last executing test programs: 7.167861324s ago: executing program 4 (id=6572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001600)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000000000bf0000000000000095000000000000001280b0daf71d3e2b120d83c0a7f3920177ae84f1b416041359a694c1d0c25c2ffcbb7fe4ce33e79b2c79d1a573be9c1fcdfb5610f36cdd121e0cf9cbf51d0c3d1e6d6601240f120d107ddabcd1e950954db9df4c1f57976871a5564da6562e8830a3ffdedb179ebcf82b94fb65d58e7f5aa5dff21036e255b1c9b9b01a0c50f57b7e8476"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="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"], 0x1518}}, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x1fe) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001", @ANYRESHEX=r1, @ANYRES64=r6, @ANYRES64=r6, @ANYRESHEX=r6], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="27e8e37bc506d205c20d3e308e10524bd1690e45e5268358b334899acdbf7ca191891eae06d9120f4f376ec64c4fd4cc97cbf82fbed2f20c24d639515e2cf1800c60f0ed00a0a4084dd14ba3029eadd72f677fd951945866908c55bb95e6c19d83678fb83c9728e9a5120f6f8f4fef11992da673a4b8e88ff66967abe5fdf79825"}, {&(0x7f0000000380)="625bafb77a2f8ac34120761045b7ae5962a7d44a681a7e49b60b2b0dc8e767e4f55875804cb009273db552e4fed1cb739b947b4920b2a3cad04d4a704bcf4c6240bad65ecbc9646f17e972e4f229474e75a4ff89789759fab8b1f7a6008648597bf81f093d5a23de585e792e2874e8629e8c0512f6ce279af056c979b142a96c72f9a0ce8f77a01715acacd56f3d6ebc02f47b783f1770be9a82a4b5e49da49b87b863b656a62fd20f2e1ece4b976aa7de488d10d71f7542ac55101570"}], 0x1000011e) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00']) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000001380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r2], &(0x7f0000000980)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x7}, 0x10, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r8, 0x0, 0x7e, 0x22, &(0x7f00000013c0)="62c9c45bcd27b7af822bff2fc86c0e4ab26bb2f80bfaae254a8e4032614e703446d06e6881c4619d0b86d057379f6bd3dc314cadff7a047849fc550a792dfea549428348adad72e1f105bd909d8603fc9da77fc324a81a66904ce08ddee1d2c42f0aa1acf55cff0ee06d097d3cc2bd78486625a4a292c8afb9743fb69ae2", &(0x7f0000001000)=""/34, 0x40, 0x0, 0x29, 0xb8, &(0x7f0000001440)="309fc7a1effa4248bf74631f4c01d122d8cc1d3f74dfb8fd2cffbca6823c2d797a7059d6187e710c5d", &(0x7f0000001480)="92d0cd00c1c57765a88748fb0fd926d5bcc7546f8d9bc04a1f417fa949b15c66765d05dd2df7eaa9d18e3b2ccc2c6840f521073d6eff08ba55ce1a7bc324daed6bd44b11ffd7c8580b89d3edf3ef19050ec5967618dc887a7712bcb1dc584b6a13749472c48dc76439fa00d4979d293235893efde1717a32ee534a18be68cc810cb6390b9e08acb92954864c90b6e6d925a72d25eadfa43a2d6cbaee967b7599ee7d6a118872f18dd6c6d94b4b5ef3003c9d7cb5e548972f", 0x1, 0x0, 0x3a6f}, 0x50) (async) r9 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="0adf5b2b7dd68a056bf53e751889ab611400000003000000008c9051b52068c61b2b1175a6167c6749bfdeb05bfdcffe55a840c7dab13b0fd33783ed71cff5038e53d893da885b2136fbdd1ef791a45d8b45465f4aee9e6f913925d3125671d663197e40dd16000464f0ef3f9acaef7291f3f8fbb34f88255a01643346c83e6390a42ffcdf17f0711cd26c71459bff1e3088ca028b928851fe66b5483ae4088f020000006e88043aee6b613ff578e21428de43134fd0795283af853e29b56150dd889c861d322aee348b2487e02112b49b2c3801ca115c4c437808987695fc77f28c60732b88"], 0x14}}, 0x0) (async) getsockopt$bt_hci(r9, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 32) 7.03995757s ago: executing program 4 (id=6574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000340)='FREEZING\x00', 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.914770377s ago: executing program 4 (id=6578): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 5.184756589s ago: executing program 3 (id=6601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @private0, 0x7}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x200204) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.91921961s ago: executing program 3 (id=6606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}}, 0x20000800) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000140)=0x220041, 0x4) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 4.523361654s ago: executing program 3 (id=6612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000) 4.214238124s ago: executing program 3 (id=6618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x200, 0x5, 0x9, 0x5}, {0x1, 0xc6, 0x4, 0xf}, {0xd6a, 0xe, 0x5, 0xb91}]}, 0x10) 4.103814338s ago: executing program 3 (id=6620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r2, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) 3.743684881s ago: executing program 0 (id=6625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES8=r1], 0x34}}, 0x0) 3.539197344s ago: executing program 4 (id=6626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4080000) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.112065967s ago: executing program 3 (id=6627): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x20, 0x10, 0x437, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x44030}}, 0x20}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37f10c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x31, 0x0, &(0x7f00000000c0)) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) accept4(r5, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80800) 1.083918858s ago: executing program 4 (id=6629): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={0x0, 0xc, 0x1}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000200)={{r0}, {@val={r2}, @actul_num={@val=0x2d, 0x0, 0x74}}}) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='\xdb{\x00', 0x8000, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x5]}, {0x100, 0x8, 0x3}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xfff}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000003800)=0x33, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r6, r7, 0x4, 0xbe, &(0x7f0000000340)="5b5be4fe8e96452192cd8d25cc8c0eb182e49df151aa18eaed17eb6ccbbec6c5272c8a5cbaa46c9ea1ceb1ce366089b7db3f50245b3eb4aaeb5a4053ee55a255acb927344e61fdfbcd6acfe484d11c7f217b7e35467a42e8a37ba774fcb108f27e2bef971cc6b146298da3c0d1e6e490de3f4b5b79d8e5f4e305d6ddbd879d9ea1bb0b9d5028845ea97317faaaa2b661e46918ee1c85826883b344e25448ccaa89bd5b156db00666c6b02576069e36ff11aa221e614697c9f2e2cb1b1415", 0x2, 0x81, 0x8, 0x7, 0x1, 0x2, 0x8, 'syz0\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 1.082035795s ago: executing program 0 (id=6631): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MARK={0x8, 0x10, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x48880}, 0x8010) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lc\x00', 0x21, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'lblc\x00', 0x21, 0xc, 0x6c}, {@remote, 0x4e23, 0x0, 0x400cd, 0x81}}, 0x44) sendmsg$NFT_BATCH(r4, 0x0, 0x20000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 899.368358ms ago: executing program 1 (id=6632): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x360, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x97, 0x45, "5e19b580d5d390009c9df1e36000811d7cdb491709a7c08cf5dc574718a0e2d9c96b27dafa1767e754203a8aaf11db9f4c47aea9cf1010baf32e75a081181db1b276814ff242bdeb1bbea82d97a60be6d321634566e36b3a344472e6a1c376fe34ae7b1d119eedf123c6c4453f6f13690525dd7a9d1aa3f9d09816808fa9c05019f9a41fec54b3f9252091ce729e97976b179e"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "efd2e8c9bd542254e9b5afb0bdfce292e000c45ca34c0257a1bbd178812a24a21b31348dce37c6d94a309138969e1868ad1c7ee8099a3e"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "0bb0bfff6f35cb0dccbe5c8d4ced73e188f413dab72a5b1dacf8795ec59d85fa16fbb4db59abccd2d704aa52adb78a0e25319a6b6d6cd46593dd1aaed38ca56e443124792dd7348614bf31510706bcdcce37d08c30fa0424873a7b6d9221e5b7514f0c5fb3646c14082a5de036d0880694141bef674f1b0ee4391876ada77b4b894e1a4f0eca2c8c4727316c280c891dd78d25ae684250f67e76c0884055a7b73f95257788049ff60014ec483beed02b7560085c11b21ca6f6ac32674a34b2ebcfd5de70b1846819783b5cb78a65a9e7268b0b6a7a9dd749f99b679a6efe326e227591fdc2c586e6588774001d8df7d1"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "55d6d21ac88b3ee7b7851c60c29383e7cf75d0bbad85f2a861f5628f25d5a63e40f32f432534d4fa9862c0e641af8f259d373e6ed16f9b6dafc0488ca6b60c9e58"}, @NL80211_ATTR_TESTDATA={0xe2, 0x45, "dbe97810bf5b1f4445cb0cdfc6f1958182649185de7eca0ef281c8e5848ad90def2876d6fb6850ed7c80b424070b5dda6cbcb473db9b4c6c038e5a42d66ac6d769f21f0a8b89e916a43e09a14352cef6837a0b4b25eb0c336fcaaeaac4037a8331b449a9cc6a7df581e332cf47e2e8633b6d0f9f93b55f0138167b964d5c9af10afee1e5698e7dfd92ca3a58a922b3b63c776fd6eb93869e492a74ff4b5cbffdf14915225bcf7d511c614d482d49e2b77f9d1f5f453c564201349a4f5dac527bbba89acad40f06dff0ea1526ec146dab2b3b6a7e42815462f685670d3bd2"}, @NL80211_ATTR_TESTDATA={0x42, 0x45, "9a7ef7be70fb9515842cdae385b7954553c74274ecc8ea39960f8c4114eedae4eba7d8eb9a6c8f76f102c1e116718791796d789e2c4e664bab170dbe7873"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x360}, 0x1, 0x0, 0x0, 0x1}, 0x8049) close(r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x2f, 0x0, 0xb0, 0x0, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x7800, 0x40, 0x6, 0x3}}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r8, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x88d1}, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r10) sendmsg$802154_dgram(r9, &(0x7f0000000140)={&(0x7f0000000340)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000040)={0x0}, 0x7, 0x0, 0x0, 0xc0}, 0x0) sendto$x25(r1, &(0x7f0000000180)="78da5e6d3cbe9f8fc35bd43410ea644d5cc386143cac74d809ea6b73101381c2125869e907f9685732cf125e23686831d169beff603e4025eac65ead74abbadc1eff24d30624e070d4c0dd184879b620eceb78d4dc1a2f8dfa56da0f91e349bd0a8bb67b4ea9d7b5c007bd42d272208d7bb86ed91f0dcb03f3f62787f4848c57eacf79f7923182ca54c555084fe2612f42602c689c79a02196bb6026ee1d5df6248119a7672dd179e9fabfb52423f11bdbf84fc9af", 0xb5, 0x20040000, &(0x7f0000000000), 0x12) 864.107914ms ago: executing program 0 (id=6634): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028005000c00010000001400070100"/56], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 715.427285ms ago: executing program 0 (id=6635): r0 = socket(0x200000000000011, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r9, 0x89e2, &(0x7f00000003c0)) close(r9) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001900)) r10 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 640.145012ms ago: executing program 1 (id=6637): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003340)=[{0xfffffffffffffffd}, {0x0}], 0x2}, 0x1}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000040)=@buf={0xc0, &(0x7f00000002c0)="7254c8731fff5b570f75a22d041eea0cb142662a477eb619b3fae1d31ef30066694676dcd25e42a5e7d0e2e5e6681eecd9acc4703590625b27394a04372b68457e1e6e167c241802b4dd01dee4ab50b314f40217fdac793e1fe35f4a32c630b75547b3ca38f9a832f693244b18a9e18e4b5dc7578e23cd2b2c7a0abe6a4bd4e8d0c1fa4385b85b7f20dfb8c766faf5bbed0de642fde10618dd67e0668fedbb06018397c551c62cf0b91bb33a81cbea5d894d278f09e2006f3ca2324d65604933"}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b32, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r5, 0x25, 0x4, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x1c, r12, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000290500000000000000001400000ff76439bf9e5648008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7329426873185d54d06d6446d784767000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async, rerun: 64) sendmsg$NL80211_CMD_SET_PMK(r10, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x80, r12, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x20}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b0e76ca57a9299ee00f38d507f40539d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9e68a3aae34f7b835fadc67525a29cfe"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a660965e06df8b8eafcb85e90aac3926"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async, rerun: 64) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000540)=0x2, 0x4) (async) write$tun(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="000000f9ffffffbda653a117300e53d69a6bf9a65798c8ffffffaaaaaaaaaaaa080045000020006600001930907800001fe1e000e15c80008100000c907841026558"], 0x32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r7, 0x2f, 0x8, 0x4}, 0x20) 527.908219ms ago: executing program 0 (id=6638): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=@newtclass={0x9c, 0x28, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0x5}, {0x6}, {0x1, 0xffff}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x41, 0x81}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xfffff54f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x80000001}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x93, 0x8}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) r4 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r4, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) socket(0x840000000002, 0x3, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3c}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x61c99}, @IFLA_GROUP={0x1c}]}, 0x30}}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) unshare(0x8000600) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r9, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0x2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0xc8, r8, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x9, 0x200, 0x118d, 0x9, 0x6, 0x2313]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x8}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x7}, {0x4, 0x3}, {0x7, 0xa}, {}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x5}, {0x2, 0x9}, {0x5, 0x7}, {0x7}, {0x4}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x4}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x6, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0xc, 0x6c, 0x0, 0x5, 0x48, 0x60, 0x7a, 0x3, 0xb]}]}]}]}]}]}, 0xc8}}, 0x0) 527.492544ms ago: executing program 2 (id=6639): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14c, r2, 0x5, 0x8004, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x40, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xd6, 0x91, "25c8e1a38387e8a34d9bb981b7490ea8571665a3cd84e6a1a71ba86d13264f05f030dff8ab26607b42b75ce579584553398e6a524012cb7aa829b2f9e83e8b20ab5e5674928c567986d0f6f2931d4bb9aa1adfa0805953b07491dd3ceacbc64ced105d6b3a62068c0cfaa6d5ff1b798c4fabc2d7bcb356f524d207c8e938bccf82eef34a797a08a0db74b68c64e49dae30000dbdbff4c2485b5f6dc5f8596b4e48b7238e4bcc7c99c5c690b7366a6c949d3868a1ed641f9129758ab05b7053a1bf85587a59c6030916e5e6468182e10af389"}]]}, 0x14c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x2400d881) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) 504.041895ms ago: executing program 2 (id=6640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 457.097211ms ago: executing program 1 (id=6641): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r9, 0x214, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 380.145113ms ago: executing program 2 (id=6642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x800, 0xeb, 0x401}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=r2, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) 355.217697ms ago: executing program 2 (id=6643): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000000104030000000000000000000000000705000100010000000800044000000003dcf0673f84fd88c2605383362f6fd641ecd94eef217a6833dd14c34265bf566d971bc2055bfc894f081855eab31d5ad3842cac8936b41095c1d1532e13c15c"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44030020", @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000013677f6d21360e505754a8f61c89332304a0846c17aadee44f820b4f9057b1d01316089e4f40c84df6d633da5c18c87fc02531db6951e90c8f1bc8ed95620204c8e1a6a5ad5d929d68e7a313b9a4159d6ef6f37e02c7ab813d2556068456eb39bc76c6519b48c3441c809000000006f2e42b7732a495e3a57324c68c66", @ANYRES16, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @empty, 0x4}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r1}) bind$unix(r9, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=r2, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRESDEC=r5, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000d80)=ANY=[@ANYBLOB="bc000000", @ANYRESOCT=r10, @ANYBLOB="100027bd7000ffdbdf25080000003c00018008000300ac1414bb05000200ff00000008000300ac1414bb0600010002000000060001000200000008000700", @ANYRES32=0x0, @ANYBLOB="060001000800000005000500040000000800020000000000080004000500000048000180060001000a0000000800030064010102060001000a00000014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r8) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00000000a7878663d676a2d45abf8176dd26abd1fe2077148a0e341f3ed5a889ab72a3b5d7e8f9008f297d93b8a3f9458c5ebb075ec7fe02e4b0d85401b61fb07a72a256147e9a0df4ba5561601f12d3bc7027c0ae2461559c1d31", @ANYRES16, @ANYBLOB="5d952cbd7000fedbdf252800000005002e008100000005002b00020000000a0001007770616e31000000e895990954e09490e87622878fc67520fa"], 0x30}, 0x1, 0x0, 0x0, 0x20080000}, 0x14000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9cd8337ac8f3be52163448412ba800"/29, 0x1d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a040ad3", 0xa3}], 0x3, &(0x7f0000000380)}], 0x1, 0x48000) 290.682623ms ago: executing program 1 (id=6644): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0xfffffffffffffdea, 0x0}}, 0x10) 180.133092ms ago: executing program 2 (id=6645): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x12b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x5}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 179.580157ms ago: executing program 1 (id=6646): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 179.181696ms ago: executing program 4 (id=6647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x22, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x20000080) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 137.766246ms ago: executing program 2 (id=6648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) 117.137576ms ago: executing program 1 (id=6649): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xa, 0x4}, {0x5, 0x7}, {0x73, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x9, 0x1}, {0xed, 0x4}, {0xdb, 0x4}, {0x81, 0x7}, {0xfa, 0x6}, {0xa, 0x2}, {0x81, 0x6}, {0x8, 0x7}, {0x0, 0x2}, {0x9}, {0x1}, {0x9, 0x1}, {0xc, 0x6}, {0x6, 0x6}], "2620402b4c0db5d5"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8, 0x2}, {0x3, 0x6}, {0xe0, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x9}, {0x6, 0x5}, {0x8, 0x7}, {0x84}, {0x6, 0x4}, {0x81, 0x4}, {0x20, 0x2}, {0x1}, {0xa, 0x9}, {0xd, 0x5}, {0x8, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x1, 0x6}], "29590ad50fb8f9a7"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x4, 0x1}], "cf28f31f79c85629"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x5}, {0x7, 0x5}, {0x8, 0x6}, {0x6, 0x6}, {0x8, 0x2}], "38ae1c2756ad76cf"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xa, 0x5}, {0xfa, 0x1}, {0x7f}, {0x3, 0x4}, {0x7, 0x5}, {0x9, 0x4}, {0x7, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x9}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x8b}, {0x1, 0x7}, {0x1}, {0x9, 0x5}, {0x0, 0x4}, {0x38}, {0x8, 0x7}, {0x6e, 0x1}], "44adcec68670d4cf"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x9, 0x5}, {0x80, 0x1}, {0xc9, 0x3}, {0x7, 0x3}, {0xff, 