last executing test programs: 2.675528835s ago: executing program 3 (id=6479): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) 2.212381371s ago: executing program 3 (id=6485): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0x8007, 0x6, 0x5, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x80, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x4, [{@broadcast, 0x1}, {@broadcast, 0x10000}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0x8007, 0x6, 0x5, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x80, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x4, [{@broadcast, 0x1}, {@broadcast, 0x10000}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getroute={0x68, 0x1a, 0x4, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x20, 0x5, 0xfd, 0x2, 0xff, 0x5, 0x100}, [@RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0x14, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xd, 0x2, '#(@-+$\\,\x00'}}}, @RTA_EXPIRES={0x8, 0x17, 0x483}, @RTA_IIF={0x8, 0x3, r1}, @RTA_EXPIRES={0x8, 0x17, 0x3ff}, @RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x81) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) 2.098511041s ago: executing program 3 (id=6487): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x7, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x45c, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x10000, 0x100, 0xb12, 0x10001, 0x800, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xffff, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xc, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x3, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) 1.93124219s ago: executing program 2 (id=6492): r0 = socket(0x2b, 0x3, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x9, 0x4) 1.916730328s ago: executing program 4 (id=6493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) connect$ax25(r4, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000140)={r2, &(0x7f0000000000)=':[(\x00', 0x80, &(0x7f0000000040)={@align=0x200, {0x2, 0x3ff, 0xa, 0x3d}}, 0x4b0, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffc}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x10000, 0x20}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x9, 0x9}, &(0x7f0000000300)=0x90) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) connect$ax25(r4, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000140)={r2, &(0x7f0000000000)=':[(\x00', 0x80, &(0x7f0000000040)={@align=0x200, {0x2, 0x3ff, 0xa, 0x3d}}, 0x4b0, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffc}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x10000, 0x20}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x9, 0x9}, &(0x7f0000000300)=0x90) (async) 1.747840376s ago: executing program 2 (id=6495): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) close(r0) 1.650647364s ago: executing program 4 (id=6498): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.60024035s ago: executing program 2 (id=6499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8aa7cdcbb6ca7911d20b2949f69ab15df5801d7cb45558ab3781481c595fe84e"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x4000010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa122}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa7c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x801) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x91b2}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, @alu={0x7, 0x1, 0x2, 0x12, 0x2, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0xadd, 0x4c, &(0x7f0000000900)=""/76, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x9, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x1, 0x3, 0x7, 0xc}, {0x1, 0x4, 0x10, 0xc}, {0x4, 0x1, 0xa, 0xc4729b5e8085404e}, {0x3, 0x5, 0xe, 0x4}, {0x3, 0x5, 0xe, 0x4}, {0x4, 0x4, 0x7, 0x3}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000b40)={r0, r5}) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r6, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x40, 0x7f}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffff02e}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x8c, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa29}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x25}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f0000000f80)={0x115c, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, {0xb}, [@nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0xffffffffffffffff}]}, @generic="2374cf082dd06451f58359ecd83dd58954ae07b2d100063896213229fe16fa1e9b", @nested={0x96, 0x156, 0x0, 0x1, [@generic="56382925de4cc53132824c4eaa718e5b4cb985d2cc470d1636e02da00aa33689b46c6c594978d9ef9befea53ae3e328b72a28424", @nested={0x4, 0x148}, @generic="6bd3d040d1a6b11b9d318715461bce0547d909664d015eaff029babfe5465990afa8ffef4deeb5f3a80ccfb8ce091020effcbb6d97290b67fa2b19f98f9e8fd416ba4d860a46403884af2c7c63fc652cf15a4579f238cb85b6d6"]}, @nested={0x1c, 0x149, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x33}, @nested={0x4, 0x13}, @nested={0x4, 0x5c}]}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x7}, @nested={0x1055, 0x6, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @u32=0x4}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0x4, 0xe}, @typed={0x1004, 0x66, 0x0, 0x0, @binary="525a639131a21d4b8266b2f26f20394b41fb22c41227701ce6ffa4df205105fd9b36618f71fb2fdf04ad9b1d0c37a0b27763f5b52c89db26f62af8dec267fb39116e7536a0c7f10fa976d77b5dc88c67861cdd4e59c81ac5c31dfcd5346a8fffe04722fd210d2c79e3d320ffd6acf78f876ed9f30d70ec1e9991c48fea9bb502c7eec850532ad0e34c1f921972e7e694c115d0bf177690d78c15b2e7d055b465ac273e434a7ab1d399cbee0474b1c58aed87aa02411c644c0e4ca728901437388dc5ba4daacdcc844dbe956314e734aeeac9c94faba7b5d62e919b153bd0491d95bc93b7dd68e0bade9894cd2102cac3214fa3d3a0b27f1affb27fa5e523d52c47c079eac00cf85da1cceffc1d6577720670f5b4fab7ec40cc8fc6b16e46156ea27a2447a35feca14e694bf28991df614a55bb335bb9094616e5db3b27b06d2a67e3cf4fffa463cbc1e6154c8d009a87abb3f39994a2bd76126578f9634327cb1e277749222908ec6b75399a06bb7fd61aaf4d6ad62b737a7b42821128916bddd5e0ff889b0c60390d4e846d9bba53830cd70fb74c0f97670d58868c448be1763350eae77a64fc9b1dcc4d3797fdd217611254309e8ff3a30b6450a5dbed7c5dac7700ee384e89a92ddafd2db109985bedd1128873814897dba44fcdfc1357e71746b1d36d9a2e600a212343920b2a9716ea672a48ce3fd4940d284bcfe18f2326f8ef17a0aa643e0d7b865b117e32e2aacabb1b6e307c3e53a62983c5caa13988096cee46e3faf8b7c19564bab1e47aef5114cdc4f98e6dd7ab542022b6ea0ee0a9256585a5546ad0387111371722a44ea29c2a765b3ff7239dd151c5e80cece10f45243cb1ed3fddc558e8199d8f68c641ec89709245efeb105459eb0bb91b0c7c3ebe65050a7828165f8f48c944e340cb952b1277335763052d47d597f465f2810eaf7e3e1e40dde4d3e455d1f36792109f43af952ac0b81aa182a227fcb25f840f753dca09d7762c642752d27d03cb866a0d5f246c223af26ae8c8660b6049b52166b2446595b76dbdc1b5e2a819fce706c84afd72bb76bc09f3984670d7bf552eb2a5faa2d99f83119dfc956c7daad1fb303305f7728bb5a4166f49b7bfa7651765e83bb4c9fce9093d6bf9788c0251591796fbba298953d7d13504cf7a378209f235a5b36d066c787522ec790b5d847cc51705bf541c4fde56350c446964c78d5c376eb8e1c4129aeeb63c5a125dd7c33fdb28f2bacea376c62e2f0b31e3ea888fe95d3494583703deebcb6d0471c8b09a786f4b205d0352873fb6f3abc6101b94d07542f43d7951ba486f1ea018e51ba2513bb531a655dd36287d9c118f0959c16db8819636f1b5a83e22fe1762aceee6a0b0458419f93d8db9bdaf53e4ca0e061ac05d7970bf6006a21be91837586c6e7549ab72ed3dfa024d9759db6ae6cf812d47989088c4f4a0f16a5ed2ea1386cc41989ead3ef028ec8b78f218f4aac0337ebdaf254d88e2551f08a4a491baed8be731d28f6d4bb60651c3e18fd3b325c6b2c45cc44bad9669dd5f9ce6659ead52c17579477a2eb74757b20f9f044c9b1c6f7c44cdcfa3aaf0d567eeee341fe2fb8cb3ac0c88ed965fb85775e31cc9c60923d621a97b6408317813aafa83f7b74d8977ca0c3fad582595d5d94ead962d353fccd91b59cf15899e625a414e633a91f0106d66920eca17a2545b00af5e0957533f7a92f6fe3df7d3b7e662537b93ca54b2a86da68b4ba1b3f73e0b93a16b54ebab286d9b78898656fda0ef1f7af5207d4d17c17f9e07359d9680dc9a4507ebad938a8957c0224fd340ffebec092a7f16570851ab2a4696c7ed1dbd57f989c3964a6f15daa2177bbe087cbd9e5fb81f57ebdfea17b771aabb2b68ed59b2209fcf4dc78afc2b0d6be8f9dcdd77d97c6fc42480d28054a12fb04d375b3c9351524c634e19cb8cccb4dcc32fb971ff7dcf2267eecf8373ba1a398c2796544c85cb36417ca9f5912b015931e4773475e15c05dd00abfd52363d35478de17d8ceaedf23ce4d178b7237b110fe137d2295b453bff20f66b37254a96e2cbbe09dbbf7200a8f231792cfd8053fd66b9d7739ee58046f949366dc56c26dfe9c94ddb0b7c27884700a5a969366d21fbafd3433be3c336cb8671ee00c83d49a867ff3a0ec696c042543ad1584fa4bb3699c1b5e8592662c530df35f74acc6f528ef545cb973797ee3e4260d285b9c505806945e02973dccf890e182fd1386d5b6087ad65d2e0b46550aa77bd14c6a544a046c62195e97bc0b4c7f62d5b0342d547c4475aa9b75cb4089775f4929a0e20216fc25f92ebeb118c09f378572ccedc23643132fb8cd28c3b5866c9da23de30b85141d76dfd09d0eaf5ab987cc43ac1b72b5a3c932061a14b5893bc139dd12df3802adfab626c845f0030ff7b2d21afe5836d46cbc17fcdf09a1627fbb185d100deebd74c25acb47a1f0f8cb5d8c9e083839e7dc1bba1f075ad3f9f3d7fd0d96cc0042894f4f29487aefdceff0c466fa84500797baf9c52245586789e2a978bf7ca3accffd60326d46304e8fba400bce6f8cb0c3c98a1f4bc2f1d2cca02b2d2a50a89101f4adf0595c98d01867cf7d19821d499cbd49c4a6b01979e85ced95d7bda7dcee320f876e4eeb1ad5aab4681dee64eb1ce2973051775ea46019b022ec150eec67101bfad5f32de0cbc80b7cc771bf885f6dd5b00eb2f216e375fa98c7b831d5189e76cbca4f3c91084068ccc8a6b71e1a7bac493cd1602178076a1183990a7c900b7a133229ff9c26c61d52d6986d17d2b0fb1854febcce4db3e5ddb20e4003d6833b04e506454316187d91c264c63b70e8ea255aa0c4b11e5e7bc4115f964fa829ebb4cedc8e47dd4840db157f8abf21bd1d9c30c3fd179e00eed7d42d2a146b47bd093bd5c7bd00e81f65694d28aaccca7c8349f0160843cf90bb9945a96b08c8292ea2b2af48953a9eb7b1f81160637a791e0ab3e33c46fa778a6a4db5db85c02a023bb590260dbcf77415cb6e94364a3624db0b646015116e2e04393cfa7d830eea4e44d6c341370ee9023071c86fd09effdf0c00563c582853835bdfb22f9d2ade40f035ef2a7a5bb0a1328e8ef313e4cbc671cb0ded62a4a2d12518d06cb237a795bc4445d1bc34ce8dc80eb51815d6ca9cb97938c5c7b82f69c2ce5636816213e8e43632311aa1b81405117fcc93bbfeca7b62d2e5440b8926d6724d0b5185e8d4b56a4c8d51fa8736c7035f71be34006a58084f71aa6b2003282d75755875638c43d3e4da602bed301af186d083348c12dd48476829453f63480aad7d2795c4254af8d165d05d98e3c32d8586b2e7207986ac931092483573c23aaabfa293c198fa80d32d0b61721eba554d968f955c57941d1a08b735a6e0c9682e81a67ca37b0b59e42a652d2c8d80ea00b407a25abd302793736c542949bad173bd0dd0e84c67ec28bdfbc531d5a0a57c7f7961d18e6a7a2e4c0810237e491f6cc1029b531ab18c90b891dac281361035c2f3e2892ef460a45f91df10d39cb465c52400bccdca9a3500d1447fa1294b1dc41c4170d6db0b29b83ba3696045da2a1e435f764df71c7b235e10d43fdde49cb8b7aab2ba44d6d253e7737e204143a36afbc1762a59f43f158efd31c8603ff0367060da62390211a8b04dedeb802ec81a0b88299258105e6fe5bb079439838b86574cf064e9fc072fd1947ef87a12c5af7277b60cf7ce79db616d6da50e816c57cd4ed49586122ee41be3359f48deb0954388c1321f512e02281c9ef4196434e90e39c6a38113adb3bb10c66236fbf2d8ed26551d5c78bcde122416115b1b34ee362beb9c3f94231335862f8f9b7c2b3c997bad872e8077db437c25fedced55b6f727766e7f21a1b216bfdefbce208dc8d1ee30ddf5c7a1db6e8ae151555514465423dfc8ce20c69d2924d7db70eb6abafeea82610cca259413fc54abfec4dd4e030f25e80904f9edd7f0e20948be514ef05f407f0e8ab88e88b5f1463ef65bb941b65e2fa392b9f6ddbe66f486c67681a88459ce987b433c4a7851e30cffeb6bc60a5295053b05926b7ee1de16769edd0c4021a5df3679691a68cb360bd98473e372d20e0547402436817085c283f6b4dd20db18697aec9f1ff9135090cfaf33d9dfabae7a56c94747678fe6feb6e15c7ed25f01ac62797e015404998fbc72b5b00dafebb9ef995f165797e85bf5cae78207b4d62d12c13e74a7a4e9d4e902aad1e5c331a448992f10fa5cef66fb7efc23aaa281b8634c06df434d5fe5cee4856b2cab60f5993b1e3f97c49c22c91212274c6047a4f6dec2526b0a7880ed5ad41cc078ecdb3b163db4376aadbb5b95dfe95629d774a9bd8bb89a8228198e715531798e34dfb2ea5a6d99898e0a94cb7fb9fe8428b9e8938b4b5d5f803fa48a82c3195b24c9b2337eefb3d897bd271e2ecb4c4859a1806e53a34fbebfc2b33f4677cf0a668ca18a60dc98990c89af34704559ad3bf2446cdf117859d0b5c2ca6715b783042a8b13acdcfdd4937f58e9bacbf361f3cec8b6af025efbb97a8a4d48a96f47490db3825b02805c7eac555be52d661aa7ba33cafabc73fca669c85d9826569d4ae84c06dd11ba36edb8957e5633a317e282c24ab14bafee76539be48d25ea4e33955616f727a5b5744bd897c1bbc049f7e9b2675d4255b91fb767b7583e02e8afebc80a044881eaa5f4ac29f45fba47976d431659a9da36378b01028d075fb498f9265bc44b9796405897474343625773fc818e48d54eeaeee32eeb2f9399b752498075ccb01328d07baa5f796d557a67feff56476b345fc76c9a75113de134515e9b6e46549548f77e13f22fa5b84e08e135300316ddeec802d5588636938940cebc3b3a8d886ce0a72c4462fb7f762b8f6db76e152ee0d1936ac4bfb52e98773ec46b222de42d123009575988cb15167f871cacc3ddc6585820d94f67ff641ffefa68018c2cf9cf2a607d3ac8f17f06b5c4eb16c6251ac7bd67d95825df4182395c099218cb96ed2d34e8635f84fbea961ed4284b2c3f4520ce8e57df5bac03e773017da4da3e0515724f495ff2e915b2acf68ebbfd6bbf8f07570bda12fbebdff672274406c99d230a0d3637a9d16cfc453d3b1788f77c0f3d2cb27feed34d0d37afcde099db1da7f541126c03d15c492842d827ca8ba9bdc67e7c39e6325593052d1a8ec5d21b22f26a5e6757c8a8fb0c2726d0d6bd5285ef6933a923fd2dbbdb9fad9ca05be96cde450274bacc432952478697ed18ac8521bf178c46944fedb2ec9711edc6ae08a1998ffc0d7849f7ad281e61dca3efc56f5fdf28832191c809f7f9455cea4ff79ca11ea9152b66645bd97979e60dbf91e4c792e25c059981d961b814aac88a20a712a54b97d3005af00b0be1148501676a8d81d2a6de099e2879d6a897aadb9a8cb3abbde9f35637a27dcde1a18097dd630a759fed3dd161b98a1848f2db24550d5d9aaef1f58eae2ab7cdc7228d2d291787332075ed76c3033c54d0ccfd4344a6fed872b9e6cd0f6484e21399b982756f4d8f2554a3bd24533c9b5a02607055e7cace26817daf98a95ed6f4b4fd6d2c358f61be1bf0c1df46d062ce671705f9cd32ac9600a7e9bf4a2474ec878f3f1857fde89c3c0d15c3af1ef799b0bd8446e4ab2c7cf6ae933f340a57db71b523387db2d771206ec6e565e38ca3bad41203c79f0587668c12c7080d0ec72424fd154012d7a22255fa22af965701d6c6a4dbd657b30268779507493776e7057c6bf"}, @nested={0x4, 0x90}, @nested={0x4, 0xaa}, @nested={0x4, 0x146}, @generic="09fb409faeb60aaf84aadc3771ef3e3a64cd0404d53ba988c2e558379f0843edab7ccc0996", @nested={0x4, 0x97}]}]}, 0x115c}, 0x1, 0x0, 0x0, 0x4048004}, 0x80) bind$llc(r1, &(0x7f0000002180)={0x1a, 0x206, 0x1, 0x5, 0xb, 0x9, @random="95da5115f180"}, 0x10) recvmsg(r1, &(0x7f00000035c0)={&(0x7f00000021c0)=@l2, 0x80, &(0x7f0000003480)=[{&(0x7f0000002240)=""/172, 0xac}, {&(0x7f0000002300)=""/80, 0x50}, {&(0x7f0000002380)=""/195, 0xc3}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f00000034c0)=""/216, 0xd8}, 0x2040) recvmsg$can_j1939(r1, &(0x7f0000005980)={&(0x7f0000003600)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000005900)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/28, 0x1c}, {&(0x7f00000046c0)=""/40, 0x28}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/198, 0xc6}, {&(0x7f0000005800)=""/228, 0xe4}], 0x6}, 0x1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f00000059c0)={0x0, 0x0, 0x9, r4, 0x1}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000005a00)={r1, 0x81, 0x7, 0x3}) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000005a40)={{r5}, 0xe78, 0x6, 0x2}) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000005b40)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005b00)={&(0x7f0000005ac0)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) accept$alg(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000005d40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x118, 0x0, 0xf0a, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}]}, 0x118}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000005dc0), r8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r8, &(0x7f0000005ec0)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005e80)={&(0x7f0000005e00)={0x44, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x111}, 0x0) 1.538870474s ago: executing program 0 (id=6500): r0 = socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000005000125000000000000000085000000cd96c700950000"], &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.411623152s ago: executing program 1 (id=6501): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.411147794s ago: executing program 4 (id=6502): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfe}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a153beb033d414ec914cbe1352064100dced", @ANYBLOB="3e5d1ed7cb", @ANYBLOB="020029bd7000fcdbdf250300000006000800feff000006000800a3aa000006000800a3aa000006000800feff000006000800000000000500120009000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004840}, 0x2000c015) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x6, 0x1, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) recvmsg(r3, &(0x7f0000002040)={&(0x7f0000000640)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001ec0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/17, 0x11}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000000a00)=""/71, 0x47}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/23, 0x17}, {&(0x7f0000001e00)=""/123, 0x7b}, {&(0x7f0000001e80)=""/9, 0x9}], 0x8, &(0x7f0000001f40)=""/231, 0xe7}, 0x40008000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) 1.397655131s ago: executing program 2 (id=6503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r3, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="4c43f868", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d51234ba977bb9e5c12f8d834f13d6237d26460748d6933219def36c215585e1676d4abb63df6179cc6df0358301932726803805bf67fde6d452c67bcb02f2991be12424f93f66c56b7a592eed49b5d4e60fca4f541539cd053229ded13933833e015259ce6dfc263a1e0669a8396a76540b4fb154f459a60975891cf83a48c461876ebd0fcf5c92d9110b4c1bbaedc58428da5f480efea0da68dad35e8fb3b385f8", 0xa2}, {&(0x7f0000000500)="fd6ec59ad2f97407d3694c9a9c464b7e2099c74cb6085724bea4211eeb3263eaec4ed9a1f7f7f4c9a2522ab2fd99c61edad49100c9af2505a816b6306b52773fed6dc1bc77ebb8bd9b0067e03f008381fa24d54a21fc980b65d1cd1b29ebcd32d71be7427435e9308efcf5bed5852638d7a3c49dbad31924a6a3c003621be1d97497975f3ba10045c42426356cbaf28d5d60cf67b8b44f7b89f455f69eb92d14896937867b8e734309c2fbb9e0cd9070b805c407d4680bf3e0821b4dbaa2106d7c880efa73fbb92aabfc3987736a604191f6d33b7e76d842c83ecef971117cc69d41", 0xe2}, {&(0x7f0000000380)="6e15e198668be6d8090c62edfd048aa0ad33677954c81f0f6d4179c4572f4776af228c6f56b6c88bfaa312ffa6d5ffa6140dad7985e900e3898ef688992c992374f6e024c9cfafdede153a9f863e525de8e31eb633a6943d88695af1df1d39f88e76852c728b07ec30", 0x69}, {&(0x7f0000000100)="005858ec548b459ef291cf737fa0c04785936a8c75253d7208ba4ec75c69bbd6cba23fec1abf6ba5ff07d5e04341bbca62ea6774217764154909", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)="1d9ceee49731604f5da9049e0b7bb7ce6e9dd0775991b98513ccec0638e0f8834068123e63009a2b52615c5eafeb8c2d15bffdc05a0fd14973e49ae4e19426a6812a47550ab06c9937e0e462bed0b2046ea7611b905c", 