ce420d79fe4", 0xf9}, {&(0x7f0000001400)="0b5f0aa46fd0be483cce5f1c1d5b181c6311849175f743002cc7d8e3bfc78dffbed67739d60f4d920f6ced009d3d7289b2ee95ad1dc84143c4ad25edaaa3f89d5567c4e16e6c87c8d4425c563e530e0001e1797228e0b078396e3c733add45ae2537ea195e41c106edb6b080e35215ad7c6f148cc70f008ce5d8a03fa5d32514269d689ec9b4cb525874479acbcd9606267b46a67ab62d4ea9489f4960484d0c527c0079cebc89d651304b32f302e02195283be05049b0336c7d443502a8c9bb76e3f17642", 0xc5}, {&(0x7f0000001500)="ef4ff4ec1161d7e1705746a4bc6d07ad74d5b8ca407d70c22333ed6435ce2a6adfa0c5a845313ebf45c523c340d9b4a31016c5a79963cfc674db19b2e0d1abf36deb9f4d62860f5259eaf27784d1941bed8795b7ab9b5d05579fffc777885959bf7a523a57c06e065e03b99e5e8c51079b698f723a369ce1b8b71deb301e35ea75785c6fb29f1e6aeb4139ddd34dd37da744a7436a2bf09241a1daaa14be8c81", 0xa0}], 0x5, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x40) 300.676992ms ago: executing program 4 (id=3481): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept(r1, &(0x7f0000000100)=@can, &(0x7f0000000080)=0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000a1c000000090a0103000000000000000002000006080005400000000c28000000050a0102000000000000000003000001080007006e6174000b00070066696c7465720000140000001100010000000000000000000100000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000300)={r0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180090001006c617374000000001800028008000140000000090c0002400000fbff000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000003c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, 0x1, "52f9f46edb9b3105e851a22494dd6dfdd25f55528ecb4ea5bdc37aab1e4cc758", 0x1, 0x7, 0x2, 0x10001}, 0x3c) recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2002, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000004c0), 0x4) 238.235067ms ago: executing program 1 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8015) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0x2d0, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xc, 0x16, 0x60, 0x24, 0x16, 0x0, 0x12, 0xa3, 0x1b, 0xb, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0xc, 0xb19b, 0x217, 0x2, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x7, 0xb9, 0x9, 0x1ff, 0x1, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x59, 0x2, 0x48, 0x18, 0x5, 0xb, 0x1b, 0xc, 0x48, 0x6, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xfffc, 0x101, 0x7fff, 0xf415, 0x3, 0x7ff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xf547, 0x3cf0, 0xde9, 0x7ff, 0x7471, 0x19f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1, 0x5, 0x4, 0x101, 0x8, 0xfffe, 0xfffc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x9, 0x480, 0x0, 0x2, 0xecc, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x5, 0x4, 0x0, 0x6, 0x5, 0x5]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x18, 0x24, 0x2, 0x2, 0xb, 0x6, 0x16, 0x12, 0x1b, 0x60, 0xb, 0x48, 0x3, 0x18, 0x16, 0xc, 0x5, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x3, 0x5, 0x6c, 0xc, 0x6, 0x1, 0x2, 0x4, 0x9, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7f, 0x1, 0x5, 0x400, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x6, 0x2360, 0x8, 0x4734, 0x2, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x0, 0x18}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x7, 0x100, 0x8, 0x8000, 0x2, 0x2400, 0x4f5]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5}, {0x3}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0xa}, {0x1}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x8}, {0x7, 0x9}, {0x1}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x9}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x1b, 0x4, 0x0]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa7, 0x3, 0x5, 0xb1, 0x1000, 0x8ae, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x5, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x4, 0x5, 0x10, 0x7, 0x80, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x3}, {0x2, 0xa}, {0x4, 0x5}, {0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x180, 0xfffb, 0x2, 0x9, 0x2, 0xc]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20004040) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) shutdown(r1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8854) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r9, 0x311, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 235.051899ms ago: executing program 3 (id=3483): r0 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7562fa7}}}, &(0x7f00000000c0)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 164.747948ms ago: executing program 2 (id=3484): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x801) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 81.113148ms ago: executing program 3 (id=3485): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffc, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4000fffd, 'syz0\x00', @bcast, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0xff, @remote, @mcast2, {[], {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 0s ago: executing program 1 (id=3486): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x158, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7de2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x3, 0x10001, 0x10000, 0xffff554e, 0x7, 0x1b7895fc, 0x7, 0x2, 0x2]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x201, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x804) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r9, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fdffffff000000000000000085200000030000009500000000000000831e1f3747ea3e9db7c8a0cf825a3007f6926317ec169e0aacd0f6f3eb5280aa445fe90c06dae1e0372d563f5ed43d2e2086b26decab0f07d6eb55949b96b25d9ccc355339aba3a26846fa46c23e4cd5507543b0bc3e49218d1f0919edcc945955d000c4"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd88, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.637747][T11178] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 205.769218][T11180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.778704][T11179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.004470][T11202] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1529'. [ 206.160079][T11210] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 206.173490][T11210] team0: Device veth1_macvtap failed to register rx_handler [ 206.266912][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 206.293674][T11220] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 206.656419][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 206.697140][T11245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1545'. [ 206.742003][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 206.803476][T11251] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 207.169219][T11279] blkio.reset_stats is deprecated [ 207.199653][T11267] team0: Cannot enslave team device to itself [ 207.371682][T11287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1556'. [ 207.410389][ T5960] hid-generic 0005:0C45:06F5.0001: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa [ 207.667782][T11304] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1561'. [ 208.019069][T11311] vlan3: entered promiscuous mode [ 208.024515][T11311] vlan3: entered allmulticast mode [ 208.030063][T11311] hsr_slave_1: entered allmulticast mode [ 208.041468][T11309] tipc: Enabled bearer , priority 0 [ 208.126498][T11314] syzkaller0: entered promiscuous mode [ 208.134456][T11314] syzkaller0: entered allmulticast mode [ 208.140359][T11321] netlink: 'syz.0.1567': attribute type 21 has an invalid length. [ 208.141814][T11314] tipc: Resetting bearer [ 208.169348][T11305] tipc: Resetting bearer [ 208.182115][ T6334] nci: nci_rx_work: unknown MT 0x6 [ 208.299870][T11333] sctp: [Deprecated]: syz.3.1570 (pid 11333) Use of int in max_burst socket option. [ 208.299870][T11333] Use struct sctp_assoc_value instead [ 209.190912][T11355] netlink: 'syz.0.1575': attribute type 58 has an invalid length. [ 209.568804][T11305] tipc: Disabling bearer [ 210.080353][T11384] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 210.282612][T11397] __nla_validate_parse: 3 callbacks suppressed [ 210.282631][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 210.308976][T11395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1585'. [ 210.339690][T11395] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 210.362797][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 210.402554][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1586'. [ 210.492537][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 210.500177][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 210.521679][T11402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1587'. [ 210.527605][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 210.561263][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 210.571090][T11412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1589'. [ 210.898797][T11428] tipc: Enabled bearer , priority 0 [ 210.922151][T11424] syzkaller0: entered promiscuous mode [ 210.951898][T11424] syzkaller0: entered allmulticast mode [ 210.980016][T11424] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.073632][T11424] tipc: Resetting bearer [ 211.106394][T11424] tipc: Enabling of bearer rejected, media not registered [ 211.169492][T11421] tipc: Resetting bearer [ 211.180706][T11445] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 211.230634][T11450] openvswitch: netlink: IP tunnel dst address not specified [ 211.425318][T11421] tipc: Disabling bearer [ 211.833460][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 211.840103][ T5873] Bluetooth: hci0: command 0x0401 tx timeout [ 211.842555][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 211.846372][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 213.057093][T11560] netlink: 'syz.3.1630': attribute type 11 has an invalid length. [ 213.355439][T11587] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 213.446856][T11587] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 213.740017][T11615] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 213.834179][T11618] macvtap1: entered allmulticast mode [ 213.841544][T11618] veth0_macvtap: entered allmulticast mode [ 213.891189][T11620] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000 [ 214.014109][T11623] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 214.022210][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.189279][T11639] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 214.240655][T11639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.626362][T11662] netlink: 'syz.3.1661': attribute type 13 has an invalid length. [ 214.646961][T11665] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 214.667659][T11673] netlink: 'syz.4.1664': attribute type 33 has an invalid length. [ 214.872314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.356372][T11709] __nla_validate_parse: 29 callbacks suppressed [ 215.356391][T11709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1676'. [ 215.895362][T11738] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1684'. [ 216.076030][T11750] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 216.087121][T11750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1689'. [ 216.157444][T11750] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 216.353680][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 216.385540][T11766] team_slave_0: entered promiscuous mode [ 216.391597][T11766] team_slave_1: entered promiscuous mode [ 216.401312][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1694'. [ 216.411236][T11766] macsec1: entered promiscuous mode [ 216.421357][T11766] team0: entered promiscuous mode [ 216.427629][T11766] macsec1: entered allmulticast mode [ 216.433176][T11766] team0: entered allmulticast mode [ 216.438513][T11766] team_slave_0: entered allmulticast mode [ 216.445382][T11766] team_slave_1: entered allmulticast mode [ 216.464167][T11766] team0: Device macsec1 is already an upper device of the team interface [ 216.482481][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 216.500452][T11766] team0: left allmulticast mode [ 216.520840][T11766] team_slave_0: left allmulticast mode [ 216.526364][T11766] team_slave_1: left allmulticast mode [ 216.547955][T11766] team0: left promiscuous mode [ 216.556360][T11781] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 216.561469][T11766] team_slave_0: left promiscuous mode [ 216.574588][T11766] team_slave_1: left promiscuous mode [ 216.634889][T11779] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 216.852956][T11790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 217.194484][T11814] syzkaller0: entered promiscuous mode [ 217.200449][T11814] syzkaller0: entered allmulticast mode [ 217.206801][T11811] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 217.313516][T11814] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 217.333906][T11820] wg1: entered promiscuous mode [ 217.341279][T11820] wg1: entered allmulticast mode [ 217.933661][T11837] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1712'. [ 218.980483][T11845] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 219.270555][T11874] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 219.405355][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1726'. [ 219.418493][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1726'. [ 219.523094][T11884] syzkaller0: entered promiscuous mode [ 219.530581][T11884] syzkaller0: entered allmulticast mode [ 219.547140][T11884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1727'. [ 219.669539][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.684991][T11884] bond0 (unregistering): Released all slaves [ 219.800860][T11900] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.061874][T11911] block nbd1: NBD_DISCONNECT [ 220.099991][T11911] geneve2: entered promiscuous mode [ 220.408984][T11936] __nla_validate_parse: 3 callbacks suppressed [ 220.409004][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1741'. [ 220.569380][T11950] netlink: 'syz.2.1748': attribute type 13 has an invalid length. [ 220.596083][T11950] macvtap0: entered allmulticast mode [ 220.613880][T11950] macvtap0: refused to change device tx_queue_len [ 220.667811][T11950] dvmrp1: entered allmulticast mode [ 220.673151][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 220.681559][T11943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.717930][T11950] sctp: [Deprecated]: syz.2.1748 (pid 11950) Use of int in maxseg socket option. [ 220.717930][T11950] Use struct sctp_assoc_value instead [ 220.823454][T11959] tipc: Cannot configure node identity twice [ 220.854151][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 220.917672][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 221.044211][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 221.082212][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 221.110501][T11975] netlink: 'syz.1.1752': attribute type 7 has an invalid length. [ 