0x2}], "32aae3cbf6d02837"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xf, 0x5}], "7b76084f25631c85"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "491af77b28e5d198"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000}, 0x20040880) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, r0, 0x418, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0xe}}}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x20}}, @mic={0x8c, 0x18, {0xca2, "6c7b106b63e5", @long="a940cad71eabd942f9a85bd3d3c8d876"}}, @fast_bss_trans={0x37, 0x94, {0x3, 0x3, "36f39706a6b65ab601f661f73258f0b9", "3dd0196ca0179fb76635a93215df227b3e82c9e84af47746509a628f85a41962", "3abe70db7c949ba2126c23b89e104e2982f3d06012a86e5acbfadfdd50301628", [{0x3}, {0x3, 0x24, "d08e5fbea95e12cc3a7572550f1af2fe5148382979505118ebef836c081fb6261e1a169c"}, {0x1, 0x18, "93245ea9e0e17404ae364fab07da92105b7614f982372db1"}]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1f8, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x9d0}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f00000009c0)={0x3ec, r0, 0x501, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x800, 0x61}}}}, [@NL80211_ATTR_TX_RATES={0x27c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x48, 0xc32cdaafcd2faefd, 0x36, 0x16, 0x60, 0xc, 0x12, 0x3, 0x12, 0x6c, 0x5, 0x6c, 0x24, 0x3, 0x9, 0x48, 0x60, 0x1b, 0x1b, 0x24, 0x30, 0xc]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x6}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x2}, {0x6, 0x2}, {0x7, 0x4}, {0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x1}, {0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x4}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0xa}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x4}, {0x6, 0x5}, {}, {0x6, 0x3}, {0x7, 0x9}, {}, {0x6, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x7, 0x1, 0x0, 0x6, 0xd, 0x7d]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xb, 0x0, 0x1b, 0x12, 0x4, 0x30, 0x2, 0x60]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{}, {0x7, 0x5}, {0x1}, {0x1, 0x4}, {0x6}, {0x1, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0xa}, {0x1}, {0x1, 0x2}, {0x4, 0x5}, {}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x5829, 0x0, 0xb2b, 0x2, 0x1, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x48, 0x9, 0x12, 0x3, 0x48, 0x5, 0x12, 0x3, 0x60, 0xb, 0x60, 0x30, 0x18, 0x60, 0x0, 0xb, 0xc, 0x6c, 0x3, 0x1, 0x3, 0x0, 0xb, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x8, 0x7, 0x1ff, 0x4, 0xb, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x18, 0xe, 0x81, 0x19cc, 0x7, 0x45, 0x2, 0x1]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x85, 0xff, 0x2, 0x6, 0x9, 0x76d, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x918, 0x29d, 0x2, 0x4, 0x3, 0x8, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x4}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x4}, {0x3, 0x6}, {0x1}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x98bb, 0x800, 0x9, 0x7, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0xe9, 0x9, 0x8, 0x81, 0x7, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xffff, 0x1, 0x8, 0x2, 0x7, 0x42c3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0xfffb, 0x87, 0xe, 0x9ed, 0x7, 0xa5d]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x7}, {0x5, 0x1}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x3}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x6}, {0x7, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x12, 0x12, 0x4, 0x6c, 0xc, 0x0, 0x36, 0x1b, 0x6, 0x1b, 0x24, 0x36, 0xb, 0x60, 0x16, 0x6, 0x4, 0x6, 0x2, 0x1b, 0x36, 0x4, 0x16, 0x39, 0x30, 0x0, 0x6a, 0x30, 0x1b, 0x6c, 0x3]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x6, 0x12, 0x5, 0x4, 0x1b, 0x6c, 0x5, 0x18, 0x60, 0x16, 0x5, 0xc, 0xa, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0x3b, 0xc7, 0x8, 0x2db, 0x1, 0xd]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x2}, {0x2}, {0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x4}, {}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x7, 0x7}, {0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xf341, 0x5, 0x7, 0x2, 0x6, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4, 0x9, 0xfffb, 0x3, 0xffd2, 0xfffe, 0x7d7]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {}, {0x4, 0x9}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0xd, 0x4, 0x6, 0xfffc, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x1, 0x9, 0x0, 0x3ff, 0xffff, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x816, 0x2, 0x8, 0x90, 0xfff8, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000e40)=0x1, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc8, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff801}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x50) r7 = socket$kcm(0x29, 0x7, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000001380)={&(0x7f00000011c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0xc, 0x3, 0x1, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xffff}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001240)="50cd83ec", 0x4}], 0x1, &(0x7f00000012c0)=[{0xa8, 0x0, 0x4, "5c1b46503fa86299c08238277b57c2d9167d2b85ef76e52b33c4b901674a1426c6ccc6288afc884cd4d33ccabc95c5e78e3c185e701c83760bb433e9894e4754a87dfeca5670967a7c225fa3c79d5221ba19ab97f9085b86eb804ed6add7c3b92897495f270606f46cec80e41bf5c68245b8fec1446ad73a720a3c50ceb5bd5ebf4368bbe9a37422042e11220008f34e128fae091ef377"}], 0xa8}, 0x1) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x140, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xd7d}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6aa4}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x8}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb9, 0x5}}, @tim={0x5, 0x67, {0x5, 0xa7, 0x5, "d6d91ebbfa12c920b350b97f9ff677d2dc051f71bde1b486b6f429d38fe28178b5ebe3289d7fdd96a0ce4b36317cd4250de8f68469e05a70e440788480166c5a6d11d46ce885209f471965a3ec808af395eecdc4f12c30ad9d7f62c3512403eb5aba033a"}}, @fast_bss_trans={0x37, 0x52, {0x4, 0x0, "3d0d0f2df413824f111f534abf5d149f", "7ed3541bffad9ed005cf306bba3786f1862b3cd735a033076e21fe8baa512380", "3d6c98581cd0802e0548fac3f9b846170c65e9dd3a96ff5fadf992dd0c32e912"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}, @NL80211_ATTR_IE={0x21, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x40, 0x7}}, @supported_rates={0x1, 0x8, [{0x1}, {0x0, 0x1}, {0x1b, 0x1}, {0x18}, {0x6c, 0x1}, {0x2, 0x1}, {0x18}, {}]}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xd7}, @dsss={0x3, 0x1, 0xb9}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000024}, 0x4008080) setsockopt$packet_int(r10, 0x107, 0x10, &(0x7f0000001700)=0x6, 0x4) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000001740)={0x10, {{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0xe}}, {{0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r11, 0x4018f514, &(0x7f0000001880)={0xe, 0x18, 0x2}) tee(r8, r10, 0x80000000, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000019c0)=0xe8) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000001a00)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r12}) 0s ago: executing program 0 (id=6650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r2, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x3a0000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3}, 0x94) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r6, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0xffe3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) shutdown(r2, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async) syz_open_procfs$namespace(r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x3a0000) (async) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3}, 0x94) (async) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$inet6(r6, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) (async) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0xffe3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) (async) kernel console output (not intermixed with test programs): attributes in process `syz.3.4946'. [ 433.474844][T24205] netlink: 'syz.1.4947': attribute type 32 has an invalid length. [ 433.493706][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4946'. [ 433.509247][T24207] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4947'. [ 433.657009][T24218] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 433.682308][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4951'. [ 433.862991][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4952'. [ 433.879079][ T5188] udevd[5188]: worker [5805] /devices/virtual/block/nbd1 is taking a long time [ 433.882015][T24229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4952'. [ 433.936512][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4952'. [ 433.968587][T24229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4952'. [ 433.992025][T14006] bond0: (slave bond_slave_0): interface is now down [ 433.994190][T24234] bond0: left promiscuous mode [ 434.000711][T14006] bond0: (slave bond_slave_1): interface is now down [ 434.020227][T14006] bond0: (slave team0): interface is now down [ 434.025763][T24234] bond_slave_0: left promiscuous mode [ 434.033684][T14006] bond0: (slave wlan1): interface is now down [ 434.040145][T24234] bond_slave_1: left promiscuous mode [ 434.058511][T24234] team0: left promiscuous mode [ 434.072773][T24234] team_slave_0: left promiscuous mode [ 434.115512][T24234] team_slave_1: left promiscuous mode [ 434.144348][T24234] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 434.159741][T24234] bond0: left allmulticast mode [ 434.171057][T24234] bond_slave_0: left allmulticast mode [ 434.177162][T24234] team0: left allmulticast mode [ 434.198712][T24234] team_slave_0: left allmulticast mode [ 434.210174][T24234] team_slave_1: left allmulticast mode [ 434.216717][T24234] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 434.235240][T24234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.815533][T24291] openvswitch: netlink: Key type 167 is out of range max 32 [ 434.908315][T24303] netlink: 'syz.3.4975': attribute type 21 has an invalid length. [ 434.974979][T24310] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 435.012828][T24313] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 435.175079][T24324] netlink: 'syz.1.4983': attribute type 8 has an invalid length. [ 435.241520][T24316] syzkaller1: entered promiscuous mode [ 435.248647][T24316] syzkaller1: entered allmulticast mode [ 435.505636][T24350] syzkaller0: entered promiscuous mode [ 435.511448][T24350] syzkaller0: entered allmulticast mode [ 435.540135][T24354] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 435.629422][T24358] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 435.640390][T24358] team0: Port device batadv1 added [ 435.691926][T24359] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 435.764463][T24368] gretap0: entered promiscuous mode [ 435.780478][T24368] gretap0: left promiscuous mode [ 436.268071][T24391] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.500365][T24424] netlink: 'syz.3.5005': attribute type 39 has an invalid length. [ 436.596720][T14011] bond0: (slave bond_slave_0): interface is now down [ 436.603539][T14011] bond0: (slave bond_slave_1): interface is now down [ 436.610518][T14011] bond0: (slave team0): interface is now down [ 436.631141][T14011] bond0: (slave wlan1): interface is now down [ 436.666000][T14011] bond0: now running without any active interface! [ 436.899838][T24449] gtp0: entered promiscuous mode [ 437.297243][T24487] syzkaller0: entered promiscuous mode [ 437.303306][T24487] syzkaller0: entered allmulticast mode [ 437.825896][ T29] audit: type=1804 audit(1771102656.354:5): pid=24511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5036" name="/newroot/465/cgroup.controllers" dev="tmpfs" ino=2390 res=1 errno=0 [ 437.834143][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.856229][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.864177][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.872077][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.879965][ T29] audit: type=1800 audit(1771102656.354:6): pid=24511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5036" name="cgroup.controllers" dev="tmpfs" ino=2390 res=0 errno=0 [ 437.880011][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.909495][T24512] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 437.976261][T24540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.122694][T24540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.162430][T24544] erspan0: entered promiscuous mode [ 438.180254][T24544] __nla_validate_parse: 12 callbacks suppressed [ 438.180271][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5040'. [ 438.703920][T24567] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5049'. [ 439.011947][T24602] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.125724][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5061'. [ 439.274904][T24615] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5062'. [ 439.314721][T24620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5065'. [ 439.518229][T24629] tipc: Enabling of bearer rejected, failed to enable media [ 439.894225][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.902703][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 440.118557][T24670] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5079'. [ 440.308928][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5083'. [ 440.343258][T24682] geneve3: entered promiscuous mode [ 440.437937][T24690] nftables ruleset with unbound chain [ 440.619463][T24698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 440.648201][T24700] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5089'. [ 440.683536][T24707] vlan3: entered allmulticast mode [ 440.693899][T24707] bridge6: entered allmulticast mode [ 440.698386][T24708] netlink: 'syz.3.5091': attribute type 2 has an invalid length. [ 440.727635][T24700] syzkaller1: entered promiscuous mode [ 440.733144][T24700] syzkaller1: entered allmulticast mode [ 440.837505][T24710] macsec1: entered promiscuous mode [ 441.095310][T24731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5097'. [ 441.102841][T24732] syzkaller1: entered promiscuous mode [ 441.132393][T24732] syzkaller1: entered allmulticast mode [ 441.173788][T24729] vxcan1 speed is unknown, defaulting to 1000 [ 441.364843][T24751] netlink: 'syz.1.5105': attribute type 10 has an invalid length. [ 441.374973][T24751] team0: Device dummy0 failed to register rx_handler [ 441.659638][T24771] nftables ruleset with unbound set [ 442.033203][T24801] bond7: Removing last arp target with arp_interval on [ 442.078076][T24794] bond6: entered promiscuous mode [ 442.083331][T24794] bond6: entered allmulticast mode [ 442.088839][T24794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.228264][T24806] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 442.329188][T24807] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 442.418433][T24806] bond8: (slave bridge4): Enslaving as a backup interface with a down link [ 443.897373][T24858] netlink: 'syz.3.5135': attribute type 13 has an invalid length. [ 444.316364][T24874] __nla_validate_parse: 13 callbacks suppressed [ 444.316382][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 444.347929][T24874] net_ratelimit: 49 callbacks suppressed [ 444.347945][T24874] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.374620][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5136'. [ 444.523439][T24890] netlink: 'syz.4.5140': attribute type 13 has an invalid length. [ 444.634367][T24890] macvtap0: entered allmulticast mode [ 444.650665][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5143'. [ 444.655666][T24890] macvtap0: refused to change device tx_queue_len [ 444.714908][T24893] netlink: 'syz.2.5143': attribute type 1 has an invalid length. [ 444.752256][T24911] netlink: 'syz.3.5146': attribute type 8 has an invalid length. [ 444.800057][T24901] netlink: 'syz.1.5145': attribute type 11 has an invalid length. [ 444.879554][T24893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.913877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.921971][ C0] lec:lec_tx_timeout: lec0 [ 444.934313][T24912] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.941758][T24912] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 444.954965][T24912] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 444.990259][T24907] vxcan1 speed is unknown, defaulting to 1000 [ 445.089163][T24929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5149'. [ 445.227402][T24893] veth7: entered promiscuous mode [ 445.514732][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5152'. [ 445.608602][T24960] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5157'. [ 445.649033][T24962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5156'. [ 445.701936][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5156'. [ 445.877449][T24949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 445.878845][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 445.938141][T24949] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 445.946237][T24949] gretap3: entered promiscuous mode [ 445.951552][T24949] gretap3: entered allmulticast mode [ 446.286905][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5167'. [ 446.315208][T24997] veth1_to_bridge: entered promiscuous mode [ 446.325783][T24997] veth1_to_bridge: entered allmulticast mode [ 446.658892][T25026] netlink: 'syz.3.5176': attribute type 1 has an invalid length. [ 447.097539][T25058] syzkaller0: entered promiscuous mode [ 447.103176][T25058] syzkaller0: entered allmulticast mode [ 447.122051][T25058] tipc: Enabled bearer , priority 0 [ 447.133395][T25057] tipc: Resetting bearer [ 447.165826][T25057] tipc: Disabling bearer [ 447.364297][T25068] tipc: Enabled bearer , priority 0 [ 447.417718][T25073] IPVS: set_ctl: invalid protocol: 137 172.30.1.2:20001 [ 447.437516][T25062] tipc: Resetting bearer [ 447.464831][T25062] netlink: 'syz.2.5189': attribute type 32 has an invalid length. [ 447.550261][T25085] netlink: 'syz.3.5195': attribute type 4 has an invalid length. [ 447.593404][T25062] bond8: option coupled_control: invalid value (84) [ 447.604689][T25062] bond8 (unregistering): Released all slaves [ 447.727191][T25061] tipc: Disabling bearer [ 447.826343][T25090] x_tables: duplicate entry at hook 3 [ 447.891442][T25103] netlink: 'syz.2.5201': attribute type 4 has an invalid length. [ 447.900956][T25101] netlink: 'syz.0.5197': attribute type 16 has an invalid length. [ 447.962553][T25101] netlink: 'syz.0.5197': attribute type 17 has an invalid length. [ 448.141636][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 448.201311][T25117] smc: net device wlan0 erased user defined pnetid SYZ0 [ 448.250118][T25117] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 448.260795][T25101] erspan0: left promiscuous mode [ 448.399505][T25101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.781857][T25139] syzkaller1: entered promiscuous mode [ 448.787723][T25139] syzkaller1: entered allmulticast mode [ 448.866539][T25140] syzkaller1: entered