0x56}, {&(0x7f0000000980)="99261f7bcb7a7581800eb64000cd857b2a857db391994d97cbb2b7054548da83bed00b7f861cd5a91397b5a8efced7d9a2440827f26b6c9315d33db0ee3b81c7ae7c5ec38a07625d759b607e980edd8eee25e133d6c2d062c5bd2ca073727bf67c2e83cf2ce604085f8b5a4dfb0a92831b2743dacfec623b9b6cbb518dba3de8f0c27bff389bf57bfacc3ee0c18dd05d2a7f2d58f97a09227b275a07e3615f6ade538585e6e94a05cc5b7ac4f10f0c0f38220598b4ce02602affdbe19cbc00fc91107ef2d49ac63cb01695ce88d9303536595b5cefa9847de37b11e43900413f600fd5e398eb6fb7a3b6855a86a9f5bd6ac5beadb14305859665e6dc4802ca821bfe9a956464ef8cd80253faad955c428d1f539206d366a5c27549b69958bad90670246f45600dcd388cfa3c98b0d550a8fb43133ad5e33212cf6d804b2ebaf1980eea082ec84cafd4d09e9f9a55afa23e1392a8cdba11312649da708c2880a570a1509a416d0b011fa62d2a5afa98409c2ae8837be92c69e6ec92e6b09ec3a6fd4525ef72dddafea0a7965919804f95a0108c7f007a30b867e1cded82ae7ab07a392fbabca14c38f1bcca65ca248d1264b82976eb341bc1d6b01efedbe6b7f04950f7371a22d9ff6376c78e4a1ca1cf970e2dcc2dad8425fe08c9282bea4a85b791194ef2a8c46946f48a37c52d0552fca727c5bd8c3b04942706b4fd27cb352a9ceea6d70761a1737bfd183c975f7487b90a164c33d38c5d4f5be5b433a9282e9358348a8a13cfb800d84951c4ab1b35641f0ffb7375cccbf9e60a0de124baea8cddd73ae0570e7968d91dede5669bd6faccbaba3336f311ef60fb034f6b48c95d8e5d22423b9240dc89da3d12a3aa2bed55e1338f05d6b3d6ab7373357d5610a8aa6f9f519240009c9481b5877766ea066d175bdf70f0d1de5884949b48fe12fed3168762d8a654c76066fb603d69d65c6d067d8c0412f51d5c3dd7451a0941e787555cef3d7a4c31fe19086d69d2188d2bc6237d5d756c1fc8554987049292120e666823287ef13de88ab5fc477504e4ea13c8fbcb4090a0fc6d982498e4a5822d0eae0892075f0fecf8c3093704583034a375da688ca14e5c99d43d94f08405acdfb1136f83a2f31ee3bfe468df818af047dd0f08f74acae5114993040b2b0b48b8fa6b2a198251536cb3029f8e7fa9398e1b4065ee736044221fb768819a7190311fa9c00ef564ea0e915f91f8681df0953188e8fe0789932333f7ecaa1a4f5d9a42405d3d62ae1343244885255153bbe5458384a50f6e1de0b070791075d50e9bdfa78f45c0707df2d9433e8611a5a6a0d19894ffef2e37ec8e7b06ad0a26f6ae74888d23b82347b7377085b634296b033f89592366de18aeb8cc1367183e7d9ea4fe7bfe1c0279e2d5981da4a21e920ee198dc8f5fbf2a6a3930acc2af349fa6b51534bcfd5b06c6912637fc9ccff81943c9c968b87e0dc7de7bfa80554f674fc54fd9cc0369dda7b5750d2cfeb2d2da8c35386d8b6b1b4ace09691f719bd8e2f0a2784eebd501ab3e4fe501b353d005443670be40890551947f38ca2a6d4f10967de1d969707881ba7e2bf03ba587dd64f2351d5e514a9e413a88c08cc0527b1f4458a0ffdfd3e4e7de13220f3a5f590eb80d283649b82025480270b12f2bf6c69c91fe0de98b0bc6170b500b418fc9cf169ba034216b8142458c07e4a002c8e20c2ad4db790875ff3226319b60072a3e795f41f96397baecb5c6965edf980b55d1ca59c0fb60cd363033fe6d8555d87d14ee4ddc74870d7d1e972fa275351970b93e3057bf2526cb7699821e1c3a1c32b9272ad95998de0bac2f78e3242555088043159ab6981634484e130d81168bcc23c445ebccbe262eba079f3f0c193afeb5b42aaa74f6d046167f6d045bafa1debbe309efe74299d0d6348b83e0617f0ed73dcfce2c81c95bcb8390fa5f11c5eafe0a8327c60a4dbe4f6fb0f6e88438f0d376d8117c350982aa1a0a4b7c082f8a273ba26ae5f01d78ecea3e2d57f259c439d1907a8ab56b23c5d78219ebbd47362c8a055f520cabc22f98a6c19b72ae738f2591051f2ffde1d33ef425d5353351ca0b315e6f9c3c6cebdc4181f8fb4a6b9bb7c2ef0da7bb0372da18e91ac4dd8eda76dac7dedb113db041a8d37c21357f0d5aafbe5a676151bba5a9d4491506b105b82e5e8eacb4a1d123a4a815cbafa5c0dcdf4e2111d04e916264a14e2864df61a4a9f4b26551e247af66518a1fba894822e14865ae94bf4b5eaabdd11afad2da4514e9d5df3000f2d82fa2a30264b61377e064f6add4bf07d3d05b7cf9a448d740f64ddbf36044554bd8e061aed614c4cb0dec056dbfc3cb7b6e63c8c3116e294102442cc70313ebc98ca5245ff8d2027626786c902f6d5eed9d91fe5d379034f812197fdb49ea5c8f02f069fb54c51805f375d7d3c72aee1fd44b4879d7a1a8ac83e250bd70386994cab477505578aa6b0a113253841a800deb7be052090278c4ee0ba72ecc0406e28c4715118a7a20d884c453e9a22849004de96246f04b1bae8ed02adca9a6ddc38a49d712f813dcda94a76703ace6c803bf04b03f0a280401d643e5dbfd851427c1433a597d36a9bb64a4557f9c8115451deca7639dcf7896ff56cf722bb2567b011ff3ea8bb4110a9cd40ffbaaa69a75f64cdcc0341ddd3d513afdd4b980ef80b6f581d202248ceddaace5f228a893695959f6ed7bfad909b7daaa2b9c79ca6abb7a7c02c1c72254ec763bfd0d199259cee855c53db3b50c660eba056106a1e9717ef27d6b0ece04c63f9a4936146eed8962012ee653cf9b2dba80259116999e15bcd08169aa1781be001759401a5273df47bda7da7db34cd6f0024fcb7105be3b436e3a1642d4093e78c0135292db88fc77055c47b6042537d6d0feacd1c1f0c1e85c11b97f70acb3aeff27bd7de5d2e85f7f0b63c31e0e390344a37097c20984b800faaba6dfc7f0e3eaa0df6f5f2d11dc0818e857ad8383438067bd4cc3bd199a0ddce3aa29275459be30c3e657ff504a35f99c916c40692b80c39d7cca3e1d0b188c65f4fabd8c734bcd224be35322051de5b164c835e18c1237d46f58fabbe479b077c41cba511c883eeae7d875288d9577d59c0d363ec2566bfe00f2c2fb71eab97b512b96705cbc8fc568d97245ee7897c6434ec452a233fa8e8c6047cdeb10d843ab1edd87322740e85d920702dd7fe1ef93ec1ac5eac71b6c2ce4df1903a6b579ddf4dac5", 0x908}], 0x2}}], 0x3, 0x2008000) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000380)={r4, &(0x7f0000000240)='pci\x00', 0x10000, &(0x7f0000000280)={@_ha_fsid={[0x0, 0x7]}, {0xc, 0x533, 0x3, 0x200}}, 0x9, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2755de7895"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000894) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.326475183s ago: executing program 0 (id=6504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000074) (async) listen(r0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 1.203781205s ago: executing program 1 (id=6505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1b4, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x15c, 0x2, [@TCA_BASIC_ACT={0x158, 0x3, [@m_sample={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xec, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x79, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x34, r2, 0x9a2ea8ba8fb8e27f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4820d8a322e49a0601ccca64cf18c98d"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x34, r2, 0x9a2ea8ba8fb8e27f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4820d8a322e49a0601ccca64cf18c98d"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x8c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.088406265s ago: executing program 0 (id=6506): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r4 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000008c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) r8 = getgid() r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a00)='cpu.pressure\x00', 0x2, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r12 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000b40)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) r15 = socket(0x2, 0x80000, 0x2) sendmmsg$inet(r15, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000c00)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c40)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc, &(0x7f00000005c0)=[{&(0x7f00000000c0)={0x18, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@generic, @typed={0x8, 0x93, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f00000004c0)={0xe0, 0x41, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0x4, 0x3f}, @generic="ae8cd712fb303ab3aab65591ef460d1f3f715b1b59ca309b291ef225001cf716673647fe007e91831bd0c7df598c554c87625d9e56a5bf17e175f219214c26f8018755dedfeeffad6cfb41f24f9a074c5c1e7cccccdcf43593cc36ccc901ff5959adeb75194de14d72e75b183c319e086364db3429007dd1d380db34638e60cdc81c7955c160611f159af22a664063aa2595b4bb42e9e1bde63e1d27c9bf73a192e19b7913ba2636ae3d778bf12a5973c97b57ded3ae476d00ed", @typed={0x4, 0x6b}, @nested={0xc, 0x43, 0x0, 0x1, [@typed={0x4, 0x1b}, @nested={0x4, 0xe9}]}]}, 0xe0}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r15, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xffffffffffffffff}}}], 0x140}, 0x20000000) r18 = socket(0x1, 0x2, 0x0) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r19, &(0x7f0000000600), &(0x7f0000001380)=@udp=r18}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r18, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r18, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r20 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000202000000000000000000000009879a7d6aab2a05eed338ad4021ceca13b1b1bffff846a80950797b"], 0x10}}, 0x0) sendmmsg$unix(r18, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1.057041657s ago: executing program 3 (id=6507): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x24044070) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7ff203fb0b3527b5b73942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x0) write(r3, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x22cc4bca3d20fc24}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000004000050000d5bea2784d005b1745a6782dd8879cb66b5a65813a88396a0dbf3c0a71cd1cbdc6f2413f390128ab1647ab593623332961fb43f817cf84a98e00f3ea3052844629b457681774f0b0d6aa865d083f1a8a6f661b88303f9510760433a504c58e86ff2140b7294b2163460b79d59c01dde7a28fc81ceb2d0fb2ea9216ff5b06e3a1b3f147da32a538ecef5f58910cfc1cb2dfbc119e8899b9db935d81e75ea19c67689905a817e6b5daf8b53f0c0d3f6898eebcb685894da7bdde7d42573a5d4e620a3920f749371e6f4e9e305677ff85dab5e9dd63e81d1668"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r12, 0x201, 0x0, 0x0, {0x7, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x7, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @local={0xac, 0x14, 0x3}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) 939.702603ms ago: executing program 2 (id=6508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x5, 0x70bd2d, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x3c}}, 0x0) 918.422332ms ago: executing program 1 (id=6509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r3, @ANYBLOB="08000a00c54c"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 805.721822ms ago: executing program 2 (id=6510): socket$packet(0x11, 0x3, 0x300) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03000088"], 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000500)=0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r4, &(0x7f0000000100)=""/252, 0xfc, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a000000000000000000000001000000000000f03f9b8f4872861238a47a3c9db3b3348a21c93f6ceefadac3946924d04560db9c94c5a31891426dc67956bb3a22a2ba25dcb25c92397a3093c576802e122edfc0295f5907975776bee92b4e2c43dcfecec09f7959880831b5b7043c0b8799ca47b94ffa3695198936bbe0350ac48589cd39465f86d8c8dfec315384b8799bb41d942d97fc419586be43a475f41a889708eaa9a6f70e9fcecf7dd0e7bc33a0254a3ddbcf6f60987a4a1b3a9438eabe1b659894ff2359bf679330806f7004b25a2c5f989c3887ad470024d6c04a9c8ea2fad669ba3fd5"], &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004740)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000007780)=0x6, 0x4) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000001000038000000380000000200000000000000003ce60000000000000000000400000d000000000c000000020000000e000000000000001000000001000000000000000200000000009e22579dfa2d7428ff4e4b78e4f3f1540fc1f434ed773b9724b91278f6c31d07bdc61275ec3a1467e17694d07b9d9d37ba53c4f08e9a1eb11ec8016592897f632f9b0a4cde10a3ea2f4068d3bb249d3240918297e85eee1f88219541398ae3839259ffd99bc78a4276e6f934c1"], 0x0, 0x52}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000370400008000fcdbdf2500000000", @ANYRES8=0x0, @ANYBLOB="c30405000000000018001280080001006774701cd8c92b9d000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x7, 0xf, "8288cadfeccf66ad394d03d7ef"}, {0x0, 0x11, "14b64f56edfa23eba333d8bf8e7907"}, {0x0, 0x12, "f80f9238e04f9fe19b30a441fddf2967"}, {0x1, 0x5, "7e45a2"}]}, @timestamp_addr={0x44, 0x34, 0xf7, 0x1, 0x1, [{@remote, 0x1a72}, {@private=0xa010100, 0xb}, {@private=0xa010102, 0x1}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x80}, {@private=0xa010102, 0x9}]}, @cipso={0x86, 0x39, 0x1, [{0x6, 0xd, "67e4567b9aa0b89aef3efa"}, {0x6, 0x12, "a3bae816b93ef0123440a50c2eb6465e"}, {0x6, 0x8, "abc989870560"}, {0x5, 0xc, "f99b3e01110173edfc84"}]}]}}}], 0xc0}}], 0x1, 0x14) 655.75304ms ago: executing program 0 (id=6511): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xfffffffa}, 0x50) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}}, 0x4040000) 598.53518ms ago: executing program 0 (id=6512): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x14) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x19, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x76a1}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x913fdc377908132b, 0x4}}]}}]}, 0x7c}}, 0x24040084) 578.465871ms ago: executing program 3 (id=6513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x30, 0x28, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0xa, 0xc}, {0xfff3, 0x6}}, [@tclass_kind_options=@c_ingress={0xc}]}, 0x30}}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x2, 0xfffffc01, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x8010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r11, 0x1, 0x28, &(0x7f0000000300)=0xffffff7f, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) 524.28476ms ago: executing program 1 (id=6514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x36dc}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 429.010312ms ago: executing program 0 (id=6515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5c, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240), 0x1) sendto$inet6(r1, &(0x7f0000000040)="b8", 0x1, 0x4000855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x7ff}, 0x1c) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x5, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) 370.428683ms ago: executing program 4 (id=6516): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, &(0x7f0000000080)="0338e85625cb4113a6df13bbec66189d3752cf9262171ce3b82ac7f1832bd868befdf48b8024c2ad1dd6d3af09", 0x2d, 0x8084, &(0x7f00000000c0)={{0x3, @null, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 312.403445ms ago: executing program 1 (id=6517): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000240)=0xa, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) 229.775252ms ago: executing program 3 (id=6518): syz_emit_ethernet(0x1e, &(0x7f0000001380)=ANY=[@ANYBLOB="0180c200113caaaaaaaaaaaa88a80000810009000011ab02c9bcaa220002"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x42}}, {@in=@broadcast, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[], 0x40}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x4, 0x3, 0x15, 0x0, 0x55800, 0x19, 0x5f3, 0x2, 0x3, 0x2, 0x3, 0x6, 0x946, 0x6, 0x1000, 0xe63, 0x80000000, 0x4, 0x1000, 0x1, 0x3, 0xd}}) 155.151276ms ago: executing program 4 (id=6519): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x73c, 0x1]}, {0x7f, 0x2, 0x9}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4b}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x700, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x20040054) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000012c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x80, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40085}, 0x4964) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000001400)=0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xa4, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40044}, 0x4000000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001640)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x20040000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x44, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001980)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001a80)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000001ac0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r10}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001b00)={'ipvlan0\x00', {0x2, 0x0, @loopback}}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001f00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b80)={0x304, 0x14, 0x400, 0x70bd2c, 0x25dfdbfe, {0x21, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x68, 0x1, "93dce95b0769ef56d5dbae0200749d0fd13e454fb170e2417f9487f692cdd8b9d924e400b55664a0c38b81bd5160f78e6ef23c495a3ba66b9133197b2813bfd145bef9ff4c66f7433da7a90c47ffa63cfec89a61db8889b69aa57e43c4a638c3a82b55b1"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "9121a210ce03d8975c28f64f514c92e67967f50b20eda979b52ba7cbf07cca75bfeecbbf9e0bec87bfadf5a0f93003f2ac2ce264bd03d365bb772374822c890ba65313f56f286eaf38cd97eccb31b64af403bae5fa5d03d08d615d2f729e29b4108101755266137a9d103594901d2a16384b021e6e471d89ee7cbbd487ae770b7963f2f029677447bbc70d117d0526ad30134aa577e62beb7ed8e812ab5f7985944785513da777fe592756f87e2052c6cf5aab21e2eb"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "789cb11ce82b139eaab4dc70e23e5758cae6387dc4c0115e4add601d7514ce628315fa476194e5ebc252d16a1b25b04bda644f0565f644b6ba852bdee059a64f4a3f946440dfe1b726db568e3c18a0530f68b0b622427be5ed01bc3d44ebcf84ce6b91ed5f5550f37aceb6faffbaa7699d34ec128d8f8d57af89c5ea066e8e5b4de31d2016218ff7a1af441902f67631c1b77b22a5931e738aca914264c8a965ea4f7eb753844eb3e4e726e78682445b0ae112aca138444cda07a877b8d358edd4f192824415d4f43e7706801e1465c5931003130bdcebe750357ea2ef85dc1807bb4d4e77ea5d4f3d75880b0fef970a84465a7776"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "a988d0c499b11befb550244550a30a5dab1a8ef01515e107b438a160c3bee377ab6e0a93e6253258f6848e103fba00c1311b274b2bd5b603ea4e508e7750562fbbc6238fa0a2b03ffd07666be1c68bc3712d92c98890cad41c5bd3adba71ff003b8ef26e04f4d2f4317473a273735bf4f9869f2675ef609eab68876910c4c08caff94c209faddbdc961fd48f3494ae52604be2f71811e7889b63dbc8c8ba4ada9aca748f032ddd6e0c4448a4ed766361ee6a5b18fab17c36f81f48906ea18d61dc122e4d35d7d457d1"}]}, 0x304}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r11, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4048090) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000020c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000002200)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, r12, 0xa04, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x54, r15, 0x900, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040006}, 0x40) 104.091812ms ago: executing program 1 (id=6520): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r5, 0x25}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r7, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r7, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x5, @mcast1, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) 0s ago: executing program 4 (id=6521): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) read$nci(r0, 0x0, 0x0) (async, rerun: 32) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6105050e0204366f020800030a07053503a4ec9ed50555ccd451bc6d80769bff6ab24945951d98db6e049e7b9c828962354e4d888beaf65c34603d5e37f9a8896f1198d12b3a5c22948889c2cf157b58d16b066f"], 0x45) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000180001002dbd7000ffdbdf2580142007fe01ee0600010000"], 0x1c}}, 0x0) (async) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) (async, rerun: 64) connect$unix(r5, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 64) kernel console output (not intermixed with test programs): ed allmulticast mode [ 561.373707][T24839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5035'. [ 561.429287][T24839] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5035'. [ 561.563675][T24837] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 561.975411][T24873] netlink: 'syz.3.5046': attribute type 10 has an invalid length. [ 562.240039][T24892] bond0: Caught tx_queue_len zero misconfig [ 562.943133][T24926] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 563.205902][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.216924][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.233918][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.244805][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.254503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.264230][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 564.137999][T24960] netlink: 'syz.4.5065': attribute type 51 has an invalid length. [ 564.194603][T24960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.312570][T24966] netlink: 'syz.3.5067': attribute type 21 has an invalid length. [ 564.567558][T24980] macvlan0: entered promiscuous mode [ 565.067192][T25002] Cannot find del_set index 49151 as target [ 565.291037][ T796] IPVS: starting estimator thread 0... [ 565.409929][T25011] IPVS: using max 24 ests per chain, 57600 per kthread [ 566.331547][T25049] syzkaller0: entered promiscuous mode [ 566.353558][T25049] syzkaller0: entered allmulticast mode [ 566.425851][T25052] tipc: Started in network mode [ 566.431002][T25052] tipc: Node identity 080211000001, cluster identity 4711 [ 566.439554][T25055] netlink: 'syz.4.5088': attribute type 64 has an invalid length. [ 566.459567][T25052] tipc: Enabled bearer , priority 0 [ 567.134831][T25068] tipc: Started in network mode [ 567.150211][T25068] tipc: Node identity e6189c562ab9, cluster identity 4711 [ 567.194022][T25068] tipc: Enabled bearer , priority 0 [ 567.223214][T25070] syzkaller0: entered promiscuous mode [ 567.229956][T25070] syzkaller0: entered allmulticast mode [ 567.377427][T25068] tipc: Resetting bearer [ 567.397113][T25066] tipc: Resetting bearer [ 567.534506][T25066] tipc: Disabling bearer [ 567.613426][ T5900] tipc: Node number set to 134418688 [ 568.272921][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.281063][ C0] lec:lec_tx_timeout: lec0 [ 568.288550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 569.988090][T25139] __nla_validate_parse: 7 callbacks suppressed [ 569.988113][T25139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5109'. [ 570.009303][T25139] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5109'. [ 570.201731][T25072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.440484][T25148] geneve3: entered promiscuous mode [ 570.450485][T25148] geneve3: entered allmulticast mode [ 570.664019][T25157] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 570.690684][T25163] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5115'. [ 570.835709][T25166] netdevsim netdevsim2 : renamed from netdevsim0 [ 