221.132737][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 221.570542][T12007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.606081][T12004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.630547][T12011] syzkaller0: entered allmulticast mode [ 221.729930][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 221.771193][T12016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1765'. [ 221.818312][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 221.871994][T12022] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 221.885804][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.894539][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.015225][T12030] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 222.039572][T12030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.060276][T12035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.125626][T12038] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 222.136877][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.240889][T12045] netlink: 'syz.0.1773': attribute type 11 has an invalid length. [ 222.445519][T12058] netlink: 'syz.2.1778': attribute type 2 has an invalid length. [ 222.467723][T12060] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 222.508432][T12060] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 223.063065][T12090] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 223.232429][T12045] lo speed is unknown, defaulting to 1000 [ 223.319219][T12102] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 223.372137][T12104] sctp: [Deprecated]: syz.2.1792 (pid 12104) Use of int in max_burst socket option deprecated. [ 223.372137][T12104] Use struct sctp_assoc_value instead [ 223.704984][T12111] netlink: zone id is out of range [ 223.712979][T12113] netlink: zone id is out of range [ 223.724161][T12114] netlink: 'syz.0.1797': attribute type 7 has an invalid length. [ 223.735911][T12114] netlink: 'syz.0.1797': attribute type 8 has an invalid length. [ 223.773016][T12118] netlink: 'syz.4.1798': attribute type 4 has an invalid length. [ 223.782780][T12111] netlink: zone id is out of range [ 223.809483][T12118] `: renamed from bond0 (while UP) [ 223.811253][T12113] netlink: zone id is out of range [ 223.840922][T12111] netlink: zone id is out of range [ 223.855641][T12113] netlink: zone id is out of range [ 223.861936][T12111] netlink: zone id is out of range [ 223.870057][T12113] netlink: zone id is out of range [ 223.878682][T12111] netlink: zone id is out of range [ 223.883927][T12113] netlink: zone id is out of range [ 223.988712][T12124] sctp: [Deprecated]: syz.0.1800 (pid 12124) Use of int in max_burst socket option. [ 223.988712][T12124] Use struct sctp_assoc_value instead [ 224.238582][T12133] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 224.392930][T12150] tls_set_device_offload_rx: netdev not found [ 224.472411][T12156] lo: left promiscuous mode [ 224.680068][T12173] netlink: 'syz.4.1814': attribute type 21 has an invalid length. [ 224.955961][T12197] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 224.981894][T12197] 0ªî{X¹¦: left promiscuous mode [ 224.987012][T12197] 0ªî{X¹¦: entered allmulticast mode [ 225.564433][T12202] __nla_validate_parse: 15 callbacks suppressed [ 225.564453][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 225.649807][T12210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1823'. [ 225.668909][T12206] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.1823'. [ 225.765962][T12217] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 225.785101][T12217] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 225.805244][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 225.832016][T12217] tipc: Enabled bearer , priority 0 [ 225.850420][T12224] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1829'. [ 225.855798][T12217] syzkaller0: entered promiscuous mode [ 225.865398][T12217] syzkaller0: entered allmulticast mode [ 225.873073][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 225.885812][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 225.995702][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 226.143616][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 226.432859][T12244] xt_limit: Overflow, try lower: 271964/0 [ 226.500418][T12212] tipc: Resetting bearer [ 226.542140][T12212] tipc: Disabling bearer [ 226.774808][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 226.790364][T12259] netlink: 'syz.2.1843': attribute type 30 has an invalid length. [ 227.292556][T12287] netlink: 'syz.2.1851': attribute type 4 has an invalid length. [ 227.310351][T12287] netlink: 'syz.2.1851': attribute type 4 has an invalid length. [ 228.104262][T12316] siw: device registration error -23 [ 228.935506][T12338] gretap0: left promiscuous mode [ 228.940921][T12343] IPVS: set_ctl: invalid protocol: 98 172.20.20.62:20001 [ 228.962245][T12338] 8021q: adding VLAN 0 to HW filter on device ` [ 228.980973][T12338] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.991522][T12338] net_ratelimit: 10 callbacks suppressed [ 228.991534][T12338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.027689][T12346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 229.243489][T12363] netlink: 'syz.4.1869': attribute type 4 has an invalid length. [ 229.276266][T12364] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 229.588109][T12379] netlink: 'syz.3.1874': attribute type 58 has an invalid length. [ 230.405645][T12436] veth0: entered promiscuous mode [ 230.442267][T12436] netlink: 'syz.1.1893': attribute type 1 has an invalid length. [ 230.633901][T12444] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 230.671899][T12451] __nla_validate_parse: 10 callbacks suppressed [ 230.671924][T12451] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1896'. [ 230.699613][T12444] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 230.849109][T12457] smc: net device erspan0 applied user defined pnetid SYZ0 [ 230.986985][T12465] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 231.002362][T12465] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 231.141055][T12444] gretap1: entered promiscuous mode [ 231.191333][T12444] bond5: (slave gretap1): making interface the new active one [ 231.215980][T12473] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 231.244296][T12444] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 231.346025][T12466] macvlan5: entered promiscuous mode [ 231.373248][T12466] macvlan5: entered allmulticast mode [ 231.399863][T12466] bond5: entered promiscuous mode [ 231.411579][T12466] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 231.433255][T12466] bond5: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 231.460710][T12466] bond5: left promiscuous mode [ 231.509112][T12473] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 231.509835][T12434] veth0: left promiscuous mode [ 232.810339][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 232.852122][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 233.754850][T12553] netlink: 'syz.3.1928': attribute type 4 has an invalid length. [ 233.961761][T12558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.026231][T12564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.048096][T12562] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 234.086480][T12564] netlink: 'syz.1.1929': attribute type 12 has an invalid length. [ 234.128310][T12564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1929'. [ 234.306245][T12570] !: renamed from dummy0 (while UP) [ 234.655109][T12577] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 234.676944][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 234.824435][ T30] audit: type=1107 audit(1755660404.712:7): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>K¦²eyÙY·D¤ Hï¼Dˆí/ÐdÂJU^T$…¥¾óvOžbãì@' [ 235.722035][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 236.042157][T12612] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1944'. [ 236.076076][T12612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.145964][T12611] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 236.236784][T12611] bond12: entered promiscuous mode [ 236.245791][T12611] 8021q: adding VLAN 0 to HW filter on device bond12 [ 236.325517][ T9] hid-generic 0005:0C45:06F5.0002: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa [ 236.487542][T12616] 8021q: adding VLAN 0 to HW filter on device bond13 [ 236.516619][T12616] bond12: (slave bond13): making interface the new active one [ 236.540521][T12616] bond13: entered promiscuous mode [ 236.560668][T12616] bond12: (slave bond13): Enslaving as an active interface with an up link [ 237.532123][T12650] bridge3: entered promiscuous mode [ 237.556787][T12650] bridge3: entered allmulticast mode [ 237.601348][T12651] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 238.360890][T12682] netlink: 'syz.0.1961': attribute type 4 has an invalid length. [ 238.434694][T12685] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1961'. [ 238.596407][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 239.910298][T12698] netlink: 'syz.4.1966': attribute type 26 has an invalid length. [ 240.286059][T12706] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 240.295434][T12706] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 240.412623][T12709] tipc: Enabled bearer , priority 0 [ 240.422788][T12709] syzkaller0: entered promiscuous mode [ 240.429403][T12709] syzkaller0: entered allmulticast mode [ 240.475660][T12709] tipc: Resetting bearer [ 241.641681][T12715] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 241.657278][T12716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1973'. [ 241.687606][T12716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1973'. [ 242.792644][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 243.033824][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 243.338060][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 243.389553][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'. [ 243.688128][T12708] tipc: Resetting bearer [ 243.826784][T12708] tipc: Disabling bearer [ 244.154517][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 244.481657][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1994'. [ 244.529813][T12796] siw: device registration error -23 [ 244.566671][T12793] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1994'. [ 245.074750][T12796] netlink: 'syz.0.1996': attribute type 29 has an invalid length. [ 245.409628][T12823] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 245.644487][ C1] sched: DL replenish lagged too much [ 245.890597][T12836] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2004'. [ 246.972714][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'. [ 247.323780][T12871] netlink: 'syz.4.2016': attribute type 6 has an invalid length. [ 247.571375][T12875] veth17: entered promiscuous mode [ 247.576762][T12875] veth17: entered allmulticast mode [ 247.913263][T12887] ksmbd: Unknown IPC event: 3, ignore. [ 248.295963][T12900] tipc: Enabled bearer , priority 10 [ 248.813408][T12914] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2029'. [ 248.962962][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2029'. [ 249.342943][T12932] netlink: 'syz.1.2033': attribute type 21 has an invalid length. [ 249.395945][T12932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2033'. [ 249.646772][ T980] page_pool_release_retry() stalled pool shutdown: id 39, 1 inflight 60 sec [ 249.875065][T12948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2036'. [ 249.985026][T12951] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 250.284887][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2038'. [ 250.320912][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 250.824118][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2044'. [ 251.335661][T12992] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 251.627956][T12999] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 251.863127][T13006] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2050'. [ 252.026563][ T6334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.418363][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 253.171022][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 253.672607][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 253.747992][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 254.219625][T13066] netlink: 'syz.4.2065': attribute type 4 has an invalid length. [ 254.243758][T13066] netlink: 'syz.4.2065': attribute type 4 has an invalid length. [ 254.402128][T13070] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 254.466218][T13069] veth19: entered allmulticast mode [ 255.164988][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 255.351615][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 255.406948][T13086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.443855][T13086] team0: Failed to send port change of device bond5 via netlink (err -105) [ 255.454459][T13086] team0: Failed to send options change via netlink (err -105) [ 255.463816][T13086] team0: Port device bond5 added [ 255.503465][T13085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.515982][T13085] team0: Failed to send port change of device bond6 via netlink (err -105) [ 255.527727][T13085] team0: Failed to send options change via netlink (err -105) [ 255.535437][T13085] team0: Port device bond6 added [ 255.554073][ T6349] team0: Failed to send port change of device bond5 via netlink (err -105) [ 255.706590][T13092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2073'. [ 255.724396][T13093] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 255.848554][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.858695][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.894155][T13093] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.003017][T13093] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.155908][T13101] tipc: Enabled bearer , priority 10 [ 257.809862][T13123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2082'. [ 258.009114][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 258.143682][T13132] netem: incorrect ge model size [ 258.180140][T13132] netem: change failed [ 258.211785][T13134] tipc: Enabling of bearer rejected, failed to enable media [ 258.333553][T13138] siw: device registration error -23 [ 258.451079][T13130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.530678][T13134] syzkaller0: entered promiscuous mode [ 258.536416][T13134] syzkaller0: entered allmulticast mode [ 260.104823][T13168] netlink: 'syz.0.2093': attribute type 4 has an invalid length. [ 262.381716][T13155] veth0_to_team: entered promiscuous mode [ 262.393373][T13155] veth0_to_team: entered allmulticast mode [ 262.925192][T13179] netlink: 'syz.4.2098': attribute type 1 has an invalid length. [ 263.355991][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 263.553585][T13198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2103'. [ 