promiscuous mode [ 448.872048][T25140] syzkaller1: entered allmulticast mode [ 448.990274][T25148] smc: net device team0 applied user defined pnetid SYZ2 [ 449.002185][T25151] netlink: 'syz.1.5212': attribute type 3 has an invalid length. [ 449.012564][T25155] openvswitch: netlink: Key type 31 is not supported [ 449.076630][T25140] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 449.086216][T25138] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 452.109320][T25180] IPVS: Error connecting to the multicast addr [ 452.322067][T25199] __nla_validate_parse: 24 callbacks suppressed [ 452.322106][T25199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5227'. [ 452.357305][T25199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5227'. [ 452.400310][T25199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5227'. [ 452.583303][T25220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5232'. [ 452.592437][T25220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5232'. [ 452.646198][T25225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5234'. [ 452.708365][T25232] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 452.718782][T25232] syzkaller0: entered promiscuous mode [ 452.729718][T25232] syzkaller0: entered allmulticast mode [ 452.817937][T25238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5237'. [ 452.819847][ T5807] udevd[5807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 452.872342][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 452.894581][T25238] netlink: 'syz.2.5237': attribute type 21 has an invalid length. [ 452.914943][T25238] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.976207][T25247] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.5240'. [ 452.996944][T25249] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 453.007411][T25249] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 453.118102][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 453.141729][T25259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.286539][T25271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.325187][T25274] netlink: 'syz.4.5247': attribute type 4 has an invalid length. [ 453.327526][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5245'. [ 453.481032][T25284] bond3: entered promiscuous mode [ 453.489097][T25284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.247141][T25354] h¡\—: renamed from bridge_slave_0 [ 454.340831][T25354] syz_tun: entered allmulticast mode [ 454.381580][T25354] dvmrp1: entered allmulticast mode [ 454.389093][T25353] syz_tun: left allmulticast mode [ 454.441953][T25366] syzkaller0: entered promiscuous mode [ 454.462803][T25366] syzkaller0: entered allmulticast mode [ 454.711784][T25377] syzkaller0: entered promiscuous mode [ 454.717790][T25377] syzkaller0: entered allmulticast mode [ 455.062988][T25409] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 455.078328][T25410] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 455.093570][T25410] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 456.430168][T25430] netlink: 'syz.1.5287': attribute type 1 has an invalid length. [ 456.439993][T25430] netlink: 'syz.1.5287': attribute type 3 has an invalid length. [ 456.454297][T25430] NCSI netlink: No device for ifindex 813332851 [ 456.836141][T25418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.867780][T25418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.969731][T25418] veth0_vlan: left promiscuous mode [ 457.198023][T14011] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.256950][T14011] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.315444][T25448] block nbd0: not configured, cannot reconfigure [ 457.355446][T25452] netlink: 'syz.2.5289': attribute type 1 has an invalid length. [ 457.379641][T14006] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.419272][T14006] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.683265][T25478] __nla_validate_parse: 11 callbacks suppressed [ 457.683283][T25478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5293'. [ 457.963097][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5300'. [ 458.024191][T25503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5301'. [ 458.236960][T25512] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5303'. [ 458.427206][T25535] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5307'. [ 458.497183][T25535] openvswitch: netlink: Missing key (keys=40, expected=100) [ 459.018744][T25574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5318'. [ 459.066890][T25590] openvswitch: netlink: IP tunnel dst address not specified [ 459.081769][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'. [ 459.300576][T25603] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 459.320474][T25604] netlink: 'syz.3.5322': attribute type 4 has an invalid length. [ 459.577059][T25623] netlink: 'syz.2.5328': attribute type 25 has an invalid length. [ 459.629667][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5328'. [ 459.713298][T25637] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5332'. [ 459.806208][T25630] team0 (unregistering): Port device team_slave_0 removed [ 459.841626][T25630] team0 (unregistering): Port device team_slave_1 removed [ 459.868126][T25630] team0 (unregistering): Port device batadv1 removed [ 459.895186][T25637] 0·: renamed from hsr_slave_1 (while UP) [ 459.906963][T25637] 0·: entered allmulticast mode [ 459.937625][T25637] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 459.992750][T25642] netlink: 'syz.2.5334': attribute type 11 has an invalid length. [ 460.043707][T25642] netlink: 'syz.2.5334': attribute type 4 has an invalid length. [ 460.080134][T25642] netlink: 'syz.2.5334': attribute type 5 has an invalid length. [ 460.093995][T25642] netlink: 'syz.2.5334': attribute type 6 has an invalid length. [ 460.112781][T25642] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.5334'. [ 460.337324][T25671] tipc: Enabling of bearer rejected, already enabled [ 460.451445][T25685] x_tables: unsorted underflow at hook 3 [ 460.577997][T25693] geneve1: mtu less than device minimum [ 460.612995][T25695] tipc: Enabled bearer , priority 0 [ 461.023134][T25721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.038564][T25724] netlink: 'syz.3.5359': attribute type 1 has an invalid length. [ 461.060242][T25724] 8021q: adding VLAN 0 to HW filter on device bond7 [ 461.100495][T25728] netlink: 'syz.3.5360': attribute type 23 has an invalid length. [ 461.161098][T25734] ip6tnl0: Caught tx_queue_len zero misconfig [ 461.346933][T25746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.459752][T25692] tipc: Disabling bearer [ 461.520913][T25757] netlink: 'syz.0.5366': attribute type 1 has an invalid length. [ 461.792893][T25772] vxcan1 speed is unknown, defaulting to 1000 [ 462.246232][ T9088] lec:lec_start_xmit: lec0:No lecd attached [ 463.046576][T25845] __nla_validate_parse: 15 callbacks suppressed [ 463.046596][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 463.093301][T25852] tipc: Trying to set illegal importance in message [ 463.213483][T25864] ªªªªªª5gæ¹Q[Ô: renamed from lo [ 463.468608][T25889] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5402'. [ 463.477834][T25886] xt_hashlimit: size too large, truncated to 1048576 [ 463.487119][T25889] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5402'. [ 463.496451][T25889] netlink: 'syz.4.5402': attribute type 6 has an invalid length. [ 463.507518][T25889] netlink: 'syz.4.5402': attribute type 5 has an invalid length. [ 463.515529][T25889] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5402'. [ 463.527878][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5405'. [ 463.571299][T25892] bond8: Setting coupled_control to off (0) [ 463.579777][T25889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5402'. [ 463.627240][T25889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5402'. [ 463.705535][T25899] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 463.877574][T25914] sctp: [Deprecated]: syz.3.5413 (pid 25914) Use of int in max_burst socket option. [ 463.877574][T25914] Use struct sctp_assoc_value instead [ 464.085419][T25921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5415'. [ 464.103920][T25922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5415'. [ 464.134386][T25922] lo: Caught tx_queue_len zero misconfig [ 464.244167][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5416'. [ 464.378991][T25943] ip6gre0: entered promiscuous mode [ 464.593126][T25962] validate_nla: 1 callbacks suppressed [ 464.593143][T25962] netlink: 'syz.2.5423': attribute type 12 has an invalid length. [ 464.635694][T25962] netlink: 'syz.2.5423': attribute type 29 has an invalid length. [ 464.670755][T25972] netlink: 'syz.1.5425': attribute type 1 has an invalid length. [ 464.726276][T25972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.748119][T25977] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 464.807407][T25972] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 464.854250][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 464.932722][T25993] syzkaller0: entered promiscuous mode [ 464.943993][T25993] syzkaller0: entered allmulticast mode [ 464.964160][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 464.975013][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 465.083710][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 465.093458][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 465.203756][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 465.231664][T14011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 465.363695][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 465.394857][T14010] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 465.413073][T14010] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 465.730815][T26040] pim6reg1: entered promiscuous mode [ 465.731922][T26048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.745536][T26040] pim6reg1: entered allmulticast mode [ 466.042110][T26069] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 466.516005][T26105] bond8: (slave bond_slave_1): Device is not our slave [ 466.561824][T26105] bond8: option active_slave: invalid value (bond_slave_1) [ 466.575306][T26105] bond8 (unregistering): Released all slaves [ 466.839175][T26141] netlink: 'syz.1.5474': attribute type 1 has an invalid length. [ 467.069275][T26151] tipc: New replicast peer: 255.255.255.255 [ 467.109885][T26151] tipc: Enabled bearer , priority 10 [ 467.421533][T26181] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 467.713724][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 467.721763][ C0] lec:lec_tx_timeout: lec0 [ 469.876649][ T3000] net_ratelimit: 164 callbacks suppressed [ 469.876671][ T3000] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 469.913741][ T3000] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 469.933769][ T3000] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 469.961453][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.001251][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.041821][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.073569][ T5903] tipc: Node number set to 1605034802 [ 470.074261][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.096351][T26200] tipc: Enabled bearer , priority 0 [ 470.103873][ T3000] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.133716][ T3000] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 470.146418][T26203] __nla_validate_parse: 15 callbacks suppressed [ 470.146434][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5491'. [ 470.230006][T26200] +: renamed from syzkaller0 [ 470.240546][T26200] tipc: Disabling bearer [ 470.251340][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 470.504937][ T5188] udevd[5188]: worker [5805] /devices/virtual/block/nbd1 timeout; kill it [ 470.525361][ T5188] udevd[5188]: seq 21440 '/devices/virtual/block/nbd1' killed [ 470.565831][T26233] netlink: 'syz.2.5499': attribute type 1 has an invalid length. [ 470.841939][T26249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5504'. [ 470.996856][T26259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5508'. [ 471.001822][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5511'. [ 471.014718][T26263] netlink: 'syz.3.5509': attribute type 1 has an invalid length. [ 471.101991][T26269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5510'. [ 471.105962][T26263] bond9: (slave ip6gretap1): making interface the new active one [ 471.119735][T26263] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 471.186416][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5512'. [ 471.192095][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'. [ 471.298800][T26279] syzkaller0: entered promiscuous mode [ 471.316908][T26279] syzkaller0: entered allmulticast mode [ 471.399698][T26281] tipc: Enabled bearer , priority 0 [ 471.425623][T26279] tipc: Enabling of bearer rejected, already enabled [ 471.446406][T26290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5518'. [ 471.463458][T26279] tipc: Resetting bearer [ 471.489843][T26278] tipc: Resetting bearer [ 471.548532][T26278] tipc: Disabling bearer [ 471.605518][T26290] ip6t_srh: unknown srh match flags 4000 [ 471.612742][T26290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5518'. [ 471.622783][T26290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5518'. [ 471.641403][T26299] tipc: Enabled bearer , priority 0 [ 471.744975][T26299] syzkaller0: entered promiscuous mode [ 471.750461][T26299] syzkaller0: entered allmulticast mode [ 471.764201][T26299] tipc: Resetting bearer [ 471.811447][T26298] tipc: Resetting bearer [ 473.114422][T26298] tipc: Disabling bearer [ 473.152950][T26328] syzkaller0: entered promiscuous mode [ 473.169005][T26328] syzkaller0: entered allmulticast mode [ 473.600971][T26359] vxcan1 speed is unknown, defaulting to 1000 [ 474.212940][T26401] syzkaller0: entered promiscuous mode [ 474.218574][T26401] syzkaller0: entered allmulticast mode [ 474.790754][T26438] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 474.867694][T26442] tipc: Enabled bearer , priority 0 [ 474.877502][T26442] syzkaller0: entered promiscuous mode [ 474.883044][T26442] syzkaller0: entered allmulticast mode [ 474.925319][T26442] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.933821][ T35] net_ratelimit: 149 callbacks suppressed [ 474.933836][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 474.972233][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 474.988771][T26442] tipc: Resetting bearer [ 474.997502][T26440] tipc: Resetting bearer [ 475.011435][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 475.031687][T26440] tipc: Disabling bearer [ 475.043819][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 475.058856][ T35] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 475.100349][T26456] syzkaller0: entered promiscuous mode [ 475.110939][T26456] syzkaller0: entered allmulticast mode [ 475.131506][T26459] sctp: [Deprecated]: syz.2.5565 (pid 26459) Use of int in max_burst socket option deprecated. [ 475.131506][T26459] Use struct sctp_assoc_value instead [ 475.172592][T26459] __nla_validate_parse: 23 callbacks suppressed [ 475.172609][T26459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5565'. [ 475.188285][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 475.196757][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 475.205800][T26459] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5565'. [ 475.298806][T26469] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.324477][T14006] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 475.353852][T14006] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 475.361613][T14006] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 475.555263][T26490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 475.588194][T26497] netlink: 'syz.2.5574': attribute type 1 has an invalid length. [ 475.616710][T26497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5574'. [ 475.824698][T26516] syzkaller1: entered promiscuous mode [ 475.843972][T26516] syzkaller1: entered allmulticast mode [ 475.895611][T26514] netlink: 'syz.3.5580': attribute type 1 has an invalid length. [ 475.936755][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5584'. [ 475.969216][T26527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5584'. [ 476.076716][T26532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'. [ 476.197639][T26539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5589'. [ 476.219701][T26536] syzkaller0: entered promiscuous mode [ 476.237312][T26541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5589'. [ 476.253289][T26536] syzkaller0: entered allmulticast mode [ 476.268386][T26536] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5588'. [ 476.343131][T26546] syzkaller0: entered promiscuous mode [ 476.376024][T26546] syzkaller0: entered allmulticast mode [ 476.461953][ T29] audit: type=1800 audit(1771102694.984:7): pid=26555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5596" name="memory.events" dev="tmpfs" ino=2598 res=0 errno=0 [ 476.925287][T26595] netlink: 'syz.4.5607': attribute type 2 has an invalid length. [ 476.937583][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5606'. [ 477.083053][T26604] delete_channel: no stack [ 477.307790][T26623] netlink: 'syz.3.5614': attribute type 6 has an invalid length. [ 477.446995][T26632] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 477.604758][T26639] netlink: 'syz.0.5619': attribute type 13 has an invalid length. [ 478.101831][T26675] netlink: 'syz.0.5628': attribute type 1 has an invalid length. [ 478.291193][T26687] xt_TPROXY: Can be used only with -p tcp or -p udp [ 478.506565][T26696] syzkaller0: entered promiscuous mode [ 478.523175][T26696] syzkaller0: entered allmulticast mode [ 478.541028][T26693] @0Ù: renamed from bond_slave_1 [ 478.870627][T26733] x_tables: duplicate underflow at hook 3 [ 478.981068][T26743] netlink: 'syz.0.5647': attribute type 1 has an invalid length. [ 479.051219][T26748] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 479.553264][T26783] bridge9: entered promiscuous mode [ 479.568017][T26783] bridge9: entered allmulticast mode [ 479.601675][T26782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.705229][T26795] syzkaller0: entered promiscuous mode [ 479.710907][T26795] syzkaller0: entered allmulticast mode [ 479.734631][T26795] gre2: entered promiscuous mode [ 479.741832][T26795] gre2: entered allmulticast mode [ 479.960121][T26814] sctp: [Deprecated]: syz.1.5668 (pid 26814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.960121][T26814] Use struct sctp_sack_info instead [ 480.004121][T14006] net_ratelimit: 107 callbacks suppressed [ 480.004138][T14006] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 480.020851][T14006] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 480.118612][T26829] netlink: 'syz.4.5670': attribute type 2 has an invalid length. [ 480.133726][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 480.154570][T14011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 480.217443][T26834] netlink: 'syz.1.5673': attribute