570.844933][T25168] netlink: 'syz.1.5119': attribute type 21 has an invalid length. [ 570.882617][T25172] netlink: 'syz.1.5119': attribute type 21 has an invalid length. [ 570.903016][T25168] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.939692][T25172] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.041674][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5122'. [ 571.063413][T25175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5122'. [ 571.239157][T25192] netlink: 'syz.0.5125': attribute type 2 has an invalid length. [ 571.278727][T25191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5126'. [ 571.700226][T25222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5135'. [ 571.747211][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 571.837712][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5137'. [ 571.887474][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5137'. [ 572.157118][T25242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.209355][T25243] veth0_to_team: entered promiscuous mode [ 572.235278][T25243] veth0_to_team: left promiscuous mode [ 572.537148][T25259] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.575462][T25259] netlink: 'syz.4.5147': attribute type 1 has an invalid length. [ 572.578004][T25254] gre1: left allmulticast mode [ 572.621217][T25254] bridge1: left allmulticast mode [ 572.659730][T25254] geneve2: left allmulticast mode [ 572.785617][T25259] bond11: entered promiscuous mode [ 572.813361][T25259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 573.061724][T25259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 573.069214][T25259] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 573.080844][T25259] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 573.094731][T25259] bond11: (slave vti0): making interface the new active one [ 573.102281][T25259] vti0: entered promiscuous mode [ 573.110846][T25259] bond11: (slave vti0): Enslaving as an active interface with an up link [ 573.200516][T25277] syzkaller0: entered promiscuous mode [ 573.207093][T25277] syzkaller0: entered allmulticast mode [ 573.302890][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.303148][T25280] netlink: get zone limit has 4 unknown bytes [ 573.311003][ C0] lec:lec_tx_timeout: lec0 [ 573.356670][T25280] netlink: get zone limit has 4 unknown bytes [ 573.376919][T25280] netlink: get zone limit has 4 unknown bytes [ 573.444972][T25280] netlink: get zone limit has 4 unknown bytes [ 573.451586][T25280] netlink: get zone limit has 4 unknown bytes [ 573.506204][T25280] netlink: get zone limit has 4 unknown bytes [ 573.580554][T25280] netlink: get zone limit has 4 unknown bytes [ 573.629609][T25280] netlink: get zone limit has 4 unknown bytes [ 573.675409][T25280] netlink: get zone limit has 4 unknown bytes [ 573.692660][T25280] netlink: get zone limit has 4 unknown bytes [ 574.054628][T25306] netlink: 'syz.2.5163': attribute type 17 has an invalid length. [ 574.252310][T25313] ip6tnl2: entered allmulticast mode [ 574.362383][T25321] syzkaller1: entered promiscuous mode [ 574.383100][T25321] syzkaller1: entered allmulticast mode [ 575.086757][T25364] __nla_validate_parse: 13 callbacks suppressed [ 575.086780][T25364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5182'. [ 575.103166][T25364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5182'. [ 575.112345][T25364] netlink: 'syz.0.5182': attribute type 6 has an invalid length. [ 575.125735][T25364] netlink: 'syz.0.5182': attribute type 5 has an invalid length. [ 575.134665][T25364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5182'. [ 575.705484][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 575.716990][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 575.728411][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 575.739195][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 575.749814][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 575.760567][T25400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5193'. [ 575.773960][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 576.563885][T25449] netlink: 'syz.3.5206': attribute type 4 has an invalid length. [ 576.742635][T25456] netlink: 'syz.4.5209': attribute type 1 has an invalid length. [ 576.845069][T25456] 8021q: adding VLAN 0 to HW filter on device bond12 [ 576.858357][T25459] bond6: (slave veth0_to_bond): Releasing active interface [ 576.873269][T25471] SET target dimension over the limit! [ 576.881601][T25459] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 577.008347][T25477] netlink: 'syz.4.5216': attribute type 1 has an invalid length. [ 599.986086][T25533] __nla_validate_parse: 32 callbacks suppressed [ 599.986110][T25533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5232'. [ 600.629956][T25574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5244'. [ 600.666183][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5245'. [ 601.137290][T25595] dvmrp1: entered allmulticast mode [ 601.452753][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5255'. [ 601.491093][T25612] netlink: 'syz.3.5255': attribute type 5 has an invalid length. [ 601.501459][T25619] nbd: must specify a device to reconfigure [ 601.535482][T25612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5255'. [ 601.572208][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5257'. [ 601.918572][T25640] syzkaller0: entered promiscuous mode [ 601.945974][T25640] syzkaller0: entered allmulticast mode [ 602.628526][T25692] netlink: 'syz.2.5276': attribute type 1 has an invalid length. [ 602.640270][T25692] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5276'. [ 602.718771][T25698] netlink: 'syz.4.5279': attribute type 23 has an invalid length. [ 602.734072][T25697] netlink: 'syz.0.5278': attribute type 10 has an invalid length. [ 602.752278][T25697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5278'. [ 602.839884][T25702] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5281'. [ 603.244473][T25726] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.264146][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5289'. [ 603.274022][T25728] net_ratelimit: 58 callbacks suppressed [ 603.274042][T25728] openvswitch: netlink: Flow key attr not present in new flow. [ 603.309106][T25726] bond1: (slave lo): making interface the new active one [ 603.376643][T25726] bond1: (slave lo): Enslaving as an active interface with an up link [ 603.396473][T25726] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 603.439486][T25731] sit2: entered promiscuous mode [ 603.457970][T25731] sit2: entered allmulticast mode [ 603.784241][T25751] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 603.816929][T25752] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 603.911499][T25709] lec:lec_atm_close: lec0: Shut down! [ 604.286769][T25776] netlink: 'syz.1.5305': attribute type 1 has an invalid length. [ 605.003992][T25823] __nla_validate_parse: 9 callbacks suppressed [ 605.004014][T25823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 605.067802][T25823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5323'. [ 605.295571][T25849] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 605.382582][T25851] bond10: entered promiscuous mode [ 605.394251][T25851] bond10: entered allmulticast mode [ 605.400375][T25851] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.621364][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5337'. [ 605.640909][T25867] hsr_slave_0: left promiscuous mode [ 605.660503][T25867] hsr_slave_1: left promiscuous mode [ 605.685493][T25869] netlink: 'syz.0.5334': attribute type 3 has an invalid length. [ 605.890798][T25879] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 605.893982][T25881] nbd: couldn't find device at index 1 [ 605.916348][T25879] netlink: 'syz.2.5339': attribute type 8 has an invalid length. [ 605.938432][T25879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5339'. [ 605.993963][T25885] smc: net device team0 applied user defined pnetid SYZ2 [ 606.237912][T25903] IPVS: stopping master sync thread 16976 ... [ 606.406776][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5353'. [ 606.430041][T25913] openvswitch: netlink: Unknown nsh attribute 0 [ 606.507108][T25917] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5354'. [ 606.648696][T25923] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 606.994406][T25946] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 607.078845][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5361'. [ 607.183187][T25957] netlink: 'syz.4.5362': attribute type 15 has an invalid length. [ 607.341149][T25963] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 607.349521][T25963] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 607.386297][T25969] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5371'. [ 607.396209][T25969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5371'. [ 607.445130][T25972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5372'. [ 607.521328][T25972] macvtap1: entered promiscuous mode [ 607.531477][T25972] vlan0: entered promiscuous mode [ 607.540151][T25972] macvtap1: entered allmulticast mode [ 607.551251][T25972] vlan0: entered allmulticast mode [ 607.561991][T25978] xt_TCPMSS: Only works on TCP SYN packets [ 607.569378][T25972] veth0_vlan: entered allmulticast mode [ 608.335668][T26031] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 608.600472][T26049] GUP no longer grows the stack in syz.0.5394 (26049): 200000003000-20000000a000 (200000001000) [ 608.612258][T26049] CPU: 1 UID: 0 PID: 26049 Comm: syz.0.5394 Not tainted syzkaller #0 PREEMPT(full) [ 608.612289][T26049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 608.612302][T26049] Call Trace: [ 608.612310][T26049] [ 608.612320][T26049] dump_stack_lvl+0xe8/0x150 [ 608.612356][T26049] __get_user_pages+0x2453/0x29d0 [ 608.612390][T26049] ? __lock_acquire+0x6b5/0x2cf0 [ 608.612440][T26049] ? __gup_longterm_locked+0xc4e/0x1630 [ 608.612473][T26049] ? down_read_killable+0x1bb/0x340 [ 608.612511][T26049] __gup_longterm_locked+0xdcf/0x1630 [ 608.612571][T26049] gup_fast_fallback+0x1d82/0x22e0 [ 608.612644][T26049] ? __pfx_gup_fast_fallback+0x10/0x10 [ 608.612679][T26049] ? is_valid_gup_args+0x11f/0x200 [ 608.612713][T26049] ? get_user_pages_fast+0x4d/0xb0 [ 608.612748][T26049] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 608.612795][T26049] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 608.612822][T26049] iov_iter_get_pages2+0x5e/0xa0 [ 608.612848][T26049] __se_sys_vmsplice+0x7b3/0x1490 [ 608.612900][T26049] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 608.612934][T26049] ? __pfx_futex_wake+0x10/0x10 [ 608.612973][T26049] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.613056][T26049] do_syscall_64+0x14d/0xf80 [ 608.613080][T26049] ? trace_irq_disable+0x3b/0x150 [ 608.613098][T26049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.613118][T26049] ? clear_bhb_loop+0x40/0x90 [ 608.613142][T26049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.613161][T26049] RIP: 0033:0x7f1262f9c819 [ 608.613182][T26049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.613200][T26049] RSP: 002b:00007f1263e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 608.613223][T26049] RAX: ffffffffffffffda RBX: 00007f1263215fa0 RCX: 00007f1262f9c819 [ 608.613238][T26049] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 608.613252][T26049] RBP: 00007f1263032c91 R08: 0000000000000000 R09: 0000000000000000 [ 608.613265][T26049] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 608.613278][T26049] R13: 00007f1263216038 R14: 00007f1263215fa0 R15: 00007fffac17b7c8 [ 608.613312][T26049] [ 609.079779][T26067] openvswitch: netlink: Unknown nsh attribute 0 [ 609.192813][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5290 ms [ 609.200955][ C0] lec:lec_tx_timeout: lec0 [ 609.250363][T26086] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 609.271565][T26086] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 609.332143][T26087] netlink: 'syz.4.5404': attribute type 6 has an invalid length. [ 610.058839][T26144] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 610.103779][T26144] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 610.256318][T26150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.725579][T26182] __nla_validate_parse: 10 callbacks suppressed [ 610.725603][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 610.801224][T26182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5430'. [ 611.111321][T26201] netlink: 'syz.2.5437': attribute type 11 has an invalid length. [ 611.207763][T26208] xt_hashlimit: size too large, truncated to 1048576 [ 611.265968][T26215] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 611.314152][T26215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.328160][T26215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5441'. [ 611.364091][T26218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 611.482435][T26218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 611.491383][ T7958] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 611.491438][ T7958] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.491476][ T7958] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.491510][ T7958] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.607019][T26226] sctp: [Deprecated]: syz.1.5446 (pid 26226) Use of int in max_burst socket option deprecated. [ 611.607019][T26226] Use struct sctp_assoc_value instead [ 611.700406][T26229] vlan2: entered promiscuous mode [ 611.705959][T26229] bridge0: entered promiscuous mode [ 611.715840][T26233] macsec0: entered promiscuous mode [ 611.734055][T26233] macsec0: entered allmulticast mode [ 611.743931][T26233] veth1_macvtap: entered allmulticast mode [ 611.760445][T26233] macsec0: left promiscuous mode [ 611.769209][T26233] macsec0: left allmulticast mode [ 611.785955][T26233] veth1_macvtap: left allmulticast mode [ 611.925586][T26247] sctp: [Deprecated]: syz.4.5454 (pid 26247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.925586][T26247] Use struct sctp_sack_info instead [ 611.943726][T26249] sctp: [Deprecated]: syz.4.5454 (pid 26249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.943726][T26249] Use struct sctp_sack_info instead [ 612.257606][T26270] x_tables: duplicate entry at hook 2 [ 612.290667][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5458'. [ 612.314341][T26272] IPVS: nq: FWM 3 0x00000003 - no destination available [ 612.321759][T26272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.352406][T26270] netlink: 'syz.0.5458': attribute type 4 has an invalid length. [ 612.406866][T26275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5460'. [ 612.932571][T26311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 612.987982][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5467'. [ 613.169256][T26317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.179220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.183592][T26322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5470'. [ 613.263967][T26329] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 614.069300][T26329] 8021q: adding VLAN 0 to HW filter on device bond6 [ 614.090727][T26330] bond6: (slave veth0_to_bond): making interface the new active one [ 614.101354][T26330] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 614.123810][T26333] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 614.294841][T26353] sctp: [Deprecated]: syz.0.5479 (pid 26353) Use of int in maxseg socket option. [ 614.294841][T26353] Use struct sctp_assoc_value instead [ 614.319943][T26354] sctp: [Deprecated]: syz.0.5479 (pid 26354) Use of int in maxseg socket option. [ 614.319943][T26354] Use struct sctp_assoc_value instead [ 614.352002][T26354] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 614.361250][T26353] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 614.404674][T26360] nbd: couldn't find a device at index 1 [ 614.427504][T26360] nbd: must specify a device to reconfigure [ 614.450259][T26363] sctp: [Deprecated]: syz.2.5481 (pid 26363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.450259][T26363] Use struct sctp_sack_info instead [ 614.475599][T26365] sctp: [Deprecated]: syz.0.5482 (pid 26365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.475599][T26365] Use struct sctp_sack_info instead [ 614.570490][T26369] pimreg: entered allmulticast mode [ 614.643337][T26372] geneve2: entered promiscuous mode [ 614.652442][T26372] geneve2: entered allmulticast mode [ 614.666520][ T7961] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 614.678786][ T7961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.699364][ T7961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.717040][ T7961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.259332][T26389] can: request_module (can-proto-0) failed. [ 615.380340][T26394] netlink: 'syz.1.5493': attribute type 11 has an invalid length. [ 615.433551][T26394] netlink: 'syz.1.5493': attribute type 11 has an invalid length. [ 615.450491][T26404] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 615.621275][T26411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 615.860245][T26427] IPv6: NLM_F_CREATE should be specified when creating new route [ 615.869189][T26427] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 615.889523][T26432] netlink: 'syz.2.5504': attribute type 1 has an invalid length. [ 615.922561][T26428] netlink: 'syz.3.5503': attribute type 13 has an invalid length. [ 616.195118][T26448] __nla_validate_parse: 9 callbacks suppressed [ 616.195141][T26448] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5507'. [ 616.280572][T26450] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5508'. [ 616.327473][T26424] syzkaller1: entered promiscuous mode [ 616.342741][T26424] syzkaller1: entered allmulticast mode [ 616.595761][T26464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5511'. [ 616.760428][T26469] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5512'. [ 616.969067][T26477] bond6: option resend_igmp: invalid value (32767) [ 616.996339][T26477] bond6: option resend_igmp: allowed values 0 - 255 [ 617.040633][T26477] bond6 (unregistering): Released all slaves [ 617.112219][T26479] ip6tnl0: Caught tx_queue_len zero misconfig [ 617.118236][T26488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5516'. [ 617.214205][T26487] syzkaller0: entered allmulticast mode [ 617.289228][T26493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5520'. [ 617.453555][T26503] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5525'. [ 617.505532][T26503] bond6 (unregistering): Released all slaves [ 617.622324][T26505] syzkaller0: entered promiscuous mode [ 617.639628][T26505] syzkaller0: entered allmulticast mode [ 617.763578][T26519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 617.774168][T26521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5532'. [ 617.852282][T26525] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5534'. [ 617.965066][T26532] macvlan0: entered promiscuous mode [ 618.116227][T26538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.245774][T26540] bond11: entered promiscuous mode [ 618.302593][T26540] 8021q: adding VLAN 0 to HW filter on device bond11 [ 618.366750][T26557] macvlan2: entered promiscuous mode [ 618.372729][T26557] macvlan2: entered allmulticast mode [ 618.382175][T26557] bond11: (slave macvlan2): Opening slave failed [ 618.466239][T26551] bridge7: entered promiscuous mode [ 618.473680][T26551] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 618.553452][T26576] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 618.576444][T26576] netlink: 'syz.4.5547': attribute type 21 has an invalid length. [ 618.644818][T26581] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 618.666956][T26579] netlink: 'syz.0.5549': attribute type 4 has an invalid length. [ 618.676563][T26580] netlink: 'syz.0.5549': attribute type 4 has an invalid length. [ 618.687838][T26579] netlink: 'syz.0.5549': attribute type 4 has an invalid length. [ 