263.563431][T13201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2103'. [ 264.576967][T13209] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 264.600407][T13209] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2106'. [ 264.634479][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 264.827058][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 265.215045][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 266.121059][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 266.626473][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 267.151198][T13258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2121'. [ 268.587148][T13300] __nla_validate_parse: 6 callbacks suppressed [ 268.587169][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 268.640231][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 268.716425][T13300] netlink: 'syz.0.2131': attribute type 11 has an invalid length. [ 268.935467][T13304] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 269.001896][T13307] tipc: Enabled bearer , priority 0 [ 269.015697][T13307] syzkaller0: entered promiscuous mode [ 269.063288][T13307] syzkaller0: entered allmulticast mode [ 269.096078][T13307] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 269.246722][T13312] tipc: Resetting bearer [ 269.294564][T13306] tipc: Resetting bearer [ 269.522478][T13299] nbd0: detected capacity change from 0 to 549764202496 [ 269.653160][ T5877] block nbd0: Receive control failed (result -104) [ 269.892346][T13306] tipc: Disabling bearer [ 270.037151][T13337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2140'. [ 270.086518][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 270.494164][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'. [ 270.946154][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2146'. [ 271.000324][T13369] netlink: 'syz.0.2146': attribute type 7 has an invalid length. [ 271.106868][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2146'. [ 271.168520][T13373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2149'. [ 271.208292][T13377] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 271.453494][T13385] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 271.736757][T13387] veth0: entered promiscuous mode [ 271.776630][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 272.417414][T13416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2160'. [ 272.973889][T13450] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 273.126064][T13462] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 273.382836][T13476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.822420][T13514] netlink: 'syz.0.2185': attribute type 16 has an invalid length. [ 273.863963][T13514] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 273.902623][T13514] __nla_validate_parse: 67 callbacks suppressed [ 273.902640][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2185'. [ 274.216144][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 274.554224][T13554] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2195'. [ 274.610944][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2195'. [ 274.620433][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 275.044265][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 275.088446][T13564] syzkaller0: entered promiscuous mode [ 275.094004][T13564] syzkaller0: entered allmulticast mode [ 275.133883][T13588] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2207'. [ 275.169668][T13583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.215176][T13593] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2207'. [ 275.303994][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 275.320938][T13588] tipc: Enabled bearer , priority 0 [ 275.635592][T13612] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 276.307453][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.441269][ T980] tipc: Node number set to 1651265164 [ 276.780472][T13588] syzkaller0: entered promiscuous mode [ 276.786083][T13588] syzkaller0: entered allmulticast mode [ 276.818460][T13609] tipc: Resetting bearer [ 276.830477][T13612] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 276.861975][T13587] tipc: Resetting bearer [ 276.932361][T13587] tipc: Disabling bearer [ 276.958008][T13616] tipc: Enabled bearer , priority 10 [ 277.005277][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'. [ 277.107734][T13632] IPVS: Error connecting to the multicast addr [ 277.475221][T13655] netlink: 'syz.4.2225': attribute type 6 has an invalid length. [ 277.704437][T13666] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20002 [ 277.706775][T13668] netlink: 'syz.1.2228': attribute type 3 has an invalid length. [ 277.783145][T13670] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 278.015437][T13682] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 278.067772][ T980] tipc: Node number set to 2494067691 [ 278.322853][T13693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.329084][T13644] lo speed is unknown, defaulting to 1000 [ 278.329457][T13693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.392278][T13695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.398893][T13695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.940749][T13717] sctp: [Deprecated]: syz.4.2240 (pid 13717) Use of int in max_burst socket option. [ 278.940749][T13717] Use struct sctp_assoc_value instead [ 279.111078][T13706] wg1: entered promiscuous mode [ 279.115990][T13706] wg1: entered allmulticast mode [ 279.412103][T13729] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 279.499103][T13729] __nla_validate_parse: 6 callbacks suppressed [ 279.499122][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2243'. [ 279.610241][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2246'. [ 279.637483][T13729] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 279.663120][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2243'. [ 279.811924][T13729] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 279.859930][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2243'. [ 280.088493][T13729] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 280.207322][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2243'. [ 280.216897][T13729] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 280.237687][T13751] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 280.323572][T13751] netlink: 'syz.2.2248': attribute type 3 has an invalid length. [ 280.377313][T13751] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2248'. [ 280.386398][T13751] NCSI netlink: No device for ifindex 813332851 [ 280.522835][T13756] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2249'. [ 281.114213][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2259'. [ 281.129986][T13779] nbd1: detected capacity change from 0 to 549764202496 [ 281.161573][ T5877] block nbd1: Receive control failed (result -104) [ 281.283460][T13794] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 281.480899][T13794] bond7: entered promiscuous mode [ 281.486625][T13794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.524480][T13793] netlink: 'syz.3.2263': attribute type 3 has an invalid length. [ 281.546398][T13793] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2263'. [ 282.099541][T13850] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 282.804439][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 283.138910][T13904] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 283.864814][ T5877] Bluetooth: hci4: link tx timeout [ 283.870441][ T5877] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 283.879413][ T5877] Bluetooth: hci4: link tx timeout [ 283.885048][ T5877] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.265106][T13966] netlink: 'syz.4.2317': attribute type 4 has an invalid length. [ 284.266588][T13962] delete_channel: no stack [ 284.344016][T13962] tipc: Enabled bearer , priority 0 [ 284.373586][T13973] syzkaller0: entered promiscuous mode [ 284.390050][T13973] syzkaller0: entered allmulticast mode [ 284.488744][T13475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.560980][T13974] smc: adding net device bond0 with user defined pnetid SYZ2 [ 284.623793][T13990] __nla_validate_parse: 5 callbacks suppressed [ 284.623812][T13990] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2321'. [ 284.678020][T13993] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2321'. [ 284.690023][T13962] tipc: Resetting bearer [ 284.698253][T13974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.786539][T13974] veth5: entered promiscuous mode [ 284.798170][T13974] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 284.963305][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 285.064680][T13961] tipc: Resetting bearer [ 285.083028][T13961] tipc: Disabling bearer [ 285.301510][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'. [ 285.313580][T14018] validate_nla: 2 callbacks suppressed [ 285.313601][T14018] netlink: 'syz.2.2332': attribute type 12 has an invalid length. [ 285.336243][T14018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2332'. [ 285.521427][T14033] netlink: 'syz.3.2336': attribute type 33 has an invalid length. [ 285.532834][T14033] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2336'. [ 285.544229][T14033] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2336'. [ 285.603081][T14040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2338'. [ 285.825717][T14052] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 285.846196][T14052] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2343'. [ 285.880662][ T5877] Bluetooth: hci4: link tx timeout [ 285.885847][ T5877] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.894153][ T5877] Bluetooth: hci4: link tx timeout [ 285.899738][ T5877] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 285.904769][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2345'. [ 285.911055][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 286.143470][ T6336] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.196539][ T6336] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.248692][ T6336] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.271107][ T6336] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.428784][T14093] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 286.444886][T14093] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 287.091780][T14118] netlink: 'syz.2.2357': attribute type 4 has an invalid length. [ 287.410490][T14138] openvswitch: netlink: Message has 4 unknown bytes. [ 287.457013][T14144] veth0: entered promiscuous mode [ 287.648448][T14153] netlink: 'syz.3.2369': attribute type 29 has an invalid length. [ 287.668699][T14153] netlink: 'syz.3.2369': attribute type 29 has an invalid length. [ 287.696340][T14153] netlink: 'syz.3.2369': attribute type 29 has an invalid length. [ 287.725845][T14153] netlink: 'syz.3.2369': attribute type 29 has an invalid length. [ 288.114060][T14175] netlink: 'syz.2.2378': attribute type 10 has an invalid length. [ 288.166399][T14175] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 288.193027][T14177] IPVS: length: 8 != 1152 [ 288.196910][T14131] veth0: left promiscuous mode [ 288.938881][T14238] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 289.626776][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.661959][T14285] __nla_validate_parse: 10 callbacks suppressed [ 289.661981][T14285] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2409'. [ 289.701943][T14285] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2409'. [ 289.798686][ T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.896120][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 289.914298][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 289.977492][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 289.996013][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 290.325702][T14317] validate_nla: 3 callbacks suppressed [ 290.325721][T14317] netlink: 'syz.4.2417': attribute type 2 has an invalid length. [ 290.333507][T14322] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 290.599399][T14334] netlink: 'syz.3.2422': attribute type 24 has an invalid length. [ 290.748309][T14339] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 290.806277][T14343] gtp1: entered promiscuous mode [ 290.831397][T14343] gtp1: entered allmulticast mode [ 290.856390][T14345] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 290.887576][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 291.135278][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 291.906708][T14380] bridge_slave_1: left allmulticast mode [ 291.913134][T14380] bridge_slave_1: left promiscuous mode [ 291.920333][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.964855][T14380] bridge_slave_0: left allmulticast mode [ 291.986570][T14380] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.051024][T14388] netlink: 'syz.4.2439': attribute type 16 has an invalid length. [ 292.068219][T14388] netlink: 'syz.4.2439': attribute type 17 has an invalid length. [ 292.210501][T14388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.230637][T14392] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 292.233098][T14401] netlink: 'syz.0.2442': attribute type 1 has an invalid length. [ 292.255430][T14392] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 292.276260][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 292.292671][T14401] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.305529][T14392] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 292.306479][T14401] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 292.329435][T14401] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 292.625912][T14413] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2445'. [ 292.927795][T14434] netlink: 'syz.0.2453': attribute type 11 has an invalid length. [ 292.996761][ T6334] nci: nci_rx_work: unknown MT 0x6 [ 293.041422][T14442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.165187][ T9] IPVS: starting estimator thread 0... [ 294.267690][T14495] IPVS: using max 27 ests per chain, 64800 per kthread [ 294.321798][T14499] pim6reg: entered allmulticast mode [ 294.708658][T14512] __nla_validate_parse: 49 callbacks suppressed [ 294.708694][T14512] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2467'. [ 295.106213][T14542] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 295.133115][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'. [ 295.166642][T14547] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 295.168411][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 295.207315][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2484'. [ 295.434447][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 295.444983][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2489'. [ 295.581083][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 295.784631][T14588] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2495'. [ 