type 2 has an invalid length. [ 480.227990][T26834] netlink: 'syz.1.5673': attribute type 1 has an invalid length. [ 480.274047][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 480.287547][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 480.382573][T26848] __nla_validate_parse: 29 callbacks suppressed [ 480.382593][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 480.413726][ T35] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 480.418326][T26848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5675'. [ 480.426025][ T35] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 480.451293][T26848] macsec1: entered promiscuous mode [ 480.467559][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 480.567940][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 480.583625][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 480.649327][T26862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5682'. [ 480.744738][T26865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5683'. [ 480.856990][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 480.861379][T26867] pim6reg1: entered promiscuous mode [ 480.885059][T26867] pim6reg1: entered allmulticast mode [ 481.041543][T26888] lo: Caught tx_queue_len zero misconfig [ 481.160580][T26901] tipc: Invalid UDP bearer configuration [ 481.160657][T26901] tipc: Enabling of bearer rejected, failed to enable media [ 481.480938][T26927] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5703'. [ 481.670812][T26935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5707'. [ 481.760046][T26943] validate_nla: 2 callbacks suppressed [ 481.760063][T26943] netlink: 'syz.0.5711': attribute type 64 has an invalid length. [ 481.786433][T26947] ieee802154 phy0 wpan0: encryption failed: -22 [ 481.805412][T26943] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5711'. [ 481.824860][T26950] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 481.876094][T26950] ‚#{6c: entered promiscuous mode [ 481.928308][T26961] netlink: 211612 bytes leftover after parsing attributes in process `syz.3.5715'. [ 482.023951][T26966] netlink: 'syz.2.5718': attribute type 1 has an invalid length. [ 482.034290][T26966] netlink: 'syz.2.5718': attribute type 1 has an invalid length. [ 482.051247][T26971] netlink: 'syz.3.5721': attribute type 16 has an invalid length. [ 482.060344][T26971] netlink: 'syz.3.5721': attribute type 3 has an invalid length. [ 482.376763][T26995] vxcan1 speed is unknown, defaulting to 1000 [ 483.103292][T27033] xt_CT: No such helper "syz1" [ 483.335652][T27060] netlink: 'syz.2.5745': attribute type 10 has an invalid length. [ 483.597058][T27068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.762973][T27068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.961994][T27100] netlink: 'syz.3.5750': attribute type 10 has an invalid length. [ 484.178824][T14006] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.204561][T14006] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.240557][T14006] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.275942][T14006] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.615748][T27143] SET target dimension over the limit! [ 485.114568][T14011] net_ratelimit: 122 callbacks suppressed [ 485.114587][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.170780][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.197599][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.207393][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.216179][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.223155][T14006] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.231860][T14006] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 485.242001][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.249747][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.327670][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.335582][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.343373][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.354741][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.368547][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.449229][T14011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.499066][T14011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 485.569106][T27172] vxcan1 speed is unknown, defaulting to 1000 [ 485.653692][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.671776][T14007] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 485.787717][T27200] __nla_validate_parse: 18 callbacks suppressed [ 485.787736][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5776'. [ 485.808754][T14007] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.844658][T14006] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 485.857520][T27200] IPv6: Can't replace route, no match found [ 486.089755][T27221] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5780'. [ 486.120621][T27220] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 486.386216][T27236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5784'. [ 486.520237][T27172] chnl_net:caif_netlink_parms(): no params data found [ 486.597493][T27257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5789'. [ 486.625415][T27257] xt_hashlimit: size too large, truncated to 1048576 [ 486.627076][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.673206][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.846457][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.862404][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.884889][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 487.000826][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.013772][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.165012][ T35] batman_adv: batadv0: Removing interface: netdevsim0 [ 487.200066][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.222605][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.248788][T27172] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.257636][T27172] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.274836][T27172] bridge_slave_0: entered allmulticast mode [ 487.289716][T27172] bridge_slave_0: entered promiscuous mode [ 487.328993][T27172] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.344216][T27172] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.351581][T27172] bridge_slave_1: entered allmulticast mode [ 487.362238][T27172] bridge_slave_1: entered promiscuous mode [ 487.435864][T27307] netlink: 'syz.2.5802': attribute type 1 has an invalid length. [ 487.468628][T14010] nci: nci_rsp_packet: unknown rsp opcode 0xa3a [ 487.477364][ T50] Bluetooth: hci0: command tx timeout [ 487.489642][T27172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.548032][T27307] bond9: entered promiscuous mode [ 487.553115][T27307] bond9: entered allmulticast mode [ 487.571780][T27307] 8021q: adding VLAN 0 to HW filter on device bond9 [ 487.640385][T27172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.699850][T27172] team0: Port device team_slave_0 added [ 487.707778][T27172] team0: Port device team_slave_1 added [ 487.746510][T27172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.753558][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.788679][T27172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.801662][T27172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.809405][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.836440][T27172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.876266][ T35] bridge_slave_1: left allmulticast mode [ 487.881945][ T35] bridge_slave_1: left promiscuous mode [ 487.888506][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.899073][ T35] bridge_slave_0: left allmulticast mode [ 487.906889][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.991322][ T35] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 488.428442][ T35] bond1 (unregistering): Released all slaves [ 488.441390][ T35] bond2 (unregistering): Released all slaves [ 488.453988][ T35] bond3 (unregistering): Released all slaves [ 488.467685][ T35] bond4 (unregistering): Released all slaves [ 488.487738][ T35] bond5 (unregistering): Released all slaves [ 488.500328][ T35] bond6 (unregistering): Released all slaves [ 488.512722][ T35] bond7 (unregistering): Released all slaves [ 488.528067][ T35] bond0 (unregistering): Released all slaves [ 488.579431][T27172] hsr_slave_0: entered promiscuous mode [ 488.586494][T27172] hsr_slave_1: entered promiscuous mode [ 488.655878][ T35] tipc: Disabling bearer [ 488.668828][ T35] tipc: Left network mode [ 488.849821][T27347] syzkaller0: entered promiscuous mode [ 488.856172][T27347] syzkaller0: entered allmulticast mode [ 489.196925][ T35] hsr_slave_0: left promiscuous mode [ 489.203481][ T35] hsr_slave_1: left promiscuous mode [ 489.233459][ T35] veth1_vlan: left allmulticast mode [ 489.242420][T27352] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5810'. [ 489.243541][ T35] veth1_macvtap: left promiscuous mode [ 489.257155][ T35] veth1_vlan: left promiscuous mode [ 489.262428][ T35] veth0_vlan: left promiscuous mode [ 489.354029][ T35] pimreg (unregistering): left allmulticast mode [ 489.473053][ T35] team0 (unregistering): Port device team_slave_1 removed [ 489.487217][ T35] team0 (unregistering): Port device team_slave_0 removed [ 489.553906][ T50] Bluetooth: hci0: command tx timeout [ 489.562431][ T35] smc: removing net device team0 with user defined pnetid SYZ2 [ 489.825724][ T35] IPVS: stop unused estimator thread 0... [ 490.340804][T27304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.379708][T27172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.448015][T27172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 490.529064][T27172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.567187][T27172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.577330][T27364] netlink: 'syz.2.5813': attribute type 11 has an invalid length. [ 490.585641][T27364] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5813'. [ 490.745471][T27387] team0: Caught tx_queue_len zero misconfig [ 490.847813][T27395] netlink: 'syz.3.5819': attribute type 32 has an invalid length. [ 490.862736][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5819'. [ 490.971641][T27395] bond10: option coupled_control: invalid value (52) [ 491.004212][T27395] bond10 (unregistering): Released all slaves [ 491.130783][T27407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5822'. [ 491.239205][T27418] delete_channel: no stack [ 491.266279][T27423] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 491.282056][T27411] syzkaller0: entered promiscuous mode [ 491.298294][T27411] syzkaller0: entered allmulticast mode [ 491.645085][ T50] Bluetooth: hci0: command tx timeout [ 491.753226][T27456] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 492.844038][T27456] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 492.882953][T27172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.952818][T27172] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.988674][T27464] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.5831'. [ 492.988854][T27465] netlink: 'syz.2.5830': attribute type 1 has an invalid length. [ 493.028185][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.035394][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.047648][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.054841][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.129235][T27465] 8021q: adding VLAN 0 to HW filter on device bond10 [ 493.144791][T27469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5833'. [ 493.164182][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5833'. [ 493.210415][T27478] netlink: 'syz.3.5833': attribute type 30 has an invalid length. [ 493.236806][T27465] lo: entered allmulticast mode [ 493.256937][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5833'. [ 493.295194][T27485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5836'. [ 493.323763][T27478] netlink: 'syz.3.5833': attribute type 30 has an invalid length. [ 493.362168][T27478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5833'. [ 493.505261][T27493] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 493.532820][T27493] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 493.719525][ T50] Bluetooth: hci0: command tx timeout [ 493.769135][T27172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.876277][T27172] veth0_vlan: entered promiscuous mode [ 493.897861][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5845'. [ 493.966393][T27172] veth1_vlan: entered promiscuous mode [ 494.048287][T27172] veth0_macvtap: entered promiscuous mode [ 494.072468][T27172] veth1_macvtap: entered promiscuous mode [ 494.125978][T27529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5847'. [ 494.180810][T27529] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20003 [ 494.193053][T27543] net_ratelimit: 80 callbacks suppressed [ 494.193069][T27543] openvswitch: netlink: Invalid VLAN frame [ 494.196498][T27172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.256415][T27172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.299363][ T3000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.332880][ T3000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.350269][ T3000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.378707][ T3000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.542581][T27555] netlink: 'syz.2.5855': attribute type 9 has an invalid length. [ 494.656321][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.667210][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.792466][T14006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.801731][T14006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.822492][T27569] pimreg: entered allmulticast mode [ 494.879755][T27569] ipvlan1: entered promiscuous mode [ 495.407482][T27600] chnl_net:caif_netlink_parms(): no params data found [ 495.605673][T27619] syzkaller1: entered promiscuous mode [ 495.633129][T27619] syzkaller1: entered allmulticast mode [ 495.708211][T27623] netlink: 'syz.0.5876': attribute type 1 has an invalid length. [ 495.867952][T27630] __nla_validate_parse: 9 callbacks suppressed [ 495.867971][T27630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'. [ 495.896975][T27630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 495.946359][T27630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'. [ 495.968421][T27630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 496.004811][T27637] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 496.135117][T27643] ip6tnl0: Caught tx_queue_len zero misconfig [ 496.467157][T27661] Bluetooth: MGMT ver 1.23 [ 496.577660][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 496.642402][T27665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5890'. [ 497.006153][T27682] netlink: 'syz.4.5893': attribute type 7 has an invalid length. [ 497.024194][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 497.057893][T27682] netlink: 'syz.4.5893': attribute type 7 has an invalid length. [ 497.075119][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 497.178018][T27690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5895'. [ 497.206436][T27690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5895'. [ 497.576759][T27723] netlink: 'syz.3.5903': attribute type 1 has an invalid length. [ 497.647044][T27723] bond10: (slave geneve3): making interface the new active one [ 497.657190][T27723] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 497.672699][T14010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 497.693107][T14010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 497.714942][T14010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 497.723262][T14010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 497.764167][T27734] openvswitch: netlink: Flow actions attr not present in new flow. [ 497.804886][T27734] bridge_slave_0: left allmulticast mode [ 497.810577][T27734] bridge_slave_0: left promiscuous mode [ 497.834186][T27734] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.866008][T27734] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.891259][T27734] `: (slave bond_slave_0): Releasing backup interface [ 497.912103][T27734] `: (slave bond_slave_1): Releasing backup interface [ 497.938908][T27734] team0: Port device team_slave_0 removed [ 497.961701][T27734] team0: Port device team_slave_1 removed [ 497.978096][T27734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.986387][T27734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.999690][T27734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.008816][T27748] netlink: 'syz.1.5910': attribute type 1 has an invalid length. [ 498.035986][T27748] netlink: 'syz.1.5910': attribute type 1 has an invalid length. [ 498.036655][ T5869] vxcan1 speed is unknown, defaulting to 1000 [ 498.103393][T27754] netlink: 'syz.1.5912': attribute type 1 has an invalid length. [ 498.282442][T27763] openvswitch: netlink: IP tunnel TTL not specified. [ 499.330063][T27810] only policy match revision 0 supported [ 499.330093][T27810] unable to load match [ 499.378266][T27822] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 499.668508][T27841] bond11: entered promiscuous mode [ 499.686982][T27841] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.735346][T27841] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.750055][T27841] bond11: (slave sit3): The slave device specified does not support setting the MAC address [ 499.761627][T27841] bond11: (slave sit3): Error -95 calling set_mac_address [ 499.778332][T27852] A link change request failed with some changes committed already. Interface ªªªªªª5gæ¹Q[Ô may have been left with an inconsistent configuration, please check. [ 500.026876][T27869] netlink: 'syz.4.5951': attribute type 1 has an invalid length. [ 500.108545][T27873] tipc: Enabling of bearer rejected, failed to enable media [ 500.118335][T27871] syzkaller0: entered promiscuous mode [ 500.124340][T27871] syzkaller0: entered allmulticast mode [ 500.152670][T27875] netlink: 'syz.0.5954': attribute type 10 has an invalid length. [ 500.187492][T27875] dummy0: entered promiscuous mode [ 500.197372][T27875] bridge0: port 2(dummy0) entered blocking state [ 500.202459][T27693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.205266][T27875] bridge0: port 2(dummy0) entered disabled state [ 500.230396][T27875] dummy0: entered allmulticast mode [ 500.618483][T27908] netlink: 'syz.4.5964': attribute type 1 has an invalid length. [ 500.654848][T27908] bond5: entered promiscuous mode [ 500.660667][T27908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.734328][T27908] bond5: (slave bridge6): making interface the new active one [ 500.755009][T27908] bridge6: entered promiscuous mode [ 500.766901][T27908] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 500.838056][T27918] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 500.874005][T27918] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 501.137421][T27936] __nla_validate_parse: 80 callbacks suppressed [ 501.137441][T27936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5970'. [ 