618.927551][T26595] netlink: 'syz.1.5554': attribute type 2 has an invalid length. [ 618.976221][T26595] 9: entered promiscuous mode [ 619.277207][T26602] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 619.310057][T26602] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 619.428407][T26626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 619.532035][T26628] syzkaller1: entered promiscuous mode [ 619.547011][T26628] syzkaller1: entered allmulticast mode [ 619.611066][T26630] netlink: 'syz.4.5567': attribute type 12 has an invalid length. [ 619.706939][T26637] bridge0: entered allmulticast mode [ 619.716143][T26637] C: Caught tx_queue_len zero misconfig [ 621.255631][T26743] __nla_validate_parse: 15 callbacks suppressed [ 621.255653][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5600'. [ 621.278277][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5600'. [ 621.393863][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5604'. [ 621.406619][T26753] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 621.447785][T26753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.535390][T26760] openvswitch: netlink: IP tunnel dst address not specified [ 621.589614][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5609'. [ 621.744482][T26774] bridge0: entered allmulticast mode [ 621.802711][T26776] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 621.963607][T26797] veth0_to_bridge: entered promiscuous mode [ 621.979140][T26794] syzkaller0: entered promiscuous mode [ 621.987959][T26794] syzkaller0: entered allmulticast mode [ 622.006693][T26796] veth0_to_bridge: left promiscuous mode [ 622.148334][T26806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5620'. [ 622.176470][T26809] netlink: 'syz.0.5622': attribute type 1 has an invalid length. [ 622.248343][T26817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5622'. [ 622.253883][T26815] netlink: 'syz.2.5623': attribute type 39 has an invalid length. [ 622.486102][T26817] 8021q: adding VLAN 0 to HW filter on device bond12 [ 622.640946][T26828] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 622.728796][T26819] tipc: Resetting bearer [ 622.806343][T26832] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 622.958031][T26832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 623.026145][T26832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5627'. [ 623.056581][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5632'. [ 623.058323][T26837] bond7: (slave veth9): Enslaving as an active interface with a down link [ 623.098410][T26843] bond7: (slave dummy0): making interface the new active one [ 623.110245][T26843] dummy0: entered promiscuous mode [ 623.116796][T26843] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 623.149449][T26832] bond7: (slave dummy0): Releasing active interface [ 623.156472][T26832] dummy0 (unregistering): left promiscuous mode [ 623.175192][T26855] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5633'. [ 623.217521][T26846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5630'. [ 623.227097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.292986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.454061][T26874] netlink: 'syz.0.5636': attribute type 3 has an invalid length. [ 623.676172][T26880] SET target dimension over the limit! [ 623.936608][T26906] pim6reg: left allmulticast mode [ 623.942299][T26906] bridge0: left allmulticast mode [ 624.073017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.136751][T26915] netdevsim netdevsim0 : renamed from netdevsim0 [ 624.270962][T26921] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 624.299386][T26921] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 624.361113][T26923] x_tables: duplicate underflow at hook 2 [ 624.450686][T26926] bond2: option mode: unable to set because the bond device has slaves [ 624.639281][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.651011][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.664691][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.677653][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.686216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.695193][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 624.937024][T26956] netlink: 'syz.4.5663': attribute type 2 has an invalid length. [ 624.962623][T26956] netlink: 'syz.4.5663': attribute type 2 has an invalid length. [ 625.206776][T26971] syzkaller1: entered promiscuous mode [ 625.231873][T26971] syzkaller1: entered allmulticast mode [ 625.259478][T26978] netlink: 'syz.0.5669': attribute type 1 has an invalid length. [ 625.327467][T26971] bond13: (slave gretap3): making interface the new active one [ 625.377788][T26971] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 625.536630][T26994] vlan3: entered allmulticast mode [ 625.541942][T26994] bridge5: entered allmulticast mode [ 625.550817][T26995] bridge5: port 1(erspan0) entered blocking state [ 625.559099][T26995] bridge5: port 1(erspan0) entered disabled state [ 625.566749][T26995] erspan0: entered allmulticast mode [ 625.574705][T26995] erspan0: entered promiscuous mode [ 626.252169][T27023] syzkaller0: entered promiscuous mode [ 626.263057][T27023] syzkaller0: entered allmulticast mode [ 626.277718][T27039] IPVS: set_ctl: invalid protocol: 57 10.1.1.1:20004 [ 626.293336][T27037] __nla_validate_parse: 13 callbacks suppressed [ 626.293359][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5691'. [ 626.483470][T27054] netlink: 'syz.0.5697': attribute type 32 has an invalid length. [ 626.646854][T27065] netlink: 'syz.3.5700': attribute type 1 has an invalid length. [ 626.656484][T27065] netlink: 'syz.3.5700': attribute type 2 has an invalid length. [ 626.676297][T27065] netlink: 'syz.3.5700': attribute type 1 has an invalid length. [ 626.684632][T27065] netlink: 'syz.3.5700': attribute type 3 has an invalid length. [ 626.713348][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5700'. [ 628.609372][T27071] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 628.728025][T27082] sctp: [Deprecated]: syz.1.5701 (pid 27082) Use of int in maxseg socket option. [ 628.728025][T27082] Use struct sctp_assoc_value instead [ 628.770829][T27088] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5703'. [ 628.792137][T27085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5702'. [ 630.152865][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 630.160916][ C0] lec:lec_tx_timeout: lec0 [ 630.165816][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 635.192886][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 635.200947][ C0] lec:lec_tx_timeout: lec0 [ 640.864374][ T7871] net_ratelimit: 2 callbacks suppressed [ 640.864389][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.878927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.182362][T27100] x_tables: ip_tables: osf match: only valid for protocol 6 [ 649.222243][T27106] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.5706'. [ 649.256343][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5707'. [ 649.267782][T27111] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.5706'. [ 649.333708][T27116] macsec0: entered promiscuous mode [ 649.338996][T27116] macsec0: entered allmulticast mode [ 649.372281][T27104] pim6reg1: entered promiscuous mode [ 649.393646][T27104] pim6reg1: entered allmulticast mode [ 649.477408][T27120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5711'. [ 649.503516][T27124] netlink: 'syz.0.5710': attribute type 11 has an invalid length. [ 649.511745][T27124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5710'. [ 649.922096][T27142] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5717'. [ 650.123860][T27142] netlink: 880 bytes leftover after parsing attributes in process `syz.3.5717'. [ 650.195875][T27149] netlink: 'syz.0.5718': attribute type 3 has an invalid length. [ 650.474761][T27160] netlink: 'syz.1.5723': attribute type 32 has an invalid length. [ 650.492606][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5723'. [ 650.646483][T27160] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 651.003408][T27185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5726'. [ 651.003912][T27181] veth7: entered allmulticast mode [ 651.147138][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5729'. [ 651.200796][T27195] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.341520][T27209] team0: left allmulticast mode [ 651.349192][T27209] team_slave_0: left allmulticast mode [ 651.362373][T27209] team_slave_1: left allmulticast mode [ 651.372680][T27209] pimreg: left allmulticast mode [ 654.178227][T27195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.370391][T27249] __nla_validate_parse: 4 callbacks suppressed [ 654.370412][T27249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5744'. [ 654.378242][T27255] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5741'. [ 654.480918][T27262] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.830490][T27276] dvmrp0: entered allmulticast mode [ 655.005269][T27284] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 655.234567][T27294] tipc: Enabled bearer , priority 0 [ 655.253804][T27294] syzkaller0: mtu less than device minimum [ 655.498011][T27300] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5758'. [ 655.665903][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5765'. [ 655.695786][T27321] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5764'. [ 655.848295][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 655.868616][T27325] netlink: 'syz.2.5767': attribute type 6 has an invalid length. [ 655.917252][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 655.987355][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 656.093664][T27325] netlink: 'syz.2.5767': attribute type 6 has an invalid length. [ 656.102039][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 657.543593][T27410] syzkaller0: entered promiscuous mode [ 657.552668][T27410] syzkaller0: entered allmulticast mode [ 657.786777][T27422] openvswitch: netlink: IP tunnel dst address not specified [ 657.797445][T27422] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 657.923500][T27419] ipt_REJECT: TCP_RESET invalid for non-tcp [ 658.090940][T27430] tipc: Resetting bearer [ 658.240243][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'. [ 658.339581][T27448] netlink: 'syz.2.5797': attribute type 3 has an invalid length. [ 658.394904][T27453] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 658.810640][T27430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 658.818454][T27430] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 658.859026][T27430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 658.867721][T27430] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 658.896141][T27430] tipc: Resetting bearer [ 658.931742][T27430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.941527][T27430] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 658.965132][T27430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.971202][T27430] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 659.330751][T27492] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 659.557498][T27514] __nla_validate_parse: 4 callbacks suppressed [ 659.557521][T27514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5815'. [ 659.593948][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'. [ 659.819573][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.840928][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.851767][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.881681][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.895063][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.044167][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.073392][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.086077][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.103208][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.113263][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.567817][T27550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5820'. [ 660.602062][T27550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5820'. [ 660.629649][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5820'. [ 661.055529][T27564] netlink: 'syz.1.5821': attribute type 16 has an invalid length. [ 661.091638][T27559] tipc: Resetting bearer [ 661.108186][T27564] netlink: 'syz.1.5821': attribute type 17 has an invalid length. [ 661.163483][T27559] tipc: Resetting bearer [ 661.314648][ T7952] tipc: Resetting bearer [ 661.569564][T27564] macvlan0: left promiscuous mode [ 661.599759][T27564] tipc: Resetting bearer [ 661.612581][T27564] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 661.648833][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5826'. [ 661.697187][T27564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.722238][T27564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.733253][T27564] gretap1: left promiscuous mode [ 661.738428][T27564] gretap1: left allmulticast mode [ 661.750696][T27564] bridge0: left promiscuous mode [ 661.757098][T27564] bridge0: left allmulticast mode [ 661.823413][T27564] gtp1: left promiscuous mode [ 661.828391][T27564] gtp1: left allmulticast mode [ 661.837293][T27564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 661.850806][T27564] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.863790][T27564] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 661.956007][ T7952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 661.985490][ T5900] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 661.996233][ T7952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.030290][T27525] chnl_net:caif_netlink_parms(): no params data found [ 662.049972][T27604] netlink: 'syz.4.5828': attribute type 7 has an invalid length. [ 662.087563][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'. [ 662.092122][T27604] netlink: 'syz.4.5828': attribute type 7 has an invalid length. [ 662.154793][ T5826] Bluetooth: hci0: command tx timeout [ 662.203165][ T5900] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.291421][ T5900] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.407771][T27525] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.442171][T27525] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.457019][T27625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5832'. [ 662.479192][T27525] bridge_slave_0: entered allmulticast mode [ 662.501261][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5832'. [ 662.510728][T27625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5832'. [ 662.526850][T27525] bridge_slave_0: entered promiscuous mode [ 662.563303][T27525] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.570516][T27525] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.611454][T27525] bridge_slave_1: entered allmulticast mode [ 662.647920][T27525] bridge_slave_1: entered promiscuous mode [ 662.663769][T27639] netlink: 'syz.3.5834': attribute type 4 has an invalid length. [ 662.719322][T27640] netlink: 'syz.3.5834': attribute type 4 has an invalid length. [ 662.792719][T27525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.846853][T27525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.940579][T27644] tipc: New replicast peer: 255.255.255.255 [ 662.948283][T27644] tipc: Enabled bearer , priority 10 [ 662.981671][T27525] team0: Port device team_slave_0 added [ 663.002260][T27525] team0: Port device team_slave_1 added [ 663.135024][T27660] netlink: 'syz.0.5837': attribute type 28 has an invalid length. [ 663.144093][T27655] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 663.151645][T27655] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 663.163663][T27660] netlink: 'syz.0.5837': attribute type 3 has an invalid length. [ 663.177301][T27644] can: request_module (can-proto-0) failed. [ 663.207168][T27655] tipc: Resetting bearer [ 663.228454][T27525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.253664][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.324279][T27525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.351863][T27525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.360920][T27525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.388055][T27525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.602322][T27525] hsr_slave_0: entered promiscuous mode [ 663.614938][T27525] hsr_slave_1: entered promiscuous mode [ 663.634582][T27525] debugfs: 'hsr0' already exists in 'hsr' [ 663.640640][T27525] Cannot create hsr debugfs directory [ 663.975391][T27703] netlink: 'syz.3.5851': attribute type 5 has an invalid length. [ 664.120844][T27714] netlink: 'syz.1.5854': attribute type 1 has an invalid length. [ 664.233777][ T5826] Bluetooth: hci0: command tx timeout [ 664.351121][T27525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.383723][T27525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.509921][T27730] tipc: Enabled bearer , priority 0 [ 664.672349][T27735] __nla_validate_parse: 6 callbacks suppressed [ 664.672368][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5856'. [ 664.946246][T27746] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5856'. [ 665.687300][T27768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5860'. [ 665.707374][T27771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5860'. [ 665.950237][T27775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5861'. [ 666.164427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 666.318161][ T5826] Bluetooth: hci0: command tx timeout [ 667.551202][T27525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.562228][T27525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.607211][T27730] syzkaller0: entered promiscuous mode [ 667.613267][T27730] syzkaller0: entered allmulticast mode [ 667.667880][T27744] tipc: Resetting bearer [ 667.675074][T27729] tipc: Resetting bearer [ 667.694020][T27729] tipc: Disabling bearer [ 667.707260][ T796] tipc: Node number set to 3433143382 [ 667.797643][T27525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.827953][T27525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.977042][T27525] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.998653][T27525] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.261698][T27827] netlink: 'syz.4.5870': attribute type 25 has an invalid length. [ 668.299510][T27830] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5869'. [ 668.380502][T27832] syzkaller1: entered promiscuous mode [ 668.388645][T27832] syzkaller1: entered allmulticast mode [ 668.396271][ T5826] Bluetooth: hci0: command tx timeout [ 668.452209][T27525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.468540][T27525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.499711][T27525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.527221][T27525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.006348][T27525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.158734][T27525] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.227157][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.234404][ T7958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.241828][T27887] netlink: 'syz.4.5880': attribute type 1 has an invalid length. [ 669.241871][T27887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.319253][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.326518][ T7958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.392667][T27893] netlink: 'syz.3.5881': attribute type 58 has an invalid length. [ 669.432143][T27893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5881'. [ 670.167035][T27921] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5887'. [ 670.268407][T27924] netlink: 'syz.0.5888': attribute type 1 has an invalid length. [ 670.281227][T27929] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5889'. [ 670.298099][T27924] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5888'. [ 670.298383][T27525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.342988][T27924] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5888'. [ 