295.829122][T14588] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 295.842224][T14588] 0ªî{X¹¦: entered allmulticast mode [ 295.880542][T14588] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 296.045421][T14609] tipc: Enabled bearer , priority 0 [ 296.056718][T14604] syzkaller0: entered promiscuous mode [ 296.072207][T14604] syzkaller0: entered allmulticast mode [ 296.085286][T14602] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2499'. [ 296.117761][T14602] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2499'. [ 296.129512][T14609] tipc: Resetting bearer [ 296.190655][T14604] tipc: Resetting bearer [ 296.242894][T14604] tipc: Disabling bearer [ 296.390806][T14625] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 296.403437][T14626] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 296.714249][T14635] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 296.766755][T14635] batman_adv: batadv0: Adding interface: wlan1 [ 296.777403][T14635] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.811276][T14635] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 296.865880][T14643] bond15: entered allmulticast mode [ 296.888210][T14643] 8021q: adding VLAN 0 to HW filter on device bond15 [ 296.900979][T14643] bridge0: port 1(bond15) entered blocking state [ 296.926858][T14643] bridge0: port 1(bond15) entered disabled state [ 296.953950][T14643] bond15: entered promiscuous mode [ 297.343000][T14662] veth0_virt_wifi: renamed from veth0_vlan [ 297.644621][T14682] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 297.680760][T14682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.521605][T14727] ip6gre3: entered allmulticast mode [ 298.630201][T14689] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 298.672919][T14729] raw_sendmsg: syz.2.2538 forgot to set AF_INET. Fix it! [ 298.696080][T14719] lo speed is unknown, defaulting to 1000 [ 298.815281][T14733] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 299.750984][T14771] sctp: [Deprecated]: syz.4.2552 (pid 14771) Use of int in max_burst socket option deprecated. [ 299.750984][T14771] Use struct sctp_assoc_value instead [ 299.816991][T14777] __nla_validate_parse: 9 callbacks suppressed [ 299.817012][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 299.830193][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 299.868719][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 299.989999][ T55] block nbd0: Possible stuck request ffff888032745080: control (read@0,4096B). Runtime 30 seconds [ 300.038412][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2552'. [ 300.078742][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2552'. [ 300.222215][T14808] tipc: Enabled bearer , priority 0 [ 300.294000][T14813] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2563'. [ 300.305154][T14808] tipc: Disabling bearer [ 300.427590][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 300.462436][T14815] netlink: 'syz.2.2564': attribute type 1 has an invalid length. [ 300.492920][T14815] netlink: 'syz.2.2564': attribute type 2 has an invalid length. [ 300.500901][T14818] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 300.648355][T14827] team_slave_0: mtu greater than device maximum [ 300.693611][T14829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2567'. [ 300.830541][T14835] smc: net device erspan0 erased user defined pnetid SYZ0 [ 300.899412][T14834] netlink: 'syz.1.2571': attribute type 30 has an invalid length. [ 300.908160][T14834] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 300.926298][T14834] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 301.317505][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'. [ 301.392388][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2580'. [ 301.566602][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 301.695690][T14879] tipc: Enabling not permitted [ 301.702566][T14879] tipc: Enabling of bearer rejected, failed to enable media [ 302.044265][T14900] netlink: 'syz.1.2595': attribute type 4 has an invalid length. [ 302.441177][T14921] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 302.766329][T14946] sch_fq: defrate 0 ignored. [ 303.402502][T14996] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 303.791581][T15022] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 303.943569][T15026] netlink: 'syz.4.2632': attribute type 39 has an invalid length. [ 304.423167][T15055] tipc: Enabled bearer , priority 0 [ 304.446976][T15062] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 304.477780][T15063] syzkaller0: entered promiscuous mode [ 304.523025][T15063] syzkaller0: entered allmulticast mode [ 304.579900][T15055] tipc: Resetting bearer [ 304.640374][T15054] tipc: Resetting bearer [ 304.693550][T15054] tipc: Disabling bearer [ 304.816097][T15079] ip6gre1: entered allmulticast mode [ 304.917365][T15087] __nla_validate_parse: 16 callbacks suppressed [ 304.917387][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 305.031179][T15093] netlink: 'syz.1.2647': attribute type 83 has an invalid length. [ 305.225634][T15102] netlink: 'syz.3.2650': attribute type 10 has an invalid length. [ 305.449482][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 305.471505][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 305.566965][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2658'. [ 305.611059][T15131] bond0: (slave team0): Releasing backup interface [ 305.626238][T15131] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 305.724157][T15131] bond0: (slave bridge_slave_1): Releasing backup interface [ 305.822445][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2660'. [ 305.823215][T15131] bond12: (slave bond13): Releasing backup interface [ 305.859549][T15131] bond13: left promiscuous mode [ 305.874729][T15142] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2660'. [ 305.890870][T15131] bond15: left promiscuous mode [ 305.914067][T15131] bridge0: port 1(bond15) entered disabled state [ 306.326360][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'. [ 306.420558][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 306.838272][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2679'. [ 306.859798][T15205] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 306.892648][T15205] netlink: 'syz.2.2679': attribute type 2 has an invalid length. [ 306.900758][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2679'. [ 306.923810][T15212] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 307.087561][T15221] netlink: 'syz.3.2683': attribute type 9 has an invalid length. [ 307.204545][T15221] netlink: 'syz.3.2683': attribute type 9 has an invalid length. [ 307.313284][T15238] netlink: 'syz.4.2688': attribute type 1 has an invalid length. [ 307.854626][T15267] syzkaller0: entered promiscuous mode [ 307.861284][T15267] syzkaller0: entered allmulticast mode [ 307.882071][T15267] netlink: zone id is out of range [ 307.888628][T15267] netlink: zone id is out of range [ 307.894257][T15267] netlink: zone id is out of range [ 307.899625][T15267] netlink: zone id is out of range [ 307.905501][T15267] netlink: zone id is out of range [ 307.910842][T15267] netlink: zone id is out of range [ 307.916072][T15267] netlink: zone id is out of range [ 307.921962][T15267] netlink: zone id is out of range [ 307.929892][T15267] netlink: zone id is out of range [ 307.935881][T15267] netlink: zone id is out of range [ 308.134641][T15277] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 308.173658][T15277] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.244702][T15277] bond6: (slave geneve3): making interface the new active one [ 308.255784][T15277] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 308.363300][T15293] xt_policy: neither incoming nor outgoing policy selected [ 308.662604][T15313] tipc: Invalid UDP bearer configuration [ 308.662669][T15313] tipc: Enabling of bearer rejected, failed to enable media [ 308.730255][T15317] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 308.742032][T15315] netlink: 'syz.4.2713': attribute type 16 has an invalid length. [ 308.750145][T15315] netlink: 'syz.4.2713': attribute type 17 has an invalid length. [ 309.018858][T15333] netlink: 'syz.0.2719': attribute type 13 has an invalid length. [ 309.035618][T15333] lo: entered promiscuous mode [ 309.040885][T15333] lo: entered allmulticast mode [ 309.046216][T15333] tunl0: entered promiscuous mode [ 309.051736][T15333] tunl0: entered allmulticast mode [ 309.060746][T15333] gre0: entered promiscuous mode [ 309.065728][T15333] gre0: entered allmulticast mode [ 309.078757][T15333] 0ªî{X¹¦: entered promiscuous mode [ 309.088627][T15333] 0ªî{X¹¦: refused to change device tx_queue_len [ 309.446347][T15355] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 309.943661][T15355] veth9: entered promiscuous mode [ 309.971093][T15355] bond8: (slave veth9): Enslaving as a backup interface with a down link [ 310.217820][T15401] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 310.226709][T15401] __nla_validate_parse: 14 callbacks suppressed [ 310.226727][T15401] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2737'. [ 310.422405][T15412] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2743'. [ 310.477862][T15409] 8021q: adding VLAN 0 to HW filter on device bond9 [ 310.487008][T15409] team0: Port device bond9 added [ 310.860729][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 310.909715][T15427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2747'. [ 310.985398][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 311.061769][T15435] sctp: [Deprecated]: syz.0.2749 (pid 15435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.061769][T15435] Use struct sctp_sack_info instead [ 311.359694][T15454] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 311.520055][ T96] block nbd1: Possible stuck request ffff888024fe5080: control (read@0,4096B). Runtime 30 seconds [ 311.563918][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 311.604926][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 311.614158][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 311.637498][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 311.919345][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 312.025443][T15502] NCSI netlink: No device for ifindex 131080 [ 312.705765][T15547] validate_nla: 4 callbacks suppressed [ 312.705783][T15547] netlink: 'syz.2.2782': attribute type 4 has an invalid length. [ 313.116791][T15574] net_ratelimit: 18 callbacks suppressed [ 313.116814][T15574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 313.129061][T15574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.192619][T15576] xt_socket: unknown flags 0x50 [ 313.853112][T15609] netlink: zone id is out of range [ 313.906982][T15615] openvswitch: netlink: Message has 33 unknown bytes. [ 314.301191][T15629] netlink: 'syz.2.2804': attribute type 16 has an invalid length. [ 314.386716][T15638] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 314.581796][T15647] netdevsim netdevsim4 : renamed from netdevsim0 [ 314.609613][T15647] netdevsim netdevsim4 : left promiscuous mode [ 314.753146][T15657] ipvlan0: entered promiscuous mode [ 314.960180][T15672] pim6reg1: entered promiscuous mode [ 314.965686][T15672] pim6reg1: entered allmulticast mode [ 315.187162][T15681] netlink: 'syz.4.2818': attribute type 10 has an invalid length. [ 315.240637][T15681] `: (slave ): Enslaving as an active interface with an up link [ 315.442664][T15696] __nla_validate_parse: 19 callbacks suppressed [ 315.442685][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 315.463070][T15696] syzkaller1: entered promiscuous mode [ 315.468656][T15696] syzkaller1: entered allmulticast mode [ 315.480500][T15705] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2824'. [ 315.494053][T15705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2824'. [ 315.776974][T15733] dvmrp0: entered allmulticast mode [ 315.784092][T15733] dvmrp0: left allmulticast mode [ 315.965746][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 315.975225][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 316.027043][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 316.036634][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 316.192927][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 316.203505][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2835'. [ 316.222130][T15755] netlink: 'syz.3.2837': attribute type 26 has an invalid length. [ 316.234058][T15755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.653410][T15767] netlink: 'syz.2.2840': attribute type 5 has an invalid length. [ 316.732971][T15780] batadv0: entered allmulticast mode [ 316.785114][T15782] bridge0: failed insert local address into bridge forwarding table [ 316.794921][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 316.958827][T15795] netlink: 'syz.3.2848': attribute type 1 has an invalid length. [ 317.023095][T15795] bond7: (slave bridge2): making interface the new active one [ 317.032395][T15795] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 317.062624][T15802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.272362][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.281993][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.384662][T15829] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 317.417076][T15832] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 317.428493][T15833] veth0: entered promiscuous mode [ 317.434505][T15830] veth0: left promiscuous mode [ 317.886329][T15866] hsr_slave_0: left promiscuous mode [ 317.895431][T15866] hsr_slave_1: left promiscuous mode [ 318.046035][T15879] syzkaller1: entered promiscuous mode [ 318.053456][T15879] syzkaller1: entered allmulticast mode [ 318.369904][T15902] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.392480][T15902] vlan2: entered allmulticast mode [ 318.397895][T15902] bond7: entered allmulticast mode [ 318.464649][T15907] lo speed is unknown, defaulting to 1000 [ 318.482083][T15907] lo speed is unknown, defaulting to 1000 [ 318.496599][T15907] lo speed is unknown, defaulting to 1000 [ 318.544347][T15917] tipc: Enabling of bearer rejected, already enabled [ 318.607638][T15913] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 318.770439][T15907] infiniband syz0: set active [ 318.775340][T15907] infiniband syz0: added lo [ 318.818165][ T980] lo speed is unknown, defaulting to 1000 [ 318.826154][T15907] RDS/IB: syz0: added [ 318.830905][T15907] smc: adding ib device syz0 with port count 1 [ 318.838684][T15907] smc: ib device syz0 port 1 has pnetid [ 318.858334][ T46] lo speed is unknown, defaulting to 1000 [ 318.883880][T15907] lo speed is unknown, defaulting to 1000 [ 319.140692][T15907] lo speed is unknown, defaulting to 1000 [ 319.409429][T15943] gtp2: entered promiscuous mode [ 319.417274][T15943] gtp2: entered allmulticast mode [ 319.533616][T15962] pim6reg1: entered promiscuous mode [ 319.563292][T15962] pim6reg1: entered allmulticast