501.172334][T27936] ip6gre0: Caught tx_queue_len zero misconfig [ 501.288093][T27951] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 501.319998][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.328590][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 501.372651][T27951] bond12: entered promiscuous mode [ 501.382763][T27951] 8021q: adding VLAN 0 to HW filter on device bond12 [ 501.448472][T27963] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 501.533172][T27965] vlan3: entered promiscuous mode [ 501.539398][T27965] bridge0: entered promiscuous mode [ 501.594896][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5977'. [ 501.666125][T27962] vlan0: entered allmulticast mode [ 501.682449][T27962] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 501.770910][T27976] netlink: 'syz.3.5982': attribute type 9 has an invalid length. [ 501.791157][T27976] netlink: 'syz.3.5982': attribute type 6 has an invalid length. [ 501.811253][T27976] netlink: 'syz.3.5982': attribute type 7 has an invalid length. [ 501.844815][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 501.861214][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 501.870021][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 501.883534][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 501.892020][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.989134][T27979] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5984'. [ 502.001433][T27980] vxcan1 speed is unknown, defaulting to 1000 [ 502.131330][T27993] x_tables: duplicate underflow at hook 3 [ 502.259448][T27997] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 502.370810][T28008] syzkaller0: entered promiscuous mode [ 502.397280][T28008] syzkaller0: entered allmulticast mode [ 502.518952][ T3000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.531286][ T3000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 502.641787][ T3000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.654702][ T3000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 502.829265][ T3000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.849334][ T3000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 502.959169][ T5819] block nbd2: Receive control failed (result -32) [ 502.959184][ T50] block nbd3: Receive control failed (result -32) [ 502.996808][ T3000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.023756][ T3000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 503.045434][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5997'. [ 503.379253][T28068] validate_nla: 1 callbacks suppressed [ 503.379267][T28068] netlink: 'syz.3.6004': attribute type 33 has an invalid length. [ 503.411915][T28068] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6004'. [ 503.445334][T27980] chnl_net:caif_netlink_parms(): no params data found [ 503.448986][T28070] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6005'. [ 503.655396][T28082] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.6009'. [ 503.681413][T28085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6010'. [ 503.953779][ T50] Bluetooth: hci5: command tx timeout [ 504.151120][T28125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6015'. [ 504.256046][ T3000] bond0 (unregistering): (slave vti0): Releasing backup interface [ 504.270434][T28112] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6012'. [ 504.286329][ T3000] vti0 (unregistering): left promiscuous mode [ 504.422715][ T3000] dvmrp6 (unregistering): left allmulticast mode [ 504.456072][ T3000] bond2 (unregistering): (slave geneve2): Releasing active interface [ 504.718558][ T3000] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 504.727272][ T3000] bridge6 (unregistering): left promiscuous mode [ 504.766574][ T3000] ` (unregistering): Released all slaves [ 504.776398][ T3000] bond1 (unregistering): Released all slaves [ 504.789377][ T3000] bond2 (unregistering): Released all slaves [ 504.801902][ T3000] bond0 (unregistering): Released all slaves [ 504.820834][ T3000] bond3 (unregistering): Released all slaves [ 504.839473][ T3000] bond4 (unregistering): Released all slaves [ 504.852569][ T3000] bond5 (unregistering): Released all slaves [ 504.868983][T27980] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.876219][T27980] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.883419][T27980] bridge_slave_0: entered allmulticast mode [ 504.890815][T27980] bridge_slave_0: entered promiscuous mode [ 504.900030][T27980] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.907327][T27980] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.916467][T27980] bridge_slave_1: entered allmulticast mode [ 504.924665][T27980] bridge_slave_1: entered promiscuous mode [ 505.016348][T28137] bond0: (slave wlan1): Releasing backup interface [ 505.051263][T28112] bridge_slave_1: entered promiscuous mode [ 505.057447][T28112] bridge_slave_1: entered allmulticast mode [ 505.096285][ T3000] : left promiscuous mode [ 505.138919][T27980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.181842][ T3000] tipc: Disabling bearer [ 505.202202][T28117] vxcan1 speed is unknown, defaulting to 1000 [ 505.209935][ T3000] tipc: Left network mode [ 505.210757][T27980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.250114][ T3000] IPVS: stopping backup sync thread 26181 ... [ 505.305567][T27980] team0: Port device team_slave_0 added [ 505.460206][T27980] team0: Port device team_slave_1 added [ 505.560940][T28162] xt_l2tp: v2 doesn't support IP mode [ 505.561342][T28153] syzkaller0: entered promiscuous mode [ 505.579968][T28162] netlink: 'syz.2.6025': attribute type 8 has an invalid length. [ 505.585367][T28153] syzkaller0: entered allmulticast mode [ 505.672599][T27980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.712290][T27980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.796242][T27980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.880603][T27980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.901297][T27980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.928269][T27980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.040852][ T50] Bluetooth: hci5: command tx timeout [ 506.753700][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 506.761740][ C0] lec:lec_tx_timeout: lec0 [ 507.461031][T28193] kthread_run failed with err -4 [ 507.483814][T28151] delete_channel: no stack [ 507.737537][T27980] hsr_slave_0: entered promiscuous mode [ 507.754959][T27980] hsr_slave_1: entered promiscuous mode [ 507.761020][T27980] debugfs: 'hsr0' already exists in 'hsr' [ 507.769283][T27980] Cannot create hsr debugfs directory [ 507.790986][T28213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.811707][T28219] netlink: 'syz.2.6033': attribute type 62 has an invalid length. [ 508.114947][ T50] Bluetooth: hci5: command tx timeout [ 508.225984][T28233] netlink: 'syz.1.6037': attribute type 10 has an invalid length. [ 508.266447][T28233] team0: Device ipvlan1 failed to register rx_handler [ 508.514109][T28243] __nla_validate_parse: 8 callbacks suppressed [ 508.514127][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6039'. [ 508.603500][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6040'. [ 508.673864][ T3000] hsr_slave_0: left promiscuous mode [ 508.688081][ T3000] hsr_slave_1: left promiscuous mode [ 508.714273][ T3000] veth0_macvtap: left allmulticast mode [ 508.722769][ T3000] veth1_macvtap: left promiscuous mode [ 508.731789][ T3000] veth1_vlan: left promiscuous mode [ 509.042355][T14010] smc: removing ib device syz2 [ 509.063157][ T3000] smc: removing net device caif0 with user defined pnetid SYZ2 [ 509.109493][ T3000] smc: removing net device team0 with user defined pnetid SYZ2 [ 509.158996][T28248] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 509.267317][T28248] team1: entered promiscuous mode [ 509.272483][T28248] team1: entered allmulticast mode [ 509.369482][ T5869] vxcan1 speed is unknown, defaulting to 1000 [ 509.401820][ T5869] syz2: Port: 1 Link DOWN [ 509.438135][T28266] netlink: 'syz.3.6045': attribute type 3 has an invalid length. [ 509.846010][T28281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6047'. [ 510.022357][T28283] vlan3: entered promiscuous mode [ 510.030472][T28283] vlan3: entered allmulticast mode [ 510.041544][T28283] hsr_slave_1: entered allmulticast mode [ 510.080921][T28293] team_slave_0: entered promiscuous mode [ 510.086698][T28293] team_slave_1: entered promiscuous mode [ 510.129458][T28293] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.154746][T28293] team0: Device macvlan2 is already an upper device of the team interface [ 510.170514][T28293] team_slave_0: left promiscuous mode [ 510.175981][T28293] team_slave_1: left promiscuous mode [ 510.200202][ T50] Bluetooth: hci5: command tx timeout [ 510.776567][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6058'. [ 510.805729][T28326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6058'. [ 510.825177][T28327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6058'. [ 510.839102][T27980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.870652][T28333] netlink: 'syz.0.6059': attribute type 13 has an invalid length. [ 510.874853][T27980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.913295][T27980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.968900][T28333] gretap0: refused to change device tx_queue_len [ 510.993545][T28333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 511.070509][T27980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 511.136977][T28343] syzkaller0: entered promiscuous mode [ 511.169529][T28343] syzkaller0: entered allmulticast mode [ 511.498932][T28364] netlink: 'syz.3.6065': attribute type 12 has an invalid length. [ 511.604244][T28364] bond13: option primary_reselect: invalid value (255) [ 511.641762][T28377] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 511.651443][T28364] bond13 (unregistering): Released all slaves [ 511.827300][T27980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.852663][ T3000] IPVS: stop unused estimator thread 0... [ 511.881081][T27980] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.972032][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.979193][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.062647][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.069845][T14006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.114884][T28395] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6071'. [ 512.278799][T28413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.755144][T27980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.807309][T28441] syzkaller1: entered promiscuous mode [ 512.834003][T28441] syzkaller1: entered allmulticast mode [ 513.311764][T28472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.445600][T28479] mac80211_hwsim hwsim39 wlan1: Caught tx_queue_len zero misconfig [ 513.456737][T27980] veth0_vlan: entered promiscuous mode [ 513.490563][T27980] veth1_vlan: entered promiscuous mode [ 513.504586][T28479] netlink: 'syz.3.6087': attribute type 30 has an invalid length. [ 513.527441][T28484] delete_channel: no stack [ 513.559610][T28488] netlink: 560 bytes leftover after parsing attributes in process `syz.3.6087'. [ 513.634942][T28488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6087'. [ 514.460440][T28529] tipc: Enabling of bearer rejected, media not registered [ 514.497876][T27980] veth0_macvtap: entered promiscuous mode [ 514.512623][T27980] veth1_macvtap: entered promiscuous mode [ 514.577356][T27980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.598230][T27980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.622060][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.633293][T28540] netlink: 'syz.1.6097': attribute type 1 has an invalid length. [ 514.655404][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.715822][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.738472][T28541] veth3: entered promiscuous mode [ 514.751273][T28541] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 514.841884][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.878229][T28562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6103'. [ 514.897288][T28562] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6103'. [ 514.969244][T28565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6103'. [ 515.178734][T28574] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6105'. [ 515.210230][T14008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.219423][T14008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.330172][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.363818][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.381216][T28580] netlink: 'syz.0.6106': attribute type 10 has an invalid length. [ 515.846016][T28612] lo speed is unknown, defaulting to 1000 [ 515.852684][T28612] lo speed is unknown, defaulting to 1000 [ 515.881066][T28612] lo speed is unknown, defaulting to 1000 [ 515.913849][T28616] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6117'. [ 515.931269][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.942185][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.950794][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.956820][T28612] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.972291][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.983194][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.067511][T28619] lo speed is unknown, defaulting to 1000 [ 516.159922][T28612] lo speed is unknown, defaulting to 1000 [ 516.175648][T28612] lo speed is unknown, defaulting to 1000 [ 516.229002][T28612] lo speed is unknown, defaulting to 1000 [ 516.243321][T28612] lo speed is unknown, defaulting to 1000 [ 516.270302][T28612] lo speed is unknown, defaulting to 1000 [ 516.361489][T28612] lo speed is unknown, defaulting to 1000 [ 516.391218][T28612] lo speed is unknown, defaulting to 1000 [ 516.401144][T28631] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6120'. [ 516.504090][T28619] chnl_net:caif_netlink_parms(): no params data found [ 516.586750][T28642] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 516.642409][T28650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6124'. [ 516.788256][T28662] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6128'. [ 516.885334][T28619] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.892634][T28619] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.905295][T28619] bridge_slave_0: entered allmulticast mode [ 516.916609][T28619] bridge_slave_0: entered promiscuous mode [ 516.926512][T28619] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.933996][T28619] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.943071][T28619] bridge_slave_1: entered allmulticast mode [ 516.964030][T28619] bridge_slave_1: entered promiscuous mode [ 517.029424][T28678] netlink: 'syz.1.6133': attribute type 2 has an invalid length. [ 517.037508][T28675] netlink: 'syz.1.6133': attribute type 2 has an invalid length. [ 517.060951][T28677] tipc: Enabling of bearer rejected, failed to enable media [ 517.076335][T28619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.178107][T28619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.310218][T28619] team0: Port device team_slave_0 added [ 517.362117][T28690] netlink: 'syz.0.6137': attribute type 1 has an invalid length. [ 517.386249][T28619] team0: Port device team_slave_1 added [ 517.589307][ T3000] veth0_to_bridge: left allmulticast mode [ 517.603653][ T3000] veth0_to_bridge: left promiscuous mode [ 517.611320][ T3000] bridge0: port 3(veth0_to_bridge) entered disabled state [ 517.637351][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.657117][ T3000] bridge_slave_0: left allmulticast mode [ 517.662800][ T3000] bridge_slave_0: left promiscuous mode [ 517.677546][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.972293][ T3000] bond4 (unregistering): (slave gretap1): Releasing active interface [ 518.033977][ T50] Bluetooth: hci3: command tx timeout [ 518.559311][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.575844][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.586526][ T3000] bond0 (unregistering): (slave team0): Releasing backup interface [ 518.596567][ T3000] bond0 (unregistering): Released all slaves [ 518.609072][ T3000] bond1 (unregistering): Released all slaves [ 518.623884][ T3000] bond2 (unregistering): Released all slaves [ 518.636396][ T3000] bond3 (unregistering): Released all slaves [ 518.649119][ T3000] bond4 (unregistering): Released all slaves [ 518.669655][ T3000] bond5 (unregistering): Released all slaves [ 518.682675][ T3000] bond6 (unregistering): Released all slaves [ 518.695941][ T3000] bond7 (unregistering): Released all slaves [ 518.714494][ T3000] bond8 (unregistering): Released all slaves [ 518.727618][ T3000] bond9 (unregistering): Released all slaves [ 518.740135][ T3000] bond10 (unregistering): Released all slaves [ 518.762034][T28619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.781589][T28619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.808829][T28619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.827858][T28714] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 518.871680][T28619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.914000][T28619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.940877][T28619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.964643][ T3000] : left promiscuous mode [ 519.066837][ T3000] ‚#{6c: left promiscuous mode [ 519.075159][T28747] netlink: 'syz.4.6150': attribute type 2 has an invalid length. [ 519.095019][T28747] __nla_validate_parse: 4 callbacks suppressed [ 519.095034][T28747] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6150'. [ 519.120373][T28753] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6151'. [ 519.137201][T28619] hsr_slave_0: entered promiscuous mode [ 519.159838][T28619] hsr_slave_1: entered promiscuous mode [ 519.175080][T28619] debugfs: 'hsr0' already exists in 'hsr' [ 519.185424][T28619] Cannot create hsr debugfs directory [ 519.191093][ T3000] tipc: Left network mode [ 519.659662][T28776] netlink: 'syz.0.6158': attribute type 12 has an invalid length. [ 519.882237][ T3000] hsr_slave_0: left promiscuous mode [ 519.895778][ T3000] hsr_slave_1: left promiscuous mode [ 519.922505][ T3000] pimreg (unregistering): left allmulticast mode [ 520.114169][ T50] Bluetooth: hci3: command tx timeout [ 520.192148][ T3000] team0 (unregistering): Port device team_slave_1 removed [ 520.222526][ T3000] team0 (unregistering): Port device team_slave_0 removed [ 520.308181][ T3000] lo (unregistering): left allmulticast mode [ 520.582827][T28830] sctp: [Deprecated]: syz.0.6164 (pid 28830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.582827][T28830] Use struct sctp_sack_info instead [ 520.585651][T28834] smc: net device caif0 applied user defined pnetid SYZ2 [ 520.937473][T28851] bond2: entered promiscuous mode [ 520.964541][T28851] bond2: entered allmulticast mode [ 520.970058][T28851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.978846][T28865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6172'. [ 521.068882][ T3000] IPVS: stop unused