670.382645][T27924] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5888'. [ 670.395960][T27935] veth0: entered promiscuous mode [ 670.452389][T27525] veth0_vlan: entered promiscuous mode [ 670.472488][T27930] veth0: left promiscuous mode [ 670.510746][T27525] veth1_vlan: entered promiscuous mode [ 670.627780][T27906] syzkaller0: entered promiscuous mode [ 670.651987][T27906] syzkaller0: entered allmulticast mode [ 670.690403][T27944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5893'. [ 670.741322][T27525] veth0_macvtap: entered promiscuous mode [ 670.790543][T27945] syzkaller0: entered promiscuous mode [ 670.803985][T27945] syzkaller0: entered allmulticast mode [ 670.911626][T27525] veth1_macvtap: entered promiscuous mode [ 671.005521][T27525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.040790][T27525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.069765][ T7952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.097722][T27960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.106520][ T7952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.150565][ T7952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.166890][ T7952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.204164][T27958] syzkaller0: entered promiscuous mode [ 671.212372][T27958] syzkaller0: entered allmulticast mode [ 671.452634][T27978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5899'. [ 671.644133][T27986] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5901'. [ 671.698050][T27990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5901'. [ 671.878225][T12128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.918546][T12128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.046365][ T7961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.067758][ T7961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.078284][T28004] netlink: 'syz.1.5902': attribute type 4 has an invalid length. [ 672.101449][T28004] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5902'. [ 672.116898][T28001] netlink: 'syz.3.5903': attribute type 1 has an invalid length. [ 672.132452][T28001] netlink: 'syz.3.5903': attribute type 2 has an invalid length. [ 672.167062][T28001] netlink: 'syz.3.5903': attribute type 2 has an invalid length. [ 672.194936][T28001] netlink: 'syz.3.5903': attribute type 2 has an invalid length. [ 672.400833][T28023] netlink: 'syz.0.5907': attribute type 29 has an invalid length. [ 672.946747][T28056] tipc: Enabling of bearer rejected, failed to enable media [ 673.005778][T28056] tipc: Enabling of bearer rejected, failed to enable media [ 673.327012][T28081] netlink: 'syz.3.5924': attribute type 2 has an invalid length. [ 673.702404][T28106] syzkaller1: entered promiscuous mode [ 673.718694][T28106] syzkaller1: entered allmulticast mode [ 674.067601][T28126] sctp: [Deprecated]: syz.3.5932 (pid 28126) Use of int in max_burst socket option. [ 674.067601][T28126] Use struct sctp_assoc_value instead [ 674.500141][T28150] team1: entered promiscuous mode [ 674.523720][T28150] team1: entered allmulticast mode [ 674.554011][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 674.560428][T28159] netlink: 'syz.4.5945': attribute type 10 has an invalid length. [ 674.816251][T28168] syzkaller0: entered promiscuous mode [ 674.823136][T28168] syzkaller0: entered allmulticast mode [ 674.902249][T28174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.451104][T28202] __nla_validate_parse: 83 callbacks suppressed [ 675.451125][T28202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5958'. [ 675.451397][T28200] syzkaller1: entered promiscuous mode [ 675.523121][T28200] syzkaller1: entered allmulticast mode [ 675.556674][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5959'. [ 675.629090][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 675.642593][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 675.657806][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.671931][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.681610][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 676.085878][T28231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.266772][ T6200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 676.454997][ T6200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 676.544400][T28263] netlink: 'syz.1.5967': attribute type 4 has an invalid length. [ 676.574139][T28214] chnl_net:caif_netlink_parms(): no params data found [ 676.650323][ T6200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 676.688338][T28266] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5971'. [ 676.731361][ T6200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 676.780666][T28270] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 676.804709][T28270] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5973'. [ 676.824127][T28270] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5973'. [ 676.863600][T28270] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 676.883119][T28270] netlink: 618 bytes leftover after parsing attributes in process `syz.3.5973'. [ 676.942310][T28214] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.970934][T28214] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.979132][T28214] bridge_slave_0: entered allmulticast mode [ 676.988121][T28214] bridge_slave_0: entered promiscuous mode [ 676.998379][T28214] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.006288][T28214] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.014514][T28214] bridge_slave_1: entered allmulticast mode [ 677.024291][T28214] bridge_slave_1: entered promiscuous mode [ 677.127954][T28214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.137665][T12128] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 39762 - 0 [ 677.164318][T28214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.213922][ T7952] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 39762 - 0 [ 677.280021][ T7952] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 39762 - 0 [ 677.295561][T28214] team0: Port device team_slave_0 added [ 677.309246][T28214] team0: Port device team_slave_1 added [ 677.399203][T12128] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 39762 - 0 [ 677.423435][ T6200] bridge_slave_1: left allmulticast mode [ 677.432067][ T6200] bridge_slave_1: left promiscuous mode [ 677.439032][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.725667][T28304] tipc: Failed to remove unknown binding: 66,1,1/0:2600657779/2600657781 [ 677.763732][ T5826] Bluetooth: hci5: command tx timeout [ 677.817290][ T6200] bond11 (unregistering): (slave vti0): Releasing backup interface [ 677.832428][ T6200] vti0 (unregistering): left promiscuous mode [ 677.860624][ T6200] erspan0 (unregistering): left promiscuous mode [ 677.890028][ T6200] gretap0 (unregistering): left promiscuous mode [ 677.905951][T28314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 677.923481][ T6200] bond3 (unregistering): (slave gretap1): Releasing active interface [ 678.008909][ T6200] bridge0 (unregistering): left promiscuous mode [ 678.098083][ T6200] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 678.106611][ T6200] bridge2 (unregistering): left promiscuous mode [ 678.194940][ T6200]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.205577][ T6200]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.215757][ T6200]  (unregistering): Released all slaves [ 678.228252][ T6200] bond1 (unregistering): Released all slaves [ 678.244980][ T6200] bond2 (unregistering): (slave lo): Releasing backup interface [ 678.254753][ T6200] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 678.268685][ T6200] bond2 (unregistering): Released all slaves [ 678.283354][ T6200] bond3 (unregistering): Released all slaves [ 678.299605][ T6200] bond4 (unregistering): (slave veth5): Releasing active interface [ 678.308995][ T6200] bond4 (unregistering): Released all slaves [ 678.339039][ T6200] bond0 (unregistering): Released all slaves [ 678.353084][ T6200] bond5 (unregistering): Released all slaves [ 678.367274][ T6200] bond6 (unregistering): Released all slaves [ 678.381298][ T6200] bond7 (unregistering): Released all slaves [ 678.410112][ T6200] bond8 (unregistering): Released all slaves [ 678.424397][ T6200] bond9 (unregistering): Released all slaves [ 678.440265][ T6200] bond10 (unregistering): (slave veth7): Releasing active interface [ 678.449901][ T6200] bond10 (unregistering): Released all slaves [ 678.471091][ T6200] bond11 (unregistering): Released all slaves [ 678.488479][ T6200] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 678.503238][ T6200] bond12 (unregistering): Released all slaves [ 678.519988][T28214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.527191][T28214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.554238][T28214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.604422][T28214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.656601][T28214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.738435][T28214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.883118][ T6200] tipc: Left network mode [ 678.908945][T28323] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 678.927461][T28323] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 679.031600][T28214] hsr_slave_0: entered promiscuous mode [ 679.050815][T28214] hsr_slave_1: entered promiscuous mode [ 679.058129][T28214] debugfs: 'hsr0' already exists in 'hsr' [ 679.066048][T28214] Cannot create hsr debugfs directory [ 679.242599][T28336] tipc: Started in network mode [ 679.253021][T28336] tipc: Node identity 3e184a3efdd5, cluster identity 4711 [ 679.284733][T28336] tipc: Enabled bearer , priority 0 [ 679.318139][T28328] syzkaller0: entered promiscuous mode [ 679.352892][T28328] syzkaller0: entered allmulticast mode [ 679.531773][T28332] tipc: Resetting bearer [ 679.611897][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'. [ 679.623060][T28351] netlink: 'syz.3.5993': attribute type 30 has an invalid length. [ 679.637905][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5993'. [ 679.751653][T28327] tipc: Resetting bearer [ 679.788709][T28327] tipc: Disabling bearer [ 679.833675][ T5826] Bluetooth: hci5: command tx timeout [ 679.879901][T28355] tipc: Enabled bearer , priority 0 [ 680.031407][T28345] tipc: Disabling bearer [ 680.160855][T28378] syzkaller0: entered promiscuous mode [ 680.167170][T28378] syzkaller0: entered allmulticast mode [ 680.445760][T28395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6001'. [ 680.468095][T28395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6001'. [ 681.923429][ T5826] Bluetooth: hci5: command tx timeout [ 682.438561][T28214] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 682.481570][T19979] IPVS: starting estimator thread 0... [ 682.487825][T28409] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 682.534973][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6006'. [ 682.544006][T28413] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6005'. [ 682.570169][T28418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6006'. [ 682.600036][ T6200] hsr_slave_1: left promiscuous mode [ 682.610774][T28412] IPVS: using max 28 ests per chain, 67200 per kthread [ 682.636913][ T6200] vlan0: left allmulticast mode [ 682.641855][ T6200] veth0_vlan: left allmulticast mode [ 682.657594][ T6200] vlan0: left promiscuous mode [ 682.658418][T28422] sctp: [Deprecated]: syz.2.6007 (pid 28422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.658418][T28422] Use struct sctp_sack_info instead [ 683.028570][T28439] ip6t_REJECT: ECHOREPLY is not supported [ 683.484085][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 683.508636][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 683.587686][ T6200] smc: removing net device team0 with user defined pnetid SYZ2 [ 683.628687][T28418] hsr_slave_0: left promiscuous mode [ 683.635213][T28418] hsr_slave_1: left promiscuous mode [ 683.651256][T28214] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 683.713869][T28439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6009'. [ 683.725195][T28439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6009'. [ 683.786086][T28214] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 683.888508][T28450] netlink: 'syz.3.6012': attribute type 2 has an invalid length. [ 683.908901][T28450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6012'. [ 683.995420][ T5826] Bluetooth: hci5: command tx timeout [ 683.997080][T28455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6014'. [ 684.105695][T28214] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 684.259963][T28456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6014'. [ 684.301620][T28456] nbd: nbd64 already in use [ 684.486309][ T6200] IPVS: stop unused estimator thread 0... [ 684.720402][T28487] pim6reg: entered allmulticast mode [ 684.785230][T28219] udevd[28219]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 684.815563][T28214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 684.867871][T28492] netlink: 'syz.1.6022': attribute type 1 has an invalid length. [ 684.900437][T28214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 684.961221][T28492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 685.002676][T28214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 685.026659][T28499] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6023'. [ 685.039521][T28499] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 685.050870][T28499] netlink: 'syz.2.6023': attribute type 15 has an invalid length. [ 685.095326][T28500] 8021q: adding VLAN 0 to HW filter on device bond8 [ 685.118439][T28500] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 685.164869][T28500] bond8: (slave vcan1): Error -95 calling set_mac_address [ 685.240720][T28497] gtp1: entered promiscuous mode [ 685.248029][T28497] gtp1: entered allmulticast mode [ 685.255202][T28214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 685.579778][T28214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.705044][T28214] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.773827][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.781144][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.816195][T28533] syzkaller0: entered promiscuous mode [ 685.823739][T28533] syzkaller0: entered allmulticast mode [ 685.864680][T28541] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 685.872034][T28543] __nla_validate_parse: 1 callbacks suppressed [ 685.872053][T28543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6033'. [ 685.917247][T28546] netlink: 'syz.0.6035': attribute type 39 has an invalid length. [ 686.056029][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.063398][ T7958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.080024][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.090416][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 686.110048][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.122369][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.131129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.140059][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 686.209204][T28537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6034'. [ 686.291528][T28214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.417560][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6038'. [ 686.755855][T28575] Bluetooth: MGMT ver 1.23 [ 686.786377][T28214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.467127][T28607] netlink: 'syz.0.6049': attribute type 10 has an invalid length. [ 687.475418][T28607] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.6049'. [ 687.491516][T28583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6044'. [ 687.712091][T28622] netlink: 'syz.1.6052': attribute type 4 has an invalid length. [ 687.746713][T28622] netlink: 'syz.1.6052': attribute type 3 has an invalid length. [ 687.768928][T28214] veth0_vlan: entered promiscuous mode [ 687.780153][T28622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6052'. [ 687.811319][T28214] veth1_vlan: entered promiscuous mode [ 687.891417][T28214] veth0_macvtap: entered promiscuous mode [ 687.942158][T28214] veth1_macvtap: entered promiscuous mode [ 687.970948][T28630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6054'. [ 687.976413][T28214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.988815][T28630] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6054'. [ 688.018714][T28214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.038462][ T6200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.056325][ T6200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.093203][ T6200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.102119][ T6200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.214548][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6059'. [ 688.281183][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.300108][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.357997][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.381296][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.763573][T28671] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 689.069786][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 689.081543][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 689.090845][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 689.103089][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 689.111703][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 689.161219][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6071'. [ 689.222945][T28684] netlink: 'syz.4.6071': attribute type 7 has an invalid length. [ 689.248211][T28684] netlink: 'syz.4.6071': attribute type 8 has an invalid length. [ 689.610747][T28697] netlink: 'syz.4.6075': attribute type 1 has an invalid length. [ 689.874916][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.898088][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 689.913044][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 690.011599][T28681] chnl_net:caif_netlink_parms(): no params data found [ 690.093820][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.105454][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 690.240050][ T5900] IPVS: starting estimator thread 0... [ 690.248683][T28724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.258339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.353772][T28733] IPVS: using max 26 ests per chain, 62400 per kthread [ 690.362540][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.390820][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 690.586099][ T35] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.596977][ T35] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 690.816825][T28681] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.834108][T28681] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.842128][T28681] bridge_slave_0: entered allmulticast mode [ 690.879765][T28681] bridge_slave_0: entered promiscuous mode [ 690.899224][T28681] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.906768][T28681] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.916984][T28681] bridge_slave_1: entered allmulticast mode [ 690.927971][T28681] bridge_slave_1: entered promiscuous mode [ 690.943830][T28761] __nla_validate_parse: 3 callbacks suppressed [ 690.943850][T28761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6089'. [ 691.044308][T24786] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 39762 - 0 [ 691.067564][T28681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.104495][T28681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.127905][ T6200] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 39762 - 0 [ 691.193465][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 691.195530][ T5826] Bluetooth: hci1: command tx timeout [ 691.201578][ C0] lec:lec_tx_timeout: lec0 [ 691.231648][T28773] netlink: 'syz.3.6093': attribute type 178 has an invalid length. [ 691.246120][T28681] team0: Port