mode [ 319.683570][T15972] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 319.713844][T15907] lo speed is unknown, defaulting to 1000 [ 319.776051][T15972] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.006689][T15974] bond9 (unregistering): Released all slaves [ 320.037138][T15907] lo speed is unknown, defaulting to 1000 [ 320.262044][T15993] tipc: Enabled bearer , priority 0 [ 320.285991][T15993] syzkaller0: entered promiscuous mode [ 320.300897][T15993] syzkaller0: entered allmulticast mode [ 320.339220][T15997] netlink: 'syz.2.2906': attribute type 9 has an invalid length. [ 320.362345][T15993] tipc: Resetting bearer [ 320.372996][T16001] netlink: 'syz.2.2906': attribute type 9 has an invalid length. [ 320.433303][T15991] tipc: Resetting bearer [ 320.471576][T15991] tipc: Disabling bearer [ 320.484110][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.510844][T16010] __nla_validate_parse: 19 callbacks suppressed [ 320.510865][T16010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 320.517646][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.568726][T15907] lo speed is unknown, defaulting to 1000 [ 320.683216][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.732898][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.001548][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 321.244541][T16050] netlink: 'syz.0.2920': attribute type 2 has an invalid length. [ 322.338305][T16091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 322.403437][T16091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 322.433339][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 322.515439][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.527043][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.536420][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.545161][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.553772][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.748733][T16111] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2938'. [ 322.780795][T13475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.803903][T13475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.952262][T13475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.973025][T13475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.081319][T13475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.105373][T13475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.120473][T16129] netlink: 'syz.3.2944': attribute type 1 has an invalid length. [ 323.125235][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 323.138593][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2945'. [ 323.147896][T16132] vxcan1: Master is either lo or non-ether device [ 323.220298][T13475] `: (slave ): Releasing backup interface [ 323.235829][T13475] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.247847][T13475] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.263414][T16099] lo speed is unknown, defaulting to 1000 [ 323.272856][T16099] lo speed is unknown, defaulting to 1000 [ 323.425046][T16136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2947'. [ 323.540465][T13475] tipc: Resetting bearer [ 323.714409][T16145] netlink: 'syz.2.2949': attribute type 178 has an invalid length. [ 323.900632][T13475] tipc: Disabling bearer [ 323.958058][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 323.997673][T13475] team0: Port device geneve0 removed [ 324.291771][T13475] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 324.303733][T13475] ` (unregistering): Released all slaves [ 324.323072][T13475] bond1 (unregistering): Released all slaves [ 324.428948][T13475] bond2 (unregistering): Released all slaves [ 324.522349][T13475] bond3 (unregistering): Released all slaves [ 324.539965][T13475] bond4 (unregistering): (slave bond5): Releasing backup interface [ 324.549181][T13475] bond4 (unregistering): (slave bond6): Releasing backup interface [ 324.559658][T13475] bond4 (unregistering): Released all slaves [ 324.630999][ T5877] Bluetooth: hci5: command tx timeout [ 324.662227][T13475] bond5 (unregistering): Released all slaves [ 324.751095][T13475] bond6 (unregistering): Released all slaves [ 324.766576][T13475] bond7 (unregistering): Released all slaves [ 324.786447][T13475] bond0 (unregistering): Released all slaves [ 324.804885][T13475] bond8 (unregistering): (slave veth9): Releasing backup interface [ 324.816863][T13475] bond8 (unregistering): Released all slaves [ 324.905592][T13475] team0: Port device bond9 removed [ 324.912004][T13475] bond9 (unregistering): Released all slaves [ 324.927608][T13475] bond10 (unregistering): Released all slaves [ 325.326326][T16099] chnl_net:caif_netlink_parms(): no params data found [ 325.337007][T16170] netlink: 'syz.0.2958': attribute type 1 has an invalid length. [ 325.574194][T16190] __nla_validate_parse: 4 callbacks suppressed [ 325.574213][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'. [ 325.699993][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.710375][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.718344][T16099] bridge_slave_0: entered allmulticast mode [ 325.726243][T16099] bridge_slave_0: entered promiscuous mode [ 325.736004][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.743792][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.751517][T16099] bridge_slave_1: entered allmulticast mode [ 325.762115][T16099] bridge_slave_1: entered promiscuous mode [ 325.874200][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.903417][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.914429][T16202] netlink: 'syz.1.2964': attribute type 39 has an invalid length. [ 326.026420][T16099] team0: Port device team_slave_0 added [ 326.036672][T16099] team0: Port device team_slave_1 added [ 326.084845][T16206] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.104989][T16206] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.322213][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.329834][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.356081][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.372620][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2968'. [ 326.424124][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.438851][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.490237][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.510570][T16229] pim6reg: entered allmulticast mode [ 326.520633][T16229] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2967'. [ 326.678027][T16099] hsr_slave_0: entered promiscuous mode [ 326.694302][T16099] hsr_slave_1: entered promiscuous mode [ 326.705437][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 326.711775][ T5877] Bluetooth: hci5: command tx timeout [ 326.727576][T16099] Cannot create hsr debugfs directory [ 326.800423][T13475] : left promiscuous mode [ 326.819654][T16249] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 326.867092][T16249] netlink: 'syz.2.2973': attribute type 21 has an invalid length. [ 326.891572][T16253] netlink: 'syz.3.2975': attribute type 33 has an invalid length. [ 326.901404][T16253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2975'. [ 326.940296][T16249] netlink: 'syz.2.2973': attribute type 21 has an invalid length. [ 326.948298][T16249] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2973'. [ 327.020239][T13475] tipc: Disabling bearer [ 327.035246][T13475] tipc: Left network mode [ 327.220345][T13475] batman_adv: batadv0: Removing interface: wlan1 [ 327.266345][T16272] netlink: 'syz.3.2977': attribute type 11 has an invalid length. [ 327.316987][T16269] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2978'. [ 327.329955][T16273] netlink: 'syz.1.2979': attribute type 3 has an invalid length. [ 327.348867][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 327.595053][T16290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2981'. [ 327.634453][T16285] netlink: 'syz.2.2981': attribute type 2 has an invalid length. [ 327.747966][T16297] Can't find ip_set type hasace [ 327.840545][T16308] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 327.882000][T16306] netlink: 'syz.2.2988': attribute type 4 has an invalid length. [ 328.088774][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2990'. [ 328.119121][T16312] netlink: 'syz.3.2989': attribute type 21 has an invalid length. [ 328.127306][T16315] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2990'. [ 328.263015][T16323] openvswitch: netlink: Key type 29 is not supported [ 328.610109][T13475] hsr_slave_0: left promiscuous mode [ 328.617394][T13475] hsr_slave_1: left promiscuous mode [ 328.655940][T13475] veth0_macvtap: left promiscuous mode [ 328.661950][T13475] veth1_vlan: left promiscuous mode [ 328.675137][T16337] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 328.684054][T16337] openvswitch: netlink: Message has 6332 unknown bytes. [ 328.787439][ T5877] Bluetooth: hci5: command tx timeout [ 328.891383][T16318] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 328.906218][T13475] pimreg3 (unregistering): left allmulticast mode [ 329.022843][T13475] pim6reg527 (unregistering): left allmulticast mode [ 329.412011][ T6339] smc: removing ib device syz! [ 329.695718][T16347] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 329.836542][T16099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.915198][T16099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.964770][T16099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.052810][T16099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.073907][ T55] block nbd0: Possible stuck request ffff888032745080: control (read@0,4096B). Runtime 60 seconds [ 330.235055][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 330.494239][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.653669][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.681508][T16393] __nla_validate_parse: 7 callbacks suppressed [ 330.681531][T16393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3013'. [ 330.796290][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.803535][T13474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.854983][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.862232][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.867673][ T5877] Bluetooth: hci5: command tx timeout [ 331.154493][T16406] : entered promiscuous mode [ 331.200460][T16099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.270949][T16413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3020'. [ 331.321010][T16413] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3020'. [ 331.352219][T16413] netlink: 'syz.3.3020': attribute type 6 has an invalid length. [ 331.385638][T16413] netlink: 'syz.3.3020': attribute type 5 has an invalid length. [ 331.424385][T16413] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3020'. [ 331.821501][T16445] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3027'. [ 331.942473][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.974414][T13475] IPVS: stop unused estimator thread 0... [ 332.306575][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 332.506719][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3038'. [ 332.611994][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 332.624163][T16099] veth0_vlan: entered promiscuous mode [ 332.673970][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 332.705289][T16099] veth1_vlan: entered promiscuous mode [ 332.776107][T16490] tipc: Enabled bearer , priority 0 [ 332.810012][T16490] syzkaller0: entered promiscuous mode [ 332.828153][T16490] syzkaller0: entered allmulticast mode [ 332.921126][T16099] veth0_macvtap: entered promiscuous mode [ 332.952316][T16099] veth1_macvtap: entered promiscuous mode [ 332.991727][T16494] tipc: Resetting bearer [ 333.039375][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'. [ 333.086523][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.124342][T16489] tipc: Resetting bearer [ 333.206681][T16489] tipc: Disabling bearer [ 333.336927][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.383183][T16510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.448069][T16511] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 333.520901][T16510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.652800][T16511] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.710969][T16517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.721270][T16517] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.736235][T16517] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 333.787370][ T6336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.814240][ T6336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.915504][ T6336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.959560][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.155189][T16540] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 334.236868][ T6353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.263891][ T6353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.350459][T13475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.362564][T13475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.476957][T16554] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 334.997651][T16575] team_slave_0: entered promiscuous mode [ 335.003747][T16575] team_slave_1: entered promiscuous mode [ 335.029121][T16575] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 335.039588][T16581] netlink: 'syz.1.3068': attribute type 83 has an invalid length. [ 335.054339][T16575] team0: Device macvtap1 is already an upper device of the team interface [ 335.090767][T16575] team_slave_0: left promiscuous mode [ 335.096334][T16575] team_slave_1: left promiscuous mode [ 335.476289][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.489932][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.498625][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.508178][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.516031][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.565498][T16601] lo speed is unknown, defaulting to 1000 [ 335.575071][T16601] lo speed is unknown, defaulting to 1000 [ 335.977169][T16631] __nla_validate_parse: 16 callbacks suppressed [ 335.984751][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 335.995187][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 336.021880][T16631] bridge0: port 3(vlan2) entered blocking state [ 336.037587][T16631] bridge0: port 3(vlan2) entered disabled state [ 336.044916][T16631] vlan2: entered allmulticast mode [ 336.058652][T16631] bridge0: entered allmulticast mode [ 336.096644][T16631] vlan2: left allmulticast mode [ 336.102633][T16631] bridge0: left allmulticast mode [ 336.250717][T16643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3085'. [ 336.260284][T16643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3085'. [ 336.272013][T16643] netlink: 'syz.3.3085': attribute type 5 has an invalid length. [ 