estimator thread 0... [ 521.185982][T28875] ipt_REJECT: TCP_RESET invalid for non-tcp [ 521.210827][T28875] netlink: 800 bytes leftover after parsing attributes in process `syz.3.6173'. [ 521.226451][T28877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6176'. [ 521.292826][T28619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 521.372271][T28886] syz.1.6178: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.403956][T28886] CPU: 0 UID: 0 PID: 28886 Comm: syz.1.6178 Not tainted syzkaller #0 PREEMPT(full) [ 521.403981][T28886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.404000][T28886] Call Trace: [ 521.404007][T28886] [ 521.404014][T28886] dump_stack_lvl+0xe8/0x150 [ 521.404040][T28886] warn_alloc+0x249/0x340 [ 521.404062][T28886] ? stack_trace_save+0xa9/0x100 [ 521.404087][T28886] ? __pfx_warn_alloc+0x10/0x10 [ 521.404112][T28886] ? kasan_save_track+0x4f/0x80 [ 521.404130][T28886] ? kasan_save_track+0x3e/0x80 [ 521.404146][T28886] ? __kasan_kmalloc+0x93/0xb0 [ 521.404163][T28886] ? __kmalloc_cache_noprof+0x31c/0x660 [ 521.404180][T28886] ? xskq_create+0x56/0x170 [ 521.404198][T28886] ? xsk_setsockopt+0x54c/0x990 [ 521.404213][T28886] ? do_sock_setsockopt+0x17c/0x1b0 [ 521.404230][T28886] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 521.404246][T28886] ? do_syscall_64+0x14d/0xf80 [ 521.404269][T28886] __vmalloc_node_range_noprof+0x132/0x1730 [ 521.404318][T28886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.404346][T28886] ? __kasan_kmalloc+0x93/0xb0 [ 521.404372][T28886] vmalloc_user_noprof+0xad/0xe0 [ 521.404392][T28886] ? xskq_create+0xbf/0x170 [ 521.404410][T28886] xskq_create+0xbf/0x170 [ 521.404430][T28886] xsk_init_queue+0xad/0x110 [ 521.404451][T28886] xsk_setsockopt+0x54c/0x990 [ 521.404471][T28886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.404488][T28886] ? __pfx_aa_sk_perm+0x10/0x10 [ 521.404513][T28886] ? aa_sock_opt_perm+0xff/0x1a0 [ 521.404538][T28886] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 521.404558][T28886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.404577][T28886] do_sock_setsockopt+0x17c/0x1b0 [ 521.404601][T28886] __x64_sys_setsockopt+0x13d/0x1b0 [ 521.404625][T28886] do_syscall_64+0x14d/0xf80 [ 521.404645][T28886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.404660][T28886] ? trace_irq_disable+0x37/0x100 [ 521.404678][T28886] ? clear_bhb_loop+0x40/0x90 [ 521.404698][T28886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.404721][T28886] RIP: 0033:0x7f32eef9bf79 [ 521.404737][T28886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.404752][T28886] RSP: 002b:00007f32efdb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 521.404771][T28886] RAX: ffffffffffffffda RBX: 00007f32ef215fa0 RCX: 00007f32eef9bf79 [ 521.404784][T28886] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 521.404795][T28886] RBP: 00007f32ef0327e0 R08: 0000000000000004 R09: 0000000000000000 [ 521.404805][T28886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.404816][T28886] R13: 00007f32ef216038 R14: 00007f32ef215fa0 R15: 00007ffe82d03ce8 [ 521.404845][T28886] [ 521.404856][T28886] Mem-Info: [ 521.539820][T28892] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6180'. [ 521.607935][T28886] active_anon:6190 inactive_anon:0 isolated_anon:0 [ 521.607935][T28886] active_file:2442 inactive_file:40344 isolated_file:0 [ 521.607935][T28886] unevictable:768 dirty:65 writeback:0 [ 521.607935][T28886] slab_reclaimable:12998 slab_unreclaimable:109087 [ 521.607935][T28886] mapped:29373 shmem:1372 pagetables:1384 [ 521.607935][T28886] sec_pagetables:0 bounce:0 [ 521.607935][T28886] kernel_misc_reclaimable:0 [ 521.607935][T28886] free:1308722 free_pcp:9991 free_cma:0 [ 521.634707][T28619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 521.637235][T28886] Node 0 active_anon:24760kB inactive_anon:0kB active_file:9768kB inactive_file:161180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117492kB dirty:260kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14612kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.781400][T28886] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.783557][T28619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 521.820082][T28886] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.851902][T28886] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 521.858552][T28886] Node 0 DMA32 free:1286912kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24740kB inactive_anon:0kB active_file:9768kB inactive_file:161180kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:39748kB local_pcp:18900kB free_cma:0kB [ 521.873835][T28619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 521.926609][T28886] lowmem_reserve[]: 0 0 0 0 0 [ 521.935889][T28886] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 522.044846][T28886] lowmem_reserve[]: 0 0 0 0 0 [ 522.049623][T28886] Node 1 Normal free:3933164kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.121304][T28886] lowmem_reserve[]: 0 0 0 0 0 [ 522.146485][T28886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.180491][T28886] Node 0 DMA32: 8765*4kB (UM) 7116*8kB (UME) 3392*16kB (UME) 782*32kB (UME) 203*64kB (UME) 127*128kB (UM) 296*256kB (UM) 240*512kB (UM) 166*1024kB (UE) 72*2048kB (UME) 139*4096kB (UM) = 1285972kB [ 522.196574][ T50] Bluetooth: hci3: command tx timeout [ 522.222087][T28886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.238617][T28886] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 7*16kB (UME) 5*32kB (UME) 9*64kB (UME) 5*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 957*4096kB (UM) = 3933164kB [ 522.270374][T28619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.287343][T28886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.300958][T28619] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.303860][T28886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.321998][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.329157][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.339311][T28886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.354032][T28886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.373983][T28886] 44153 total pagecache pages [ 522.377487][T28925] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 522.378723][T28886] 0 pages in swap cache [ 522.411671][T28886] Free swap = 124996kB [ 522.423791][T28886] Total swap = 124996kB [ 522.433208][T28926] syzkaller0: entered promiscuous mode [ 522.438229][T28886] 2097051 pages RAM [ 522.440765][T28926] syzkaller0: entered allmulticast mode [ 522.442653][T28886] 0 pages HighMem/MovableOnly [ 522.460838][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.468026][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.473945][T28886] 426703 pages reserved [ 522.494006][T28886] 0 pages cma reserved [ 524.273741][ T50] Bluetooth: hci3: command tx timeout [ 524.519989][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 524.529065][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'. [ 524.541808][T28995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6197'. [ 524.611480][T29002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6197'. [ 524.662287][T28619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.721246][T28619] veth0_vlan: entered promiscuous mode [ 524.750153][T28619] veth1_vlan: entered promiscuous mode [ 524.927154][T28619] veth0_macvtap: entered promiscuous mode [ 524.968039][T28619] veth1_macvtap: entered promiscuous mode [ 525.020370][T28619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.060847][T28619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.116512][T14011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.137879][T14011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.184401][T14011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.210526][T14011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.211358][T29030] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.315122][T14011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.323077][T14011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.400918][T14007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.415728][T14007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.691408][T29048] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 525.844335][T29056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.911226][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.925428][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.933407][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.944603][T29059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6216'. [ 525.959335][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.967889][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.996164][T29059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6216'. [ 526.038915][T29062] lo speed is unknown, defaulting to 1000 [ 526.072426][ T9088] lec:lec_start_xmit: lec0:No lecd attached [ 526.198476][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6220'. [ 526.339089][T14011] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 526.361775][T29083] tipc: Enabling of bearer rejected, media not registered [ 526.458665][T29062] chnl_net:caif_netlink_parms(): no params data found [ 526.537013][T14011] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 526.544034][T29089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6224'. [ 526.641767][T29087] netlink: 'syz.0.6223': attribute type 3 has an invalid length. [ 526.652370][T29087] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6223'. [ 526.760490][T14011] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 526.806799][T29104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.871188][T29120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6231'. [ 526.893147][T29062] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.937805][T29062] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.937814][T29125] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 526.939546][T29125] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 526.951950][T29062] bridge_slave_0: entered allmulticast mode [ 526.987513][T29062] bridge_slave_0: entered promiscuous mode [ 527.010159][T14011] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.088407][T29121] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 527.127260][T29121] bond3 (unregistering): Released all slaves [ 527.170870][T29062] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.219593][T29062] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.240430][T29062] bridge_slave_1: entered allmulticast mode [ 527.279194][T29062] bridge_slave_1: entered promiscuous mode [ 527.437633][T29062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.469137][T29062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.537552][T29138] syzkaller0: entered promiscuous mode [ 527.543160][T29138] syzkaller0: entered allmulticast mode [ 528.034605][ T5819] Bluetooth: hci1: command tx timeout [ 529.101386][T29062] team0: Port device team_slave_0 added [ 529.131655][T29062] team0: Port device team_slave_1 added [ 529.309507][T29062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.326106][T29062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.383990][T29062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.413499][T29161] syzkaller1: entered promiscuous mode [ 529.423412][T29161] syzkaller1: entered allmulticast mode [ 529.443096][T14011] bridge_slave_1: left allmulticast mode [ 529.450976][T14011] bridge_slave_1: left promiscuous mode [ 529.457228][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.466893][T14011] bridge_slave_0: left promiscuous mode [ 529.472645][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.562104][T14011] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 529.638304][T29181] __nla_validate_parse: 2 callbacks suppressed [ 529.638322][T29181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6245'. [ 529.667075][T14011] bond2 (unregistering): (slave gretap2): Releasing active interface [ 529.693930][T14011] bond10 (unregistering): (slave geneve3): Releasing active interface [ 529.693937][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6245'. [ 529.720125][T14011] bond5 (unregistering): (slave geneve2): Releasing active interface [ 529.908508][T14011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.918894][T14011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.928926][T14011] bond0 (unregistering): Released all slaves [ 529.938505][T14011] bond1 (unregistering): Released all slaves [ 529.953109][T14011] bond2 (unregistering): Released all slaves [ 529.968283][T14011] bond3 (unregistering): Released all slaves [ 529.985268][T14011] bond4 (unregistering): Released all slaves [ 529.998148][T14011] bond5 (unregistering): Released all slaves [ 530.013888][T14011] bond6 (unregistering): Released all slaves [ 530.029039][T14011] bond7 (unregistering): Released all slaves [ 530.049567][T14011] bond8 (unregistering): Released all slaves [ 530.061755][T14011] bond9 (unregistering): Released all slaves [ 530.079883][T14011] bond10 (unregistering): Released all slaves [ 530.093669][T14011] bond11 (unregistering): Released all slaves [ 530.106557][T14011] bond12 (unregistering): Released all slaves [ 530.114791][ T5819] Bluetooth: hci1: command tx timeout [ 530.128006][T14011] bond13 (unregistering): Released all slaves [ 530.150020][T29062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.157337][T29062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.187606][T29062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.272108][T14011] : left promiscuous mode [ 530.419785][T14011] tipc: Disabling bearer [ 530.445327][T14011] tipc: Left network mode [ 530.457290][T29062] hsr_slave_0: entered promiscuous mode [ 530.477100][T29062] hsr_slave_1: entered promiscuous mode [ 530.494535][T29062] debugfs: 'hsr0' already exists in 'hsr' [ 530.500294][T29062] Cannot create hsr debugfs directory [ 530.572071][T29198] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 530.672013][T29204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6253'. [ 530.760844][ T5819] block nbd4: Receive control failed (result -1) [ 530.769792][T29211] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6252'. [ 530.957207][T29224] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6256'. [ 530.987673][T29226] netlink: 'syz.0.6257': attribute type 7 has an invalid length. [ 531.134498][T29226] netlink: 'syz.0.6257': attribute type 7 has an invalid length. [ 531.400496][T29246] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6261'. [ 531.713635][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 531.721679][ C0] lec:lec_tx_timeout: lec0 [ 531.811676][T14011] hsr_slave_0: left promiscuous mode [ 531.822481][T14011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.838194][T14011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.929855][T14011] pimreg3 (unregistering): left allmulticast mode [ 531.962511][T14011] pim6reg527 (unregistering): left allmulticast mode [ 531.989451][T29283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6269'. [ 532.193770][ T5819] Bluetooth: hci1: command tx timeout [ 532.356431][T14011] smc: removing net device caif0 with user defined pnetid SYZ2 [ 532.379747][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6270'. [ 532.597932][T29305] bridge_slave_0: invalid flags given to default FDB implementation [ 532.726291][T29062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 532.781276][T29311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6274'. [ 532.788047][T29062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.822163][T29314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6273'. [ 532.841700][T29062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.928013][T29062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.329790][T29062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.378103][T29062] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.401089][T14010] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.408318][T14010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.535944][T14007] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.543116][T14007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.692272][T29062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.991490][T29062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.056137][T29062] veth0_vlan: entered promiscuous mode [ 534.071791][T29062] veth1_vlan: entered promiscuous mode [ 534.110247][T29062] veth0_macvtap: entered promiscuous mode [ 534.122911][T29062] veth1_macvtap: entered promiscuous mode [ 534.145954][T29062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.160584][T29062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.190407][T14011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.204428][T14011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.213571][T14011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.235277][T14011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.284224][ T5819] Bluetooth: hci1: command tx timeout [ 535.840108][T29331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.015109][T14007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.038231][T14007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.065471][T29433] vlan2: entered allmulticast mode [ 536.070718][T29433] hsr0: entered allmulticast mode [ 536.078122][T29433] hsr_slave_0: entered allmulticast mode [ 536.084093][T29433] hsr_slave_1: entered allmulticast mode [ 536.111745][T29435] xt_HMARK: spi-set and port-set can't be combined [ 536.129018][T14007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.153737][T14007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.380759][T29460] __nla_validate_parse: 1 callbacks suppressed [ 536.380778][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6298'. [ 536.398524][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6213'. [ 536.436217][T29459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6213'. [ 536.493184][T29463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.566029][T29472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6299'. [ 536.662021][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'. [ 536.903383][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.914405][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.923950][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.948289][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.955993][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.078124][T29486] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 537.202037][T29509] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 537.346078][T29513] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6311'. [ 537.439572][T29520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6310'. [ 537.576190][T14011] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.605214][T14011] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.648126][T29534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.867411][T14011] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.894922][T14011] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.012864][T14011] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.042360][T14011] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.066869][T29562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 