device team_slave_0 added [ 691.344749][T28681] team0: Port device team_slave_1 added [ 691.360795][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 39762 - 0 [ 691.373897][ T13] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 39762 - 0 [ 691.457627][ T35] dummy0: left allmulticast mode [ 691.466269][ T35] bridge0: port 3(dummy0) entered disabled state [ 691.481730][ T35] bridge_slave_1: left allmulticast mode [ 691.488990][ T35] bridge_slave_1: left promiscuous mode [ 691.504381][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.530118][ T35] bridge_slave_0: left promiscuous mode [ 691.536464][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.770069][T28791] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 691.785167][T28793] netlink: 'syz.2.6099': attribute type 4 has an invalid length. [ 691.788921][T28791] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6098'. [ 691.813837][ T35] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 691.823587][ T35] ip6gre1 (unregistering): left promiscuous mode [ 691.847111][T28797] netlink: 'syz.2.6099': attribute type 4 has an invalid length. [ 692.085295][ T35] bond13 (unregistering): (slave gretap3): Releasing active interface [ 692.126749][ T35] bond10 (unregistering): (slave geneve2): Releasing active interface [ 692.238513][ T35] bond4 (unregistering): (slave bridge2): Releasing active interface [ 692.488420][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.499090][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.509982][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 692.519230][ T35] bond0 (unregistering): Released all slaves [ 692.532717][ T35] bond1 (unregistering): Released all slaves [ 692.547723][ T35] bond2 (unregistering): Released all slaves [ 692.564923][ T35] bond3 (unregistering): (slave lo): Releasing backup interface [ 692.576486][ T35] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 692.590707][ T35] bond3 (unregistering): Released all slaves [ 692.605027][ T35] bond4 (unregistering): Released all slaves [ 692.619318][ T35] bond5 (unregistering): Released all slaves [ 692.633672][ T35] bond6 (unregistering): Released all slaves [ 692.658562][ T35] bond7 (unregistering): Released all slaves [ 692.673635][ T35] bond8 (unregistering): Released all slaves [ 692.689058][ T35] bond9 (unregistering): Released all slaves [ 692.709043][ T35] bond10 (unregistering): Released all slaves [ 692.723602][ T35] bond11 (unregistering): Released all slaves [ 692.738644][ T35] bond12 (unregistering): Released all slaves [ 692.760983][ T35] bond13 (unregistering): Released all slaves [ 692.776043][ T35] bond14 (unregistering): Released all slaves [ 692.791167][T28681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.802838][T28681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.831780][T28681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.939720][T28681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.967337][T28681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.012293][T28681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.156430][T28681] hsr_slave_0: entered promiscuous mode [ 693.176611][T28681] hsr_slave_1: entered promiscuous mode [ 693.190749][T28681] debugfs: 'hsr0' already exists in 'hsr' [ 693.202459][T28681] Cannot create hsr debugfs directory [ 693.220573][ T35] tipc: Disabling bearer [ 693.238396][ T35] tipc: Left network mode [ 693.274096][ T5826] Bluetooth: hci1: command tx timeout [ 693.641196][T28837] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6107'. [ 693.647843][T28825] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6108'. [ 693.703532][T28833] macvlan0: entered promiscuous mode [ 693.768955][T28840] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6110'. [ 694.149380][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 694.312503][T28851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6113'. [ 694.375798][T28863] vlan2: entered allmulticast mode [ 694.381641][T28863] bridge1: entered allmulticast mode [ 694.401343][T28864] bridge1: port 1(erspan0) entered blocking state [ 694.418373][T28864] bridge1: port 1(erspan0) entered disabled state [ 694.437518][T28864] erspan0: entered allmulticast mode [ 694.469216][T28864] erspan0: entered promiscuous mode [ 694.477532][T28864] bridge1: port 1(erspan0) entered blocking state [ 694.484203][T28864] bridge1: port 1(erspan0) entered forwarding state [ 694.586269][T28878] xt_hashlimit: invalid rate [ 694.601384][T28681] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 694.674287][T28881] netlink: 'syz.1.6120': attribute type 1 has an invalid length. [ 694.796657][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.832863][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.885747][ T35] veth1_macvtap: left promiscuous mode [ 694.895463][ T35] veth0_macvtap: left promiscuous mode [ 694.905637][ T35] veth1_vlan: left promiscuous mode [ 694.911072][ T35] veth0_vlan: left promiscuous mode [ 695.238828][ T35] team0 (unregistering): Port device team_slave_1 removed [ 695.254658][ T35] team0 (unregistering): Port device team_slave_0 removed [ 695.353403][ T5826] Bluetooth: hci1: command tx timeout [ 695.378348][T28881] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 695.404936][T28681] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 695.429244][T10508] lec:lec_start_xmit: lec0:No lecd attached [ 695.628227][T28681] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 695.736062][T28911] netlink: 'syz.1.6126': attribute type 12 has an invalid length. [ 695.878172][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6127'. [ 695.917310][T28681] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 695.955973][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6129'. [ 696.024608][T28911] bond9: option primary_reselect: invalid value (255) [ 696.034635][T28911] bond9 (unregistering): Released all slaves [ 696.409621][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6134'. [ 696.448676][T28681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.452462][ T35] IPVS: stop unused estimator thread 0... [ 696.523983][T28681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.567092][T28681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.627058][T28681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.016812][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6140'. [ 697.050403][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6141'. [ 697.062581][T28987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6140'. [ 697.303768][T28992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6142'. [ 697.332429][T28681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.386293][T28681] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.434255][ T5826] Bluetooth: hci1: command tx timeout [ 697.451402][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.458777][ T7952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.485676][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.492939][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.027886][T29041] Cannot find add_set index 0 as target [ 698.208985][T28681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.319261][T28681] veth0_vlan: entered promiscuous mode [ 698.345863][T28681] veth1_vlan: entered promiscuous mode [ 698.417376][T28681] veth0_macvtap: entered promiscuous mode [ 698.438025][T28681] veth1_macvtap: entered promiscuous mode [ 698.491782][T28681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.511223][T28681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.545804][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.562422][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.594923][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.606378][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.785119][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.844955][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.988675][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.997244][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.078087][T29079] netlink: 'syz.4.6158': attribute type 11 has an invalid length. [ 699.188402][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6160'. [ 699.716146][T29116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6166'. [ 700.130089][T29139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6173'. [ 700.178976][T29145] openvswitch: netlink: Missing valid actions attribute. [ 700.199432][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6175'. [ 700.224749][T29142] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 700.258788][T29145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.930382][T29178] tipc: Started in network mode [ 700.945963][T29178] tipc: Node identity 421fab2633ef, cluster identity 4711 [ 700.954265][T29178] tipc: Enabled bearer , priority 0 [ 700.998185][T29187] __nla_validate_parse: 3 callbacks suppressed [ 700.998207][T29187] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6186'. [ 701.034190][T29187] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 701.192931][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 701.201098][ C0] lec:lec_tx_timeout: lec0 [ 701.223785][T29191] netlink: 'syz.1.6188': attribute type 1 has an invalid length. [ 701.729173][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 701.744917][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 701.763173][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 701.772938][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 701.781026][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 702.018146][T29177] tipc: Disabling bearer [ 702.331329][T29217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6195'. [ 702.356572][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.389542][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.412942][ T6200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 702.477962][T28681] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 702.508053][T29226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 702.526561][T29219] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 702.531979][T28681] CPU: 1 UID: 0 PID: 28681 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 702.532004][T28681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.532016][T28681] Call Trace: [ 702.532023][T28681] [ 702.532031][T28681] dump_stack_lvl+0xe8/0x150 [ 702.532064][T28681] dump_header+0xd3/0x4c0 [ 702.532090][T28681] oom_kill_process+0x3ab/0x970 [ 702.532116][T28681] out_of_memory+0x106c/0x1410 [ 702.532135][T28681] ? percpu_ref_put+0x19/0x180 [ 702.532160][T28681] ? __pfx___mutex_lock+0x10/0x10 [ 702.532191][T28681] ? __pfx_out_of_memory+0x10/0x10 [ 702.532208][T28681] ? do_raw_spin_unlock+0xf5/0x210 [ 702.532244][T28681] try_charge_memcg+0xc53/0x1560 [ 702.532269][T28681] ? __lock_acquire+0x6b5/0x2cf0 [ 702.532307][T28681] ? __pfx_try_charge_memcg+0x10/0x10 [ 702.532325][T28681] ? xa_load+0x60/0x210 [ 702.532357][T28681] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 702.532384][T28681] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 702.532409][T28681] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 702.532434][T28681] __swap_cache_prepare_and_add+0x52a/0x700 [ 702.532482][T28681] swap_cache_alloc_folio+0xf1/0x240 [ 702.532513][T28681] swap_cluster_readahead+0x53a/0x690 [ 702.532547][T28681] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 702.532589][T28681] ? get_vma_policy+0x27b/0x3c0 [ 702.532615][T28681] swapin_readahead+0x196/0xc50 [ 702.532655][T28681] ? __pfx_swapin_readahead+0x10/0x10 [ 702.532684][T28681] ? swap_table_get+0x1e/0x260 [ 702.532708][T28681] ? swap_table_get+0x1e/0x260 [ 702.532736][T28681] ? swap_table_get+0x1e/0x260 [ 702.532762][T28681] ? swap_table_get+0x216/0x260 [ 702.532788][T28681] ? swap_cache_get_folio+0x513/0x520 [ 702.532821][T28681] do_swap_page+0x56f/0x5a20 [ 702.532870][T28681] ? do_swap_page+0x127/0x5a20 [ 702.532894][T28681] ? __pfx_do_swap_page+0x10/0x10 [ 702.532917][T28681] ? __pte_offset_map+0x1ae/0x240 [ 702.532938][T28681] ? pte_offset_map_rw_nolock+0xea/0x160 [ 702.532960][T28681] handle_mm_fault+0x12d2/0x3310 [ 702.533003][T28681] ? handle_mm_fault+0xee/0x3310 [ 702.533037][T28681] ? __pfx_handle_mm_fault+0x10/0x10 [ 702.533062][T28681] ? lock_vma_under_rcu+0x45a/0x500 [ 702.533109][T28681] do_user_addr_fault+0xa73/0x1340 [ 702.533141][T28681] ? rcu_is_watching+0x15/0xb0 [ 702.533167][T28681] ? trace_page_fault_user+0x84/0x210 [ 702.533194][T28681] exc_page_fault+0x6a/0xc0 [ 702.533217][T28681] asm_exc_page_fault+0x26/0x30 [ 702.533235][T28681] RIP: 0033:0x7fc2a895d04e [ 702.533264][T28681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.533280][T28681] RSP: 002b:00007ffd300347c8 EFLAGS: 00010246 [ 702.533298][T28681] RAX: 0000000000000000 RBX: 000055559311d500 RCX: 00007fc2a895d04e [ 702.533311][T28681] RDX: 00007ffd30034820 RSI: 0000000000000000 RDI: 0000000000000000 [ 702.533321][T28681] RBP: 00007ffd3003488c R08: 0000000000000000 R09: 0000000000000000 [ 702.533332][T28681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 702.533343][T28681] R13: 00000000000927c0 R14: 00000000000ab4dc R15: 00007ffd300348e0 [ 702.533376][T28681] [ 702.546462][T28681] memory: usage 307200kB, limit 307200kB, failcnt 575 [ 702.872226][T28681] memory+swap: usage 305212kB, limit 9007199254740988kB, failcnt 0 [ 702.884063][T28681] kmem: usage 304324kB, limit 9007199254740988kB, failcnt 0 [ 702.891410][T28681] Memory cgroup stats for /syz0: [ 702.896707][T28681] cache 0 [ 702.905619][T28681] rss 0 [ 702.908414][T28681] rss_huge 0 [ 702.911081][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.922362][T28681] shmem 0 [ 702.929684][T28681] mapped_file 0 [ 702.933258][T28681] dirty 0 [ 702.936221][T28681] writeback 0 [ 702.939540][T28681] workingset_refault_anon 10 [ 702.944609][T28681] workingset_refault_file 69 [ 702.949228][T28681] swap 114688 [ 702.952536][T28681] swapcached 147456 [ 702.958904][T28681] pgpgin 116531 [ 702.961380][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.962686][T28681] pgpgout 116523 [ 703.002951][ T6200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 703.012820][T28681] pgfault 214820 [ 703.017015][T28681] pgmajfault 5 [ 703.020499][T28681] inactive_anon 28672 [ 703.063342][T28681] active_anon 4096 [ 703.079373][T28681] inactive_file 0 [ 703.104537][T29236] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6198'. [ 703.112795][T28681] active_file 0 [ 703.117120][T28681] unevictable 0 [ 703.120688][T28681] hierarchical_memory_limit 314572800 [ 703.167113][T28681] hierarchical_memsw_limit 9223372036854771712 [ 703.178976][T28681] total_cache 0 [ 703.187547][T28681] total_rss 0 [ 703.197313][T28681] total_rss_huge 0 [ 703.205669][T28681] total_shmem 0 [ 703.216706][T28681] total_mapped_file 0 [ 703.225323][T28681] total_dirty 0 [ 703.232188][T28681] total_writeback 0 [ 703.246856][T28681] total_workingset_refault_anon 10 [ 703.254250][T28681] total_workingset_refault_file 69 [ 703.259572][T28681] total_swap 114688 [ 703.263597][T28681] total_swapcached 147456 [ 703.268307][T28681] total_pgpgin 116531 [ 703.272595][T28681] total_pgpgout 116523 [ 703.302063][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.323182][T28681] total_pgfault 214820 [ 703.329617][T28681] total_pgmajfault 5 [ 703.334855][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.337840][T28681] total_inactive_anon 28672 [ 703.360217][T28681] total_active_anon 4096 [ 703.362871][ T6200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 703.370300][T28681] total_inactive_file 0 [ 703.385241][T28681] total_active_file 0 [ 703.391873][T28681] total_unevictable 0 [ 703.396778][T28681] anon_cost 0 [ 703.400158][T28681] file_cost 0 [ 703.408613][T28681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6184,pid=29177,uid=0 [ 703.426841][T28681] Memory cgroup out of memory: Killed process 29177 (syz.0.6184) total-vm:98580kB, anon-rss:1256kB, file-rss:21720kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 703.623716][T29245] FAULT_INJECTION: forcing a failure. [ 703.623716][T29245] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 703.734247][T29245] CPU: 1 UID: 0 PID: 29245 Comm: syz.4.6200 Not tainted syzkaller #0 PREEMPT(full) [ 703.734279][T29245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 703.734290][T29245] Call Trace: [ 703.734299][T29245] [ 703.734308][T29245] dump_stack_lvl+0xe8/0x150 [ 703.734344][T29245] should_fail_ex+0x412/0x560 [ 703.734380][T29245] _copy_from_user+0x2d/0xb0 [ 703.734405][T29245] ___sys_sendmsg+0x1c6/0x360 [ 703.734438][T29245] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.734502][T29245] ? __fget_files+0x2a/0x420 [ 703.734531][T29245] ? __fget_files+0x3a0/0x420 [ 703.734572][T29245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 703.734599][T29245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.734634][T29245] ? __pfx_ksys_write+0x10/0x10 [ 703.734670][T29245] do_syscall_64+0x14d/0xf80 [ 703.734693][T29245] ? trace_irq_disable+0x3b/0x150 [ 703.734711][T29245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.734731][T29245] ? clear_bhb_loop+0x40/0x90 [ 703.734756][T29245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.734777][T29245] RIP: 0033:0x7fa54819c819 [ 703.734798][T29245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.734815][T29245] RSP: 002b:00007fa5490bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.734839][T29245] RAX: ffffffffffffffda RBX: 00007fa548416180 RCX: 00007fa54819c819 [ 703.734854][T29245] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 703.734868][T29245] RBP: 00007fa5490bd090 R08: 0000000000000000 R09: 0000000000000000 [ 703.734880][T29245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.734892][T29245] R13: 00007fa548416218 R14: 00007fa548416180 R15: 00007ffccede57b8 [ 703.734927][T29245] [ 703.741362][T29242] syzkaller0: entered promiscuous mode [ 703.904652][ T5826] Bluetooth: hci4: command tx timeout [ 703.909990][T29260] netlink: 'syz.2.6203': attribute type 1 has an invalid length. [ 703.991585][T29242] syzkaller0: entered allmulticast mode [ 704.049765][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.060582][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.089437][ T6200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 704.120637][T29263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6204'. [ 704.131235][T29260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 704.299217][T29273] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6206'. [ 704.497977][T29277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6206'. [ 704.748633][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.757491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.993016][ T5826] Bluetooth: hci4: command tx timeout [ 706.800643][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 39762 - 0 [ 706.891335][ T7961] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 39762 - 0 [ 706.982939][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 39762 - 0 [ 707.031684][T29198] chnl_net:caif_netlink_parms(): no params data found [ 707.110054][ T7961] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 39762 - 0 [ 707.165259][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6211'. [ 707.212358][ T6200] erspan0: left allmulticast mode [ 707.224668][ T6200] erspan0: left promiscuous mode [ 707.227101][T29308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6211'. [ 707.230021][ T6200] bridge5: port 1(erspan0) entered disabled state [ 707.361155][T29326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6214'. [ 707.430879][T29327] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 707.518463][ T6200] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 707.629580][ T6200] dvmrp8 (unregistering): left allmulticast mode [ 707.648628][ T6200] dvmrp1 (unregistering): left allmulticast mode [ 708.018698][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.029706][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.040701][ T6200] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 708.050435][ T6200] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 708.060482][ T6200] bond0 (unregistering): Released all slaves [ 708.073293][ T5826] Bluetooth: hci4: command tx timeout [ 708.082008][ T6200] bond1 (unregistering): (slave veth3): Releasing active interface [ 708.091876][ T6200] bond1 (unregistering): Released all slaves [ 708.108713][ T6200] bond2 (unregistering): Released all slaves [ 708.124563][ T6200] bond3 (unregistering): Released all slaves [ 708.138566][ T6200] bond4 (unregistering): Released all slaves [ 708.152331][ T6200] bond5 (unregistering): Released all slaves [ 708.405057][T29331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6216'. [ 708.459072][ T6200] tipc: Left network mode [ 708.501436][T29198] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.509810][T29198] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.517692][T29198] bridge_slave_0: entered allmulticast mode [ 708.526160][T29198] bridge_slave_0: entered promiscuous mode [ 708.543587][T29198] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.552425][T29198] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.565511][T29198] bridge_slave_1: entered allmulticast mode [ 708.574606][T29198] bridge_slave_1: entered promiscuous mode [ 708.659136][T29341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6219'. [ 708.661569][T29198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.700645][T29198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.711970][T29343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6220'. [ 708.841099][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'. [ 708.896114][T29355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6220'. [ 709.030192][T29351] team0: Port device team_slave_0 removed [ 709.099324][T29198] team0: Port device team_slave_0 added [ 709.151185][T29198] team0: Port device team_slave_1 added [ 709.199111][T29366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6224'. [ 709.429038][T29198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.445146][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.503947][T29198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.588264][T29198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.618548][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.703344][T29198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.749129][T29393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6228'. [ 709.957281][T29393] bond1: entered promiscuous mode [ 709.965432][T29393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.980850][T29396] macvlan2: entered promiscuous mode [ 709.986872][T29396] macvlan2: entered allmulticast mode [ 709.995148][T29396] bond1: (slave macvlan2): Opening slave failed [ 710.153567][ T5826] Bluetooth: hci4: command tx timeout [ 710.269239][T29198] hsr_slave_0: entered promiscuous mode [ 710.278578][T29198] hsr_slave_1: entered promiscuous mode [ 710.291694][T29198] debugfs: 'hsr0' already exists in 'hsr' [ 710.303006][T29198] Cannot create hsr debugfs directory [ 710.475457][ T6200] hsr_slave_0: left promiscuous mode [ 710.495052][ T6200] hsr_slave_1: left promiscuous mode [ 710.501367][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.522962][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.543632][ T6200] veth1_macvtap: left promiscuous mode [ 710.549219][ T6200] veth0_macvtap: left promiscuous mode [ 710.563248][ T6200] veth1_vlan: left promiscuous mode [ 710.568858][ T6200] veth0_vlan: left promiscuous mode [ 710.738395][ T6200] pim6reg (unregistering): left allmulticast mode [ 711.816325][T29198] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 712.119697][T29441] syzkaller0: entered promiscuous mode [ 712.155303][T29441] syzkaller0: entered allmulticast mode [ 712.187020][T29198] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 712.351391][T29465] __nla_validate_parse: 1 callbacks suppressed [ 712.351422][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6243'. [ 714.902131][T29198] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 714.957292][ T6200] IPVS: stop unused estimator thread 0... [ 715.136927][T29198] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39762 - 0 [ 715.188547][T29491] syzkaller0: entered promiscuous mode [ 715.210754][T29491] syzkaller0: entered allmulticast mode [ 715.234924][T29491] FAULT_INJECTION: forcing a failure. [ 715.234924][T29491] name failslab, interval 1, probability 0, space 0, times 1 [ 715.267790][T29491] CPU: 1 UID: 0 PID: 29491 Comm: syz.1.6248 Not tainted syzkaller #0 PREEMPT(full) [ 715.267823][T29491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 715.267835][T29491] Call Trace: [ 715.267843][T29491] [ 715.267852][T29491] dump_stack_lvl+0xe8/0x150 [ 715.267887][T29491] should_fail_ex+0x412/0x560 [ 715.267923][T29491] should_failslab+0xa8/0x100 [ 715.267950][T29491] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 715.267973][T29491] ? __alloc_skb+0x186/0x7d0 [ 715.267993][T29491] ? __alloc_skb+0x1d0/0x7d0 [ 715.268010][T29491] ? __local_bh_enable_ip+0xd0/0x130 [ 715.268042][T29491] __alloc_skb+0x1d0/0x7d0 [ 715.268068][T29491] alloc_skb_with_frags+0xca/0x890 [ 715.268107][T29491] sock_alloc_send_pskb+0x878/0x990 [ 715.268140][T29491] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 715.268196][T29491] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 715.268228][T29491] ? dev_get_by_index+0x22/0x2e0 [ 715.268254][T29491] ? dev_get_by_index+0x22/0x2e0 [ 715.268287][T29491] packet_sendmsg+0x33e5/0x50f0 [ 715.268316][T29491] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 715.268351][T29491] ? __lock_acquire+0x6b5/0x2cf0 [ 715.268412][T29491] ? aa_sk_perm+0x6d5/0x900 [ 715.268438][T29491] ? __pfx_packet_sendmsg+0x10/0x10 [ 715.268468][T29491] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 715.268505][T29491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 715.268536][T29491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.268562][T29491] ____sys_sendmsg+0x972/0x9f0 [ 715.268597][T29491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.268631][T29491] ? import_iovec+0x73/0xa0 [ 715.268658][T29491] ___sys_sendmsg+0x2a5/0x360 [ 715.268688][T29491] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.268749][T29491] ? __fget_files+0x2a/0x420 [ 715.268777][T29491] ? __fget_files+0x3a0/0x420 [ 715.268817][T29491] __x64_sys_sendmsg+0x1bd/0x2a0 [ 715.268845][T29491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.268879][T29491] ? __pfx_ksys_write+0x10/0x10 [ 715.268915][T29491] do_syscall_64+0x14d/0xf80 [ 715.268938][T29491] ? trace_irq_disable+0x3b/0x150 [ 715.268956][T29491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.268976][T29491] ? clear_bhb_loop+0x40/0x90 [ 715.269000][T29491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.269020][T29491] RIP: 0033:0x7f1b0e79c819 [ 715.269041][T29491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.269057][T29491] RSP: 002b:00007f1b0f5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.269080][T29491] RAX: ffffffffffffffda RBX: 00007f1b0ea15fa0 RCX: 00007f1b0e79c819 [ 715.269095][T29491] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 715.269109][T29491] RBP: 00007f1b0f5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 715.269121][T29491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.269132][T29491] R13: 00007f1b0ea16038 R14: 00007f1b0ea15fa0 R15: 00007ffdbaea4b78 [ 715.269247][T29491] [ 715.723167][T29198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.738054][T29198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.801116][T29198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.816099][T29198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.111215][T29198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.159349][T29198] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.179175][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.186436][ T7961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.252787][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.260266][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.610626][T29198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.697972][T29198] veth0_vlan: entered promiscuous mode [ 716.719679][T29198] veth1_vlan: entered promiscuous mode [ 716.770752][T29198] veth0_macvtap: entered promiscuous mode [ 716.792040][T29198] veth1_macvtap: entered promiscuous mode [ 716.829240][T29198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.858154][T29198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.882423][ T7961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.904927][ T7961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.917581][ T7961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.933570][ T7961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.077879][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 718.831401][T29516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.988734][ T7961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.025065][ T7961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.088586][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.098691][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.151304][T29597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6262'. [ 719.179775][T29597] bridge_slave_1: left allmulticast mode [ 719.190163][T29597] bridge_slave_1: left promiscuous mode [ 719.197117][T29597] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.209647][T29597] bridge_slave_0: left allmulticast mode [ 719.216679][T29597] bridge_slave_0: left promiscuous mode [ 719.222818][T29597] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.289874][T29599] veth0: entered promiscuous mode [ 719.420683][T29609] netlink: zone id is out of range [ 719.428342][T29609] netlink: zone id is out of range [ 719.435255][T29609] netlink: zone id is out of range [ 719.440501][T29609] netlink: zone id is out of range [ 719.475498][T29609] netlink: zone id is out of range [ 719.481030][T29609] netlink: zone id is out of range [ 719.509540][T29609] netlink: zone id is out of range [ 719.516036][T29609] netlink: set zone limit has 4 unknown bytes [ 719.526186][T29598] veth0: left promiscuous mode [ 719.531728][T29609] ±ÿ: renamed from team_slave_1 (while UP) [ 719.532055][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6268'. [ 719.579064][T29617] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 719.939507][T29636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6273'. [ 719.953832][T29636] F: renamed from erspan0 (while UP) [ 719.990194][T29636] F: entered allmulticast mode [ 720.016482][T29641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6273'. [ 720.177212][T29647] netlink: 'syz.1.6278': attribute type 2 has an invalid length. [ 720.202928][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6278'. [ 720.226288][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6275'. [ 720.400857][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 720.423207][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 720.441938][T29664] syzkaller1: entered promiscuous mode [ 720.457336][T29664] syzkaller1: entered allmulticast mode [ 720.518098][T29666] netlink: 'syz.4.6282': attribute type 1 has an invalid length. [ 720.529073][T29666] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6282'. [ 720.563975][T29671] Cannot find add_set index 0 as target [ 720.578492][T29672] Cannot find add_set index 0 as target [ 720.902441][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6286'. [ 721.330853][T29704] syzkaller0: entered promiscuous mode [ 721.337015][T29714] netlink: 'syz.4.6295': attribute type 1 has an invalid length. [ 721.342315][T29704] syzkaller0: entered allmulticast mode [ 721.356485][T29707] tc_dump_action: action bad kind [ 721.421934][T29714] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 721.925029][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 723.769506][T29753] tc_dump_action: action bad kind [ 723.823949][T29758] openvswitch: netlink: Unknown key attributes 2 [ 724.110165][T29773] tipc: Enabled bearer , priority 0 [ 724.307588][T29773] syzkaller0: entered promiscuous mode [ 724.315664][T29773] syzkaller0: entered allmulticast mode [ 724.328512][T29773] tipc: Resetting bearer [ 724.371712][T29773] tipc: Resetting bearer [ 724.388271][T29792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.849729][T29773] tipc: Disabling bearer [ 726.884751][ T6029] tipc: Node number set to 1911597862 [ 726.991387][T29862] netlink: 'syz.3.6328': attribute type 4 has an invalid length. [ 727.025697][T29865] __nla_validate_parse: 6 callbacks suppressed [ 727.025719][T29865] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6327'. [ 727.108475][T29872] netlink: 'syz.3.6328': attribute type 4 has an invalid length. [ 727.373413][T29894] delete_channel: no stack [ 727.380616][T29887] delete_channel: no stack [ 727.493340][ T6029] IPVS: starting estimator thread 0... [ 727.540222][T29902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.556140][T29906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6340'. [ 727.597445][T29909] netlink: 'syz.4.6342': attribute type 9 has an invalid length. [ 727.605566][T29901] IPVS: using max 27 ests per chain, 64800 per kthread [ 727.696208][T29913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.002515][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6350'. [ 728.014720][T29934] can: request_module (can-proto-0) failed. [ 728.219054][T29960] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 728.233776][T29954] syzkaller0: entered promiscuous mode [ 728.240003][T29954] syzkaller0: entered allmulticast mode [ 728.305494][T29960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6356'. [ 728.314889][T29965] syzkaller0: entered promiscuous mode [ 728.314918][T29965] syzkaller0: entered allmulticast mode [ 728.707249][T29975] netlink: 'syz.3.6360': attribute type 4 has an invalid length. [ 728.721103][T29982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6362'. [ 728.826535][T29982] bond1: entered promiscuous mode [ 728.832477][T29982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.919426][T29982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.927285][T29982] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 728.941256][T29982] bond1: (slave sit1): Error -95 calling set_mac_address [ 729.003506][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6365'. [ 729.145817][T30000] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6367'. [ 729.366058][T30011] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6370'. [ 729.469091][T30021] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6371'. [ 729.646087][T30024] syzkaller0: entered promiscuous mode [ 729.654081][T30024] syzkaller0: entered allmulticast mode [ 729.787598][T30031] x_tables: duplicate entry at hook 3 [ 729.966887][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.978731][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.988489][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.997822][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.007142][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.111301][T19970] IPVS: starting estimator thread 0... [ 730.145537][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6377'. [ 730.236551][T30045] IPVS: using max 28 ests per chain, 67200 per kthread [ 730.367472][T30055] syzkaller0: entered promiscuous mode [ 730.374142][T30055] syzkaller0: entered allmulticast mode [ 730.507433][ T7952] tipc: Subscription rejected, illegal request [ 730.711393][T30036] chnl_net:caif_netlink_parms(): no params data found [ 730.946443][T30036] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.956499][T30036] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.964704][T30036] bridge_slave_0: entered allmulticast mode [ 730.994013][T30036] bridge_slave_0: entered promiscuous mode [ 731.011662][T30036] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.021213][T30036] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.029561][T30036] bridge_slave_1: entered allmulticast mode [ 731.057205][T30036] bridge_slave_1: entered promiscuous mode [ 731.131414][T30036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.153523][T30036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.210504][T30036] team0: Port device team_slave_0 added [ 731.236457][T30036] team0: Port device team_slave_1 added [ 731.295213][T30036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.302525][T30036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.331101][T30036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.362082][T30036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.375116][T30036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.409813][T30092] netlink: 'syz.0.6394': attribute type 1 has an invalid length. [ 731.419624][T30092] netlink: 'syz.0.6394': attribute type 1 has an invalid length. [ 731.423078][T30036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.629948][T30036] hsr_slave_0: entered promiscuous mode [ 731.639278][T30036] hsr_slave_1: entered promiscuous mode [ 731.648502][T30036] debugfs: 'hsr0' already exists in 'hsr' [ 731.655302][T30036] Cannot create hsr debugfs directory [ 732.072937][ T5826] Bluetooth: hci2: command tx timeout [ 732.166737][T30128] bond1: down delay (257) is not a multiple of miimon (9), value rounded to 252 ms [ 732.183145][T30128] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 732.197947][T30128] bond1 (unregistering): Released all slaves [ 732.395916][T30036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.416559][T30148] __nla_validate_parse: 8 callbacks suppressed [ 732.416580][T30148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 732.417909][T30036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.638574][T30036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.673021][T30036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.702109][T30150] syzkaller0: entered promiscuous mode [ 732.708772][T30150] syzkaller0: entered allmulticast mode [ 732.833289][T30036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.844112][T30036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.910856][T30036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.921590][T30036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.991039][T30172] syzkaller0: entered promiscuous mode [ 732.999655][T30172] syzkaller0: entered allmulticast mode [ 734.155539][ T5826] Bluetooth: hci2: command tx timeout [ 735.225502][T30187] netlink: 'syz.0.6417': attribute type 4 has an invalid length. [ 735.243353][T30187] netlink: 'syz.0.6417': attribute type 4 has an invalid length. [ 735.410985][T30148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.423532][T30169] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6412'. [ 735.456052][T30036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 735.527898][T30036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 735.577332][T30036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 735.602076][T30199] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 735.622064][T30036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 735.636707][T30203] sctp: [Deprecated]: syz.3.6424 (pid 30203) Use of int in max_burst socket option. [ 735.636707][T30203] Use struct sctp_assoc_value instead [ 735.738365][T30214] netlink: 'syz.4.6423': attribute type 10 has an invalid length. [ 735.852387][T30202] syzkaller0: entered promiscuous mode [ 735.859184][T30202] syzkaller0: entered allmulticast mode [ 735.876769][T30214] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.887892][T30214] bridge_slave_1: left allmulticast mode [ 735.894186][T30214] bridge_slave_1: left promiscuous mode [ 735.900099][T30214] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.917397][T30214] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 735.969767][T30230] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6429'. [ 736.243045][ T5826] Bluetooth: hci2: command