336.280475][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.292297][T16643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3085'. [ 336.423620][T16633] veth1_to_bond: left allmulticast mode [ 336.510833][T16650] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 336.532738][T16650] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 336.554178][ T6339] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.581723][ T6339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.625720][ T6339] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 336.670580][T16648] netlink: 'syz.1.3088': attribute type 4 has an invalid length. [ 336.685333][ T6339] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.695423][ T6339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.706415][ T6339] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 336.716747][ T6339] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.726507][ T6339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.729379][T16651] netlink: 'syz.1.3088': attribute type 4 has an invalid length. [ 336.737680][ T6339] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 336.752443][T16663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3091'. [ 336.900802][ T6339] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.912228][ T6339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.921529][ T6339] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 336.931084][ T9] lo speed is unknown, defaulting to 1000 [ 336.951095][ T5989] lo speed is unknown, defaulting to 1000 [ 336.974170][ T9] lo speed is unknown, defaulting to 1000 [ 337.172116][T16680] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 337.201351][T16680] netlink: 'syz.1.3096': attribute type 10 has an invalid length. [ 337.206550][T16601] chnl_net:caif_netlink_parms(): no params data found [ 337.222945][T16681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3095'. [ 337.238550][T16680] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 337.301923][T16680] bond0: (slave dummy0): Releasing backup interface [ 337.343398][T16680] bond1: (slave veth0_to_bond): Releasing active interface [ 337.370767][T16680] bond0: (slave bond_slave_0): Releasing backup interface [ 337.400143][T16680] bond0: (slave bond_slave_1): Releasing backup interface [ 337.430216][T16680] team0: Port device team_slave_0 removed [ 337.462391][T16680] team0: Port device team_slave_1 removed [ 337.493546][T16680] bond0: (slave wlan1): Releasing backup interface [ 337.536093][T16680] bond1: (slave veth3): Releasing active interface [ 337.544845][T16680] bond1: (slave veth3): the permanent HWaddr of slave - 9a:cd:f9:e9:64:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 337.587693][ T5879] Bluetooth: hci4: command tx timeout [ 337.601482][T16680] bond1: (slave veth5): Releasing active interface [ 337.626983][T16700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3100'. [ 337.640066][T16680] bond2: (slave veth7): Releasing backup interface [ 337.653043][T16680] bond3: (slave veth9): Releasing backup interface [ 337.666050][T16680] bond5: (slave gretap1): Releasing active interface [ 337.714607][T16682] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 337.772238][T16697] IPv6: sit3: Disabled Multicast RS [ 337.783864][T16697] sit3: entered allmulticast mode [ 337.995953][T16601] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.011933][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.022371][T16601] bridge_slave_0: entered allmulticast mode [ 338.031050][T16601] bridge_slave_0: entered promiscuous mode [ 338.042927][T16601] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.057556][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.073701][T16601] bridge_slave_1: entered allmulticast mode [ 338.091084][T16601] bridge_slave_1: entered promiscuous mode [ 338.094475][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 338.198305][T16728] netlink: 'syz.0.3106': attribute type 23 has an invalid length. [ 338.218229][T16601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.263857][T16601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.442479][T16601] team0: Port device team_slave_0 added [ 338.458983][T16601] team0: Port device team_slave_1 added [ 338.645323][T16601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.653248][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.682679][T16601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.707789][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 338.734553][T16754] batadv0: entered allmulticast mode [ 338.779875][T16601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.799055][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.828302][T16601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.922961][T16765] sctp: [Deprecated]: syz.3.3116 (pid 16765) Use of int in maxseg socket option. [ 338.922961][T16765] Use struct sctp_assoc_value instead [ 338.954908][T16601] hsr_slave_0: entered promiscuous mode [ 338.957864][T16761] nbd2: detected capacity change from 0 to 127 [ 338.976309][T16601] hsr_slave_1: entered promiscuous mode [ 339.066955][ T5879] block nbd2: Receive control failed (result -104) [ 339.635462][T16601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.660159][T16601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.670802][ T5879] Bluetooth: hci4: command tx timeout [ 339.687310][T16601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.713119][T12830] udevd[12830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 339.891862][T16601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.923725][T16601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.947756][T16601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.129449][T16601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.149118][T16601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.159779][T16601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.386557][T16601] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.401994][T16601] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.415956][T16601] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.622218][T16848] IPv6: sit1: Disabled Multicast RS [ 340.665810][T16848] sit1: entered allmulticast mode [ 340.795317][T16855] tipc: Enabled bearer , priority 0 [ 340.838025][T16860] syzkaller0: entered promiscuous mode [ 340.844946][T16860] syzkaller0: entered allmulticast mode [ 340.856870][T16849] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 340.972842][T16849] tipc: Resetting bearer [ 340.985826][T16601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.004531][T16847] tipc: Resetting bearer [ 341.018876][T16867] __nla_validate_parse: 10 callbacks suppressed [ 341.018896][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 341.049135][T16847] tipc: Disabling bearer [ 341.065517][T16601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.094846][T16601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.118608][T16601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.120407][T16876] delete_channel: no stack [ 341.436740][T16601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.462354][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'. [ 341.590172][ T96] block nbd1: Possible stuck request ffff888024fe5080: control (read@0,4096B). Runtime 60 seconds [ 341.607955][T16601] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.682076][T16919] netlink: 'syz.0.3151': attribute type 10 has an invalid length. [ 341.701132][T16919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3151'. [ 341.729025][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.736223][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.749981][ T5877] Bluetooth: hci4: command tx timeout [ 341.757717][T16919] dummy0: entered promiscuous mode [ 341.780793][T16919] bridge0: port 3(dummy0) entered blocking state [ 341.789271][T16919] bridge0: port 3(dummy0) entered disabled state [ 341.791573][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 341.795902][T16919] dummy0: entered allmulticast mode [ 341.808122][T16918] netlink: 'syz.4.3154': attribute type 17 has an invalid length. [ 341.825340][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 341.841751][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 341.859052][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.866316][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.869013][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3154'. [ 341.976518][T16931] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3159'. [ 342.542656][T16601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.694914][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 342.704071][T16601] veth0_vlan: entered promiscuous mode [ 342.751660][T16601] veth1_vlan: entered promiscuous mode [ 342.824581][T16601] veth0_macvtap: entered promiscuous mode [ 342.866050][T16977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3171'. [ 342.882929][T16601] veth1_macvtap: entered promiscuous mode [ 342.897451][T16980] netlink: 'syz.0.3172': attribute type 24 has an invalid length. [ 342.922515][T16977] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 342.959969][T16601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.994584][T16601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.049938][T13475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.073899][T13475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.094298][T13475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.125040][T13475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.302668][T13475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.347037][T13475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.433277][T17000] dvmrp0: entered allmulticast mode [ 343.493036][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.525266][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.538676][T17010] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 343.786853][T17033] xt_time: unknown flags 0xf4 [ 343.827679][ T5877] Bluetooth: hci4: command tx timeout [ 343.945845][T17038] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 344.275304][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.285920][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.294268][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.306072][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.322190][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.370995][T17045] lo speed is unknown, defaulting to 1000 [ 344.379642][T17045] lo speed is unknown, defaulting to 1000 [ 345.141470][T17045] chnl_net:caif_netlink_parms(): no params data found [ 345.455516][T17045] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.466646][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.476483][T17045] bridge_slave_0: entered allmulticast mode [ 345.487077][T17045] bridge_slave_0: entered promiscuous mode [ 345.502359][T17045] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.511648][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.522833][T17045] bridge_slave_1: entered allmulticast mode [ 345.531072][T17045] bridge_slave_1: entered promiscuous mode [ 345.592738][T17045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.682972][T17045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.898765][T17045] team0: Port device team_slave_0 added [ 345.928386][T17045] team0: Port device team_slave_1 added [ 345.971024][T17116] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 346.058758][T17045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.065766][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.098091][T17045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.184007][T17045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.191834][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.224384][T17045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.388320][ T5879] Bluetooth: hci2: command tx timeout [ 346.439341][T17045] hsr_slave_0: entered promiscuous mode [ 346.446283][T17045] hsr_slave_1: entered promiscuous mode [ 346.459650][T17045] debugfs: 'hsr0' already exists in 'hsr' [ 346.486331][T17045] Cannot create hsr debugfs directory [ 346.646531][T17153] __nla_validate_parse: 5 callbacks suppressed [ 346.646550][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'. [ 346.825048][T17159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.903344][T17045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.988966][T17045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.006308][T17166] bond0: entered allmulticast mode [ 347.011672][T17166] veth5: entered allmulticast mode [ 347.092821][T17045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.172812][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'. [ 347.205093][T17045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.402066][T17045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.432856][T17045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.452629][T17045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.484490][T17045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.650363][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 347.745100][T17196] only policy match revision 0 supported [ 347.745121][T17196] unable to load match [ 347.873655][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.964059][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.023143][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 348.037123][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 348.050943][T17200] lo speed is unknown, defaulting to 1000 [ 348.051941][T17213] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3239'. [ 348.074310][T17210] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 348.080778][T17215] netlink: set zone limit has 8 unknown bytes [ 348.093239][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.100472][T13475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.110925][T17215] netlink: set zone limit has 8 unknown bytes [ 348.118002][T17215] netlink: set zone limit has 8 unknown bytes [ 348.126583][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.133826][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.142437][T17215] netlink: set zone limit has 8 unknown bytes [ 348.149508][T17215] netlink: set zone limit has 8 unknown bytes [ 348.160514][T17200] lo speed is unknown, defaulting to 1000 [ 348.190125][T17215] netlink: set zone limit has 8 unknown bytes [ 348.196656][T17215] netlink: set zone limit has 8 unknown bytes [ 348.227987][T17215] netlink: set zone limit has 8 unknown bytes [ 348.415229][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'. [ 348.472358][ T5879] Bluetooth: hci2: command tx timeout [ 348.681893][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.091776][T17045] veth0_vlan: entered promiscuous mode [ 349.117151][T17045] veth1_vlan: entered promiscuous mode [ 349.187604][T17045] veth0_macvtap: entered promiscuous mode [ 349.201432][T17243] tipc: Started in network mode [ 