538.090420][T29562] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.121722][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 538.145472][T14011] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.166509][T29567] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.190040][T14011] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.268590][T29574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6320'. [ 538.353151][T29574] syzkaller1: entered promiscuous mode [ 538.366060][T29574] syzkaller1: entered allmulticast mode [ 538.380465][ T5483] veth0_vlan: left promiscuous mode [ 538.420924][ T5483] veth0_vlan: entered promiscuous mode [ 538.475089][T29586] bond3: option resend_igmp: invalid value (32767) [ 538.481614][T29586] bond3: option resend_igmp: allowed values 0 - 255 [ 538.489852][T29586] bond3 (unregistering): Released all slaves [ 538.680308][T29489] chnl_net:caif_netlink_parms(): no params data found [ 538.891734][T14011] dummy0: left allmulticast mode [ 538.912739][T14011] bridge0: port 2(dummy0) entered disabled state [ 538.930727][T14011] h¡\—: left allmulticast mode [ 538.935814][T14011] h¡\—: left promiscuous mode [ 538.941889][T14011] bridge0: port 1(h¡\—) entered disabled state [ 539.075651][ T50] Bluetooth: hci4: command tx timeout [ 539.120095][T14011] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 539.128821][T14011] ip6erspan0 (unregistering): left allmulticast mode [ 539.152800][T14011] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 539.253197][T14011] dvmrp6 (unregistering): left allmulticast mode [ 539.262705][T14011] dvmrp1 (unregistering): left allmulticast mode [ 539.417500][T14011] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 539.425862][T14011] bond8 (unregistering): (slave bridge3): the permanent HWaddr of slave - 96:d6:4d:c8:0c:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 539.486560][T14011] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 539.597463][T14011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.607839][T14011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.618483][T14011] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 539.629182][T14011] bond0 (unregistering): Released all slaves [ 539.640318][T14011] bond1 (unregistering): Released all slaves [ 539.652683][T14011] bond2 (unregistering): Released all slaves [ 539.667264][T14011] bond3 (unregistering): (slave veth3): Releasing active interface [ 539.676953][T14011] bond3 (unregistering): Released all slaves [ 539.692544][T14011] bond4 (unregistering): Released all slaves [ 539.711793][T14011] bond5 (unregistering): Released all slaves [ 539.729986][T14011] bond6 (unregistering): (slave veth7): Releasing active interface [ 539.739499][T14011] bond6 (unregistering): (slave veth9): Releasing active interface [ 539.752844][T14011] bond6 (unregistering): Released all slaves [ 539.766449][T14011] bond7 (unregistering): Released all slaves [ 539.778997][T14011] bond8 (unregistering): Released all slaves [ 539.791402][T14011] bond9 (unregistering): Released all slaves [ 539.848062][T29606] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 539.884489][T29606] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 539.993296][T14011] tipc: Disabling bearer [ 540.018453][T14011] tipc: Left network mode [ 540.084453][T29489] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.091613][T29489] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.104262][T29489] bridge_slave_0: entered allmulticast mode [ 540.137379][T29489] bridge_slave_0: entered promiscuous mode [ 540.185981][T29489] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.203365][T29489] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.231295][T29489] bridge_slave_1: entered allmulticast mode [ 540.257234][T29489] bridge_slave_1: entered promiscuous mode [ 540.263501][T29640] netlink: 'syz.2.6340': attribute type 11 has an invalid length. [ 540.287322][T29640] netlink: 'syz.2.6340': attribute type 5 has an invalid length. [ 540.590467][T29489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.617896][T29489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.797096][T29664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.929858][T29489] team0: Port device team_slave_0 added [ 540.952826][T29489] team0: Port device team_slave_1 added [ 541.081796][T29489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.099294][T29489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.155079][ T50] Bluetooth: hci4: command tx timeout [ 541.161897][T29489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.204824][T29682] syzkaller0: entered promiscuous mode [ 541.210366][T29682] syzkaller0: entered allmulticast mode [ 541.241906][T29489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.249176][T29489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.278493][T29489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.331200][T29698] delete_channel: no stack [ 541.398577][T29698] xt_hashlimit: size too large, truncated to 1048576 [ 541.491085][T29489] hsr_slave_0: entered promiscuous mode [ 541.501308][T29489] hsr_slave_1: entered promiscuous mode [ 541.516835][T29489] debugfs: 'hsr0' already exists in 'hsr' [ 541.522565][T29489] Cannot create hsr debugfs directory [ 541.578302][T29707] __nla_validate_parse: 9 callbacks suppressed [ 541.578327][T29707] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6356'. [ 541.701140][T29717] x_tables: duplicate underflow at hook 1 [ 541.726202][T29717] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 541.965027][T29729] Cannot find set identified by id 0 to match [ 542.030753][T14011] hsr_slave_0: left promiscuous mode [ 542.046890][T14011] 0·: left promiscuous mode [ 542.069957][T14011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.089505][T14011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.097516][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 542.117436][T14011] veth1_macvtap: left promiscuous mode [ 542.122954][T14011] veth0_macvtap: left promiscuous mode [ 542.131787][T29740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6364'. [ 542.141637][T14011] veth1_vlan: left promiscuous mode [ 542.360815][T14011] team0 (unregistering): Port device batadv1 removed [ 542.527897][T14011] team0 (unregistering): Port device team_slave_1 removed [ 542.542326][T14011] team0 (unregistering): Port device team_slave_0 removed [ 542.900544][T29774] netlink: 1620 bytes leftover after parsing attributes in process `syz.4.6367'. [ 543.003417][T29764] netlink: 'syz.4.6367': attribute type 4 has an invalid length. [ 543.019315][T29780] IPVS: persistence engine module ip_vs_pe_À not found [ 543.120114][T29788] lo: entered promiscuous mode [ 543.127689][T29788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.223462][T29792] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6372'. [ 543.246233][ T50] Bluetooth: hci4: command tx timeout [ 543.286147][T29792] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6372'. [ 543.369786][T29801] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.375499][T29797] ipt_REJECT: ECHOREPLY no longer supported. [ 543.409468][T29792] netlink: 'syz.1.6372': attribute type 1 has an invalid length. [ 543.455370][T14011] IPVS: stop unused estimator thread 0... [ 543.528679][T29808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6377'. [ 543.611922][T29811] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6376'. [ 543.628073][T29810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6376'. [ 543.931545][T29829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 543.948153][T29835] netlink: 'syz.1.6382': attribute type 11 has an invalid length. [ 543.982161][T29837] netlink: 'syz.1.6382': attribute type 11 has an invalid length. [ 544.112076][T29489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 544.156157][T29489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.187317][T29489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.219761][T29489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.230652][T29853] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 544.239529][ T5895] IPVS: starting estimator thread 0... [ 544.301227][T29858] netlink: 'syz.4.6389': attribute type 32 has an invalid length. [ 544.333816][T29856] IPVS: using max 33 ests per chain, 79200 per kthread [ 544.557437][T29489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.649766][T29489] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.684868][T14009] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.691994][T14009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.745905][T14009] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.753062][T14009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.945671][T29889] bond1: Removing last ns target with arp_interval on [ 545.007711][T29896] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.313977][ T50] Bluetooth: hci4: command tx timeout [ 545.427397][T29489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.550857][T29489] veth0_vlan: entered promiscuous mode [ 545.624934][T29489] veth1_vlan: entered promiscuous mode [ 545.728872][T29489] veth0_macvtap: entered promiscuous mode [ 545.742218][T29489] veth1_macvtap: entered promiscuous mode [ 545.786812][T29489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.822203][T29489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.878629][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.916314][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.947844][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.997172][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.239512][T14009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.266187][T14009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.376326][T29926] pim6reg1: entered promiscuous mode [ 546.381655][T29926] pim6reg1: entered allmulticast mode [ 546.410837][T14009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.437857][T14009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.581146][T29970] geneve2: entered promiscuous mode [ 546.701394][T29983] IPv6: sit1: Disabled Multicast RS [ 546.731307][T29987] __nla_validate_parse: 7 callbacks suppressed [ 546.731325][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 546.763147][T29987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6417'. [ 546.773012][T29983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6301'. [ 546.932362][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 547.026671][T29993] netlink: 'syz.0.6419': attribute type 10 has an invalid length. [ 547.063852][T29993] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.071714][T29993] bridge_slave_1: left allmulticast mode [ 547.076089][T30000] netlink: 'syz.2.6421': attribute type 1 has an invalid length. [ 547.117132][T29993] bridge_slave_1: left promiscuous mode [ 547.125237][T29993] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.152933][T29993] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 547.204663][T29996] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 547.250669][T30005] tipc: Invalid UDP bearer configuration [ 547.250723][T30005] tipc: Enabling of bearer rejected, failed to enable media [ 547.288464][T30018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6424'. [ 547.661759][T30044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6430'. [ 548.014799][T30070] netlink: 'syz.4.6436': attribute type 11 has an invalid length. [ 548.022664][T30070] netlink: 'syz.4.6436': attribute type 11 has an invalid length. [ 548.077068][T30070] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6436'. [ 548.124064][T30081] netlink: 'syz.1.6441': attribute type 4 has an invalid length. [ 548.381766][T30091] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6442'. [ 548.401647][T30094] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 548.442589][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6444'. [ 548.616847][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6448'. [ 548.632709][T30112] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 548.690881][T30115] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6449'. [ 548.701184][T30110] : entered promiscuous mode [ 548.860756][T30122] syzkaller0: entered promiscuous mode [ 548.880159][T30122] syzkaller0: entered allmulticast mode [ 550.815067][T30179] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 551.130195][T30208] tipc: Enabling of bearer rejected, failed to enable media [ 551.141697][T30207] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 551.737399][T30240] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 551.769862][T30240] bond3 (unregistering): Released all slaves [ 551.892993][T30260] __nla_validate_parse: 5 callbacks suppressed [ 551.893009][T30260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6485'. [ 551.916370][T30262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6486'. [ 551.946494][T30260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6485'. [ 552.093206][T30276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6488'. [ 552.128656][T30276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6488'. [ 552.463403][T30309] syzkaller1: entered promiscuous mode [ 552.469732][T30309] syzkaller1: entered allmulticast mode [ 552.496602][T30304] nbd5: detected capacity change from 0 to 127 [ 552.522535][T30308] netlink: 'syz.2.6496': attribute type 4 has an invalid length. [ 552.551136][T30308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6496'. [ 552.607438][T30308] openvswitch: netlink: Invalid VLAN frame [ 552.736291][ T50] block nbd5: Receive control failed (result -104) [ 552.772963][T30327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.025036][T30346] tipc: Started in network mode [ 553.040054][T30346] tipc: Node identity c2e4b4aab9a5, cluster identity 4711 [ 553.053785][T30346] tipc: Enabled bearer , priority 0 [ 553.084075][T30346] syzkaller0: entered promiscuous mode [ 553.089571][T30346] syzkaller0: entered allmulticast mode [ 553.133433][T30346] tipc: Resetting bearer [ 553.177692][T30343] tipc: Resetting bearer [ 553.234434][T30343] tipc: Disabling bearer [ 553.245230][T30362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6506'. [ 553.282706][T30353] team_slave_0: entered promiscuous mode [ 553.288471][T30353] team_slave_1: entered promiscuous mode [ 553.296555][T30353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.324165][T30368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6509'. [ 553.329482][T30353] team0: Device macvlan2 is already an upper device of the team interface [ 553.351048][T30353] team_slave_0: left promiscuous mode [ 553.356602][T30353] team_slave_1: left promiscuous mode [ 553.385093][T30360] lo: MTU too low for tipc bearer [ 553.390197][T30360] tipc: Enabling of bearer rejected, failed to enable media [ 553.417024][T30360] netlink: 'syz.1.6509': attribute type 7 has an invalid length. [ 553.493045][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 553.549891][T30379] syzkaller0: entered promiscuous mode [ 553.555507][T30379] syzkaller0: entered allmulticast mode [ 553.976026][T30411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.004819][T30414] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 554.077322][T30414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.119933][T30426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'. [ 554.141482][T30420] netlink: 'syz.2.6524': attribute type 1 has an invalid length. [ 554.156623][T30411] bond1: (slave veth3): Enslaving as an active interface with a down link [ 554.230251][T30414] bond1: (slave veth0_to_bond): making interface the new active one [ 554.239612][T30414] veth0_to_bond: entered promiscuous mode [ 554.246104][T30414] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 554.277904][T30420] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 554.305423][ T35] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 554.328783][ T35] veth0_to_bond: left promiscuous mode [ 554.369701][ T35] bond1: now running without any active interface! [ 554.554060][T30449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.921924][T30483] netlink: 'syz.4.6539': attribute type 10 has an invalid length. [ 555.001243][T30483] team0: Device veth1_macvtap failed to register rx_handler [ 555.052944][T30493] syzkaller0: entered promiscuous mode [ 555.079635][T30493] syzkaller0: entered allmulticast mode [ 555.312405][T30517] netlink: 'syz.1.6545': attribute type 1 has an invalid length. [ 555.325816][T30517] netlink: 'syz.1.6545': attribute type 1 has an invalid length. [ 555.333939][T30517] netlink: 'syz.1.6545': attribute type 1 has an invalid length. [ 555.551170][T30535] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 555.683161][T30543] hsr_slave_0: left promiscuous mode [ 555.691777][T30543] hsr_slave_1: left promiscuous mode [ 555.740588][T30548] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 555.794967][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 555.916352][T30557] "syz.3.6560" (30557) uses obsolete ecb(arc4) skcipher [ 555.999680][T30561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.025637][T30564] geneve3: entered promiscuous mode [ 556.044256][T30568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.587116][T30614] SET target dimension over the limit! [ 556.630960][T30621] lo speed is unknown, defaulting to 1000 [ 556.656193][T30621] lo speed is unknown, defaulting to 1000 [ 556.683092][T30621] lo speed is unknown, defaulting to 1000 [ 556.831823][T30630] netlink: 'syz.3.6582': attribute type 10 has an invalid length. [ 556.913631][T30630] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 557.016320][T30621] infiniband syz0: set down [ 557.020920][ T9] lo speed is unknown, defaulting to 1000 [ 557.026789][T30621] infiniband syz0: added lo [ 557.062701][T30621] RDS/IB: syz0: added [ 557.068040][T30621] smc: adding ib device syz0 with port count 1 [ 557.075049][T30621] smc: ib device syz0 port 1 has no pnetid [ 557.111929][ T9] lo speed is unknown, defaulting to 1000 [ 557.115818][T30663] netlink: 'syz.2.6583': attribute type 1 has an invalid length. [ 557.128664][T30621] lo speed is unknown, defaulting to 1000 [ 557.172856][T30663] __nla_validate_parse: 13 callbacks suppressed [ 557.172872][T30663] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6583'. [ 557.562375][T30698] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 557.838359][T30621] lo speed is unknown, defaulting to 1000 [ 558.075614][ T56] IPVS: starting estimator thread 0... [ 558.108113][T30717] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 558.136230][T30717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6595'. [ 558.213718][T30723] IPVS: using max 29 ests per chain, 69600 per kthread [ 558.262231][T30736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6599'. [ 558.272657][T30736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6599'. [ 