tx timeout [ 738.009097][T30238] netlink: 'syz.2.6432': attribute type 29 has an invalid length. [ 738.271392][T30251] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 738.313587][ T5826] Bluetooth: hci2: command tx timeout [ 738.331113][T30036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.364649][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6439'. [ 738.390885][T30255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6438'. [ 738.405157][T30257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.423399][T30257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.469204][T30036] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.491892][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.499277][ T7952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.518568][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.525922][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.678305][T30267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6440'. [ 739.029912][T30036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.157308][T30287] tipc: Failed to remove unknown binding: 66,0,0/0:3298782662/3298782663 [ 739.167460][T30036] veth0_vlan: entered promiscuous mode [ 739.175399][T30287] tipc: Failed to remove unknown binding: 66,0,0/0:3298782662/3298782663 [ 739.198276][T30036] veth1_vlan: entered promiscuous mode [ 739.234113][T30287] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6447'. [ 739.284838][T30036] veth0_macvtap: entered promiscuous mode [ 739.311225][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6448'. [ 739.324918][T30295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6449'. [ 739.338570][T30036] veth1_macvtap: entered promiscuous mode [ 739.370119][T30295] netlink: 'syz.2.6449': attribute type 1 has an invalid length. [ 739.451966][T30298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6451'. [ 739.467437][T30036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.484465][T30036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.509776][T30289] bond1: (slave ip6gretap1): making interface the new active one [ 739.532249][T30289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 739.542596][T30289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 739.551628][T30289] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 739.564959][T30300] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 739.598861][ T7961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.618254][ T7961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.642307][ T7961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.705833][ T7961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.886103][T30307] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6454'. [ 739.906010][T30307] netlink: 'syz.3.6454': attribute type 2 has an invalid length. [ 739.928152][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.939558][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.977779][T30314] ip6tnl2: entered allmulticast mode [ 740.054999][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6454'. [ 740.096992][ T7961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.106819][ T7961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.249902][T30322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6457'. [ 740.542627][T30343] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.700115][T30347] hsr_slave_0: left promiscuous mode [ 740.725525][T30347] hsr_slave_1: left promiscuous mode [ 741.147498][ T5826] block nbd2: Receive control failed (result -107) [ 741.220483][T30385] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 741.231244][T30373] nbd2: detected capacity change from 0 to 127 [ 741.240272][T30305] block nbd2: Dead connection, failed to find a fallback [ 741.260019][T30305] block nbd2: shutting down sockets [ 741.273735][T30305] blk_print_req_error: 138 callbacks suppressed [ 741.273754][T30305] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.293381][T30305] buffer_io_error: 138 callbacks suppressed [ 741.293403][T30305] Buffer I/O error on dev nbd2, logical block 0, async page read [ 741.309189][T30305] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.320000][T30305] Buffer I/O error on dev nbd2, logical block 1, async page read [ 741.328863][T30305] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.339255][T30305] Buffer I/O error on dev nbd2, logical block 2, async page read [ 741.348705][T30305] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.361481][T30305] Buffer I/O error on dev nbd2, logical block 3, async page read [ 741.386783][T30305] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.409007][T30305] Buffer I/O error on dev nbd2, logical block 0, async page read [ 741.417976][T30305] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.429052][T30305] Buffer I/O error on dev nbd2, logical block 1, async page read [ 741.451805][T30305] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.462447][T30305] Buffer I/O error on dev nbd2, logical block 2, async page read [ 741.486334][T30305] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.487072][T30385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.497931][T30305] Buffer I/O error on dev nbd2, logical block 3, async page read [ 741.511176][T30305] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.555567][T30305] Buffer I/O error on dev nbd2, logical block 0, async page read [ 741.569313][T30305] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.594096][T30305] Buffer I/O error on dev nbd2, logical block 1, async page read [ 741.599390][T30400] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 741.613974][T30305] ldm_validate_partition_table(): Disk read failed. [ 741.633427][T30305] Dev nbd2: unable to read RDB block 0 [ 741.641755][T30403] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 741.652000][T30305] nbd2: unable to read partition table [ 741.706399][T30305] ldm_validate_partition_table(): Disk read failed. [ 741.756887][T30305] Dev nbd2: unable to read RDB block 0 [ 741.781506][T30305] nbd2: unable to read partition table [ 741.811867][T30410] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 742.196754][T30429] tipc: Enabling of bearer rejected, failed to enable media [ 742.757258][T30465] netlink: 'syz.2.6503': attribute type 30 has an invalid length. [ 743.071068][T30489] netlink: 'syz.3.6507': attribute type 4 has an invalid length. [ 743.198579][T30497] syzkaller1: entered promiscuous mode [ 743.219760][T30497] syzkaller1: entered allmulticast mode [ 743.451734][T30508] __nla_validate_parse: 11 callbacks suppressed [ 743.451756][T30508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6510'. [ 743.826025][T30518] syzkaller0: entered promiscuous mode [ 743.831728][T30518] syzkaller0: entered allmulticast mode [ 743.950190][T30529] netlink: 'syz.1.6520': attribute type 10 has an invalid length. [ 744.083994][T30532] [ 744.086390][T30532] ====================================================== [ 744.093436][T30532] WARNING: possible circular locking dependency detected [ 744.100455][T30532] syzkaller #0 Not tainted [ 744.104868][T30532] ------------------------------------------------------ [ 744.112057][T30532] syz.1.6520/30532 is trying to acquire lock: [ 744.118297][T30532] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 744.128277][T30532] [ 744.128277][T30532] but task is already holding lock: [ 744.135832][T30532] ffff88802f256860 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 744.144642][T30532] [ 744.144642][T30532] which lock already depends on the new lock. [ 744.144642][T30532] [ 744.155078][T30532] [ 744.155078][T30532] the existing dependency chain (in reverse order) is: [ 744.164100][T30532] [ 744.164100][T30532] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 744.172122][T30532] lock_sock_nested+0x48/0x100 [ 744.177452][T30532] mptcp_sendmsg_fastopen+0x128/0x580 [ 744.183499][T30532] mptcp_sendmsg+0x17af/0x19d0 [ 744.188840][T30532] ____sys_sendmsg+0x80a/0x9f0 [ 744.194177][T30532] ___sys_sendmsg+0x2a5/0x360 [ 744.199419][T30532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.204922][T30532] do_syscall_64+0x14d/0xf80 [ 744.209665][T30539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.210238][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.210269][T30532] [ 744.210269][T30532] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 744.233590][T30532] lock_sock_nested+0x48/0x100 [ 744.239202][T30532] inet_shutdown+0x6a/0x390 [ 744.244274][T30532] nbd_mark_nsock_dead+0x2e9/0x560 [ 744.250056][T30532] recv_work+0x1c7f/0x1d90 [ 744.255021][T30532] process_scheduled_works+0xb6e/0x18c0 [ 744.261182][T30532] worker_thread+0xa53/0xfc0 [ 744.266304][T30532] kthread+0x388/0x470 [ 744.271338][T30532] ret_from_fork+0x51e/0xb90 [ 744.276463][T30532] ret_from_fork_asm+0x1a/0x30 [ 744.281932][T30532] [ 744.281932][T30532] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 744.289675][T30532] __mutex_lock+0x19f/0x1300 [ 744.294794][T30532] nbd_queue_rq+0x37b/0x1100 [ 744.299986][T30532] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.306064][T30532] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 744.313099][T30532] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.319808][T30532] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.325459][T30532] blk_mq_dispatch_list+0xd16/0xe10 [ 744.331188][T30532] blk_mq_flush_plug_list+0x48d/0x570 [ 744.337177][T30532] __blk_flush_plug+0x3ed/0x4d0 [ 744.342552][T30532] __submit_bio+0x28d/0x580 [ 744.347578][T30532] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 744.353742][T30532] block_read_full_folio+0x599/0x830 [ 744.359735][T30532] filemap_read_folio+0x137/0x3b0 [ 744.365288][T30532] do_read_cache_folio+0x358/0x590 [ 744.371023][T30532] read_part_sector+0xb6/0x2b0 [ 744.376416][T30532] adfspart_check_ICS+0xa5/0xa40 [ 744.382338][T30532] bdev_disk_changed+0x7ba/0x1550 [ 744.387893][T30532] blkdev_get_whole+0x380/0x510 [ 744.393275][T30532] bdev_open+0x31e/0xd30 [ 744.398165][T30532] blkdev_open+0x470/0x610 [ 744.403124][T30532] do_dentry_open+0x785/0x14e0 [ 744.408425][T30532] vfs_open+0x3b/0x340 [ 744.413078][T30532] path_openat+0x2e08/0x3860 [ 744.418197][T30532] do_file_open+0x23e/0x4a0 [ 744.423332][T30532] do_sys_openat2+0x113/0x200 [ 744.428567][T30532] __x64_sys_openat+0x138/0x170 [ 744.434063][T30532] do_syscall_64+0x14d/0xf80 [ 744.439295][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.445910][T30532] [ 744.445910][T30532] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 744.453220][T30532] __mutex_lock+0x19f/0x1300 [ 744.458522][T30532] nbd_queue_rq+0xc6/0x1100 [ 744.463651][T30532] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.469997][T30532] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 744.476887][T30532] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.483409][T30532] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.489146][T30532] blk_mq_dispatch_list+0xd16/0xe10 [ 744.494872][T30532] blk_mq_flush_plug_list+0x48d/0x570 [ 744.500856][T30532] __blk_flush_plug+0x3ed/0x4d0 [ 744.506242][T30532] __submit_bio+0x28d/0x580 [ 744.511276][T30532] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 744.517522][T30532] block_read_full_folio+0x599/0x830 [ 744.523337][T30532] filemap_read_folio+0x137/0x3b0 [ 744.528888][T30532] do_read_cache_folio+0x358/0x590 [ 744.534651][T30532] read_part_sector+0xb6/0x2b0 [ 744.540070][T30532] adfspart_check_ICS+0xa5/0xa40 [ 744.545636][T30532] bdev_disk_changed+0x7ba/0x1550 [ 744.551198][T30532] blkdev_get_whole+0x380/0x510 [ 744.556680][T30532] bdev_open+0x31e/0xd30 [ 744.561537][T30532] blkdev_open+0x470/0x610 [ 744.566659][T30532] do_dentry_open+0x785/0x14e0 [ 744.571963][T30532] vfs_open+0x3b/0x340 [ 744.576566][T30532] path_openat+0x2e08/0x3860 [ 744.581773][T30532] do_file_open+0x23e/0x4a0 [ 744.587063][T30532] do_sys_openat2+0x113/0x200 [ 744.592370][T30532] __x64_sys_openat+0x138/0x170 [ 744.597844][T30532] do_syscall_64+0x14d/0xf80 [ 744.602965][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.609452][T30532] [ 744.609452][T30532] -> #3 (set->srcu){.+.+}-{0:0}: [ 744.616672][T30532] __synchronize_srcu+0xca/0x300 [ 744.622229][T30532] elevator_switch+0x1e8/0x7a0 [ 744.627520][T30532] elevator_change+0x2cc/0x450 [ 744.632824][T30532] elevator_set_default+0x36c/0x430 [ 744.638665][T30532] blk_register_queue+0x366/0x430 [ 744.644234][T30532] __add_disk+0x677/0xd50 [ 744.649124][T30532] add_disk_fwnode+0xfb/0x480 [ 744.654515][T30532] nbd_dev_add+0x72c/0xb50 [ 744.659470][T30532] nbd_init+0x168/0x1f0 [ 744.664249][T30532] do_one_initcall+0x250/0x8d0 [ 744.669554][T30532] do_initcall_level+0x104/0x190 [ 744.675314][T30532] do_initcalls+0x59/0xa0 [ 744.680177][T30532] kernel_init_freeable+0x2a6/0x3e0 [ 744.686080][T30532] kernel_init+0x1d/0x1d0 [ 744.690954][T30532] ret_from_fork+0x51e/0xb90 [ 744.696249][T30532] ret_from_fork_asm+0x1a/0x30 [ 744.701551][T30532] [ 744.701551][T30532] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 744.709467][T30532] __mutex_lock+0x19f/0x1300 [ 744.714589][T30532] elevator_change+0x1b3/0x450 [ 744.719883][T30532] elevator_set_none+0xb5/0x140 [ 744.725273][T30532] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 744.731630][T30532] nbd_start_device+0x17f/0xb10 [ 744.737125][T30532] nbd_genl_connect+0x165b/0x1cf0 [ 744.742945][T30532] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.749040][T30532] genl_rcv_msg+0x61c/0x7a0 [ 744.754241][T30532] netlink_rcv_skb+0x232/0x4b0 [ 744.759560][T30532] genl_rcv+0x28/0x40 [ 744.764104][T30532] netlink_unicast+0x80f/0x9b0 [ 744.769425][T30532] netlink_sendmsg+0x813/0xb40 [ 744.775040][T30532] ____sys_sendmsg+0x972/0x9f0 [ 744.780354][T30532] ___sys_sendmsg+0x2a5/0x360 [ 744.785587][T30532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.791155][T30532] do_syscall_64+0x14d/0xf80 [ 744.796380][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.802820][T30532] [ 744.802820][T30532] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 744.811543][T30532] blk_alloc_queue+0x546/0x680 [ 744.816847][T30532] __blk_mq_alloc_disk+0x197/0x390 [ 744.822508][T30532] nbd_dev_add+0x499/0xb50 [ 744.827474][T30532] nbd_init+0x168/0x1f0 [ 744.832167][T30532] do_one_initcall+0x250/0x8d0 [ 744.837465][T30532] do_initcall_level+0x104/0x190 [ 744.842945][T30532] do_initcalls+0x59/0xa0 [ 744.847814][T30532] kernel_init_freeable+0x2a6/0x3e0 [ 744.853549][T30532] kernel_init+0x1d/0x1d0 [ 744.858415][T30532] ret_from_fork+0x51e/0xb90 [ 744.863542][T30532] ret_from_fork_asm+0x1a/0x30 [ 744.868993][T30532] [ 744.868993][T30532] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 744.876218][T30532] __lock_acquire+0x15a5/0x2cf0 [ 744.881619][T30532] lock_acquire+0xf0/0x2e0 [ 744.886650][T30532] fs_reclaim_acquire+0x71/0x100 [ 744.892129][T30532] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 744.898461][T30532] __alloc_skb+0x1d0/0x7d0 [ 744.903581][T30532] tcp_send_active_reset+0x8a/0x5d0 [ 744.909317][T30532] tcp_disconnect+0x171/0x1fa0 [ 744.914699][T30532] __tcp_close+0x679/0xfe0 [ 744.919843][T30532] tcp_close+0x28/0x110 [ 744.924635][T30532] inet_release+0x143/0x190 [ 744.929842][T30532] sock_release+0x85/0x150 [ 744.934884][T30532] smc_clcsock_release+0xc9/0xf0 [ 744.940437][T30532] __smc_release+0x66b/0x7e0 [ 744.945559][T30532] smc_release+0x2ce/0x560 [ 744.950512][T30532] sock_close+0xc3/0x240 [ 744.955299][T30532] __fput+0x44f/0xa70 [ 744.959816][T30532] fput_close_sync+0x11f/0x240 [ 744.965115][T30532] __x64_sys_close+0x7e/0x110 [ 744.970344][T30532] do_syscall_64+0x14d/0xf80 [ 744.975464][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.981894][T30532] [ 744.981894][T30532] other info that might help us debug this: [ 744.981894][T30532] [ 744.992208][T30532] Chain exists of: [ 744.992208][T30532] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 744.992208][T30532] [ 745.005004][T30532] Possible unsafe locking scenario: [ 745.005004][T30532] [ 745.012546][T30532] CPU0 CPU1 [ 745.017912][T30532] ---- ---- [ 745.023285][T30532] lock(k-sk_lock-AF_INET); [ 745.027892][T30532] lock(sk_lock-AF_INET); [ 745.034831][T30532] lock(k-sk_lock-AF_INET); [ 745.042036][T30532] lock(fs_reclaim); [ 745.046028][T30532] [ 745.046028][T30532] *** DEADLOCK *** [ 745.046028][T30532] [ 745.054262][T30532] 3 locks held by syz.1.6520/30532: [ 745.059641][T30532] #0: ffff888057f94cc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 745.070282][T30532] #1: ffff888058d41838 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_clcsock_release+0x7f/0xf0 [ 745.081282][T30532] #2: ffff88802f256860 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 745.090622][T30532] [ 745.090622][T30532] stack backtrace: [ 745.096633][T30532] CPU: 1 UID: 0 PID: 30532 Comm: syz.1.6520 Not tainted syzkaller #0 PREEMPT(full) [ 745.096654][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 745.096665][T30532] Call Trace: [ 745.096672][T30532] [ 745.096680][T30532] dump_stack_lvl+0xe8/0x150 [ 745.096704][T30532] print_circular_bug+0x2e1/0x300 [ 745.096731][T30532] check_noncircular+0x12e/0x150 [ 745.096757][T30532] __lock_acquire+0x15a5/0x2cf0 [ 745.096779][T30532] ? __lock_acquire+0x6b5/0x2cf0 [ 745.096800][T30532] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 745.096822][T30532] lock_acquire+0xf0/0x2e0 [ 745.096841][T30532] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 745.096862][T30532] fs_reclaim_acquire+0x71/0x100 [ 745.096881][T30532] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 745.096897][T30532] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 745.096914][T30532] ? __alloc_skb+0x1d0/0x7d0 [ 745.096929][T30532] ? __local_bh_enable_ip+0xd0/0x130 [ 745.096971][T30532] __alloc_skb+0x1d0/0x7d0 [ 745.096989][T30532] tcp_send_active_reset+0x8a/0x5d0 [ 745.097009][T30532] tcp_disconnect+0x171/0x1fa0 [ 745.097030][T30532] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 745.097055][T30532] __tcp_close+0x679/0xfe0 [ 745.097080][T30532] tcp_close+0x28/0x110 [ 745.097101][T30532] inet_release+0x143/0x190 [ 745.097120][T30532] sock_release+0x85/0x150 [ 745.097143][T30532] smc_clcsock_release+0xc9/0xf0 [ 745.097164][T30532] __smc_release+0x66b/0x7e0 [ 745.097191][T30532] smc_release+0x2ce/0x560 [ 745.097216][T30532] sock_close+0xc3/0x240 [ 745.097237][T30532] ? __pfx_sock_close+0x10/0x10 [ 745.097258][T30532] __fput+0x44f/0xa70 [ 745.097286][T30532] fput_close_sync+0x11f/0x240 [ 745.097319][T30532] ? __pfx_fput_close_sync+0x10/0x10 [ 745.097347][T30532] __x64_sys_close+0x7e/0x110 [ 745.097372][T30532] do_syscall_64+0x14d/0xf80 [ 745.097392][T30532] ? trace_irq_disable+0x3b/0x150 [ 745.097417][T30532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.097434][T30532] ? clear_bhb_loop+0x40/0x90 [ 745.097452][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.097468][T30532] RIP: 0033:0x7f570cf9c819 [ 745.097485][T30532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.097500][T30532] RSP: 002b:00007f570dea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 745.097517][T30532] RAX: ffffffffffffffda RBX: 00007f570d216090 RCX: 00007f570cf9c819 [ 745.097530][T30532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 745.097540][T30532] RBP: 00007f570d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 745.097551][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.097561][T30532] R13: 00007f570d216128 R14: 00007f570d216090 R15: 00007fffc4dc07f8 [ 745.097580][T30532] [ 745.455234][T30537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6520'. [ 747.130457][T30529] team0: Device ipvlan1 failed to register rx_handler [ 747.517259][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.526235][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.535826][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.543603][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.551929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.561427][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 753.192797][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 753.201362][ C0] lec:lec_tx_timeout: lec0