349.206645][T17243] tipc: Node identity 5a01a3012e6e, cluster identity 4711 [ 349.225601][T17243] tipc: Enabled bearer , priority 0 [ 349.234741][T17045] veth1_macvtap: entered promiscuous mode [ 349.267014][T17243] syzkaller0: entered promiscuous mode [ 349.285594][T17243] syzkaller0: entered allmulticast mode [ 349.336712][T17210] infiniband syz!: set down [ 349.362067][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.369943][T17210] infiniband syz!: added team_slave_0 [ 349.376029][T17210] syz!: rxe_create_cq: returned err = -12 [ 349.389941][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.397923][T17210] infiniband syz!: Couldn't create ib_mad CQ [ 349.404138][T17210] infiniband syz!: Couldn't open port 1 [ 349.417107][T13473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.474408][T17210] RDS/IB: syz!: added [ 349.474683][T17246] tipc: Resetting bearer [ 349.480082][T17210] smc: adding ib device syz! with port count 1 [ 349.493076][T17210] smc: ib device syz! port 1 has pnetid [ 349.512088][T13473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.525586][T13473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.539336][T13473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.558068][T17242] tipc: Resetting bearer [ 349.590020][T17242] tipc: Disabling bearer [ 349.751720][T13473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.783461][T13473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.830631][T17258] veth0: entered promiscuous mode [ 349.830694][T13475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.836168][T17258] veth0: entered allmulticast mode [ 349.866608][T17257] tipc: Enabled bearer , priority 12 [ 349.876525][T17259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3252'. [ 349.888639][T13475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.940441][T17261] tipc: Enabled bearer , priority 0 [ 349.949501][T17261] syzkaller0: entered promiscuous mode [ 349.955097][T17261] syzkaller0: entered allmulticast mode [ 349.961786][T17258] netlink: 'syz.4.3251': attribute type 2 has an invalid length. [ 349.976396][T17261] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 350.041421][T17261] tipc: Resetting bearer [ 350.069285][T17260] tipc: Resetting bearer [ 350.126760][T17260] tipc: Disabling bearer [ 350.218838][T17272] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3254'. [ 350.408530][ T30] audit: type=1800 audit(1755660520.312:8): pid=17277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3258" name="memory.events" dev="tmpfs" ino=251 res=0 errno=0 [ 350.548740][ T5879] Bluetooth: hci2: command tx timeout [ 350.867726][ T5950] tipc: Node number set to 1953473281 [ 351.049351][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.064245][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.074295][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.086343][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.111301][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.152662][T17299] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 351.175642][T17292] lo speed is unknown, defaulting to 1000 [ 351.213464][T17292] lo speed is unknown, defaulting to 1000 [ 351.924132][T17327] netlink: 'syz.2.3274': attribute type 11 has an invalid length. [ 351.990587][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 352.027383][T17327] net_ratelimit: 57 callbacks suppressed [ 352.027413][T17327] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 352.141204][T17327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.596395][T17342] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.627689][ T5877] Bluetooth: hci2: command tx timeout [ 352.658653][T17342] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.710847][T17342] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.799941][T17342] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.867020][T17342] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.938208][T17342] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 352.994841][T17342] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 353.128637][T17342] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 353.145461][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 353.196236][ T5877] Bluetooth: hci1: command tx timeout [ 353.226880][T17342] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 353.260630][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.288599][T17351] bridge_slave_1 (unregistering): left allmulticast mode [ 353.295944][T17351] bridge_slave_1 (unregistering): left promiscuous mode [ 353.313777][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.380191][T17342] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 353.624833][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 353.664568][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'. [ 353.845430][T17292] chnl_net:caif_netlink_parms(): no params data found [ 354.100811][T17292] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.108843][T17292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.116211][T17292] bridge_slave_0: entered allmulticast mode [ 354.131386][T17292] bridge_slave_0: entered promiscuous mode [ 354.175572][T17292] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.186317][T17292] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.195413][T17292] bridge_slave_1: entered allmulticast mode [ 354.212222][T17292] bridge_slave_1: entered promiscuous mode [ 354.411319][T17292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.429844][T17292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.455679][T17392] netlink: 'syz.4.3291': attribute type 64 has an invalid length. [ 354.466662][T17392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3291'. [ 354.517711][T17395] tipc: Started in network mode [ 354.523021][T17395] tipc: Node identity e0000002, cluster identity 4711 [ 354.537370][T17395] tipc: Enabling of bearer rejected, failed to enable media [ 354.591171][T17292] team0: Port device team_slave_0 added [ 354.603561][T17394] netlink: 'syz.1.3290': attribute type 2 has an invalid length. [ 354.615746][T17292] team0: Port device team_slave_1 added [ 354.744641][T17292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.765857][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.830344][T17292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.850367][T17417] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3298'. [ 354.863001][T17292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.871240][T17417] netlink: zone id is out of range [ 354.876417][T17417] netlink: zone id is out of range [ 354.881715][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.908035][T17417] netlink: zone id is out of range [ 354.913289][T17417] netlink: get zone limit has 8 unknown bytes [ 354.921483][T17292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.992427][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 355.057796][T17422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.075530][T17423] tipc: Enabling of bearer rejected, failed to enable media [ 355.257435][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 355.267486][ T5877] Bluetooth: hci1: command tx timeout [ 355.285529][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'. [ 355.651983][T17436] pim6reg1: entered promiscuous mode [ 355.657641][T17436] pim6reg1: entered allmulticast mode [ 355.729978][T17442] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 355.761395][T17292] hsr_slave_0: entered promiscuous mode [ 355.770055][T17292] hsr_slave_1: entered promiscuous mode [ 355.782404][T17292] debugfs: 'hsr0' already exists in 'hsr' [ 355.788564][T17292] Cannot create hsr debugfs directory [ 356.078061][T17459] netlink: 'syz.2.3308': attribute type 10 has an invalid length. [ 356.086218][T17459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3308'. [ 356.091219][T17460] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 356.105851][T17457] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 356.126701][T17459] batadv0: entered promiscuous mode [ 356.132598][T17459] batadv0: entered allmulticast mode [ 356.145029][T17459] bridge0: port 3(batadv0) entered blocking state [ 356.152660][T17459] bridge0: port 3(batadv0) entered disabled state [ 356.181281][T17459] bridge0: port 3(batadv0) entered blocking state [ 356.188026][T17459] bridge0: port 3(batadv0) entered forwarding state [ 356.221091][T17456] tipc: Enabled bearer , priority 0 [ 356.229142][T17456] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 356.236580][T17456] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 356.253888][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 356.263574][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 356.275982][T17456] tipc: Resetting bearer [ 356.598445][T17485] netlink: 'syz.2.3318': attribute type 14 has an invalid length. [ 356.625661][T17485] netlink: 'syz.2.3318': attribute type 13 has an invalid length. [ 356.644204][T17292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.656405][T17292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.823559][T17292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.844318][T17292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 357.046895][T17292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.071098][T17292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 357.118188][T17506] __nla_validate_parse: 6 callbacks suppressed [ 357.118209][T17506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3324'. [ 357.180973][T17292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.192671][T17292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 357.222881][T17512] netlink: 'syz.0.3324': attribute type 26 has an invalid length. [ 357.288879][ T5232] udevd[5232]: worker [13081] /devices/virtual/block/nbd0 is taking a long time [ 357.324600][ T5232] udevd[5232]: worker [13368] /devices/virtual/block/nbd1 is taking a long time [ 357.348840][ T5877] Bluetooth: hci1: command tx timeout [ 357.440291][T17518] pim6reg1: entered promiscuous mode [ 357.445640][T17518] pim6reg1: entered allmulticast mode [ 357.489276][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 357.510672][T17292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.516493][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3328'. [ 357.532413][T17520] netlink: 'syz.1.3329': attribute type 10 has an invalid length. [ 357.553653][T17292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.568237][T17520] veth0_vlan: entered allmulticast mode [ 357.608340][T17520] veth0_vlan: left promiscuous mode [ 357.616310][T17520] veth0_vlan: entered promiscuous mode [ 357.700677][T17520] team0: Device veth0_vlan failed to register rx_handler [ 357.732178][T17292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.782893][T17292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.834118][T17541] netlink: 'syz.1.3332': attribute type 21 has an invalid length. [ 357.842555][T17541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3332'. [ 357.853423][T17541] netlink: 'syz.1.3332': attribute type 5 has an invalid length. [ 357.862549][T17541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3332'. [ 357.996680][T17549] netlink: 'syz.1.3333': attribute type 30 has an invalid length. [ 358.003331][T17292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.064163][T17292] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.096553][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.103820][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.212915][T13477] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.220170][T13477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.378204][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 358.406885][T17556] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3336'. [ 358.666356][T17582] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 358.762444][T17587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3342'. [ 358.783678][T17587] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 358.881527][T17292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.957963][T17292] veth0_vlan: entered promiscuous mode [ 358.974624][T17292] veth1_vlan: entered promiscuous mode [ 359.035644][T17292] veth0_macvtap: entered promiscuous mode [ 359.072911][T17292] veth1_macvtap: entered promiscuous mode [ 359.106461][T17594] netlink: 8632 bytes leftover after parsing attributes in process `syz.4.3344'. [ 359.141182][T17292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.214248][T17292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.255442][ T6353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.265183][ T6353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.275850][ T6336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.295991][ T6336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.315811][T17604] veth0_macvtap: left promiscuous mode [ 359.427770][ T5877] Bluetooth: hci1: command tx timeout [ 359.596628][T13475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.652654][T13475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.763076][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.781840][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.148615][ T55] block nbd0: Possible stuck request ffff888032745080: control (read@0,4096B). Runtime 90 seconds [ 360.202939][T17642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3357'. [ 360.388859][T17655] xfrm1: entered allmulticast mode [ 360.889966][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.900672][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.913179][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.923019][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.939252][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.135246][T17672] lo speed is unknown, defaulting to 1000 [ 361.147109][T17672] lo speed is unknown, defaulting to 1000 [ 361.254992][T17689] openvswitch: netlink: IPv4 tunnel dst address is zero [ 361.313349][ T30] audit: type=1800 audit(1755660531.202:9): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3371" name=B9FF030F6044238CB89E14F088A81BFF886411 dev="tmpfs" ino=240 res=0 errno=0 [ 362.091632][T17728] syzkaller0: entered promiscuous mode [ 362.128175][T17728] syzkaller0: entered allmulticast mode [ 362.452822][T17748] validate_nla: 1 callbacks suppressed [ 362.452843][T17748] netlink: 'syz.3.3386': attribute type 6 has an invalid length. [ 362.474974][T17741] netlink: 'syz.1.3383': attribute type 11 has an invalid length. [ 362.618788][T17756] __nla_validate_parse: 50 callbacks suppressed [ 362.618810][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3387'. [ 362.654654][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 362.680878][T17760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3387'. [ 362.749614][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 362.768080][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 362.801561][T17761] netlink: 