558.359062][T30621] lo speed is unknown, defaulting to 1000 [ 558.407174][T30743] netlink: 'syz.3.6601': attribute type 3 has an invalid length. [ 558.582351][T30750] x_tables: unsorted entry at hook 2 [ 558.644996][T30752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.880815][T30621] lo speed is unknown, defaulting to 1000 [ 558.927069][T30771] netlink: 'syz.2.6610': attribute type 1 has an invalid length. [ 559.061450][T30771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.091643][T30771] bond3: (slave bond4): making interface the new active one [ 559.104419][T30771] bond3: (slave bond4): Enslaving as an active interface with an up link [ 559.128609][T30778] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 559.132649][T30771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6610'. [ 559.197181][T30771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.243417][T30621] lo speed is unknown, defaulting to 1000 [ 559.262935][T30790] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6615'. [ 559.420218][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 559.465583][T30796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.632198][T30621] lo speed is unknown, defaulting to 1000 [ 559.750019][T30823] netlink: 'syz.0.6625': attribute type 11 has an invalid length. [ 559.760876][T30823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6625'. [ 559.827520][T30621] lo speed is unknown, defaulting to 1000 [ 562.329071][T30807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.472528][T30832] netlink: 'syz.3.6627': attribute type 4 has an invalid length. [ 562.490854][T30832] netlink: 193176 bytes leftover after parsing attributes in process `syz.3.6627'. [ 562.524489][T30832] netlink: 'syz.3.6627': attribute type 33 has an invalid length. [ 562.525781][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6631'. [ 562.559280][ T56] IPVS: starting estimator thread 0... [ 562.566607][T30832] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6627'. [ 562.583977][T30840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.634802][T30844] netlink: 'syz.2.6633': attribute type 13 has an invalid length. [ 562.664973][T30839] IPVS: using max 32 ests per chain, 76800 per kthread [ 562.677397][T30844] gretap0: refused to change device tx_queue_len [ 562.685750][T30844] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 562.762322][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 563.096750][T30862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6638'. [ 563.124595][T30877] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 563.194242][T30879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6643'. [ 563.475399][T30886] [ 563.477765][T30886] ====================================================== [ 563.484779][T30886] WARNING: possible circular locking dependency detected [ 563.491798][T30886] syzkaller #0 Not tainted [ 563.496196][T30886] ------------------------------------------------------ [ 563.503194][T30886] syz.4.6647/30886 is trying to acquire lock: [ 563.509267][T30886] ffff888025cc5b68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 563.518740][T30886] [ 563.518740][T30886] but task is already holding lock: [ 563.526186][T30886] ffff888025cc5628 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 563.536372][T30886] [ 563.536372][T30886] which lock already depends on the new lock. [ 563.536372][T30886] [ 563.546763][T30886] [ 563.546763][T30886] the existing dependency chain (in reverse order) is: [ 563.555762][T30886] [ 563.555762][T30886] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 563.564353][T30886] blk_alloc_queue+0x546/0x680 [ 563.569627][T30886] __blk_mq_alloc_disk+0x197/0x390 [ 563.575243][T30886] nbd_dev_add+0x499/0xb50 [ 563.580161][T30886] nbd_init+0x168/0x1f0 [ 563.584824][T30886] do_one_initcall+0x250/0x840 [ 563.590096][T30886] do_initcall_level+0x104/0x190 [ 563.595581][T30886] do_initcalls+0x59/0xa0 [ 563.600417][T30886] kernel_init_freeable+0x2a6/0x3d0 [ 563.606121][T30886] kernel_init+0x1d/0x1d0 [ 563.610952][T30886] ret_from_fork+0x51e/0xb90 [ 563.616044][T30886] ret_from_fork_asm+0x1a/0x30 [ 563.621328][T30886] [ 563.621328][T30886] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 563.628535][T30886] fs_reclaim_acquire+0x71/0x100 [ 563.633994][T30886] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 563.640334][T30886] __alloc_skb+0x1d0/0x7d0 [ 563.645259][T30886] __ip6_append_data+0x2a44/0x3c50 [ 563.650876][T30886] ip6_append_data+0x10f/0x280 [ 563.656141][T30886] rawv6_sendmsg+0x12d3/0x18e0 [ 563.661413][T30886] ____sys_sendmsg+0x894/0xad0 [ 563.666680][T30886] ___sys_sendmsg+0x2a5/0x360 [ 563.671864][T30886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 563.677307][T30886] do_syscall_64+0x14d/0xf80 [ 563.682407][T30886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.688803][T30886] [ 563.688803][T30886] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 563.696518][T30886] lock_sock_nested+0x48/0x100 [ 563.701785][T30886] inet_shutdown+0x6a/0x390 [ 563.706796][T30886] nbd_mark_nsock_dead+0x2e9/0x560 [ 563.712425][T30886] recv_work+0x1bf4/0x1d00 [ 563.717358][T30886] process_scheduled_works+0xaec/0x17a0 [ 563.723423][T30886] worker_thread+0xa50/0xfc0 [ 563.728535][T30886] kthread+0x388/0x470 [ 563.733121][T30886] ret_from_fork+0x51e/0xb90 [ 563.738223][T30886] ret_from_fork_asm+0x1a/0x30 [ 563.743501][T30886] [ 563.743501][T30886] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 563.751132][T30886] __mutex_lock+0x19f/0x1300 [ 563.756236][T30886] nbd_queue_rq+0x37b/0x1100 [ 563.761331][T30886] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 563.767389][T30886] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 563.774236][T30886] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 563.780727][T30886] blk_mq_run_hw_queue+0x348/0x4f0 [ 563.786431][T30886] blk_mq_dispatch_list+0xd16/0xe10 [ 563.792153][T30886] blk_mq_flush_plug_list+0x48d/0x570 [ 563.798037][T30886] __blk_flush_plug+0x3ed/0x4d0 [ 563.803401][T30886] __submit_bio+0x28d/0x580 [ 563.808416][T30886] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 563.814558][T30886] block_read_full_folio+0x599/0x830 [ 563.820440][T30886] filemap_read_folio+0x137/0x3b0 [ 563.825979][T30886] do_read_cache_folio+0x358/0x590 [ 563.831606][T30886] read_part_sector+0xb6/0x2b0 [ 563.836876][T30886] adfspart_check_ICS+0xa5/0xa40 [ 563.842319][T30886] bdev_disk_changed+0x7ba/0x1550 [ 563.847845][T30886] blkdev_get_whole+0x380/0x510 [ 563.853208][T30886] bdev_open+0x31e/0xd30 [ 563.857952][T30886] blkdev_open+0x470/0x610 [ 563.862871][T30886] do_dentry_open+0x785/0x14e0 [ 563.868143][T30886] vfs_open+0x3b/0x340 [ 563.872713][T30886] path_openat+0x2e08/0x3860 [ 563.877819][T30886] do_file_open+0x23e/0x4a0 [ 563.882841][T30886] do_sys_openat2+0x113/0x200 [ 563.888028][T30886] __x64_sys_openat+0x138/0x170 [ 563.893400][T30886] do_syscall_64+0x14d/0xf80 [ 563.898516][T30886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.904926][T30886] [ 563.904926][T30886] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 563.912128][T30886] __mutex_lock+0x19f/0x1300 [ 563.917233][T30886] nbd_queue_rq+0xc6/0x1100 [ 563.922242][T30886] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 563.928293][T30886] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 563.935128][T30886] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 563.941618][T30886] blk_mq_run_hw_queue+0x348/0x4f0 [ 563.947231][T30886] blk_mq_dispatch_list+0xd16/0xe10 [ 563.952934][T30886] blk_mq_flush_plug_list+0x48d/0x570 [ 563.958811][T30886] __blk_flush_plug+0x3ed/0x4d0 [ 563.964195][T30886] __submit_bio+0x28d/0x580 [ 563.969204][T30886] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 563.975338][T30886] block_read_full_folio+0x599/0x830 [ 563.981133][T30886] filemap_read_folio+0x137/0x3b0 [ 563.986665][T30886] do_read_cache_folio+0x358/0x590 [ 563.992286][T30886] read_part_sector+0xb6/0x2b0 [ 563.997556][T30886] adfspart_check_ICS+0xa5/0xa40 [ 564.003000][T30886] bdev_disk_changed+0x7ba/0x1550 [ 564.008524][T30886] blkdev_get_whole+0x380/0x510 [ 564.013884][T30886] bdev_open+0x31e/0xd30 [ 564.018627][T30886] blkdev_open+0x470/0x610 [ 564.023549][T30886] do_dentry_open+0x785/0x14e0 [ 564.028824][T30886] vfs_open+0x3b/0x340 [ 564.033397][T30886] path_openat+0x2e08/0x3860 [ 564.038503][T30886] do_file_open+0x23e/0x4a0 [ 564.043519][T30886] do_sys_openat2+0x113/0x200 [ 564.048698][T30886] __x64_sys_openat+0x138/0x170 [ 564.054055][T30886] do_syscall_64+0x14d/0xf80 [ 564.059151][T30886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.065552][T30886] [ 564.065552][T30886] -> #1 (set->srcu){.+.+}-{0:0}: [ 564.072660][T30886] __synchronize_srcu+0xca/0x3e0 [ 564.078188][T30886] elevator_switch+0x1e8/0x7a0 [ 564.083455][T30886] elevator_change+0x2cc/0x450 [ 564.088722][T30886] elevator_set_default+0x36c/0x430 [ 564.094425][T30886] blk_register_queue+0x34e/0x3f0 [ 564.099955][T30886] __add_disk+0x677/0xd50 [ 564.104790][T30886] add_disk_fwnode+0xfb/0x480 [ 564.109974][T30886] nbd_dev_add+0x72c/0xb50 [ 564.114892][T30886] nbd_init+0x168/0x1f0 [ 564.119553][T30886] do_one_initcall+0x250/0x840 [ 564.124823][T30886] do_initcall_level+0x104/0x190 [ 564.130267][T30886] do_initcalls+0x59/0xa0 [ 564.135113][T30886] kernel_init_freeable+0x2a6/0x3d0 [ 564.140821][T30886] kernel_init+0x1d/0x1d0 [ 564.145660][T30886] ret_from_fork+0x51e/0xb90 [ 564.150756][T30886] ret_from_fork_asm+0x1a/0x30 [ 564.156032][T30886] [ 564.156032][T30886] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 564.163834][T30886] __lock_acquire+0x15a5/0x2cf0 [ 564.169188][T30886] lock_acquire+0x106/0x330 [ 564.174193][T30886] __mutex_lock+0x19f/0x1300 [ 564.179291][T30886] elevator_change+0x1b3/0x450 [ 564.184559][T30886] elevator_set_none+0xb5/0x140 [ 564.189944][T30886] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 564.196260][T30886] nbd_start_device+0x17f/0xb10 [ 564.201614][T30886] nbd_genl_connect+0x165b/0x1cf0 [ 564.207138][T30886] genl_family_rcv_msg_doit+0x22a/0x330 [ 564.213195][T30886] genl_rcv_msg+0x61c/0x7a0 [ 564.218204][T30886] netlink_rcv_skb+0x232/0x4b0 [ 564.223469][T30886] genl_rcv+0x28/0x40 [ 564.227952][T30886] netlink_unicast+0x80f/0x9b0 [ 564.233229][T30886] netlink_sendmsg+0x813/0xb40 [ 564.238502][T30886] ____sys_sendmsg+0xa68/0xad0 [ 564.243780][T30886] ___sys_sendmsg+0x2a5/0x360 [ 564.248964][T30886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 564.254405][T30886] do_syscall_64+0x14d/0xf80 [ 564.259500][T30886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.265893][T30886] [ 564.265893][T30886] other info that might help us debug this: [ 564.265893][T30886] [ 564.276100][T30886] Chain exists of: [ 564.276100][T30886] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 564.276100][T30886] [ 564.289822][T30886] Possible unsafe locking scenario: [ 564.289822][T30886] [ 564.297256][T30886] CPU0 CPU1 [ 564.302601][T30886] ---- ---- [ 564.307947][T30886] lock(&q->q_usage_counter(io)#55); [ 564.313311][T30886] lock(fs_reclaim); [ 564.319794][T30886] lock(&q->q_usage_counter(io)#55); [ 564.327679][T30886] lock(&q->elevator_lock); [ 564.332262][T30886] [ 564.332262][T30886] *** DEADLOCK *** [ 564.332262][T30886] [ 564.340395][T30886] 6 locks held by syz.4.6647/30886: [ 564.345572][T30886] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.353746][T30886] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.362693][T30886] #2: ffff88802678f1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 564.374075][T30886] #3: ffff88802678f0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 564.385024][T30886] #4: ffff888025cc5628 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 564.395631][T30886] #5: ffff888025cc5660 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 564.406493][T30886] [ 564.406493][T30886] stack backtrace: [ 564.412364][T30886] CPU: 0 UID: 0 PID: 30886 Comm: syz.4.6647 Not tainted syzkaller #0 PREEMPT(full) [ 564.412382][T30886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.412393][T30886] Call Trace: [ 564.412400][T30886] [ 564.412408][T30886] dump_stack_lvl+0xe8/0x150 [ 564.412429][T30886] print_circular_bug+0x2e1/0x300 [ 564.412450][T30886] check_noncircular+0x12e/0x150 [ 564.412470][T30886] __lock_acquire+0x15a5/0x2cf0 [ 564.412493][T30886] ? elevator_change+0x1b3/0x450 [ 564.412508][T30886] lock_acquire+0x106/0x330 [ 564.412522][T30886] ? elevator_change+0x1b3/0x450 [ 564.412542][T30886] __mutex_lock+0x19f/0x1300 [ 564.412561][T30886] ? elevator_change+0x1b3/0x450 [ 564.412578][T30886] ? rcu_is_watching+0x15/0xb0 [ 564.412595][T30886] ? elevator_change+0x1b3/0x450 [ 564.412611][T30886] ? __pfx___mutex_lock+0x10/0x10 [ 564.412629][T30886] ? enable_work+0x17f/0x230 [ 564.412646][T30886] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.412667][T30886] ? __cancel_work_sync+0xf7/0x110 [ 564.412685][T30886] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 564.412704][T30886] elevator_change+0x1b3/0x450 [ 564.412721][T30886] elevator_set_none+0xb5/0x140 [ 564.412737][T30886] ? __pfx_elevator_set_none+0x10/0x10 [ 564.412753][T30886] ? xa_load+0x1db/0x210 [ 564.412774][T30886] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 564.412797][T30886] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 564.412815][T30886] ? kernfs_add_one+0x477/0x5c0 [ 564.412835][T30886] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 564.412857][T30886] ? sysfs_add_file_mode_ns+0x259/0x300 [ 564.412877][T30886] nbd_start_device+0x17f/0xb10 [ 564.412894][T30886] ? device_create_file+0xf4/0x1b0 [ 564.412910][T30886] nbd_genl_connect+0x165b/0x1cf0 [ 564.412928][T30886] ? __pfx_nbd_genl_connect+0x10/0x10 [ 564.412946][T30886] ? rcu_is_watching+0x15/0xb0 [ 564.412963][T30886] ? __nla_parse+0x40/0x60 [ 564.412978][T30886] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 564.413004][T30886] genl_family_rcv_msg_doit+0x22a/0x330 [ 564.413026][T30886] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 564.413048][T30886] ? __lock_acquire+0x6b5/0x2cf0 [ 564.413065][T30886] genl_rcv_msg+0x61c/0x7a0 [ 564.413085][T30886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.413102][T30886] ? __pfx_nbd_genl_connect+0x10/0x10 [ 564.413120][T30886] netlink_rcv_skb+0x232/0x4b0 [ 564.413134][T30886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.413152][T30886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.413165][T30886] ? genl_rcv+0x19/0x40 [ 564.413187][T30886] ? down_read+0x272/0x2e0 [ 564.413206][T30886] ? genl_rcv+0xd/0x40 [ 564.413222][T30886] genl_rcv+0x28/0x40 [ 564.413238][T30886] netlink_unicast+0x80f/0x9b0 [ 564.413263][T30886] ? __pfx_netlink_unicast+0x10/0x10 [ 564.413283][T30886] ? netlink_sendmsg+0x650/0xb40 [ 564.413296][T30886] ? skb_put+0x11b/0x210 [ 564.413314][T30886] netlink_sendmsg+0x813/0xb40 [ 564.413332][T30886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.413348][T30886] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.413367][T30886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.413388][T30886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.413402][T30886] ____sys_sendmsg+0xa68/0xad0 [ 564.413420][T30886] ? __might_fault+0xaf/0x130 [ 564.413439][T30886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.413459][T30886] ? import_iovec+0x73/0xa0 [ 564.413475][T30886] ___sys_sendmsg+0x2a5/0x360 [ 564.413492][T30886] ? __lock_acquire+0x6b5/0x2cf0 [ 564.413508][T30886] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.413528][T30886] ? futex_wake+0x4ac/0x580 [ 564.413553][T30886] ? __fget_files+0x2a/0x420 [ 564.413567][T30886] ? __fget_files+0x3a0/0x420 [ 564.413586][T30886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 564.413608][T30886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.413629][T30886] ? rcu_is_watching+0x15/0xb0 [ 564.413649][T30886] do_syscall_64+0x14d/0xf80 [ 564.413667][T30886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.413681][T30886] ? trace_irq_disable+0x37/0x100 [ 564.413698][T30886] ? clear_bhb_loop+0x40/0x90 [ 564.413713][T30886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.413728][T30886] RIP: 0033:0x7f369119bf79 [ 564.413743][T30886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.413757][T30886] RSP: 002b:00007f36920ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.413773][T30886] RAX: ffffffffffffffda RBX: 00007f3691415fa0 RCX: 00007f369119bf79 [ 564.413784][T30886] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 564.413795][T30886] RBP: 00007f36912327e0 R08: 0000000000000000 R09: 0000000000000000 [ 564.413805][T30886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.413815][T30886] R13: 00007f3691416038 R14: 00007f3691415fa0 R15: 00007ffe2a8e19a8 [ 564.413832][T30886] [ 564.988019][ T50] block nbd6: Receive control failed (result -32) [ 564.996253][ T50] block nbd6: Receive control failed (result -32) [ 565.035754][T30886] nbd6: detected capacity change from 0 to 127 [ 565.042825][ T5807] block nbd6: Dead connection, failed to find a fallback [ 565.050121][ T5807] block nbd6: shutting down sockets [ 565.056235][ T5807] blk_print_req_error: 138 callbacks suppressed [ 565.056251][ T5807] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.073935][ T5807] buffer_io_error: 138 callbacks suppressed [ 565.073949][ T5807] Buffer I/O error on dev nbd6, logical block 0, async page read [ 565.092506][ T5807] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.102278][ T5807] Buffer I/O error on dev nbd6, logical block 1, async page read [ 565.110191][ T5807] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.119708][ T5807] Buffer I/O error on dev nbd6, logical block 2, async page read [ 565.127824][ T5807] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.137341][ T5807] Buffer I/O error on dev nbd6, logical block 3, async page read [ 565.145180][ T5807] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.155735][ T5807] Buffer I/O error on dev nbd6, logical block 0, async page read [ 565.163506][ T5807] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.173096][ T5807] Buffer I/O error on dev nbd6, logical block 1, async page read [ 565.180927][ T5807] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.190672][ T5807] Buffer I/O error on dev nbd6, logical block 2, async page read [ 565.198493][ T5807] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.208068][ T5807] Buffer I/O error on dev nbd6, logical block 3, async page read [ 565.216141][ T5807] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.225656][ T5807] Buffer I/O error on dev nbd6, logical block 0, async page read [ 565.233423][ T5807] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 565.242954][ T5807] Buffer I/O error on dev nbd6, logical block 1, async page read [ 565.251480][ T5807] ldm_validate_partition_table(): Disk read failed. [ 565.259143][ T5807] Dev nbd6: unable to read RDB block 0 [ 565.265036][ T5807] nbd6: unable to read partition table [ 565.273243][ T5807] ldm_validate_partition_table(): Disk read failed. [ 565.280432][ T5807] Dev nbd6: unable to read RDB block 0 [ 565.286410][ T5807] nbd6: unable to read partition table [ 567.773716][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.781722][ C0] lec:lec_tx_timeout: lec0