'syz.3.3387': attribute type 1 has an invalid length. [ 363.001612][T17672] chnl_net:caif_netlink_parms(): no params data found [ 363.035628][ T5877] Bluetooth: hci0: command tx timeout [ 363.118268][T17773] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3391'. [ 363.322875][T17785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.479210][T17672] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.502380][T17672] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.507358][T17793] IPv6: addrconf: prefix option has invalid lifetime [ 363.523490][T17672] bridge_slave_0: entered allmulticast mode [ 363.542283][T17672] bridge_slave_0: entered promiscuous mode [ 363.584045][T17672] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.611712][T17672] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.632086][T17672] bridge_slave_1: entered allmulticast mode [ 363.657492][T17672] bridge_slave_1: entered promiscuous mode [ 363.850218][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.910538][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.016311][T17789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3396'. [ 364.074282][T17811] netlink: 'syz.1.3396': attribute type 13 has an invalid length. [ 364.084235][T17672] team0: Port device team_slave_0 added [ 364.097796][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 364.106474][T17811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3396'. [ 364.133565][T17672] team0: Port device team_slave_1 added [ 364.284340][T17672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.304369][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.374194][T17672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.487978][T17672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.495020][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.533703][T17672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.698237][T17847] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 364.747399][T17672] hsr_slave_0: entered promiscuous mode [ 364.771081][T17672] hsr_slave_1: entered promiscuous mode [ 364.796823][T17672] debugfs: 'hsr0' already exists in 'hsr' [ 364.823629][T17672] Cannot create hsr debugfs directory [ 364.831570][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3414'. [ 364.883317][T17853] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.199858][T17672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 365.386636][T17672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 365.465772][T17672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 365.557103][T17849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 365.623874][T17672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.085989][T17672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.121195][T17672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.127547][T17908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.135173][T17908] IPv6: NLM_F_CREATE should be set when creating new route [ 366.175564][T17672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.226218][T17672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.667063][T17934] tipc: Enabled bearer , priority 0 [ 366.701211][T17934] syzkaller0: entered promiscuous mode [ 366.711364][T17934] syzkaller0: entered allmulticast mode [ 366.765225][T17934] tipc: Resetting bearer [ 366.813623][T17931] tipc: Resetting bearer [ 366.848466][T17931] tipc: Disabling bearer [ 366.886035][T17946] veth3: entered allmulticast mode [ 367.145204][T17672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.195192][T17966] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 367.211121][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.242150][T17672] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.264329][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.271584][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.345170][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.352428][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.713247][T17983] __nla_validate_parse: 12 callbacks suppressed [ 367.713304][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 367.758369][T17983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3456'. [ 367.824010][T17995] netlink: 'syz.3.3459': attribute type 7 has an invalid length. [ 367.929355][T17995] : entered promiscuous mode [ 368.163657][T17672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.366285][T18022] veth1_macvtap: left promiscuous mode [ 368.372159][T18022] macsec0: entered promiscuous mode [ 368.385916][T18022] macsec0: entered allmulticast mode [ 368.428702][T17672] veth0_vlan: entered promiscuous mode [ 368.436592][T18028] veth1_macvtap: entered promiscuous mode [ 368.442614][T18028] veth1_macvtap: entered allmulticast mode [ 368.449027][T18028] macsec0: left promiscuous mode [ 368.454314][T18028] macsec0: left allmulticast mode [ 368.459617][T18028] veth1_macvtap: left allmulticast mode [ 368.515398][T17672] veth1_vlan: entered promiscuous mode [ 368.582285][T17672] veth0_macvtap: entered promiscuous mode [ 368.606444][T17672] veth1_macvtap: entered promiscuous mode [ 368.649579][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 368.705397][T17672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.732272][T17672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.779672][T13475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.808664][T13475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.852575][T13475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.882365][T13475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.132899][ T96] block nbd2: Possible stuck request ffff88802500e000: control (read@0,1024B). Runtime 30 seconds [ 369.144657][ T96] block nbd2: Possible stuck request ffff88802500e1c0: control (read@1024,1024B). Runtime 30 seconds [ 369.156213][ T96] block nbd2: Possible stuck request ffff88802500e380: control (read@2048,1024B). Runtime 30 seconds [ 369.167533][ T96] block nbd2: Possible stuck request ffff88802500e540: control (read@3072,1024B). Runtime 30 seconds [ 369.210657][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.244240][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.367561][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.375527][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.468440][T18082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3482'. [ 369.560463][T18084] netlink: 'syz.2.3484': attribute type 33 has an invalid length. [ 369.576695][T18084] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 369.598091][T18087] netlink: 'syz.3.3485': attribute type 11 has an invalid length. [ 369.634819][T18089] tipc: Enabled bearer , priority 10 [ 369.655346][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3486'. [ 369.693381][T18087] [ 369.695781][T18087] ====================================================== [ 369.702812][T18087] WARNING: possible circular locking dependency detected [ 369.709877][T18087] syzkaller #0 Not tainted [ 369.714319][T18087] ------------------------------------------------------ [ 369.721356][T18087] syz.3.3485/18087 is trying to acquire lock: [ 369.727443][T18087] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 369.736841][T18087] [ 369.736841][T18087] but task is already holding lock: [ 369.744227][T18087] ffff88804529b170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 369.753602][T18087] [ 369.753602][T18087] which lock already depends on the new lock. [ 369.753602][T18087] [ 369.764031][T18087] [ 369.764031][T18087] the existing dependency chain (in reverse order) is: [ 369.773075][T18087] [ 369.773075][T18087] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 369.781128][T18087] lock_acquire+0x120/0x360 [ 369.786193][T18087] _raw_spin_lock_bh+0x36/0x50 [ 369.791505][T18087] nr_rt_device_down+0x12a/0x720 [ 369.796977][T18087] nr_device_event+0x137/0x150 [ 369.802271][T18087] notifier_call_chain+0x1b3/0x3e0 [ 369.807912][T18087] netif_close_many+0x29c/0x410 [ 369.813298][T18087] netif_close+0x158/0x210 [ 369.818246][T18087] dev_close+0x10a/0x220 [ 369.823036][T18087] bpq_device_event+0x377/0x6a0 [ 369.828440][T18087] notifier_call_chain+0x1b3/0x3e0 [ 369.834118][T18087] netif_close_many+0x29c/0x410 [ 369.839519][T18087] netif_close+0x158/0x210 [ 369.844473][T18087] dev_close+0x10a/0x220 [ 369.849253][T18087] bond_setup_by_slave+0x5f/0x3f0 [ 369.854808][T18087] bond_enslave+0x7a0/0x3a20 [ 369.859922][T18087] bond_do_ioctl+0x635/0x9b0 [ 369.865061][T18087] bond_siocdevprivate+0x17e/0x350 [ 369.870703][T18087] dev_ifsioc+0xb57/0xf00 [ 369.875559][T18087] dev_ioctl+0x84c/0x1150 [ 369.880417][T18087] sock_ioctl+0x719/0x790 [ 369.885274][T18087] __se_sys_ioctl+0xfc/0x170 [ 369.890394][T18087] do_syscall_64+0xfa/0x3b0 [ 369.895444][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.901858][T18087] [ 369.901858][T18087] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 369.909687][T18087] lock_acquire+0x120/0x360 [ 369.914732][T18087] _raw_spin_lock_bh+0x36/0x50 [ 369.920025][T18087] nr_rt_device_down+0xa9/0x720 [ 369.925406][T18087] nr_device_event+0x137/0x150 [ 369.930692][T18087] notifier_call_chain+0x1b3/0x3e0 [ 369.936341][T18087] netif_close_many+0x29c/0x410 [ 369.941718][T18087] netif_close+0x158/0x210 [ 369.946657][T18087] dev_close+0x10a/0x220 [ 369.951433][T18087] bpq_device_event+0x377/0x6a0 [ 369.956808][T18087] notifier_call_chain+0x1b3/0x3e0 [ 369.962442][T18087] netif_close_many+0x29c/0x410 [ 369.967914][T18087] netif_close+0x158/0x210 [ 369.972871][T18087] dev_close+0x10a/0x220 [ 369.977658][T18087] bond_setup_by_slave+0x5f/0x3f0 [ 369.983212][T18087] bond_enslave+0x7a0/0x3a20 [ 369.988327][T18087] bond_do_ioctl+0x635/0x9b0 [ 369.993457][T18087] bond_siocdevprivate+0x17e/0x350 [ 369.999106][T18087] dev_ifsioc+0xb57/0xf00 [ 370.003978][T18087] dev_ioctl+0x84c/0x1150 [ 370.008835][T18087] sock_ioctl+0x719/0x790 [ 370.013694][T18087] __se_sys_ioctl+0xfc/0x170 [ 370.018830][T18087] do_syscall_64+0xfa/0x3b0 [ 370.023864][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.030280][T18087] [ 370.030280][T18087] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 370.038193][T18087] validate_chain+0xb9b/0x2140 [ 370.043483][T18087] __lock_acquire+0xab9/0xd20 [ 370.048689][T18087] lock_acquire+0x120/0x360 [ 370.053722][T18087] _raw_spin_lock_bh+0x36/0x50 [ 370.059011][T18087] nr_remove_neigh+0x25/0xe0 [ 370.064132][T18087] nr_add_node+0x1d9f/0x2570 [ 370.069256][T18087] nr_rt_ioctl+0xc12/0xd50 [ 370.074201][T18087] sock_do_ioctl+0xd9/0x300 [ 370.079228][T18087] sock_ioctl+0x576/0x790 [ 370.084085][T18087] __se_sys_ioctl+0xfc/0x170 [ 370.089202][T18087] do_syscall_64+0xfa/0x3b0 [ 370.094239][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.100651][T18087] [ 370.100651][T18087] other info that might help us debug this: [ 370.100651][T18087] [ 370.110873][T18087] Chain exists of: [ 370.110873][T18087] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 370.110873][T18087] [ 370.124692][T18087] Possible unsafe locking scenario: [ 370.124692][T18087] [ 370.132137][T18087] CPU0 CPU1 [ 370.137507][T18087] ---- ---- [ 370.142871][T18087] lock(&nr_node->node_lock); [ 370.147653][T18087] lock(nr_node_list_lock); [ 370.154767][T18087] lock(&nr_node->node_lock); [ 370.162059][T18087] lock(nr_neigh_list_lock); [ 370.166755][T18087] [ 370.166755][T18087] *** DEADLOCK *** [ 370.166755][T18087] [ 370.174890][T18087] 1 lock held by syz.3.3485/18087: [ 370.179997][T18087] #0: ffff88804529b170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 370.189763][T18087] [ 370.189763][T18087] stack backtrace: [ 370.195670][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.3.3485 Not tainted syzkaller #0 PREEMPT(full) [ 370.195692][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.195710][T18087] Call Trace: [ 370.195718][T18087] [ 370.195728][T18087] dump_stack_lvl+0x189/0x250 [ 370.195754][T18087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.195785][T18087] ? __pfx__printk+0x10/0x10 [ 370.195807][T18087] ? stack_trace_save+0x9c/0xe0 [ 370.195833][T18087] print_circular_bug+0x2ee/0x310 [ 370.195853][T18087] check_noncircular+0x134/0x160 [ 370.195873][T18087] validate_chain+0xb9b/0x2140 [ 370.195890][T18087] ? do_syscall_64+0xfa/0x3b0 [ 370.195924][T18087] __lock_acquire+0xab9/0xd20 [ 370.195952][T18087] ? nr_remove_neigh+0x25/0xe0 [ 370.195972][T18087] lock_acquire+0x120/0x360 [ 370.195995][T18087] ? nr_remove_neigh+0x25/0xe0 [ 370.196019][T18087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.196039][T18087] ? nr_remove_neigh+0x25/0xe0 [ 370.196059][T18087] _raw_spin_lock_bh+0x36/0x50 [ 370.196078][T18087] ? nr_remove_neigh+0x25/0xe0 [ 370.196098][T18087] nr_remove_neigh+0x25/0xe0 [ 370.196120][T18087] nr_add_node+0x1d9f/0x2570 [ 370.196148][T18087] ? dev_get_by_name+0x21/0x200 [ 370.196168][T18087] ? dev_get_by_name+0x21/0x200 [ 370.196185][T18087] ? dev_get_by_name+0x21/0x200 [ 370.196202][T18087] ? nr_call_to_digi+0x136/0x1b0 [ 370.196222][T18087] nr_rt_ioctl+0xc12/0xd50 [ 370.196246][T18087] ? kasan_quarantine_put+0xdd/0x220 [ 370.196266][T18087] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 370.196290][T18087] ? apparmor_capable+0x137/0x1b0 [ 370.196314][T18087] ? capable+0x89/0xe0 [ 370.196329][T18087] ? nr_ioctl+0x1b1/0x3b0 [ 370.196345][T18087] sock_do_ioctl+0xd9/0x300 [ 370.196366][T18087] ? __pfx_sock_do_ioctl+0x10/0x10 [ 370.196384][T18087] ? __lock_acquire+0xab9/0xd20 [ 370.196417][T18087] sock_ioctl+0x576/0x790 [ 370.196436][T18087] ? __pfx_sock_ioctl+0x10/0x10 [ 370.196455][T18087] ? __fget_files+0x2a/0x420 [ 370.196479][T18087] ? __fget_files+0x3a0/0x420 [ 370.196503][T18087] ? __fget_files+0x2a/0x420 [ 370.196528][T18087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.196567][T18087] ? __pfx_sock_ioctl+0x10/0x10 [ 370.196586][T18087] __se_sys_ioctl+0xfc/0x170 [ 370.196609][T18087] do_syscall_64+0xfa/0x3b0 [ 370.196633][T18087] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.196656][T18087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.196673][T18087] ? clear_bhb_loop+0x60/0xb0 [ 370.196693][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.196715][T18087] RIP: 0033:0x7f1b6058ebe9 [ 370.196730][T18087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.196746][T18087] RSP: 002b:00007f1b6149b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.196764][T18087] RAX: ffffffffffffffda RBX: 00007f1b607b5fa0 RCX: 00007f1b6058ebe9 [ 370.196777][T18087] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 370.196788][T18087] RBP: 00007f1b60611e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.196799][T18087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.196810][T18087] R13: 00007f1b607b6038 R14: 00007f1b607b5fa0 R15: 00007ffe11363758 [ 370.196831][T18087] [ 370.748008][ T5937] tipc: Node number set to 3758096386 [ 371.687614][ T96] block nbd1: Possible stuck request ffff888024fe5080: control (read@0,4096B). Runtime 90 seconds [ 378.710562][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len